@cratis/pi 7.21.0 → 7.23.0

package/package/corpus/skills/cratis-screenplay-toolchain/references/versions.md

@@ -4,159 +4,121 @@
 
 - Pin set
 - Two compilers, one rule
-- Standalone `screenplay` 4.68.0
-- cratis 3.28.3 and 3.28.2 (Screenplay 4.66.0)
-- Event sources and streams
-- MCP roots bug (4.63.1 and earlier; fixed in 4.63.2; not present in cratis 3.28.2)
+- Commands and exit codes
+- Admission boundaries
+- Historical probes
 - Revisions and descriptions
-- Roadmap items that would change a verdict (all open at the pin; the `@sensitive` meaning, Screenplay#384, and the identifier refusal and C# mapping, Stage#197, are settled in decision 0034; the pinned tools predate `PLAY0515`)
 - Upgrade checklist
 
-Every other Screenplay skill and reference points here instead of repeating a version
-or a tool capability. When a tool changes, update this file first, then re-run the
-example compile gate with both tools (see `verdicts.md`, "Example gate").
-
-Pinned and re-verified against product source on 2026-10-07 (standalone Screenplay 4.68.0); the cratis CLI rows were
-re-probed on cratis 3.28.2 and 3.28.3 (Screenplay 4.66.0 bundled in both). Facts marked
-*source* were read with `git show <tag>:<path>`; facts marked *probed* were run against the
-installed tool.
-
 ## Pin set
 
-| Source | Pin | Notes |
+Use the released versions below. A source-checked capability is not a runtime
+probe; older probes retain their original labels in the other references.
+
+| Source | Pin | Evidence |
 | --- | --- | --- |
-| Screenplay (language, compiler, standalone tool, MCP server) | **v4.68.0** (`79801bf`), published as `Cratis.Screenplay.Tool` 4.68.0 | 4.67.0 changed only the MCP model-root defaults (no project: `Documents/Screenplay`; with a project root: the folder holding the `.play` files, else `Source` or `src`, else `Screenplay`). 4.68.0 admits **ESM v7**: generated command values and responses bind and execute (decision 0026, `Semantics/Versions.cs`; `generated-responses-example.md`); the existing compiled examples were recompiled on 4.68.0 with the same results as on 4.66.0. Most other behaviour below was probed on 4.63.1 (`7769dc4`) and re-checked on 4.66.0. 4.63.1 to 4.64.0 added only the `numbers exact` syntax (binding refuses it), the MCP roots fix from 4.63.2 and fence-registry plumbing. 4.65.0 adds the command named-rule `implementation` block and rejects `implementation` on concept rules, built-in property rules and whole-command `require`/`validate` bodies (a hints-only block binds as PLAY0268). 4.66.0 adds only an experimental VS Code repair bridge. `Semantics/Execution` was unchanged from 4.63.1 through 4.66.0 (historical; 4.68.0 adds generated-value execution). Example compile and the toolchain commands in this skill were run on 4.66.0 |
-| cratis CLI | **v3.28.3** (`8b43fef`, Cratis/cli#260) | Bundles **Screenplay 4.66.0** (ESM v1 to v6; it does not bind ESM v7, so `generated` and `returns` report `PLAY0268` there), **Stage 4.24.2**, `Cratis.Arc.Screenplay` 22.50.5, Chronicle 19.32.0, Fundamentals 7.22.8, Generation 0.18.0 (`Directory.Packages.props` at the tag): otherwise as v3.28.2, so Screenplay behaviour is identical. `cratis render` no longer emits `CLI-RENDER-003`; an evolved event is reported with Stage's `STAGE-ESM-026` (`ScreenplayPlanning.cs` at