docs: migrate the docs and skills tail from gke-labs

[jessie1111101]

Tracking the docs/ and .agents/skills/ units from the migration plan's §3.4. Owner: @jessie1111101.

Merged

• Add the task authoring guide #51 task authoring guide (docs/how-to/add-a-task.md, tasks/AGENTS.md)
• Add agent harness documentation #52 agent harness docs + harness-capabilities.md
• Add the metrics and scoring documentation #62 metrics and scoring docs
• Add the cleanup-orphaned-resources skill and known-issues appendix #63 cleanup skill + known-issues appendix
• Add the review skills, their repo map, and the permission profiles #65 review skills, repo map, held on Add the task authoring guide #51/Add agent harness documentation #52/Add the cleanup-orphaned-resources skill and known-issues appendix #63
• Add the bastion matrix runner scripts and the tf README #53 bastion matrix runner scripts + tf/README.md

In flight (@pradeepvrd)

• Add the run-evals how-to #123 docs/how-to/run-evals.md
• Add the operational skills and references #124 eval-run skills + shared references
• Add the docs index and getting-started guide #125 docs/README.md, docs/getting-started.md
• Add the validate-eval skill #126 validate-eval skill

Remaining (see the status comment below for the full breakdown)

• bastion docs: docs/components/bastion.md, tf/prebuilt/bastion/ — open as docs(bastion): add the bastion guide and its prebuilt stack #135
• package routers: devops_bench/AGENTS.md, CLAUDE.md
• skill symlinks: .claude/skills/* (8 links) — gated on Add the operational skills and references #124 + Add the validate-eval skill #126
• root AGENTS.md refresh — gated on Add the operational skills and references #124 + Add the docs index and getting-started guide #125 + Add the validate-eval skill #126

vCluster docs are out of scope here; they belong to #91.

Note on the root AGENTS.md. It is currently a Python style guide only — it does not mention tasks, running evals, or that skills exist. Until that lands, a fresh agent pointed at this repo cannot discover the skills even once they are migrated, so it gates the others being useful.

Content is adapted rather than copied: several gke-labs references do not exist here, and a few claims were stale.

[jessie1111101]

/assign

[jessie1111101]

Revised remaining scope (supersedes the earlier table in this comment after a closer audit against upstream code).

Three corrections to what this comment originally said:

1. vcluster design doc: out of scope here. vCluster support and its docs are tracked in #91 with @isadominguez314. Removing it from this issue so the two efforts do not collide.

2. tasks/AGENTS.md is already merged, and the upstream version is the better one (it uses a proper markdown link where the gke-labs copy has a bare path). Nothing to do.

3. Root AGENTS.md must not be ported 1:1. The upstream file is not a stub of the gke-labs one, it is a different document. A straight port would delete the vendor neutrality rule, the license header requirement, the pre-commit requirement, and the tooling bans, and would import claims that are false here: a site/ row (never syncing), uv sync --extra all (upstream defines only the anthropic and openai extras), tasks/noop/create-deployment/task.yaml, and "ignore any legacy pkg/" when there is no pkg/. The repo map and skills index are worth having, so this is a refresh that keeps the upstream rules section and grafts a corrected map on top.

Remaining work

#	Unit	Paths	Gated on
1	bastion docs	docs/components/bastion.md, tf/prebuilt/bastion/	open as #135
2	package routers	devops_bench/AGENTS.md, CLAUDE.md	nothing
3	skill symlinks	.claude/skills/* (8 links)	#124, #126
4	root AGENTS.md refresh	AGENTS.md	#124, #125, #126

On 1: adapted rather than copied. The gke-labs original made a Google corp internal SSH hostname the primary access path, pointed at a secret-rotation task that does not exist here, and documented uv sync --frozen --extra all when vm-setup.sh:56 has no --extra all. It also lacked the "Parallel agent support" section that run_matrix_legacy.sh:29 cites by name, and the BENCH_VERTEX=1 prerequisite that _matrix_lib.sh:41 points at this doc for.

On 3: 8 links, not 9. migration-prep retires with gke-labs. Worth a maintainer opinion first: .claude/skills/ is tool specific, and while the neutrality rule at AGENTS.md:10 scopes itself to the cloud axis and .agents/skills/ is already merged, adding a vendor tool directory is a policy call rather than a mechanical port.

Resolved: permission-configs

.agents/references/permission-configs/ will not be migrated. Nothing in the harness reads those JSON profiles; they are copy-paste starters for humans configuring their own coding agent, and they pin the behaviour of two third-party CLIs at specific versions, so they are the fastest-rotting docs in the set.

The one live defect was antigravity/agent.py:217, which cited the missing README. #135 fixes that by inlining the fact the comment reached for rather than by bringing the file over.

Worth recording why it went missing, since it was not one person's oversight. The pr-plan split the directory across two units: review-readonly.* in the wave 6 review-skills unit, eval-infra.* plus README.md in the wave 9 eval-run unit. Both units shipped their skills and dropped their permission-configs half, and because neither owned the directory, nobody noticed.

Confirmed nothing to do

site/**, docs/how-to/leaderboard.md, the migration-prep skill, and docs/migration/** retire with gke-labs. tasks/AGENTS.md and .agents/references/harness-capabilities.md are already merged.