V0.9.0/dotnet segregated assets

[gimlichael]

This pull request introduces strict documentation and enforcement for local, deterministic skill validation and AI/LLM evaluation automation prohibitions. It updates both README.md and AGENTS.md to clarify that all evaluation and validation workflows must never invoke authenticated AI/LLM APIs or CLIs, and that skill evaluation is strictly a local process. Additionally, it refines commit workflow routing rules for skills, and clarifies when and how key skills are invoked. The documentation for core skills is updated to reflect these routing and validation rules.

AI/LLM Evaluation Automation Prohibition and Local Validation

• Added a Priority 1 rule in AGENTS.md strictly prohibiting repository scripts, CI jobs, and skill runners from invoking authenticated AI/LLM APIs or CLIs (e.g., Copilot, Claude, Codex, Gemini) for evals, grading, optimization, or review generation. All validation must be local and deterministic, with no opt-in bypass.
• Updated README.md to reinforce that evals/evals.json files are versioned review specifications for local validation only, not instructions for launching model sessions; clarified that the new prohibition is mandatory for all evaluation workflows.
• Refined the recommended validation workflow: emphasized running ./scripts/validate-skill-templates.ps1 -MetadataOnly for fast feedback, and clarified that only local, deterministic checks are allowed during iteration and before completion.

Commit Workflow Routing and Skill Invocation

• Documented authoritative routing for commit-related requests: any explicit commit invocation (e.g., git bot commit, git commit, git our commit, or Please do a git bot commit yolo) must invoke git-visual-commits and never route to changelog or release-note skills unless explicitly requested. Clarified handling of yolo/auto modifiers.
• Updated skill descriptions in README.md to reflect the new commit routing, identity handling, and the strict separation between commit, changelog, and release-note skills.

Other Updates

• Registered the new dotnet-segregated-assets skill in the skill install list.

[greptile-apps]

Greptile Summary

The PR adds the dotnet-segregated-assets skill and establishes deterministic, local-only skill validation while prohibiting automated authenticated AI/LLM evaluation.

• Adds planning, verification, fixtures, references, and regression coverage for segregated .NET static assets.
• Replaces model-backed benchmark automation with deterministic local validation and mock tooling.
• Clarifies commit-skill routing and updates repository and skill documentation.

Confidence Score: 5/5

The PR appears safe to merge because no blocking failure remains.

No blocking failure remains.

Important Files Changed

Filename	Overview
skills/dotnet-segregated-assets/scripts/segregate-assets.cs	Implements project classification, asset-topology planning, verification, and focused regression tests; the three previously reported control-flow defects are corrected at current HEAD.
scripts/validate-skill-templates.ps1	Adds a metadata-only fast path and deterministic enforcement against repository automation that launches authenticated AI/LLM evaluation sessions.
skills/dotnet-segregated-assets/SKILL.md	Defines the segregated-assets workflow, safety escalation rules, and deterministic planning and verification commands.
AGENTS.md	Establishes local deterministic validation, prohibits authenticated model-backed evaluation automation, and clarifies commit-skill routing.
scripts/run-skill-benchmark.ps1	Reworks benchmark behavior to comply with the repository prohibition on model-backed evaluation automation.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Inspect .NET project] --> B{Generated-asset risks?}
    B -->|Yes| C[Block and escalate]
    B -->|No| D{Existing segregation complete?}
    D -->|Yes| E[Reconcile existing topology]
    D -->|No| F{wwwroot present?}
    F -->|Yes| G[Plan segregated asset topology]
    F -->|No| H{CDN equivalent supplied?}
    H -->|Yes| I[Create CDN-equivalent topology]
    H -->|No| J[Report blocked configuration]
    C --> K[Verify]
    E --> K
    G --> K
    I --> K
    K --> L{Local checks requested?}
    L -->|Yes| M[Require launch profile and compose service]
    L -->|No| N[Evaluate publish leak check]
    M --> N
    N --> O[PASS or FAIL]

Loading

_{Reviews (3): Last reviewed commit: "♻️ add cache-busting detection to segreg..." | Re-trigger Greptile}