the tag; probed). v3.28.2 (`141c499`, Cratis/cli#257, closes #253) bundled Stage 4.24.1 and the same Screenplay. The bundled 4.66.0 compiler agrees with standalone 4.66.0 on binding and diagnostics for ESM v1 to v6 but not with standalone 4.68.0 (ESM v7); the two also differ on file-mode imports. v3.28.1 and earlier (including v3.28.0 and the probed v3.27.1) bundled Screenplay 4.60.1 and Stage 4.24.0 (ESM v1 to v5, MCP roots bug, false PLAY0285, Automation/Translate refused at binding) |
-| Stage | **v4.24.2** (`32dcac4`, Cratis/Stage#205, closes #165) | Admits ESM v4: initial-revision events render as before, any evolved event and its dependent scope is refused with `STAGE-ESM-026`, historical typed-context references with `STAGE-ESM-025`; migration rendering is Stage#204 (needs Screenplay#71); v5 and later, including v7 (generated values and responses; tracked in Stage#201), stay `STAGE-ESM-016`; the Host runtime still refuses evolved events. The cratis CLI bundles it since 3.28.3; 3.28.2 bundled 4.24.1 (v4.24.1, `2cadf59`: below). Pins Screenplay 4.66.0, Arc 22.50.5 and Chronicle 19.32.0 for its own build and the sandbox host image (`cratis/chronicle:19.32.0-development`); admits ESM schema v1 to v3 at 4.24.1 (v4.24.0, `fa48546`, pinned Screenplay 4.60.0); bundled by cratis 3.28.2. 4.24.1 adds `STAGE-ESM-024` to the surface ledger only; no admission change. The scaffold profile is unchanged at 4.24.1: rendered apps use .NET 10, **Arc 22.25.0**, **Chronicle 19.8.1** and a React/Vite frontend scaffold (Components 4.14.0, Scene 4.2.0) |
-| Arc | **v22.50.5** (`eefd098`) | `[ExecuteCommandsAsSystem]` since v20.56.0; `[ProtectedDecision]` and `DecisionRead<T>` since v22.39.0. A Stage-rendered application is on 22.25.0, so `[ProtectedDecision]` is **not** available there |
-| Chronicle | **v19.32.0** (`f17a2ff`) | CHR0012 (`EventTypeShouldAvoidNullableProperties`) and CHR0034 (`PiiOnEventSourceId`) exist. Open runtime defects at v19.32.0: #3744 (unique claims not settled by the store on SQL and InMemory), #4123 (constraint index updates run after commit and fail silently), #4131 (composite unique constraints collide when a component contains the separator) |
-
-Install or update the standalone tool: `dotnet tool update -g Cratis.Screenplay.Tool`
-(first install: `dotnet tool install -g Cratis.Screenplay.Tool`). Check what is on the
-machine before relying on any row: `screenplay --version`, `cratis --version`, and MCP
-`initialize` -> `serverInfo.version`. A stale `cratis` earlier on `PATH` (for example a
-global `dotnet` tool) shadows a newer one; confirm with `which -a cratis`.
+| Screenplay language, standalone tool and MCP | **4.127.0** (`e70435a4`) | Released tag `v4.127.0`; installed `screenplay --version`; changed identity/compliance examples compiled |
+| cratis CLI | **3.41.0** | Released tag `v3.41.0`; installed `cratis --version` |
+| Screenplay bundled by CLI | **4.114.0** | CLI `v3.41.0:Directory.Packages.props` |
+| Stage bundled by CLI | **4.51.3** | Same file; the CLI's runtime image follows its Stage package version |
+| Cratis.Arc.Screenplay bundled by CLI | **22.54.0** | Same file; this is the generator package, not a blanket rendered-app dependency pin |
+| Chronicle / Fundamentals bundled by CLI | **19.32.0 / 7.22.8** | Same file |
 
