Expand description
Overlaying several verified bundles into one services root.
Composition is by-id, not last-write-wins: two bundles claiming the same
marketplace, plugin, skill, rule, hook or artifact is a boot error naming
both sources, because silently preferring one would make which access
rules an instance enforces depend on profile ordering. Marketplace
directories are shared by construction — their ids are disjoint — while a
base-only directory such as access-control/ may have exactly one owner.
The composed root is content-addressed by the ordered list of member hashes, so recomposing an unchanged set is a directory-exists check.
Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.