@cratis/pi 7.29.0 → 7.30.0

package/package/corpus/skills/cratis-screenplay-toolchain/SKILL.md

@@ -22,16 +22,16 @@ files is one application: always check the folder, never one file of it.
 
 When choosing or upgrading a tool, or checking version-specific capabilities, read `references/versions.md`; it is the only version table, and other skills point to it. For exact diagnostic codes, MCP names/parameters and standalone CLI options, search the large published [references/screenplay-contract.json](references/screenplay-contract.json), pinned by [references/screenplay-contract.version](references/screenplay-contract.version), rather than loading it in full. Locate a diagnostic by its exact `code` (for example `"code": "PLAY0029"`), a tool by its exact `name` (for example `"name": "read-workspace"`), or a command in `cliCommands`; read the matched object for retirement, parameters or options. [references/screenplay-contract-exceptions.json](references/screenplay-contract-exceptions.json) records reasoned exceptions for historical statements; it does not change the current contract.
 
-The standalone pin is Screenplay 4.131.0. CLI 3.46.1 bundles Screenplay 4.130.0,
-Stage 4.52.0 and Cratis.Arc.Screenplay 22.54.0. The single version table records
+The standalone pin is Screenplay 4.135.0. CLI 3.50.0 bundles Screenplay 4.131.0,
+Stage 4.67.0 and Cratis.Arc.Screenplay 22.54.0. The single version table records
 released source evidence and historical probes separately; do not relabel an old
 render/browser result as a probe of the current packages.
 
 Historical screens-release evidence: CLI 3.40.7 / Stage 4.51.1 / bundled
 Screenplay 4.114.0 opened the canonical corpus with `executableReady true`
 and the stdio transcript exposed 37 tools; standalone language 4.122.0 was
-recorded in that vector. These retained results are not a rerun on CLI 3.46.1
-or Screenplay 4.131.0.
+recorded in that vector. These retained results are not a rerun on CLI 3.50.0
+or Screenplay 4.135.0.
 
 ## Ground rules
 
@@ -67,7 +67,7 @@ or Screenplay 4.131.0.
 | Scope/checks | `--scope <address>`, `--check <names>`; a scoped pass is not whole-application success | Discover installed validation options |
 | Reference execution | `screenplay test <root>` or MCP `run-specifications` | Discover bundled MCP capability; target tests are not V4 |
 | MCP | `screenplay mcp <root>`; discover schemas | `cratis screenplay mcp [root]`; registered by `cratis ai install` |
-| Render version boundary | Binder admission is not Stage admission | CLI 3.46.1 passes up to ESM v7 to Stage; newer versions: `CLI-RENDER-004` |
+| Render version boundary | Binder admission is not Stage admission | CLI 3.50.0 passes through ESM v10 to Stage construct admission; newer versions: `CLI-RENDER-004` |
 
 Read `references/versions.md` when you need the exact messages, exit codes or the MCP roots bug.
 
@@ -108,9 +108,16 @@ changes with the root folder name.
   older Stage probes. Current CLI admits v7 to planning, but its v7 corpus gets
   Stage generated-value/response refusals `STAGE-ESM-028`/`029`, not a blanket
   compiler refusal. Run admission before claiming a particular model renders.
-- **Event sources, streams and routes** bind as ESM v8 at 4.125.0; CLI 3.46.1
-  render refuses versions above v7 (`CLI-RENDER-004`). Operations and exact numeric
-  mode remain authorable/unadmitted. Details: `references/sources-and-streams.md`.
+- **Event sources, streams and routes** bind as ESM v8 at 4.125.0.
+  CLI 3.50.0/Stage 4.67.0 reaches construct admission through v10, not blanket
+  rendering. Operations and exact numeric source mode remain unadmitted.
+  Details: `references/sources-and-streams.md` and `references/versions.md`.
+- **Released v9/v10 and published v11:** public contracts and direction select v9;
+  reaction identity, production overrides and observer filters select frozen v10;
+  qualifying retained non-route Double literals select v11 at 4.135.0.
+  Composite view keys remain authoring-only (PLAY0268, #599), while one explicit
+  `key` binds. Read `references/production-routes-and-filters.md` and read-surface
+  `references/named-keys.md`; version freeze and numeric boundaries: `references/versions.md`.
 
