# Okhp3 Publication Handoff Packaging

> Assemble all validated BP-SKILL process artifacts into a publication-ready bundle with a manifest, approvals record, and completeness check. Use this skill when the user is ready to publish or hand off a complete process documentation set; when they ask to package the process docs, create a handoff bundle, publish the process artifacts, or generate a release package. Requires a passing validation report (Band A or B) before bundling — this is the terminal, all-artifacts step; for a single-artifact quality check use okhp3-process-validation-scoring instead. Produces a MANIFEST.yaml, APPROVALS.yaml, and a ZIP-ready directory structure.

- Skill: `okhp3/okhp3-publication-handoff-packaging` (Agent Skill, multi-file: 8 files)
- Install (CLI): `npx skillmds@latest add okhp3/okhp3-publication-handoff-packaging`
- Raw SKILL.md: https://api.skillmd.com/api/skills/okhp3/okhp3-publication-handoff-packaging/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- License: MIT
- Author: OKHP3 (https://skillmd.com/u/okhp3)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/okhp3/okhp3-publication-handoff-packaging

---


# okhp3-publication-handoff-packaging

**BP-SKILL: Business Process Agent Skill Suite** · part of [mermaid-diagram-bpmn](https://github.com/OKHP3/mermaid-diagram-bpmn) · OverKill Hill P³

---

## Purpose

Assemble all validated process artifacts into a publication-ready bundle. The bundle includes a machine-readable manifest, an approvals record for ISO 9001 §7.5.3 document control, and a structured directory suitable for archiving, sharing, or committing to a repository.

---

## When to use this skill

- `validation-report.yaml` exists with `ready_for_publication: true` (Band A or B)
- User is ready to hand off the process documentation to stakeholders or a document management system
- User wants to create a release package for audit, certification, or onboarding

## When NOT to use this skill

- Validation report is missing or `ready_for_publication: false`: run `okhp3-process-validation-scoring` first
- Only a subset of artifacts is ready: wait until all required artifacts pass validation

---

## Required Bundle Contents

The following artifacts must be present and validated before bundling:

| Artifact | Source skill | Required |
|---|---|---|
| `pir.yaml` | okhp3-process-intake-and-scope | **yes** |
| `pns.yaml` | okhp3-process-narrative-authoring | **yes** |
| `bpmn-beta.mmd` | okhp3-visual-process-modeling | **yes** |
| `sop.md` | okhp3-sop-work-instructions | **yes** |
| `validation-report.yaml` | okhp3-process-validation-scoring | **yes** |
| `stakeholder-register.yaml` | okhp3-stakeholder-and-role-mapping | recommended |
| `raci.md` | okhp3-raci-governance-matrix | recommended |
| `sipoc.md` | okhp3-sipoc-generation | recommended |
| `decision-model.yaml` | okhp3-decision-model-authoring | if ≥3 gateways |
| `work-instructions.md` | okhp3-sop-work-instructions | recommended |
| `gap-analysis.yaml` | okhp3-process-gap-exception-analysis | if redesign |
| `measures-register.yaml` | okhp3-process-measures-controls | if governance extended |

---

## Bundle Directory Structure

```
process-artifacts/<process-id>/
├── MANIFEST.yaml
├── APPROVALS.yaml
├── pir.yaml
├── pns.yaml
├── pns.md
├── bpmn-beta.mmd
├── sop.md
├── work-instructions.md          (optional)
├── stakeholder-register.yaml     (recommended)
├── raci.md                       (recommended)
├── sipoc.md                      (recommended)
├── validation-report.yaml
├── decision-model.yaml           (if ≥3 gateways)
├── gap-analysis.yaml             (if redesign)
└── measures-register.yaml        (if governance extended)
```

---

## MANIFEST.yaml Schema

- `manifest_version: "0.1"`
- `process_id`: from PIR
- `process_name`: from PNS
- `bundle_date`: ISO 8601 date
- `bundle_version`: `"v1.0"` for initial release
- `quality_band`: from validation report
- `composite_score`: from validation report
- `artifacts[]`: each with `filename`, `source_skill`, `status` (present|missing|optional), `sha256`
- `missing_required[]`: artifacts that are required but absent (must be empty for release)
- `missing_recommended[]`: artifacts that are recommended but absent