-## Two compilers, one rule
+Check the actual executable before relying on this table: `screenplay --version`,
+`cratis --version`, MCP `initialize` → `serverInfo.version`. An older executable
+on PATH can shadow a newer install; inspect `which -a cratis`.
 
-| | Standalone `screenplay` | `cratis screenplay ...` |
-| --- | --- | --- |
-| Version | 4.68.0 (this pin) | 3.28.3 or 3.28.2, bundling Screenplay 4.66.0 (3.28.1 and earlier bundled 4.60.1) |
-| ESM admitted by the binder | v1 to v7 (v6: clocks, application triggers, captures, reactions, Automation and Translate slices; v7: generated command values and responses) | v1 to v6 (3.28.3 bundles 4.66.0, so `generated` and `returns` fail binding with `PLAY0268`), the binder of 4.66.0 (probed on 3.28.2: the Automation, Translate and capture examples of this corpus are `executableReady` over `cratis screenplay mcp`) |
-| `numbers exact` | syntax parses; binding refuses (PLAY0268, `executableReady: false`). Absent from the grammar page; documented only in `diagnostics.md` (PLAY0508 to PLAY0513) | same (probed on 3.28.2; 3.27.1 reported PLAY0001 "Unexpected 'numbers'") |
-| Cascade specs (a command spec listing events a reaction appends) | compiles | compiles on 3.28.2 (probed); before 3.28.2 reported a **false PLAY0285** (cli#242, still open on GitHub at the time of writing) |
-| Imports in file mode | follows imports | still ignores imports, reports false unknown-name warnings (PLAY0165, cli#244, open; probed on 3.28.2): validate the folder |
-| Used for | V1, V2, V3; MCP | `render`, `screenplay generate`, `prologue`, `run`; V1, V2 and V3 as well, with its bundled 4.66.0 compiler (cratis 3.28.3), which lacks ESM v7 that standalone 4.68.0 admits |
-
-**Routing rule.** With cratis 3.28.2 or later both tools compile and bind the same
-models up to ESM v6 (the cratis bundle is Screenplay 4.66.0, the standalone pin 4.68.0), so either gives V1 to V3 for models up to v6; a model with generated values or responses (ESM v7) binds only with the standalone tool. Prefer the standalone tool when it is installed (file mode
-follows imports); `cratis` is the route for rendering (V5), generation and Prologue. Projects
-set up by `cratis ai install` register `cratis screenplay mcp`, which runs the bundled
-compiler: on cratis 3.28.1 or earlier (all releases before 3.28.2) that is 4.60.1 and lags (ESM v5, false PLAY0285,
-roots bug), so read `cratis --version` first. **Name the tool and its version with every
-verdict**; a verdict from one tool does not carry to the other when their versions differ.
-
-### Exact messages that tell the tools apart
-
-Only binding (MCP or `render`) prints these; neither `screenplay <folder>` nor
-`cratis screenplay validate` binds. *source*: `Semantics/Versions.cs`,
-`SemanticModelBinder.Structure.cs`, `SemanticModelBinder.SliceMembers.cs`,
-`SemanticModelBinder.Specifications.cs`.
-
-| Construct | cratis before 3.28.2 (Screenplay 4.60.1) reported (PLAY0268) | 4.66.0 to 4.68.0, standalone and cratis 3.28.2 |
-| --- | --- | --- |
-| Automation or Translate slice | `Slice '<name>' of type '<type>' is not admitted by ESM v1.` | binds as ESM v6 |
-| Reaction | `Reaction '<n>' requires portable occurrence and effect semantics.` | binds |
-| Capture | `Capture '<n>' requires a portable compiled CDL plan.` | binds |
-| Generated property, `returns` response, generated fixture or `then returns` | `PLAY0268` | `PLAY0268` on 4.66.0 and 4.67.0 (so on every cratis 3.28.x bundle); binds as ESM v7 from 4.68.0 (standalone only) |
-| Clock, trigger or capture specification | `... which the executable model does not admit yet - clocks, application triggers and capture records are proposed for ESM v6 in decision 0022.` | binds |
+## Two compilers, one rule
 
-The substring "is not admitted by ESM v1" still appears on 4.66.0 for constraints,
-expressions and projection blocks that the binder cannot represent, so that text alone does
-not prove an older compiler: read the construct it names. A v6 model that still fails binding
-on 4.66.0 names a different construct, for example a reaction that reads a view before
-producing directly (decision 0006).
+Standalone Screenplay 4.127.0 and the CLI's 4.114.0 bundle are different releases.
+Prefer standalone for the current language checks; CLI owns generation, Prologue
+and rendering. Name the tool/version with every verdict. No verdict transfers
+between differing compilers without checking the same inputs there.
 
-## Standalone `screenplay` 4.68.0
+A folder compiles as one application. A standalone file includes its imports,
+not unimported siblings. Keep the application root as input for scoped checks.
+Do not treat a clean fragment or scoped result as whole-application success.
 
-| Fact | Value | Evidence |
-| --- | --- | --- |
-| V1 command | `screenplay <file.play or folder> --warnaserror --no-color`. No `validate` verb, no JSON output. Text lines `file(line,col): severity PLAYnnnn: message` and a summary `N file(s) compiled - E error(s), W warning(s)` | `--help`, probed |
-| Exit codes | 0 pass; 1 on errors, on warnings with `--warnaserror`, or on a missing path. Warnings without `--warnaserror` exit 0; information never fails. **An empty folder prints "No .play files found beneath ..." and exits 0**: check the summary's file count | probed |
-| File versus folder | file mode follows imports (`app.play` importing `Shared/*.play` compiled 2 files). A folder is one application | probed |
-| MCP | `screenplay mcp <model-folder>` (fixed root) or `screenplay mcp` (dynamic root). Protocol `2025-06-18`; 29 tools (30 on hosts that advertise the MCP-Apps UI extension: adds `visualize-model`). Needs `notifications/initialized` before tool calls (otherwise -32600 "Initialize and send notifications/initialized before using tools."). Refuses symlinked paths ("Symbolic links and reparse points are not admitted"): pass a physical path (on macOS `/tmp` is a symlink) | source `McpToolCatalog.cs`, `McpConnection.cs`; probed on 4.63.1 |
-| `read-workspace` views | `documents`, `semantics`, `eventContracts`, `diagnostics`, `executable-diagnostics`, `implementation-requirements`, `handler-intents`, `source-map`, `typed-contexts`, `executable-model`, `repairs`, and the event-source, event-stream and command-route views. `executable-model` returns `available:false` unless the model binds; when it binds it carries `modelRevision` (`rev1:<sha256>`), `languageVersion`, `semanticVersion` and `attachmentManifestRevision` | source `McpToolSchemas.cs`, `McpWorkspaces.Reading.cs` |
-| Empty root | `state: "empty"`, `authoringAccepted: true`, PLAY0289 | probed |
-| Pin of the roots bug | fixed (from 4.63.2); see "MCP roots bug" below | source `McpConnection.cs` |
+MCP server launch: `screenplay mcp <model-root>` or
+`cratis screenplay mcp <model-root>`. Discover `tools/list`, views and schemas
+rather than counting tools. Connection, worktree switching and root-state
+conflicts: `cratis-screenplay-model-authoring`.
 
