Expand description
Per-skill runtime statistics. Not signed, not part of the
publisher manifest. Lives at <MUR_HOME>/skills/<name>/stats.json
and is rebuildable from the JSONL trace log via
mur skill reindex-stats.
§Security
stats.json is host-local mutable state and is explicitly outside
the DSSE signature scope (see §2.2 Layer 1 of the skill ecosystem
design). A skill’s signature covers skill.yaml only. Stats can be
deleted or rebuilt (mur skill reindex-stats) without affecting
trust.
Structs§
- Skill
Stats - Sidecar stats for an installed skill. Not part of the signed manifest.