---

## APPROVALS.yaml Schema

For ISO 9001 §7.5.3 document control:
- `process_id`, `process_name`, `bundle_version`
- `approvals[]`: each with `role`, `approval_date`, `status` (pending|approved|rejected), `comments`
- `effective_date`: date the bundle becomes active
- `review_date`: scheduled review date
- `distribution[]`: list of roles who should receive this bundle

---

## Bundle Assembly Workflow

`scripts/build-publication-bundle.mjs` executes:

1. Read `validation-report.yaml`: abort if `ready_for_publication: false`
2. Inventory all artifacts in `process-artifacts/<process-id>/`
3. Check required artifacts are present
4. Compute SHA256 hashes for all present files
5. Generate `MANIFEST.yaml` with artifact inventory and quality metadata
6. Generate `APPROVALS.yaml` stub with `status: pending` for each required approver
7. Report `missing_required[]`: must be empty for release
8. Return `{ valid, errors, warnings, manifest_path, approvals_path }`

---

## Publication Gate

Release is blocked if:
- `validation-report.yaml` is missing or `ready_for_publication: false`
- Any `missing_required[]` artifact is present in MANIFEST
- APPROVALS has any entry with `status: rejected`

---

## Handoff Instruction

Once the bundle is assembled and all approvals collected, archive the `process-artifacts/<process-id>/` directory and distribute per `APPROVALS.yaml` `distribution[]`. Tag the version in your document management system.

---

## Execution contract

Apply this contract on every run so the artifact is trustworthy and reusable:

1. State the input evidence, assumptions, and unresolved questions before drafting. Never invent missing process facts, owners, controls, dates, or approvals.
2. Preserve stable identifiers and source traceability. When transforming an upstream artifact, retain its IDs and cite the source field or section for each derived decision.
3. Produce the declared artifact exactly, including required fields and valid values. Keep unsupported, uncertain, or not-applicable items explicit instead of silently omitting them.
4. Validate the result with the bundled script or fixture when available. Report validation status, warnings, and any manual review still required.
5. Stop and request the missing input when a boundary, approval authority, or safety-critical rule cannot be inferred. A partial artifact with clearly marked open questions is safer than a confident fabrication.

If `scripts/build-publication-bundle.mjs` cannot run, assemble `MANIFEST.yaml` and the `APPROVALS.yaml` stub by hand using `references/publication-checklist.md`, and state in the output that automated hashing and assembly was not run — do not report SHA256 values you did not actually compute.

## References

Load on demand:
- `references/publication-checklist.md`: required artifact list, bundle directory structure, MANIFEST schema, and ISO 9001 §7.5.3 document control requirements

## Scripts

- `scripts/build-publication-bundle.mjs`: assembles MANIFEST.yaml + APPROVALS.yaml stub and validates bundle completeness

## Assets

- `assets/fixtures/handoff-manifest-example.yaml`: canonical MANIFEST.yaml for a complete purchase-approval bundle

## Evaluation and release status

No `evals/evals.json` exists for this skill yet, and none of the five root-level `evals/` categories cover bundle assembly directly. The only current check is the maintainer-facing `tests/validate-skill.test.mjs` against `assets/fixtures/handoff-manifest-example.yaml`. This is the terminal step of the entire pipeline, so it inherits every upstream evidence gap this assessment documents. Evidence status: `not-run` for task quality and skill uplift.

Version 0.2.0 (this pass) added the `compatibility` declaration and the script fallback instruction, with an explicit warning against reporting fabricated hash values when the script cannot run. Classified minor per the versioning table, not patch. No regression suite exists to run before this bump; that limitation is disclosed, not implied away.

---

## About

Part of the **BP-SKILL: Business Process Agent Skill Suite**, published in [overkillhill/mermaid-diagram-bpmn](https://github.com/OKHP3/mermaid-diagram-bpmn). MIT License.