-## cratis 3.28.3 and 3.28.2 (Screenplay 4.66.0)
+## Commands and exit codes
 
-| Fact | Value | Evidence |
+| Layer | Route | Verdict |
 | --- | --- | --- |
-| V1 command | `cratis screenplay validate <folder> --warnings-as-errors -o json-compact` | `--help`, probed |
-| Exit codes | 0 pass; 5 errors (or warnings with `--warnings-as-errors`); 1 path missing **or no `.play` files**. Information never fails | probed |
-| Output | JSON lines: a `diagnostics` array with `severity`, `code`, `message`, `location`, then either `{"path","files","diagnostics":N}` (N counts information too) or an error object. A passing folder run prints the file count | probed on 3.28.2 |
-| File versus folder | file mode compiles one document and **ignores imports** (cli#244). Validate the folder | probed |
-| MCP | `cratis screenplay mcp <root>`, or no argument inside a project: the server locates the model itself (existing `.play` files, else `Source/`/`src/`, else a new `Screenplay/` folder) unless `.cratis/ai.json` sets `mcpServers.screenplay.root`; 29 tools and the same `read-workspace` views as the standalone tool, including `event-sources`, `event-streams` and `command-routes` (probed on 3.28.2; the 4.60.1 bundle had no such views). Fails fast only when an explicitly configured root does not exist | source `ScreenplayMcpRoot.cs:20-37` |
-| Render | `cratis render` binds with the bundled compiler first, then the bundled Stage (4.24.2 since 3.28.3; 4.24.1 in 3.28.2) admits; a v6 model reaches Stage and is refused whole with `STAGE-ESM-016` (probed on 3.28.2), and an evolved event is `STAGE-ESM-026` with no `CLI-RENDER-003` (probed on 3.28.3). See `renderable-subset.md` | source, probed |
-| `prologue interpret` | no `--no-llm` flag; LLM resolution and `screenplay generate` flags were checked on 3.27.0 and are unchanged in 3.28.2 (`--help` shows no `--no-llm`; the Prologue and Screenplay generate sources have no diff between the tags) | source, probed |
-
-## Event sources and streams
-
-Declared since Screenplay v4.62.0 but not bound: PLAY0268, "not admitted by any supported
-executable model (ESM) version yet" (Screenplay 4.68.0, `SemanticModelBinder.CommandProductions.cs`; the
-highest admitted version is v7). Stage 4.24.0 and 4.24.1 admit ESM v1 to v3 and refuse with
-STAGE-ESM-016; Stage 4.24.2 admits v4 and refuses v5 and later (v6 reactions and clocks, v7 generated values and responses) with STAGE-ESM-016 (4.24.1 also records the v6 members as rejected `STAGE-ESM-024` in its ledger; users still see STAGE-ESM-016). Details and trackers: `sources-and-streams.md`.
-
-## MCP roots bug (4.63.1 and earlier; fixed in 4.63.2; not present in cratis 3.28.2)
-
-A dynamic-root server (`screenplay mcp` with no folder) asks a roots-capable client for
-`roots`, reads the wrong field and replies with an error whose `id` is `null`; real hosts
-treat that as fatal. It happens right after `notifications/initialized`, before any tool
-call, and only when the root is dynamic. **Passing `open-workspace.path` does not avoid
-it.** Avoid it with a fixed root: `screenplay mcp <model-folder>`, `cratis screenplay mcp
-<path>`, or `cratis screenplay mcp` inside a project with `.cratis/ai.json`; or use 4.63.2
-or later. cratis before 3.28.2 bundled 4.60.1, which has the bug, so only the fixed-root
-forms were safe there. Probed on cratis 3.28.2 (Screenplay 4.66.0): with a roots-capable
-client and no fixed root, `cratis screenplay mcp` answers `initialize`, sends a well-formed
-`roots/list` request, and serves `tools/list` (29 tools) after the client replies; no `id: null`
-error appears. A fixed root is still the simplest way to avoid any host differences.
-MCP loop procedure and proposals: `cratis-screenplay-model-authoring`.
+| Source validation | `screenplay <root> --warnaserror --no-color` | 0 clean; 1 reported defects; 2 could not run/invalid arguments or input. `--scope` limits the reported set, not compilation |
