Module skill_ceiling 

Skill deployment-tier ceiling enforcement (EPIC A / A8).

A learned skill carries a deployment_tier — the maximum permission tier it was governed to run at (arXiv 2602.12430; stamped by skill.ingest_governed). But nothing enforced that ceiling on the actions a skill drives: a read_only-capped skill could still emit a full_access action in a full_access session.

SkillCeilingGate closes that. It’s an crate::admission::AdmissionGate that, when a proposal names the skill driving it (in proposal.context["skill"], the same “caller names the skill it’s running” contract permission.evaluate’s skill param uses), looks up that skill’s live deployment_tier from memgine and escalates any action whose required tier exceeds the ceiling to human approval — resolved through the durable ledger wired in A7. The effective authority becomes min(session grant, skill ceiling) without the gate having to invent skill→action provenance: the caller declares it.

Structs

SkillCeilingGate

An admission gate that caps a skill-driven proposal’s actions at the skill’s persisted deployment_tier.

Constants

SKILL_CONTEXT_KEY

The context key a proposal uses to name the skill driving it.