From 4854b5b3b004332b328db9e70e6bebb015283235 Mon Sep 17 00:00:00 2001
From: rbalachandar <bchandar.r@gmail.com>
Date: Mon, 24 Aug 2026 22:31:58 +0200
Subject: [PATCH] chore: retire single-record bundled Skill provenance schema
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

provenance.json held one record and had no consumers; the bundled Skill
catalog reads only <id>/SKILL.md and the sole tree reference was
docs/code-origin-audit.md. The computer-use Skill's origin, AI-assistance,
and review facts now live in the audit's Bundled Skills section — outside
SKILL.md so provenance edits never change installed Skill content hashes.

Closes #3424
Generated-by: opencode
---
 docs/code-origin-audit.md                     |  8 +++-
 .../resources/bundled-skills/provenance.json  | 40 -------------------
 2 files changed, 7 insertions(+), 41 deletions(-)
 delete mode 100644 packages/runtime/resources/bundled-skills/provenance.json

diff --git a/docs/code-origin-audit.md b/docs/code-origin-audit.md
index 6435dee821..b25ef3be55 100644
--- a/docs/code-origin-audit.md
+++ b/docs/code-origin-audit.md
@@ -202,7 +202,13 @@ Subsequent refactors moved `apps/desktop/src/renderer/browser-panel.tsx` to `app
 
 ### Bundled Skills
 
-Pull request #2695 removed the 29 bundled Skills whose individual origins could not be confirmed. The retained `computer-use` Skill has a contributor-confirmed, independently reviewed origin record in `packages/runtime/resources/bundled-skills/provenance.json`. The final human approval on pull request #2676 reviewed commit `3c7683b9793e97cba7d8536f6864da0e38f24c30`. That review covers the Skill origin record; it does not make a legal or ASF release determination about implementation inputs.
+Pull request #2695 removed the 29 bundled Skills whose individual origins could not be confirmed. The one retained bundled Skill, `computer-use`, carries its origin and review evidence here rather than in `SKILL.md` so that provenance edits do not change installed Skill content hashes.
+
+- **Status:** contributor-confirmed, `origin: independently-authored`, Apache-2.0.
+- **Author:** Haoqing Wang (@hqhq1025), with drafting and implementation assistance from OpenAI Codex.
+- **Inputs:** Maka Computer Use source code, the `maka.cu/2` schema and model-facing tool contract, and Maka Computer Use tests. No third-party Skill bodies were used.
+- **Introduced by:** pull request #2147, commit `2fb83e20b71124bc4a4f2fd4e40f971e415d0ea5`; contributor confirmed on 2026-08-11.
+- **Review:** independently reviewed by Astro-Han in pull request #2676 at commit `3c7683b9793e97cba7d8536f6864da0e38f24c30` on 2026-08-12. That review covers the accuracy of this origin record; it does not make a legal or ASF release determination about implementation inputs (see [Computer Use implementation inputs](#computer-use-implementation-inputs)).
 
 ### Computer Use implementation inputs
 
diff --git a/packages/runtime/resources/bundled-skills/provenance.json b/packages/runtime/resources/bundled-skills/provenance.json
deleted file mode 100644
index 3f03e4ce2c..0000000000
--- a/packages/runtime/resources/bundled-skills/provenance.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "schemaVersion": 1,
-  "purpose": "Origin and review evidence for Skills bundled with Maka. This file is separate from SKILL.md so provenance updates do not change installed Skill content hashes.",
-  "records": [
-    {
-      "id": "computer-use",
-      "status": "contributor-confirmed",
-      "origin": "independently-authored",
-      "author": {
-        "name": "Haoqing Wang",
-        "github": "hqhq1025"
-      },
-      "aiAssistance": {
-        "tool": "OpenAI Codex",
-        "role": "Drafting and implementation assistance"
-      },
-      "inputs": [
-        "Maka Computer Use source code",
-        "The maka.cu/2 schema and model-facing tool contract",
-        "Maka Computer Use tests"
-      ],
-      "thirdPartySkillBodiesUsed": false,
-      "license": "Apache-2.0",
-      "introducedBy": {
-        "pullRequest": 2147,
-        "commit": "2fb83e20b71124bc4a4f2fd4e40f971e415d0ea5"
-      },
-      "contributorConfirmedOn": "2026-08-11",
-      "review": {
-        "status": "independently-reviewed",
-        "reviewer": "Astro-Han",
-        "pullRequest": 2676,
-        "commit": "3c7683b9793e97cba7d8536f6864da0e38f24c30",
-        "reviewedOn": "2026-08-12",
-        "scope": "Accuracy of the Skill origin record. This review is not a legal or ASF release determination for inputs to the Computer Use implementation."
-      }
-    }
-  ],
-  "unresolvedGroups": []
-}