 - **Caller/compliance metadata** at 4.127.0: `$identity` aliases caller built-ins;
   additional identity details are metadata and executable reads still refuse.
@@ -157,8 +164,10 @@ Read [references/diagnostics.md](references/diagnostics.md) when a PLAY, STAGE o
    still walk lineage. See diagnostics for editor versus C#-only checks.
 6. Without reaction `runs as` an invoke is caller-less. Declare its trusted role
    (ESM v10), keep the gate, and reference-test; CLI/Stage support is separate.
-7. Read-model identity is one `query XById => RM optional` with `by xId XId`, and the identifier equal to the
-   projection's key (see trap 12); never `identifier` on a read model.
+7. Mark read-model identity with trailing `key`, not `identifier`. Otherwise single-instance
+   queries must agree on `by`; only with none and an admitted list query can `*Id`
+   inference run. Queryless views need `key` (read-surface `references/named-keys.md`).
+   Align projection keys. Multipart keys remain PLAY0268 (#599).
 8. Projection `key` routes only on `from`; joins never create; `all` is per source.
 9. `null` only for optional read-model properties in specifications.
 10. `then` events are exhaustive and ordered; after `when append` they list only what followed.

package/package/corpus/skills/cratis-screenplay-toolchain/references/cheat-sheet.md

@@ -12,7 +12,18 @@
 - PDL quick reference (most forms are compiled in `pdl-example.md` or `cheat-sheet-example.md`; `remove via join` and `$eventContext.occurred` are not)
 - Specification forms
 
-Current pins: standalone Screenplay 4.131.0 / CLI 3.46.1; `versions.md` is the
+Released boundary forms: `public event X`, `event X from "store"`, Translate
+`direction inbound|outbound`, event-target `projection/reducer P => PublicEvent`,
+and capture `source events` with `from ForeignEvent` select v9. Read
+[public contracts](../../cratis-screenplay-automations-and-translations/references/public-events-and-direction.md).
+View properties use trailing `key`; multipart `by` query/read blocks remain
+PLAY0268 (#599), not v10. Read [named keys](../../cratis-screenplay-read-surface/references/named-keys.md).
+Production `stream Source.Stream` overrides and reaction/reducer `from Source[.Stream]`
+select released v10: [routes and filters](production-routes-and-filters.md).
+Qualifying non-route Double literals select published v11 at 4.135.0;
+`numbers exact` does not bind. See `versions.md` for freeze and numeric boundaries.
+
+Current pins: standalone Screenplay 4.135.0 / CLI 3.50.0; `versions.md` is the
 single table. Compile evidence below keeps its historical tool labels.
 
 The syntax lives in compiled example files next to this one (each is a Markdown file holding

package/package/corpus/skills/cratis-screenplay-toolchain/references/diagnostics.md

@@ -4,6 +4,8 @@
 
 - Warnings that hide defects (always validate with `--warnings-as-errors`)
 - Source reference and identifier checks
+- Public events and translation direction
+- Named keys, production routes and observer filters
 - Caller identity, compliance and routes
 - Specification metadata, callers, cases and locators
 - Guarded interaction diagnostics
@@ -49,6 +51,53 @@ At Screenplay 4.127.0 these are V1 source checks, not binding-only gaps:
 
 Legacy compliance spellings (`@pii`/`@sensitive`) do not evade PLAY0515.
 
