[Upd4ting]

Why

Move the repo to @antelopejs/tooling-configs 0.4.0. That release removes antelopejs-verify publish (the evidence branch push, the PR verdict comment and the verify commit status). Until the repo is on 0.4.0, its synced verify skill still tells agents to run publish.

What changed

• package.json declares "@antelopejs/tooling-configs": "^0.4.0"; pnpm-lock.yaml resolves 0.4.0. oxfmt (^0.66.0) and oxlint (1.81.0) already satisfy the pack's peer ranges, so they stay. @oxlint/plugins is not a direct dependency here: the pack brings it at 1.81.0.
• pnpm exec antelopejs-sync rewrote what it owns:
  • .agents/skills/verify-interface/SKILL.md: the publish step and its evidence-branch, PR-comment and commit-status text are gone; the skill now says to report the verdict and what was seen in the verifier's own reply. Commands use node_modules/.bin/antelopejs-verify.
  • .github/workflows/ci.yml: the local checks aggregate job is dropped.
  • AGENTS.md: three note-only rows added to the guardrails table.
  • package.json: the prepare script is rewritten.
• No other file in the repo mentions verify-evidence, a publish verify step, a PR verdict comment or a verify commit status. The repo's own layer (features/README.md, features/*.md, verify.config.ts) needed no wording change. The publish door kind in verify.config.ts is the one-way-door category for the npm package and is unrelated.

Fixes the new rules required

0.4.0 type-checks the verify layer (verify:types), and InterfaceCall.call now has to resolve to Promise<JsonValue> with the pack's JsonValue, whose objects do not allow undefined members. Seven entries of CALLS in verify.config.ts failed that.

• Each call is now async. ValidateRaw and defaultAuthenticator return AuthClaims, so they go through a small plain() helper that copies a value into the pack's JSON type and drops undefined members. It uses no type assertion.
• CALLS and plain() moved to .agents/skills/verify-interface/calls.ts, because the change put verify.config.ts over the 20,000-byte file ceiling (20,292 bytes). verify.config.ts imports CALLS from it. Expectations are unchanged.

No suppression was added and guardrails.suppressions.json is untouched (SAFETY count stays at 4, all pre-existing).

Check output

pnpm run checks:

Checks: 9 passed, 0 failed.

pnpm exec antelopejs-sync --check:

Guardrails are in sync.

Before the fixes the same command failed lint (no-runtime-typeof on a first draft of the helper), size and verify:types; all three pass now.