A skill’s declared act: how a run describes the act it performs. The form and
purpose, and how the target, decision, effect, actor, authority, and previous
receipt are read, where <field>_from names a trusted input key and the bare
field is a static literal (the driver-pinned input wins). The runtime fills
the act’s structure from these and the trusted inputs; the model authors only
the reason prose. Absent an act: block, a run seals a generic observation.
Config for an http source: the endpoint, the method, static request headers
(whose values may carry ${secret:NAME} references resolved at invocation),
and an explicit, default-off opt-in to reach private or loopback networks
(the governed transport blocks them otherwise, mirroring the sandbox network
opt-in).
Closed set of built-in skill source kinds. The extension lane is the
ExternalAdapter variant; custom adapters are identified by the
external-adapter manifest, not by an open source.type string. First-party
governed fronts that carry their own protocol, such as thread outbox
publication, get explicit variants.