research-run-ledgerlisted

# Research Run Ledger Record a command as a `run.started`/`run.finished` pair in a JSONL hash chain. Capture stdout and stderr into exclusive artifacts that are never overwritten. Version 1.1.3 writes new schema-1.1 events and retains read compatibility with complete 1.1.2, 1.1.1, 1.1.0, and 1.0.0 run pairs. ## Safety boundary Treat this Skill as a recorder, not a permission system. Before invoking it: - confirm that the user authorized the command and its external effects; - apply the project's download, license, and untrusted-input safety protocol; - avoid commands that print credentials because stdout/stderr are preserved; - declare every material input and expected output that matters to the result. The runner refuses obvious token, password, authorization, or cookie values in argv and explicit environment assignments. It starts child processes with a minimal environment allowlist and never writes environment values to the manifest. These checks reduce accidental disclosure; they do not replace credential management or command review. ## Record one run Use an explicit argv vector after `--`. Never reconstruct it as a quoted shell string. ```bash python3 scripts/run_ledger.py run \ --manifest /absolute/run/manifest.jsonl \ --artifact-dir /absolute/run/logs \ --manifest-parent-identity 16777232:123456 \ --artifact-directory-identity 16777232:123457 \ --run-id RUN-OCR-001 \ --cwd /absolute/project \ --input /absolute/data/source.png \ --output /absolu