Humansprovide judgment
Agentsprovide leverage
One doorthe same CLI, typed or driven by a skill
Agents are teammates
Who is acting
The CLI runs inside your project's control-plane container and asserts its actor over loopback. A skill inherits exactly that boundary because it runs ./forge in your project — no separate agent credential, no connector, nothing to expose.
What a skill knows
For each capability: the exact ./forge verb and flags, the one-line JSON it prints, the status values to branch on, and the Resource and Events it leaves. It reports back in those, never in logs.