Exempt tracker metadata from commit signing

Normal repository commits retain configured-key signing, failure stops,
and cryptographic verification. Internal git-bug tracker metadata may be
unsigned, so issue operations do not require a signing format that the
tracker cannot use. Code and documentation commits have no signing
exception.

Issue: 3cdc678

diff --git a/.agents/skills/commit/SKILL.md b/.agents/skills/commit/SKILL.md
index d25a3fbbc27439b4a3b0c9f89797e70af4626a08..11b5eb2f53d6850e26e3f97dc5eca7d3086eb410 100644 (file)
--- a/.agents/skills/commit/SKILL.md
+++ b/.agents/skills/commit/SKILL.md
@@ -5,12 +5,18 @@ description: Commit procedure and message rules. Use for every commit.
 
 # Commit
 
+The procedure applies to normal repository commits, including code and
+documentation commits. Each must use the configured signing key.
+Internal git-bug commits for issues, comments, status changes, and other
+tracker metadata are exempt from signing and may be unsigned. This
+exception does not permit unsigned code or documentation commits.
+
 ## Procedure
 
 1. Confirm that the configured signing key is available. If signing is
    unavailable or fails, stop and report the problem. Never disable
    signing, bypass it with a command or configuration override, or
-   create an unsigned commit.
+   create an unsigned normal repository commit.
 2. Do the `check` skill. All checks must pass before you commit.
 3. Stage only the files that belong to this change. Keep unrelated
    changes in separate commits.
@@ -22,10 +28,10 @@ description: Commit procedure and message rules. Use for every commit.
    the configured key, using `git commit -S -F MESSAGE_FILE` on the same
    file. Do not add or change trailers after the check. The normal
    commit hook still runs. Never skip it with `--no-verify`.
-6. Cryptographically verify each new commit's signature against the
-   configured key before reporting completion. A signature header alone
-   is not verification. If verification fails, stop and report it. Do
-   not claim completion or publish the commit.
+6. Cryptographically verify each new normal commit's signature against
+   the configured key before reporting completion. A signature header
+   alone is not verification. If verification fails, stop and report it.
+   Do not claim completion or publish the commit.
 
 ## Size
 

diff --git a/.agents/skills/issues/SKILL.md b/.agents/skills/issues/SKILL.md
index 6ed42de4220e5f731137e244a1cd1f2077155fca..7d64ac62c96b7a4f3e26a69487f7a90f069219e6 100644 (file)
--- a/.agents/skills/issues/SKILL.md
+++ b/.agents/skills/issues/SKILL.md
@@ -7,7 +7,9 @@ description: Read and write issues with git-bug. Use for any issue work.
 
 Issues live in git-bug, inside the Git repository, not in files. The
 `overview` issue lists the phases and the open decisions. Run the
-commands in the Nix development shell.
+commands in the Nix development shell. Internal git-bug tracker metadata
+commits may be unsigned, as the `commit` skill permits. Normal code and
+documentation commits still require signing and verification.
 
 ## Read