The scheduled librarian installs its skill from v0.26.0. The old pin, v0.19.7, has no skills/ktl-librarian, so every weekly run failed.
Security
The sidecar copies match the v0.26.0 templates.knowledge-feedback.sh lets ktl-docent record a reader’s gap without opening feedback.md (Snyk W011). knowledge-release.yaml attaches the bundle zip to a release, dispatched by the release job once KNOWLEDGE_RELEASE_ENABLED is true. The librarian hands its agent one credential, under the name AGENT_API_KEY_ENV gives, and validates with --check-refs before opening a pull request. Conventions rule 11 rejects an at: later than the commit that recorded it, and a bundle path with a byte above 0x7f is read rather than skipped.
