## Identity
- Slice: AERIE-1855 — telemetry rollout 9/19
- Repository: AI-Builder-Team/Aerie
- Category: Feature
- Base: c016f953bfdf52f474d62f675d12ce83c49d8050
- Reviewed head: d826ea4a4d1da3aaf99e04baba54077df5c4343c
- Strict predecessor: AERIE-1854 / PR #1243
## Outcome
Adds verified, atomic local Skill materialization and install/update/logout orchestration to the existing private @aerie/add-aerie-skill package. Complete descriptor/delivery proof and every ordered file byte are verified before canonical or host writes. Installation state and stable receipt lineage are promoted only after verified materialization.
## Why this slice is independently useful
This provides the unpublished installer foundation required by later host-adapter and artifact-lifecycle slices without activating invocation telemetry or publishing a package.
## Owned surfaces changed
All 32 changed paths are under packages/add-aerie-skill/, including:
- Canonical bundle materialization and host reconciliation
- Installation-wide transaction, immutable state generation, and receipt queueing
- Safe host discovery, selection, compatibility floors, and Codex/Pi coupling
- Crash recovery, physical attribution, bounded no-follow reads, and private-root security
- CLI install/update/logout service wiring
- Deterministic package/build/pack guards and proprietary notice
## Verification-only surfaces inspected and unchanged
- Root and workspace lockfiles
- Generated Convex files
- Release and publication workflows
- Existing backend telemetry and adoption surfaces
## Prohibited surfaces isolation proof
- No invocation observer, adapter registration, uploader, wake path, daemon, host hook/config edit, artifact lifecycle, UI, or macOS claim
- No production, deployment, registry, or real-host action
- No package publication path; package remains private: true, UNLICENSED, version 0.1.0
- Package files remain exactly dist, README.md, and PROPRIETARY-NOTICE.txt
- No declared runtime dependencies
## Behavior and production effect
Production effect is dormant because the package is private and unpublished. All filesystem qualification uses injected deterministic fake/temp roots. Native Linux and Windows qualification remains owned by later slices.
## Defaults and activation boundary
Only the public grammar <slug>, update, logout, help, and version is retained. There is no login/auth, discovery, search, list, uninstall alias, observer, or automatic uploader. Network, auth, host, security, confirmation, and receipt transports remain injected boundaries.
## Tests and validation
- RED evidence: exact regressions cover proof/identity drift, foreign inodes, symlink/reparse boundaries, bounded descriptor reads, crash points around every journal/rename/cleanup transition, durable .next promotion, target authority, cross-volume targets, lock races, queue lineage, and delayed receipts.
- GREEN focused tests: 256/256 in both declared concurrent and serial modes; focused receipt-settlement, orphan-lineage, compacted receipt reuse, partial-update, recovery fail-fast, CLI exit, and host-discovery tests also passed.
- Typecheck: pnpm --filter add-aerie-skill typecheck
- Format/lint: Biome passed all 69 affected package files.
- Build: pnpm --filter add-aerie-skill build
- Deterministic build: 84 files; hash 9f993788479893c1b64ae84feba41ef4b04b1e0b8cf4de1c34afbf488318e5b0; declared dependencies [].
- Pack: 87 entries; integrity sha512-JuYELRgt3Kyg2VyFn/Z7A656DxKOcw5s2X1b6nXW72BeHjJsIqnI2eKOAv0tqz5r2Wd6kgXLp5cmrlIKCL8e1Q==.
- Proprietary notice: 336 bytes; SHA-256 0592d88bfc1c4620224949906674d85de7c6dbc1624f8e8a6df9b2eda04110c1.
- git diff --check: passed.
- Worktree and artifact checks: clean; no tarball, generated, lockfile, or outside-package drift.
## Independent exact-range review
- Reviewer: a1958r-a1855audit
- Final exact range: c016f953bfdf52f474d62f675d12ce83c49d8050..d826ea4a4d1da3aaf99e04baba54077df5c4343c
- Final Mercy repair: 9412a37756331b641012d5a799c5aa436d7e3bc6..d826ea4a4d1da3aaf99e04baba54077df5c4343c
- Verdict: PASS
- Review history: repeated exact-range cold reviews drove repairs for sealed journal provenance, installation-wide locking, immutable receipt/state lineage, physical attribution, all rename/journal crash boundaries, explicit host-target authority, same-volume staging, durable rollback intent, .next convergence, nested lock serialization, terminal/compacted/orphan receipt consistency, partial-update reporting, recovery fail-fast, and fail-closed malformed host discovery. The same reviewer reproduced Mercy's scenarios and re-ran exact package gates on the final head.
## Manual QC
- Required now: none; deterministic fake-host and local pack evidence complete.
- Deferred: native Linux and Windows host qualification in AERIE-1858/AERIE-1859.
## Rollback
Revert this PR. The package is unpublished, so rollback has no registry or production deployment effect.
## Risks and monitoring
- Filesystem transactions are intentionally fail-closed on ambiguous, foreign, malformed, or unverifiable evidence; manual recovery can be required rather than risking deletion.
- No native-platform support claim is made in this slice.
- No runtime monitoring is activated because there is no published or production path.
## Local integration evidence
- Cherry-pick/rebase result: clean integration head d826ea4a4d1da3aaf99e04baba54077df5c4343c
- Sequential-history proof: current origin/main is c016f953bfdf52f474d62f675d12ce83c49d8050; candidate is 34 commits ahead and 0 behind. The reviewed candidate package tree is 11814902a1d1dbb31cbe2a14167dace7b052ff18; the preceding 33 rebased patch IDs matched their pre-rebase equivalents one-for-one.
- Cross-slice isolation: 32/32 changed paths are under packages/add-aerie-skill/; no outside-package drift.
Linear: https://linear.app/builder-team/issue/AERIE-1855/telemetry-rollout-919-add-unpublished-verified-materialization-and