+## Public events and translation direction
+
+Current at Screenplay 4.135.0; all are errors. These constructs bind as released
+ESM v9, except public/foreign imports without local shapes (PLAY0268).
+
+| Code | Meaning / fix |
+| --- | --- |
+| PLAY0607 | A command produces a public event; move publication to outbound Translate |
+| PLAY0608 | Local public production outside explicit outbound Translate |
+| PLAY0609 | Outbound translation has zero or several local public event types; repeated instances of one type count once |
+| PLAY0610 | Foreign public consumption outside explicit inbound Translate |
+| PLAY0611 | Outbound consumes a public or foreign event; consume private local facts |
+| PLAY0612 | Inbound produces a public or foreign event; produce private local facts |
+| PLAY0613 | Foreign public event produced locally; translate to a private event |
+| PLAY0614 | Public metadata without explicit direction; typed repair declares inbound/outbound only when exactly one direction fits |
+| PLAY0615 | Outbound contains an external-data capture |
+| PLAY0616 | Explicit inbound consumes private or local events instead of public foreign events |
+| PLAY0617 | Outbound produces a private event instead of its one local public type |
+| PLAY0618 | Event-target projection/reducer outside explicit outbound Translate |
+| PLAY0619 | `source events` capture outside explicit inbound Translate |
+| PLAY0620 | Missing, malformed or repeated `from <Event>` in `source events` |
+
+Only PLAY0614 in this range has a repair. Legacy directionless translations
+without public metadata stay inbound. PLAY0027 also covers malformed, repeated
+or non-Translate direction. Repair discovery uses `repair-capabilities`, workspace
+`repairs`, then revision-checked `propose-repair`; do not guess a direction.
+See automations-and-translations `references/public-events-and-direction.md`.
+
+## Named keys, production routes and observer filters
+
+| Code | Severity | Meaning / fix |
+| --- | --- | --- |
+| PLAY0660 | E | Invalid top-level read-model key owner/modifier/type; multipart parts must be scalar; no repair |
+| PLAY0661 | E | Missing single-instance lookup parts; repair **command reads only** if every missing part has one same-named compatible source, preserving authored mappings and refusing ambiguity |
+| PLAY0662 | E | Invalid block/shape, duplicate or unknown part, incompatible/optional/collection/literal read source; block needs at least two distinct parts; no repair |
+| PLAY0663 | E | Route on reaction/refusal-branch production; only command event productions override routes |
+| PLAY0664 | W | Override repeats complete command route; typed repair removes the redundant override |
+| PLAY0665 | E | Invalid/duplicate/child-bearing/unresolved source/stream filter or filtered reaction with a non-event trigger |
+| PLAY0666 | W | Filter excludes all statically known effective producer routes; C# only, handlers/foreign origins suppress it |
+
+Queries and trigger reads have no PLAY0661 repair. Composite view keys, query
+blocks and their fixtures remain PLAY0268 (#599), while one explicit key binds
+byte-identically to inference. Fixtures missing any part report PLAY0351.
+Overrides/filters select released ESM v10; malformed routes also use PLAY0504.
+Read read-surface `references/named-keys.md` and
+[production routes and filters](production-routes-and-filters.md).
+
 ## Caller identity, compliance and routes
 
 Source authority: v4.127.0 `diagnostics.md`, `identity.md`, `concepts.md`,
@@ -263,9 +312,12 @@ Report each as `code file:line one-line meaning`; never paste more than about 30
 
 ## Render admission (V5): `STAGE-*`, `CLI-RENDER-*`, `STAGE-CRATIS-*`
 Full table with causes: `renderable-subset.md`. The Stage 4.24.x rows below
-retain historical source/probe evidence. Current CLI 3.46.1 admits up to ESM v7
-for Stage planning; above that is CLI-RENDER-004. Its v7 corpus is refused by
-STAGE-ESM-028 (generated values) and -029 (responses), not the old v7 version gate.
+retain historical source/probe evidence. Current CLI 3.50.0/Stage 4.67.0 admits
+through v10 to construct checks; above it is CLI-RENDER-004 (direct Stage:
+STAGE-ESM-016). Publication STAGE-ESM-032, foreign facts/event captures 033,
+reaction identity 034, reaction filters 035 and production overrides 036 remain
+refused; reducer filters render. Previous CLI 3.46.1 admitted through v7; its
+v7 corpus received STAGE-ESM-028/029, not the older v7 version gate.
 Codes in the historical snapshot:
 | Code | Meaning |
 |---|---|

package/package/corpus/skills/cratis-screenplay-toolchain/references/doc-contradictions.md

