Distribution view of an addon (unified distribution, GH #726): the
authoring lean-ctx-addon.toml embedded verbatim. The TOML is the
single source of truth — MCP wiring, capabilities, [install] bootstrap
and the per-platform [artifacts] tables (GH #725) all live inside it,
so nothing is duplicated at the pack layer that could drift.
Versioned mechanism-level carrier. Schema v1 holds the historical SDK
envelope; schemas v2/v3/v4 hold canonical live V1/V2/V3 respectively.
Package integrity alone does not authorize session adoption.
One named blob: path + SHA-256 of the plaintext + compressed body.
The hash pins the decoded bytes, so tampering with the stored body (or a
decompression bug) is detected before anything lands on disk.
kind=skills payload (GH #727): a set of named, verified content blobs
(markdown/scripts). No execution semantics in lean-ctx — skills are
verified content; interpretation belongs to the consumer (an addon like
lean-md, or the agent itself).