+| Completeness | Add `--check <name>[,<name>]` (repeatable) or `--check all` | Opt-in warnings; whole-source errors skip checks, not pass them |
+| CLI source validation | `cratis screenplay validate <root> --warnings-as-errors -o json-compact` | Read producer exit and JSON errors/warnings/file count. Passing source-only probe on CLI 3.41.0: dependencies example, exit 0 |
+| Binding | MCP workspace readiness and `executable-diagnostics` | V2 reads diagnostics; V3 requires binding with no blocking diagnostics |
+| Reference specifications | `screenplay test <root> [--filter <address>] [--format text|json]`, or MCP `run-specifications` | 0 all selected passed; 1 failed; 2 could not run/invalid selection; 3 unsupported or unbound. Counts of zero do not prove coverage |
+| Rendering | `cratis render` | Separate admission, publication, target build and target tests (V5) |
+
+Source validation does not bind or run attached code. Reference execution is
+in-memory and does not run opaque attachments or external services. CLI-derived
+specification IDs need not match persisted MCP identities after renames; use MCP
+for identity-stable selection.
+
+## Admission boundaries
+
+Screenplay `v4.127.0:Source/DotNET/Screenplay/Semantics/Versions.cs` supports schema
+pairs through v10. Generated values/responses and policy negation select v7;
+sources/streams and command/specification routes select v8; reaction
+`runs as system [role "<Role>"]` selects v10 and reference-executes on 4.125.0.
+The checked trusted-actor scenario is in captures-and-reactions
+`references/invocation-identity.md`. CLI 3.41.0's 4.114.0 compiler rejects its
+source with PLAY0137 (validation probe, exit 5). Stage 4.51.3's direct planner
+uses EsmSchemaV7Support and refuses v10 with STAGE-ESM-016; CLI's version gate
+separately refuses above v7 with CLI-RENDER-004. A source construct
+still requires explicit binder/runner/provider admission: operations, exact
+numeric mode and reaction refusals/redelivery remain authorable but unadmitted
+(`PLAY0268`). Never delete those contracts to obtain a green bind.
+
+CLI 3.41.0 `RenderedSemanticVersions.Newest` is **v7**:
+`Source/Cli/Commands/Render/RenderedSemanticVersions.cs`. Models above it get
+`CLI-RENDER-004` before planning/publication. v7 generated values/responses reach
+Stage admission; they are not universally refused until CLI#261. That issue is
+closed. Each unsupported construct still needs a Stage diagnostic, not a silent
+omission or inferred support from package versions.
+
+The renderable-subset and Stage references retain older probes explicitly;
+read them as tested snapshots, not as a claim that Stage 4.51.3 shares every
+4.24.2 limitation. Query the actual bundled renderer before a V5 claim.
+
+At 4.127.0, `$identity` aliases built-in caller paths; declared identity details
+remain metadata and their executable reads report PLAY0268. Bare `pii`/`secret`
+still block binding; `personal` aliases `pii`. Legacy markers are accepted with
+PLAY0565 information, duplicates warn PLAY0653. Event `subject` and processing
+purposes are report-only metadata (PLAY0270); purpose checks/reports do not prove
+lawfulness or enforce retention. See command-surface context/compliance references.
+
+## Historical probes
+
+- Screenplay 4.68.0 admitted v7; CLI 3.28.2/3.28.3 bundled 4.66.0 (v6 at most),
+  Stage 4.24.1/4.24.2. Those old negative v7 probes do not describe CLI 3.41.0.
+- CLI before 3.28.2 bundled Screenplay 4.60.1: false cascade PLAY0285, v6 refusal
+  and dynamic-root initialization bug. The roots bug was fixed in 4.63.2.
+- CLI 3.28.2 file validation ignored imports; this is an old probe, not a current
+  reason to invent missing declarations. Validate the complete root.
+- Older standalone empty-folder probes exited 0. Current validation still needs
+  a nonzero file count, and specification execution needs an expected selection.
 
