GPT-5 finding
Sandbox note forbids gh api but Step 2 requires it (docs/spec contradiction)
- skills/fleet-state/SKILL.md:60-67
- skills/fleet-state/SKILL.md:415
- skills/fleet-state/SKILL.md:401-404
The spec both requires calling GitHub API to resolve the parent (Step 2) and also states there are no gh api calls (Sandbox note). This is misleading and creates uncertainty for implementers and operators about network access and permissions.
Recommendation
Align the spec: either remove the gh api usage and specify a local-only parent resolution strategy, or update the Sandbox note/Constraints to explicitly allow this single gh api call (and document required auth/env).