Static scanners falling from 99% to 10% once the package structure gets rewritten is the result that sticks. Install time is just a polite checkpoint on files that can still look clean until they run with the agent's privileges. Runtime auditing is the right class of check, and the paper is frank about the bill path coverage, dead endpoints, missing keys, sandbox timeouts. That maintenance cost rarely makes the marketplace slide when tens of thousands of community skills are already listed and you are already waiting on a build.

Public proof you moved a systems number is the real gate here. Kernel and quant work get authority because someone can measure them, resume theater just burns recruiter time.