@@ -1,9 +1,12 @@
 # Documentation contradictions and which side to trust
 
-Current pins are Screenplay 4.131.0 / CLI 3.46.1 (`versions.md`). This is a
+Current pins are Screenplay 4.135.0 / CLI 3.50.0 (`versions.md`). This is a
 **historical** contradiction inventory, not a claim that all listed defects still
 exist. Current grammar documents exact numbers and free description placement;
-sources/routes bind as ESM v8; PLAY0515 is a source error; CLI v7 reaches Stage.
+sources/routes bind as ESM v8; PLAY0515 is a source error; CLI admits through
+v10 to Stage construct checks. At `v4.135.0:Documentation/screenplay/interoperability.md:133–137`
+v11 is still labeled "claimed, unreleased"; Versions.cs admits it and decision
+0066 freezes it on package publication. The corpus follows source and 0066.
 
 At v4.127.0 `concepts.md` links the shipped purpose declarations/checks/record
 but its final identifier section still calls them later phases. `purposes.md`,
@@ -40,11 +43,11 @@ read from source or documentation.
 | 15 | literal keys | `key literal "global"` vs `key "global"` | both compile; prefer `literal` |
 | 16 | query admission | `D/queries.md:74` now says live, filtered, scoped and performer queries are not admitted | the binder also rejects collection queries and a missing `by`, which stay undocumented [probed] |
 | 17 | `@pii` | `D/concepts.md:3,33` "Chronicle applies `@pii` and `@sensitive` rules automatically" | the binder rejects any compliance attribute (PLAY0268); keep it, report V3 blocked. `@sensitive` means an operational secret (`[Encrypted]` + `[NotAudited]`; Screenplay decision 0034); the pinned tools (standalone 4.68.0, bundle 4.66.0) do **not** report `PLAY0515` (`@pii` from 4.69.1, `@sensitive` from 4.84.1): there only Chronicle catches either attribute on an event-source identifier, at build time of the generated code (CHR0034 for `@pii`, CHR0052 for `@sensitive`) |
-| 18 | read-model identity | `D/readmodels.md:32` "from the keyed query" | the `by` name must also equal a read-model property (the doc still omits it) |
+| 18 | read-model identity | `D/readmodels.md:32` "from the keyed query" | at 4.135.0 explicit `key` wins; else single-instance queries agree on one read-model `by` property; only with none and an admitted list query does conventional `*Id` inference run (collection-key exclusions: read-surface `references/named-keys.md`). Queryless views need explicit `key` |
 | 19 | `$strings` constraint messages | `D/constraints.md:31` vs `D/internationalization.md:55` | the compiler keeps the key; realization localizes |
 | 20 | composite key braces | optional in the EBNF; both forms in docs | both fine |
 | 21 | counters list | `D/projections/index.md:54` lists only increment and decrement | `count` exists too [probed] |
-| 22 | ESM version allocation | older text and decisions 0023 and 0024 give exact numbers, operations, streams and reads fixed numbers (v7 to v11) | use actual released binder selection: v7 generated values/responses, v8 routing, v10 reaction identity at 4.125.0; operations and exact numbers remain unadmitted. Never infer current admission from older proposed allocations |
+| 22 | ESM version allocation | older text and decisions 0023 and 0024 give exact numbers, operations, streams and reads fixed numbers (v7 to v11) | use actual released binder selection: v7 responses, v8 routing, v9 public boundaries, v10 identity/routes/filters, v11 qualifying retained non-route Double literals at 4.135.0; operations and `numbers exact` source mode remain unadmitted. Never infer current admission from older proposed allocations |
 | 23 | claim conditions | the condition grammar lists `==` | claims need `matches` (PLAY0120) [probed] |
 | 24 | `numbers exact` | released in 4.64.0 as syntax only, but absent from `D/grammar.md`; documented only in `D/diagnostics.md` (PLAY0508 to PLAY0513) | the compiler: it parses, never binds (PLAY0268, "not admitted by any supported executable model (ESM) version yet"), PLAY0001 on older compilers [probed] |
 | 25 | command `concurrency` | `D/commands.md:609` says the executable model "does not bind the `concurrency` block yet" | the binder reports PLAY0271 as an **error**, not a silent skip (`SemanticModelBinder.Commands.cs:32-38`) |

