workspace-manifest-attestor

What problem does it solve?

This Skill ensures the integrity of your development workspace by verifying that all discovered Git repositories are accounted for in a central manifest, preventing unexpected drift and potential security risks.

Core Features & Use Cases

• Workspace Auditing: Compares actual Git repositories found in your workspace against a defined manifest (pandora.repos.json).
• Drift Detection: Identifies missing repositories (expected but not found) and unexpected Git roots (found but not expected).
• Risk Scoring: Emits receipts with a calculated risk score based on detected discrepancies.
• Use Case: Before deploying code, run this Skill to confirm that all required project repositories are present and that no unauthorized repositories have been added, ensuring a secure and predictable build environment.

Quick Start

Run the workspace manifest attestor script in dry-run mode to check for discrepancies.