# JaaS Skills

> The skill registry for AI agents — architecture, publishing, guardrails, sharing, and API reference.

- [Overview](https://docs.jaasskills.com/index.md): The skill registry for AI agents
- [Architecture](https://docs.jaasskills.com/architecture.md): Three independent services, talking only over HTTP
- [Running the stack](https://docs.jaasskills.com/getting-started/running-the-stack.md): From zero to a signed-in local environment
- [Authentication](https://docs.jaasskills.com/getting-started/authentication.md): Google sign-in in production; a password-gated dev login locally
- [Package layout](https://docs.jaasskills.com/packages/layout.md): The canonical on-disk shape of a skill
- [manifest.yaml fields](https://docs.jaasskills.com/packages/manifest.md): The 15 required fields of a skill manifest
- [ID & version policy](https://docs.jaasskills.com/packages/id-version-policy.md): Naming and immutability rules for a skill
- [Dependency policy](https://docs.jaasskills.com/packages/dependencies.md): How a skill declares and resolves its dependencies
- [Drafts workflow (web UI)](https://docs.jaasskills.com/publishing/drafts-workflow.md): Author, validate, and publish from the browser
- [Git-native release (CI)](https://docs.jaasskills.com/publishing/git-release.md): Release a skill from its own repo, on a tag push
- [jaasctl CLI](https://docs.jaasskills.com/publishing/cli.md): Command reference for the registry's CLI
- [Level model](https://docs.jaasskills.com/guardrails/levels.md): Modeled on CIS Benchmark tiering and GitHub's secret-scanning split
- [Rule catalog](https://docs.jaasskills.com/guardrails/catalog.md): 19 rules, 9 categories, each citing an industry source
- [Custom rules & RE2 safety](https://docs.jaasskills.com/guardrails/custom-rules.md): Ad-hoc, tenant-defined content-safety rules
- [Sharing & visibility](https://docs.jaasskills.com/access/sharing.md): Public, private, and per-grant access to a skill
- [Security & trust chain](https://docs.jaasskills.com/access/security.md): How a published artifact earns trust, and how access is enforced
- [API reference](https://docs.jaasskills.com/reference/api.md): Registry and guardrails HTTP endpoints
- [Corner cases](https://docs.jaasskills.com/reference/corner-cases.md): Every deterministic edge case the registry is designed to hit — and exactly what happens
- [Error codes](https://docs.jaasskills.com/reference/error-codes.md): Error codes at a glance
- [FAQ](https://docs.jaasskills.com/faq.md)