Versioned Transitive Dependency-Closure Binding and Operation-Time Effect Governance for Agent Skills: ClosureBound

RESUMO

Agent Skills combine instructions with files, packages, tools, models, and services, so operational identity can exceed a signed directory. We present ClosureBound, a reference monitor that prevents authorization transfer across material changes to this heterogeneous closure. A lexical audit of 549 public Skills (4,872 unique files) finds that 67 contain links resolving outside their roots, and no root declares a frontmatter dependencies field, motivating conservative closure discovery.