docs: add the CTO belt for status and proof

[DealAppSeo]

CTO belt is a now-list: trustshell status and trustshell proof <agentIdOrSlug> --verify. It says to read the CLI lines and not to print a secret, a key, or an env value.

No HeyGen. No live stake. No secret values in the file.

Related to #191.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
trustshell-landing	Ready	Preview	Sep 26, 2026 10:44pm UTC

[strix-security]

Strix Security Review

No security issues found.

Review summary

The PR adds a single Markdown documentation file (skills/belts/CTO.md) describing two CLI commands and cautioning against printing secrets, plus a corresponding test (tests/cto-belt.test.ts) that reads the static documentation file and asserts on its allowed content. Both added files contain no runtime code, no hardcoded secrets, no user-controlled input, and no dangerous sinks. The changes are documentation and test-only additions with no security-relevant impact.

_{Updated for 5bf340c.}

---

Reviewed by Strix
_{Re-run review · Configure security review settings}

[greptile-apps]

Your trial has ended. Reactivate Greptile to resume code reviews.

[strix-security]

The PR adds a single Markdown documentation file (skills/belts/CTO.md) describing two CLI commands and cautioning against printing secrets, plus a corresponding test (tests/cto-belt.test.ts) that reads the static documentation file and asserts on its allowed content. Both added files contain no runtime code, no hardcoded secrets, no user-controlled input, and no dangerous sinks. The changes are documentation and test-only additions with no security-relevant impact.

---

Reviewed by Strix
_{Configure security review settings}