jaas-ui + jaas-skills + jaas-guardrails, 2026-09-08) publishing the Personal Notes skill end to end — nothing staged or mocked, including the one step that didn’t go as planned.
1. Sign in
/login offers Google sign-in, or the local dev-login path (email + password, gated entirely behind JAAS_DEV_LOGIN_PASSWORD — see Authentication).

2. Drafts
The Drafts tab lists in-progress, unpublished skill packages. Create Skill starts a new one.
manifest.yaml scaffold and nothing else yet.

3. Fill in the files
Editingmanifest.yaml to the real content from Writing a skill:

SKILL.md as a second file via the file panel’s add-file control:

schema.json goes in the same way (a third file, same add-file control) — not shown separately here since it’s the identical JSON from the previous page.
4. Validate
Validate runs structural validation plus a live guardrails scan, with no publish yet.
5. Publish — the corner case, live
Clicking Publish Skill the first time hit this, unedited:
jaas.demo.personal-notes:1.0.0 had already been published to this local registry from an earlier run, and the registry correctly refused to overwrite it. The fix is exactly what the docs say: bump the version and re-publish. Retrying at 1.0.1 succeeded:

- “This version is published and immutable — it can never be edited or deleted.” Changing it means New Version, which forks it into a new editable draft.
- Files:
SKILL.md,dependencies.yaml,manifest.yaml,permissions.yaml,schema.json. Onlymanifest.yamlandSKILL.mdwere ever written by hand —dependencies.yamlandpermissions.yamlwere auto-defaulted to empty, exactly as Package layout describes. - Guardrail Certification: Level 2 — Standard, with L1 Baseline and L2 Standard both shown Certified.
6. Find it in search

personal-notes (the id’s own suffix) returned nothing; searching notes (an actual tag) found it immediately. If a search comes up empty, try a real word from the name/tags/category rather than an id fragment.