Approve the current state of a skill collection and pin it in a signed lockfile, so any later change is detectable. Use after reviewing skills, or when the user wants to baseline what they have installed.