README proof of 15 October 2026: install commands fixed, every link checked, a check script and CI added

[MariusGithub13]

Proof document

docs/README-PROOF-2026-10-15.md: the install commands run on a fresh home directory, the four counts recounted, all 24 skill files' front matter and 65 relative links checked, the typed-refusal example installed, and every external link in the README and the agents' files fetched. Clean clone of main (e6fefa3), Ubuntu 24.04, Python 3.13.16, outbound network limited to an allow-list.

What the README asks	Result
cp -r open-deal-kit/agents/* ~/.claude/skills/ on a machine with no ~/.claude/skills	failed: cp: target ... No such file or directory; passes with mkdir -p first
the same cp with *	also copies agents/README.md and systems/README.md into the skills directory, one over the other; */ copies the 24 folders only
100+ prompts, 50+ skills, 20 agents, 4 systems	103, 52, 20, 4
examples/typed-refusal-gate: pip install git+...@892b0a0	passed (installs as package version 0.1.0; the example calls that commit v0.1.1, the upstream repository has no releases)
python3 gate_sentinel.py	not run here: its first step downloads four PDFs from os.devaland.com, which the session's proxy refuses

Link check (every external URL in the README and in the agents' files):

URL	Result
https://github.com/MariusGithub13/open-deal-kit.git	200
https://claude.com/claude-code	200
https://claude.ai	403 to a non-browser client with the bot-check page; not dead
https://github.com/GrayWolfOne21/typed-refusal	exists (MIT, 4 commits, no release named v0.1.1)
https://devaland.com	not verified here: the session's egress proxy refuses the host
https://os.devaland.com/sample-brief (homepage; in the README, the four index READMEs, all 20 agent files and all 4 system files)	not verified here, same reason
https://os.devaland.com/static/sample-sources/ and the four Sentinel PDFs	not verified here, same reason

Dead links found: none. The Devaland links could not be reached from this session at all, so they are listed as unverified, not as passed; they are the first thing to check from a normal network.

Workflow run

.github/workflows/check.yml running tests/check_kit.py (front matter of the 24 skill files, 65 relative links, the README's counts, the example compiles): green on this branch, https://github.com/MariusGithub13/open-deal-kit/actions/runs/38731041642

Secret scan

detect-secrets 1.5.0 scan --all-files on the working tree: findings only in the pre-existing examples/typed-refusal-gate/receipt.json, 8 "Hex High Entropy String" hits that are the SHA-256 document hashes and seals the example is about, not credentials. A grep for key prefixes, e-mail addresses and IPs found only the SECURITY contact.

README corrections

1. mkdir -p ~/.claude/skills added before the two cp lines: without it the install fails on a fresh machine (measured).
2. agents/* and systems/* became agents/*/ and systems/*/: the bare glob copies the two index READMEs into the skills directory (measured: 25 entries with one README, 24 without).
3. One paragraph saying what tests/check_kit.py verifies on each push and pointing to the proof document.

Also added: tests/check_kit.py, the workflow, two paragraphs at the end of CONTRIBUTING.md (how to run the check, how to report a wrong output with the prompt, the passage read and the claim without a page), and SECURITY.md (reports to office@devaland.com). No agent, system, prompt, link, licence or changelog text was changed.

Suggested topics (not applied)

mergers-and-acquisitions, due-diligence, search-fund, prompts, agent-skills, private-equity, small-business-acquisition