feat: register solana-ship-gate skill (enforceable pre-deploy safety gate)

[gabchess]

What this adds

Registers solana-ship-gate, a new community skill, in the kit's skill registry.

Repo: https://github.com/gabchess/solana-ship-gate (MIT)

The gap it fills

The kit already ships a solana program deploy | anchor deploy PreToolUse hook, but it only asks for a typed mainnet confirmation and checks that a .so exists. It does not verify whether the deploy is actually safe.

solana-ship-gate turns that stub into an enforceable, machine-readable PASS/FAIL gate that blocks unsafe mainnet deploys and upgrades. It runs four deterministic, CLI-derived checks:

1. Upgrade-authority custody - flags a deployer-EOA authority (FAIL), warns on a plain EOA, passes a Squads v4 multisig (verified by on-chain account owner) or a frozen program.
2. Verifiable-build match - on-chain binary vs local build (solana program dump + diff; full solana-verify when Docker is present).
3. Compute-unit headroom - simulated CU against the Agave hard cap.
4. Account-size / rent - deployer balance vs rent-exemption with a fee buffer.

It self-registers as a PreToolUse hook covering solana program deploy, anchor deploy, and solana program upgrade, and runs --strict in CI.

Scope honesty

v1 is the four deterministic checks above. Oracle staleness, live mainnet-fork simulation, Squads proposal flow, and Token-2022 are documented as linked-out / optional-if-installed, not core.

Notes

• 2026 stack: Agave CLI, Anchor 1.x, Squads v4, @solana/kit.
• Pure bash gate, no remote installers. Installer merges the hook into settings.json and backs up CLAUDE.md first.
• MIT licensed, ready to submodule under .claude/skills/ext/.

Submitted for the Solana AI Kit community skill bounty.

[vercel]

@gabchess is attempting to deploy a commit to the STBR TRUE Team on Vercel.

A member of the Team first needs to authorize it.