CAIN-42 MCPGateAGENTIC AI 75 · #72
Reusable user-defined workflow skills
Google announced skills for recurring tasks as a replacement for Gems.
Last reviewed 2026-11-11
Agentic AI 75 / #72
2026 status: Product transition announcement · Category: Agent skills
The 2026 development
Google announced skills for recurring tasks as a replacement for Gems.
The governance gap
A saved workflow is a standing instruction that can outlive its context. If it embeds a credential, a destination or an assumption, reuse turns one decision into many.
Where CAIN-42 fits: Moat 2 — Security-Context Continuity
Core question: Does authority survive every boundary? Identity, scope and delegation are carried across tools, agents, memories and systems.
Store the skill as a manifest with declared tools, data and limits. At run time, re-evaluate the authority instead of inheriting it from the saved definition.
How the wiring works
- Save the skill as a manifest, not as a blob of instructions.
- Declare tools, data scope and limits.
- Re-evaluate authority on every run.
- Version the skill and record which version ran.
What is real today
LIVE A public route in this deployment exercises this mechanism today, within its stated scope.
The skill sandbox and static checks are real on fixed samples. No Google product integration exists.
| Component in this repository | What the module says it is |
|---|---|
cain/runtime/skills.py | CAIN Sovereign — Agent Skill Trust Fabric (Prompt 7, Phase 7). |
cain/isolation/skill_sandbox.py | CAIN Sovereign Isolation — Cryptographic Skill Sandboxing Engine. |
keystone/skill_static.py | Static analysis of agent skill / plugin code: what the code can DO, not which words it contains. |
Descriptions are the first line of each module's own docstring, read without importing it. A module path is a pointer into this repository, not a hosted endpoint. Its existence is checked by the test suite; its status for this use is the label above.
Check it yourself
- Run the live skill-sandbox demo
/openclaw-keystone - Fire a live decision through the CAIN-42 pipeline
/fabric/try— the same enforcement path every product sits behind.
Commercial package
| Offer | Saved Workflow Review |
|---|---|
| Buyer | Assistant platforms and enterprise IT |
| Price (proposal) | $2,500–$5,000 per review |
| Bundle | Memory & Context — Memory that cannot launder authority. |
| Operator stream | Stream 2 of the 10-stream operator playbook |
Agent-platform teams, enterprise AI governance, regulated data owners is the bundle buyer. The entry offer for this bundle is Memory authority audit; hosted memory-sanitisation pilot; the range is $2,500 per audit; metered from $0.0002 per inspection. A price on this page is a proposal, not a validated rate, and no customer is claimed.
Buy this as a product or service
CAIN-A75-072 — Saved Workflow Review DELIVERABLE
A bounded engine run on the buyer's sample: findings, a written report, and a SHA-256 artifact manifest. The manifest is unsigned: it is not a signature and not an attestation.
Kind: Assessment · Price (proposal): $2,500–$5,000 per review · Lead time: 5 business days.
Open the product page · all 75 products
What this page does not claim
What this page is not. CAIN-42 is not affiliated with, endorsed by, integrated into, or shipped with the organisation named in the 2026 item. The item is public context; the page describes how CAIN-42 would govern that class of capability. No page here claims a customer, a partnership, a certification, a patent, or a production integration. Prices are proposals. Built by a three-person team.