skills.sgit.ai /
documents / identity
Skills, identity and permissions
What it is
The most consequential design in the cluster and the least built. A skill must come with the identity and permission set needed to execute it; the principle generalises to every unit of execution and produces the PBOM; and OAuth fails because it grants in absolutes. The document is explicit that this is a critique with a direction rather than a design with an implementation, and it proposes the smallest real step: one frontmatter field, declared rather than enforced.