hypothesis-proximity-update — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hypothesis-proximity-update (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Goal:
Inputs:
state/PROXIMITY_GRAPH.jsonhypothesis_idstate/RESOLVED_RUN_CONFIG.jsonOutputs:
state/proximity_receipts/<hypothesis_id>.jsonstate/PROXIMITY_STATUS.jsonProximityGraphContractstate/PROXIMITY_GRAPH.json when the provider returns a valid embeddingstate/PIPELINE_STATE.jsonstate/CURRENT_STAGE.jsonContext Loading:
skills/shared-references/schema-index.md.packages/agent_contracts/state.py and confirm the exact ProximityGraphContract shape before writing state/PROXIMITY_GRAPH.json.packages/agent_contracts/proximity.py and confirm the proximity receipt and status schemas before interpreting provider outcomes.packages/agent_contracts/pipeline_runtime.py before updating state/PIPELINE_STATE.json or state/CURRENT_STAGE.json.ProximityGraphContract.Execution Contract:
from tools import sync_pipeline_stage_artifacts as the canonical paired write surface for entering the Proximity substage.tools.sync_pipeline_stage_artifacts(run_dir, current_phase="Proximity", current_skill="hypothesis-proximity-update").from tools import update_hypothesis_proximity as the stable invocation surface.packages/agent_mechanics/hypothesis_embedding.py.packages/agent_mechanics/hypothesis_embedding_text.py.update_hypothesis_proximity(run_dir, hypothesis_id, config=None, provider=None) -> ProximityEmbeddingReceiptContract.state/RESOLVED_RUN_CONFIG.json unless an explicit test config is passed, calls the configured provider when enabled, records a proximity receipt/status, and updates state/PROXIMITY_GRAPH.json only when a valid embedding is returned.openai_compatible and gemini must remain behind tools.update_hypothesis_proximity(...); host agents must not call provider SDKs directly or paste provider-returned vectors into artifacts.tools.update_proximity_graph(...), implemented in packages/agent_mechanics/proximity_update.py; host agents must not call it with prompt-fabricated vectors.Execution Steps:
skills/shared-references/schema-index.md, then read packages/agent_contracts/state.py, packages/agent_contracts/proximity.py, and packages/agent_contracts/pipeline_runtime.py before writing proximity or run-level stage artifacts.tools.sync_pipeline_stage_artifacts(run_dir, current_phase="Proximity", current_skill="hypothesis-proximity-update").hypothesis_id identifies an existing canonical hypotheses/<id>/HYPOTHESIS.json artifact.tools.update_hypothesis_proximity(run_dir, hypothesis_id) exactly once for the target hypothesis.ProximityEmbeddingReceiptContract and the persisted state/proximity_receipts/<hypothesis_id>.json.succeeded, validate the updated state/PROXIMITY_GRAPH.json.skipped_disabled, skipped_provider_unavailable, failed_provider_error, or failed_invalid_embedding, preserve the receipt/status and return control to ranking. Do not infer or fabricate placeholder embeddings from text, IDs, or manual feature heuristics.Artifact Rules:
state/PROXIMITY_GRAPH.json must remain the canonical persisted graph artifact.state/proximity_receipts/<hypothesis_id>.json is the canonical per-hypothesis embedding bridge receipt.state/PROXIMITY_STATUS.json is the canonical run-level proximity bridge status artifact.succeeded receipt with graph_updated=false; do not duplicate entries.Completion Rule:
tools.update_hypothesis_proximity(run_dir, hypothesis_id) has returned a persisted receipt and either state/PROXIMITY_GRAPH.json validates after a succeeded receipt or the receipt/status explicitly records why the graph was not updated.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.