package/package/corpus/skills/cratis-screenplay-toolchain/references/executable-subset.md

@@ -6,15 +6,17 @@
 - Admitted on both compilers
 - Admitted from Screenplay 4.61 (ESM v6): standalone tool and cratis 3.28.2 or later
 - Generated values and responses (ESM v7): standalone 4.68.0 or later only
+- Released public boundaries and observer routes
 - Code attachments (what binds, what never does)
 - Refused (code, reason): fix, or record as a mode gap
 - Not refused, but do not rely on it
 - Never do this to reach V3
 
-Current pins are Screenplay 4.131.0 / CLI 3.46.1 (`versions.md`). Detailed
+Current pins are Screenplay 4.135.0 / CLI 3.50.0 (`versions.md`). Detailed
 4.66.0/4.68.0 binder probes below retain their historical labels. Current source
-admits sources/streams/routes as ESM v8 and policy negation as ESM v7; operations,
-exact numbers and reaction refusals/redelivery remain unadmitted. Use the actual
+admits routes as ESM v8, public/direction constructs as v9, identity/overrides/filters
+as v10 and qualifying non-route Double literals as v11. Operations,
+`numbers exact` source mode and reaction refusals/redelivery remain unadmitted. Use the actual
 binder before promoting an older probe to a current capability claim.
 
 What the binder admits, and what it refuses with which code. The answer depends on the
@@ -66,10 +68,15 @@ Authority: v4.127.0 `context.md`, `identity.md`, `concepts.md`, `events.md`, `pu
   <commandProperty>`.
 - `constraint ... unique <prop> on <Event>`. Admission is separate from the open Chronicle
   durability defects (`versions.md`): never treat admission as proof of uniqueness.
-- A `readmodel` with one unambiguous key: one or more keyed queries `query XById => RM optional`
-  in its slice, all using the same `by xId XId` property, whose name equals a read-model
-  property (each with optional `authorize`). Two different `by` properties on one read model are
-  PLAY0268; a list query (`=> RM[]`) is a separate blocker.
+- A `readmodel` with one explicit trailing `key`, or an unambiguous inferred key:
+  single-instance queries in the owning slice agreeing on `by xId XId`; only if
+  none supplies identity and an admitted list query exists does conventional
+  `*Id` inference run (collection-key exclusions: read-surface `references/named-keys.md`).
+  Queryless read models need an explicit `key`. Explicit single keys preserve
+  equivalent inferred ESM bytes. Composite read-model keys, query `by` blocks and
+  their fixtures remain PLAY0268 (#599), not the 4.129.0 authoring delivery's
+  executable admission. Collections and observable delivery bind; filters, scope,
+  performer and context-derived `by` remain separate blockers.
 - One projection per read model: `from`, `every`, `all` (one block per level), `join`,
   `children`, `nested`, `remove with`, `remove via join` (binds; blocks the execution plan at the projection level, see below), `clear with`, counters, `add`,
   `subtract`, `set`, `clear`, variants, and the identifier mapped from the projection's key (`xId = $eventSourceId` only for an event-source key).
@@ -87,7 +94,7 @@ Authority: v4.127.0 `context.md`, `identity.md`, `concepts.md`, `events.md`, `pu
   ...` with an explicit `for`. Without a declared actor, a gated invocation denies.
   On 4.125.0 reaction `runs as system role "<Role>"` supplies the actor and
   selects ESM v10; keep the gate. CLI 3.41.0's older compiler rejected this syntax;
-  current CLI 3.46.1's bundle supports it, but render admission still refuses v10.
+  CLI 3.50.0's bundle supports it, but Stage refuses reaction identity with STAGE-ESM-034.
   Standalone reference execution admits it.
 - Application `trigger` declarations and `when trigger` specifications.
 - `slice Translate` with `capture` (`key`, `map ... translate`, `append ... when x from "a"
@@ -133,6 +140,19 @@ Stage#201), so they bind and run but are not rendered: gap-fill with the model a
 - A reaction-invoked command that reaches generation is `Unsupported(IdentityAllocation)`; response-only commands run
   and discard the response. Generated values give no idempotency, retry or deduplication guarantee.
 