 ## Revisions and descriptions
 
-- `modelRevision` exists only when the model binds; design-only models have none. It is stable
-  across reopens, but it **changes when the root folder is renamed** and no
-  `.screenplay/identities.json` exists, because the application identity is bootstrapped
-  from the root. A file move changes it only if it changes logical placement or application
-  identity. It is computed from canonical semantic JSON (descriptions and source locations live
-  in the separate source map), so line positions and description edits do not change it. A
-  workspace or source revision can change without a `modelRevision` change. Re-read after every edit.
-- `cratis render` records its own `semanticRevision` in `.cratis-render.json`, computed with
-  the `--name` identity and the bundled compiler. **Never compare the MCP `modelRevision`
-  with a render manifest.** Drift is detected by comparing successive `semanticRevision`
-  values from renders made with the same name and inputs (probed on 3.28.2: the same model
-  rendered as `Marina` and as `Harbour` gives different values). Unverified: whether 4.60.1
-  and 4.66.0 produce byte-identical `rev1` values for the same v1 to v3 model.
-- Source identity for a verdict is the commit plus the digest from
-  the source-identity helper (`cratis-screenplay-modeling-lifecycle` `references/verdicts-and-modes.md` "Source identity"). Keep it apart from the MCP `modelRevision`.
-- `description` and `documentation` never reach rendered code (Stage#178, open).
-
-## Roadmap items that would change a verdict (all open at the pin; the `@sensitive` meaning, Screenplay#384, and the identifier refusal and C# mapping, Stage#197, are settled in decision 0034; the pinned tools predate `PLAY0515`)
-
-Screenplay#377 (run specifications from MCP or the tool), #388 (completeness and lineage
-report), #383 (identity for an `invokes` caller), #379 (`visualize-model` counts reactions); Stage#79 (render Automation and
-Translate slices), Stage#165 (admit ESM v4); cli#242 (false PLAY0285 on the 4.60.1 bundle; fixed in effect by the 4.66.0 bundle but still open on GitHub), cli#243 (`validate --executable`),
-cli#244 (file mode ignores imports), cli#245 (`render --check`). The standalone tool at
-4.68.0 has only the compile command and `mcp` (no `test`; `screenplay --help` checked); the reference runner is library
-only. Until these land, "specifications written" or "bound" is never "specifications
-pass".
+`modelRevision` exists only when binding succeeds; it is canonical semantic
+identity, not source identity. Source positions and report-only metadata can
+change source/workspace revisions without changing it. Persisted catalogs
+preserve assigned identities; do not reconstruct them from names.
+
+A render manifest's `semanticRevision` is a different provenance value, made
+with the render name and bundled compiler. Do not compare it directly to MCP
+`modelRevision`. Compare successive renders with the same identity and inputs.
 
 ## Upgrade checklist
 
-1. `screenplay --version`, `cratis --version`; note whether `cratis` bundles a newer
-   Screenplay (then the routing rule collapses).
-2. Update the pin table, the two-compiler table and the message table above.
-3. Re-run the example compile gate with both tools; re-probe one binding example through
-   MCP.
-4. Check whether a `screenplay test` or `cratis screenplay test` exists (a V4 route).
+1. Read installed versions and released dependency pins.
+2. Check source, binder, reference runner and renderer admission separately.
+3. Compile each changed example; execute specification examples with the
+   reference route. Preserve explicit expected-diagnostic checks.
+4. Re-probe affected capabilities before replacing a historical version label.

