Document SEP-2640 Skills watch state and trust boundaries

[Copilot]

Canonical issue

Tracked by the linked canonical issue in this PR metadata.

Outcome

This PR records EventRelay’s current posture for MCP Skills SEP-2640 as WATCH → TEST, with explicit activation triggers before any implementation work. It also codifies trust-boundary invariants so future conformance work cannot silently bypass origin, digest, approval, or collision controls.

Scope

• Included:
  • Decision record (new doc): docs/mcp-skills-sep-2640-watch.md
    • activation triggers
    • verified current state (experimental extension + open SEP)
    • bounded fixture-only conformance spike
    • non-goals and safety boundary
  • Discoverability in MCP audit: added watch-only compatibility entry in docs/AGENT_CAPABILITIES_CHECKLIST.md under MCP capabilities.
  • Reference snippet:

    Current posture: WATCH → TEST (no implementation yet)
    Do not implement production behavior for io.modelcontextprotocol/skills
    until SEP-2640 is accepted or an official SDK reference implementation lands.

• Explicitly excluded:
  • runtime adapter implementation
  • production config changes
  • remote skill execution enablement
  • merge/deploy behavior changes

Risk

• Risk level: low
• Failure mode: future contributors misread draft extension status as production-ready if this guidance is ignored.
• Rollback: revert the two documentation changes.

Verification

Current head SHA: f409cca

• Focused tests
• Required CI
• Review threads resolved

Production evidence

Not applicable: documentation-only change; no runtime, deployment, or infrastructure behavior was modified.

Agent handoff

• One canonical issue is linked
• No competing PR implements the same issue
• Acceptance criteria are satisfied
• Required checks pass on the current head
• Human decision is requested only for product, security, irreversible infrastructure, or production approval

• Fixes Track SEP-2640 Skills extension compatibility and trust boundaries #1640

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Sep 12, 2026 9:28am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: cdabc5fd-1da8-4801-8097-2b91c2dbcb9c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 3f61463.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

[github-actions]

🔍 PR Validation

⚠️ PR title should follow conventional commits format