+## Released public boundaries and observer routes
+
+Public/origin events, explicit Translate direction, event-target builders and
+`source events` captures bind as ESM v9 from 4.117.0. Publication folds execute;
+source-event captures and reached opaque event-target reducers return typed
+Unsupported. Public/foreign imports still lack a local shape and refuse PLAY0268.
+See automations-and-translations `references/public-events-and-direction.md`.
+Production overrides and reaction/reducer filters bind and select released v10;
+filters match routed source/stream names only. Read
+[production routes and filters](production-routes-and-filters.md).
+Qualifying retained non-route Double literals bind/reference-execute as v11 on
+4.135.0, unlike `numbers exact`; see `versions.md`.
+
 ## Code attachments (what binds, what never does)
 
 Inline fences (`csharp`, `typescript`, `react`, `html`, `sql`) and `file <path>` attach
@@ -176,7 +196,7 @@ bodies still leave their owner non-executable.
 | `Automation` or `Translate` slice, `reaction`, `capture`, `trigger`; `given clock`, `when clock`, `when trigger`, `when capture` | PLAY0268 | **cratis before 3.28.2 bundles only** (4.60.1); messages in `versions.md` |
 | Unquoted `import Other.Contract` | PLAY0268 | external contract import is not bound |
 | `pii` or `secret` on any concept (also alias/legacy markers) | PLAY0268 | Compliance requires portable data-subject semantics; scopes/qualifiers do not admit it. Secret provider mapping is `[Encrypted]` + `[NotAudited]`, not a bind/render claim |
-| `query` returning a collection (`RM[]`), or without exactly one caller-supplied `by` | PLAY0268 | "must declare one caller-supplied 'by' argument" or "must return one optional read model" |
+| `query` returning a collection (`RM[]`), or without exactly one caller-supplied scalar `by` | PLAY0268 | Current 4.135.0 boundary: composite `by` blocks remain unadmitted (#599); optional scalar snapshot lookup binds |
 | `observable`, `filter`, `scoped to`, `performer` queries | PLAY0268 | "uses delivery, filtering, scope, or implementation behavior outside the first ESM v1 vertical." `observable` goes in the return position (`=> observable RM optional`); as a body line it is PLAY0048 |
 | `contains` or `starts with` in conditions | PLAY0268 | equality and numeric ordering only |
 | Date or DateTime comparison, `today` | PLAY0268 | no runtime date value |
@@ -198,7 +218,7 @@ bodies still leave their owner non-executable.
 | `generated` or `returns` on a compiler before 4.68.0 (4.66.0 and 4.67.0 refuse; 4.66.0 is bundled in cratis 3.28.x) | PLAY0268 | admitted from standalone 4.68.0 (ESM v7), see above |
 | Operations or systems, `numbers exact`, reaction refusals/redelivery | PLAY0268 | not admitted by any supported ESM version; one such construct leaves the **whole** application without an executable model. Event sources/streams/routes instead bind as ESM v8 on the current compiler (`sources-and-streams.md`) |
 | Spec of a gated command or query without `given caller` | PLAY0389 | module and feature gates count |
-| `given` or `then readmodel` missing the key property | PLAY0351 | key is the keyed query's `by` |
+| `given` or `then readmodel` missing key parts | PLAY0351 | explicit `key` marks replace inference; composite fixtures need every part but remain unadmitted (#599) |
 | When-less spec asserting events or errors | PLAY0352 | |
 | `null` in command or event values | PLAY0350 | Chronicle semantics, not only a binder limit: an optional fact is a separate event (nullable event properties are CHR0012) |
 | `for` with no unambiguous destination type | PLAY0273 | |

package/package/corpus/skills/cratis-screenplay-toolchain/references/production-routes-and-filters.md

