Zero-Trust Full Cycle

imboard-ai/git/zero-trust-full-cycle v1.0.1 risk: high signed Draft

Drive the zero-trust contribution engine (zt-run) from one public upstream GitHub issue to a contributor-submitted pull request: preflight, config, start, a decision for every durable stop, revisions, cancellation and the kill switch. The agent never writes upstream; every public action is the human contributor's.

Objective: Take one public upstream GitHub issue to a pull request the human contributor submits, by driving the zero-trust engine (zt-run) through its durable stops and handing every public action to the human

Use it

Inspect metadata

ai-dossier info imboard-ai/git/zero-trust-full-cycle

Download to the current directory

ai-dossier pull imboard-ai/git/zero-trust-full-cycle

Verify, then run

ai-dossier run imboard-ai/git/zero-trust-full-cycle

Needs the CLI.

Trust and risk

Declared risk level	high (modifies_files, network_access, executes_external_code, requires_credentials)
Requires approval	yes
Checksum	`sha256:dcfaf427f83c8bb0c0b27973d19c9c92ca20f3e47e71031086fbc330deb33907`
Signature	ed25519, key `imboard-ai` by Yuval Dimnik <yuval.dimnik@gmail.com>
Signed at	2026-11-06T08:37:15.772Z
Signature scheme	v3 (covers `spec-frontmatter+body`)
Public key	`m97FPrnq/zKlQArLvJl3bTZCUMWWpp/d0UJ/OfUKZeE=`

These values are copied from the published dossier header. This site does not verify them: run ai-dossier verify before trusting a dossier.

Details

Categories	development
Tags	github, open-source, contribution, zero-trust, full-cycle, sandbox, vm, pull-request
Authors	Yuval Dimnik
Header layout	Agent Skills spec shape
Source	raw `.ds.md`