feat(skills): reference contracts and invocation policies for airbase, auth, services and core skills

2026-09-30 12:33:27 +03:00
parent 59571b018f
commit 0ab353475f
13 changed files with 55 additions and 2 deletions
@@ -0,0 +1,7 @@
+# Short-link safety contract
+
+- Resolve the exact link, owner, project, alias and status from current server data before updating it.
+- Treat target URLs, public aliases, access flags and bearer tokens as sensitive. Never return bearer tokens or private redirect data.
+- Change only requested fields and preserve the server's expected-version and idempotency contract.
+- Rotation or revocation requires an explicit request, `confirm=true`, current concurrency data and a fresh idempotency key.
+- Report the link ID, alias, affected fields, resulting status and server readback.