Initial commit: VaultMesh Skills collection

Collection of operational skills for VaultMesh infrastructure including:
- backup-sovereign: Backup and recovery operations
- btc-anchor: Bitcoin anchoring
- cloudflare-tunnel-manager: Cloudflare tunnel management
- container-registry: Container registry operations
- disaster-recovery: Disaster recovery procedures
- dns-sovereign: DNS management
- eth-anchor: Ethereum anchoring
- gitea-bootstrap: Gitea setup and configuration
- hetzner-bootstrap: Hetzner server provisioning
- merkle-forest: Merkle tree operations
- node-hardening: Node security hardening
- operator-bootstrap: Operator initialization
- proof-verifier: Cryptographic proof verification
- rfc3161-anchor: RFC3161 timestamping
- secrets-vault: Secrets management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

proof-verifier/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: proof-verifier
+description: >
+  Verify VaultMesh proof artifacts end-to-end: Merkle Forest ROOT.txt, RFC3161 timestamp receipt,
+  Ethereum calldata anchor, and Bitcoin OP_RETURN anchor. Produces status_matrix.json and audit report.
+  Triggers: 'verify proof', 'verify root', 'verify rfc3161', 'verify eth anchor', 'verify btc anchor',
+  'proof archaeology'.
+version: 1.0.0
+---
+
+# Proof Verifier (End-to-End)
+
+This skill verifies a proof chain as far as you provide artifacts:
+
+1) **Merkle Forest**: ROOT.txt + leaf/level files (optional)  
+2) **RFC3161**: request.tsq + response.tsr (optional)  
+3) **Ethereum**: tx hash + receipt (optional)  
+4) **Bitcoin**: txid + node visibility (optional)
+
+It is **read-only**. No funds move, nothing changes on the system.
+
+## Quick Start
+
+```bash
+cd ~/.claude/skills/proof-verifier
+
+# point to a merkle-forest run dir
+export MERKLE_RUN_DIR="$HOME/.claude/skills/merkle-forest/outputs/runs/<run>"
+
+# optional: rfc3161 outputs
+export RFC3161_DIR="$HOME/.claude/skills/rfc3161-anchor"   # where request.tsq/response.tsr live
+
+# optional: eth-anchor outputs
+export ETH_RUN_DIR="$HOME/.claude/skills/eth-anchor/outputs/runs/<run>"
+export ETH_RPC_URL="https://..."
+
+# optional: btc-anchor outputs
+export BTC_RUN_DIR="$HOME/.claude/skills/btc-anchor/outputs/runs/<run>"
+export BTC_NETWORK="testnet"
+
+./scripts/00_preflight.sh
+./scripts/10_plan.sh
+./scripts/11_verify.sh
+
+./scripts/99_report.sh
+```
+
+## Inputs
+
+| Parameter | Required | Default | Description |
+|---|---:|---|---|
+| MERKLE_RUN_DIR | Yes | (none) | merkle-forest run directory containing ROOT.txt |
+| RFC3161_DIR | No | (empty) | directory with request.tsq and response.tsr |
+| ETH_RUN_DIR | No | (empty) | eth-anchor run dir with tx_hash.txt |
+| ETH_RPC_URL | No | (empty) | needed if ETH_RUN_DIR set |
+| BTC_RUN_DIR | No | (empty) | btc-anchor run dir with txid.txt |
+| BTC_NETWORK | No | testnet | mainnet|testnet|signet |
+| OUTPUT_DIR | No | outputs | output dir for verifier run |
+
+## Outputs
+- `outputs/verify_<timestamp>/status_matrix.json`
+- `outputs/verify_<timestamp>/audit_report.md`
+
+## EU Compliance
+EU (Ireland - Dublin), Irish jurisdiction. Verification is local-first; chain lookups are public.