package/package/corpus/skills/cratis-screenplay-toolchain/verification.json

@@ -3,21 +3,29 @@
   "input": "Check a Screenplay model folder: which compiler should I run, what do V1 to V3 mean, and what does the cratis CLI do with my Automation slice?",
   "fixtures": [],
   "assertions": [
+    { "kind": "skill-contains", "value": "4.127.0" },
+    { "kind": "skill-contains", "value": "PLAY0653", "file": "references/diagnostics.md" },
+    { "kind": "skill-contains", "value": "PLAY0646", "file": "references/diagnostics.md" },
+    { "kind": "skill-contains", "value": "PLAY0595", "file": "references/diagnostics.md" },
+    { "kind": "skill-contains", "value": "PLAY0652", "file": "references/diagnostics.md" },
+    { "kind": "skill-contains", "value": "PLAY0504 | E", "file": "references/diagnostics.md" },
     { "kind": "skill-contains", "value": "references/versions.md" },
     { "kind": "skill-contains", "value": "PLAY0029" },
     { "kind": "skill-contains", "value": "--warnaserror" },
     { "kind": "skill-contains", "value": "4.68.0" },
     { "kind": "skill-contains", "value": "4.66.0" },
     { "kind": "skill-contains", "value": "references/generated-responses-example.md" },
-    { "kind": "skill-contains", "value": "not admitted by any supported ESM version" },
-    { "kind": "skill-contains", "value": "generated values and responses (ESM v7: Stage refuses it with `STAGE-ESM-016`, tracked in Stage#201)" },
+    { "kind": "skill-contains", "value": "Operations and exact numeric" },
+    { "kind": "skill-contains", "value": "Stage generated-value/response refusals `STAGE-ESM-028`/`029`" },
     { "kind": "skill-contains", "value": "cratis screenplay validate" },
     { "kind": "skill-contains", "value": "cli#244" },
     { "kind": "skill-contains", "value": "`notifications/initialized`" },
     { "kind": "skill-contains", "value": "A handler never binds" },
     { "kind": "skill-contains", "value": "references/sources-and-streams.md" },
-    { "kind": "skill-contains", "value": "STAGE-ESM-016" },
-    { "kind": "skill-contains", "value": "STAGE-ESM-026" },
-    { "kind": "skill-contains", "value": "authorable and validatable" }
+    { "kind": "skill-contains", "value": "CLI-RENDER-004" },
+    { "kind": "skill-contains", "value": "PLAY0514" },
+    { "kind": "skill-contains", "value": "bind as ESM v8" },
+    { "kind": "skill-contains", "value": "PLAY0530/0531", "file": "references/diagnostics.md" },
+    { "kind": "skill-contains", "value": "Editor versus C# verdicts", "file": "references/diagnostics.md" }
   ]
 }

package/package/corpus/skills/cratis-screenplay-ui-composition/references/screen-composition-contract.md

@@ -7,6 +7,7 @@
 
 - Support levels
 - Data context and component bindings
+- Guarded actions
 - Exposed template configuration
 - Forms and columns
 - Packages, icons and template catalogs
@@ -91,6 +92,25 @@ Rules for agents:
   can be targeted by navigation or a dialog route when the runtime contract
   supports it.
 
+## Guarded actions
+
+A label-headed screen action can select one command through authored-order
+`when item.<path> ... execute ...` alternatives. First match wins; last
+`otherwise execute` supplies a fallback, while `otherwise hidden` or omission
+hides an unmatched action. With no item (loading/no selection), always hide it.
+Explicit with-bindings, matching subject fields, form inputs and renderer input
+fill the chosen command in that order. Authorization denial is not another
+selector and never falls through. Refresh if a click-time check changes the
+choice the user saw.
+
+Missing fields are not null; == null matches explicit null only. Guards are
+presentation offers, never access control. Downstream runtime support is separate
+from parsing; do not publish an empty plain action as equivalent behavior.
+The complete checked model and conditions are in
+`cratis-screenplay-read-surface` `references/guarded-actions.md`, grounded in
+Screenplay v4.125.0 `screens.md`. CLI 3.41.0/Stage 4.51.3 reports unsupported
+screen actions with STAGE-SCENE-ACTION-001, not proof of runtime selection.
+
 ## Exposed template configuration
 
 Reusable templates can expose configuration and typed outlets:

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/SKILL.md

@@ -68,7 +68,7 @@ The `.play` model is the source of truth; Stage-managed output is derived from i
 - Hand-written code goes in `Customizations/` (unmanaged), in a separate project, or in
   an explicitly authorized gap-fill for scope Stage cannot render (`cratis-screenplay-render-and-gap-fill`).
 - A customization never makes a rejected model renderable, and never weakens modeled
-  authorization, validation or `@pii` to get past a refusal.
+  authorization, validation or personal-data and secret markers to get past a refusal.
 - Never claim a whole-application result from a subset of the model.
 
 ## Publication and recovery
@@ -133,12 +133,16 @@ Facts that surprise:
 - `cratis render` and `cratis screenplay validate` are different gates: a model can
   validate and still refuse here.
 
-## What Stage 4.24 admits
+## Historical Stage 4.24 admission
 
-A model using `eventsource`, `stream` or command routes is refused (`STAGE-ESM-016`), and
-rendered appends never carry event source type, event stream type or event stream id, so
-Chronicle's defaults apply (Stage#177, #200, #201; Screenplay#407). Gap-fill the routing by
-hand; see `cratis-screenplay-toolchain` `references/sources-and-streams.md`.
+Current pins are standalone Screenplay 4.127.0 / CLI 3.41.0 / Stage 4.51.3.
+Routes bind/reference-execute as v8; reaction `runs as` identity as v10.
+CLI renders through v7 only (CLI-RENDER-004 for newer model versions) and its
+older 4.114.0 parser rejects `runs as` (PLAY0137). Stage 4.51.3's direct planner
+also audits only through v7 (STAGE-ESM-016 otherwise). Source/identity contracts
+stay intact for gap-fill; source acceptance is not target admission.
+
+The following detailed 4.24.x probes are historical, not current pin claims.
 
 Whole-model admission needs ESM schema v1 to v4; v5 and v6 are `STAGE-ESM-016`. Stage 4.24.2 admits ESM v4 (Screenplay compiles a model with evolved events to v4): an event at its initial revision renders exactly as before, but any selected event above the initial revision, and every scope depending on it (a command producing it, a projection or reducer observing it, a specification using it), is refused with `STAGE-ESM-026` and nothing is emitted. A typed-context reference to a historical revision or property identity is refused with `STAGE-ESM-025`. Stage cannot render Chronicle event-type migrations yet (Cratis/Stage#204, which depends on Cratis/Screenplay#71), and Stage's runtime (`cratis run`, the Host) still refuses evolved events, so deliver evolved events as gap-fill. Stage 4.24.1 also lists the ESM v6 members (reactions, captures, application triggers, clock and capture specifications) as rejected `STAGE-ESM-024` in its surface ledger, but the version gate refuses the model first, so a v6 model reports `STAGE-ESM-016` only. The bundled Stage 4.24.2 (cratis 3.28.3) reports an evolved event with `STAGE-ESM-026` only (probed); cratis 3.28.2 bundled Stage 4.24.1 (3.28.1 and earlier: 4.24.0), refused a v4 model with `STAGE-ESM-016` and also reported `CLI-RENDER-003`. The admitted vertical:
 

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/admission.md

@@ -1,4 +1,4 @@
-# Stage 4.24 admission: codes, specification rules and observed refusals
+# Historical Stage 4.24 admission: codes, specification rules and observed refusals
 
 ## Contents
 
@@ -9,6 +9,13 @@
 - Observed refusals
 - Source disagreements (trust the code)
 
+Current pins are in `cratis-screenplay-toolchain` `references/versions.md`:
+CLI 3.41.0 bundles Stage 4.51.3 / Screenplay 4.114.0. It admits through ESM v7
+to Stage planning; above v7 is CLI-RENDER-004. The CLI's v7 canonical-corpus
+planning spec receives STAGE-ESM-028/029 for generated values/responses.
+The detailed 4.24.x source/probe rows below have not been relabeled as current
+runtime verification; run admission on the actual bundled renderer.
+
 Read at Stage `v4.24.0`, re-read at `v4.24.1` and `v4.24.2` (`SemanticCratisAdmission.EventRevisions.cs`, `SemanticEventLineageAdmission.cs`, ESM v4 section of `Documentation/guides/build-renderer-target.md`) (`Source/Rendering.Cratis/Semantics/SemanticSurfaceLedger.cs`, `Documentation/guides/build-renderer-target.md`; 4.24.1 changed only the ledger, dependency pins and the Dockerfile) (`Source/Rendering.Cratis/CratisArtifactRenderPlanner.cs`,
 `Semantics/SemanticCratisAdmission*.cs`, `SemanticSpecificationAdmission*.cs`,
 `PureTransitionAdmission.cs`, `SemanticImplementationAdmission.cs`) and cli `v3.28.2`

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/verification.json

@@ -15,8 +15,8 @@
     { "kind": "skill-contains", "value": "`Customizations/`" },
     { "kind": "skill-contains", "value": "`Stage__Runtime__Engine=semantic`" },
     { "kind": "skill-contains", "value": "`--engine semantic`" },
-    { "kind": "skill-contains", "value": "Stage#177" },
-    { "kind": "skill-contains", "value": "never carry event source type" },
+    { "kind": "skill-contains", "value": "Routes bind/reference-execute as v8" },
+    { "kind": "skill-contains", "value": "CLI-RENDER-004" },
     { "kind": "skill-contains", "value": "STAGE-ESM-024" },
     { "kind": "skill-contains", "value": "`v4.24.2`" },
     { "kind": "skill-contains", "value": "STAGE-ESM-026" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cratis/pi",
-  "version": "7.21.0",
+  "version": "7.23.0",
   "description": "Configuration-aware Cratis AI integration for Pi",
   "type": "module",
   "files": [