@@ -0,0 +1,119 @@
+<!-- Copyright (c) Cratis. All rights reserved. -->
+<!-- Licensed under the MIT license. See LICENSE file in the project root for full license information. -->
+
+# Per-production routes and observer filters (released ESM v10)
+
+## Contents
+
+- Command defaults and complete overrides
+- Observer selection
+- Checked source form
+- Admission and evidence
+
+## Command defaults and complete overrides
+
+Named event sources/streams and command routes bind as ESM v8 (verified at 4.125.0).
+A routed command's identifier and known destinations must match the source's nominal
+identifier type (PLAY0504). Allocation uses the generated identifier's type, or
+without one requires a UUID-based source. Composite `streamId` routes map every
+named part exactly once; scalar `streamId T` and `streamId = x` remain valid.
+See [sources and streams](sources-and-streams.md) for declarations and encoding.
+
+A command's plain, conditional or inline event production can carry its own
+`stream Source.Stream` plus scalar or composite `streamId` mappings. This replaces
+the **whole source, stream and stream id**, for that production only. Other
+productions inherit the command route. Overrides do not supply `for`: state the
+destination explicitly and keep its type compatible with the override's source.
+There is no `no stream` override. A payload `stream = value` remains payload.
+Reaction and refusal-branch productions cannot carry routes (PLAY0663).
+
+Resolve the command route and every override eagerly after validation/requirements
+and before generation. An invalid route in a skipped conditional production still
+rejects the command atomically as Contract, leaving no new facts or allocation.
+Mappings accept required nongenerated direct scalar command inputs or literals;
+property paths remain PLAY0268 (#574), generated inputs PLAY0273. A portable
+unkeyed override replaces a keyed command id, never inherits it; a renderer must
+refuse that form if its adapter cannot clear inherited metadata.
+
+## Observer selection
+
+A reaction or reducer has at most one leaf `from Source` or `from Source.Stream`.
+It matches stored source/stream names, not stream ids. Unrouted facts never match;
+without a filter, existing observation behavior is unchanged. Direct reaction
+productions, captures and public publication are unrouted. A filtered reaction may
+only have `when Event` triggers on declared events, not clock/application triggers.
+Filters are not available on projections or captures.
+
+PLAY0665 rejects malformed, duplicate, child-bearing, unresolved/ambiguous filters
+and non-event triggers. PLAY0666 warns when all statically known producers lie
+outside the filter: include effective production overrides in this check. Handler
+commands and foreign origins are unknown and suppress this C#-only warning.
+A filtered opaque reducer returns typed Unsupported when matching given history
+or the when-step reaches a transition; ignoring its body cannot prove absence.
+
+## Checked source form
+
+The override and filter select ESM v10. The second production keeps the command
+default, while Booked is routed to Notes and can trigger Follow:
+
+```screenplay
+concept AccountId : String
+eventsource Account
+  identifier AccountId
+  stream Base
+    streamId String
+  stream Notes
+    streamId String
+module Accounts
+  feature Booking
+    slice StateChange Book
+      command Book
+        accountId AccountId identifier
+        period String
+        stream Account.Base
+          streamId = period
+        produces event Booked
+          for accountId
+          stream Account.Notes
+            streamId = period
+        produces event BookRecorded
+          for accountId
+    slice Automation FollowBooking
+      event Followed
+      reaction Follow
+        from Account.Notes
+        when Booked
+          produces Followed
+      specification RoutedReaction
+        when append Booked
+          for "account-1"
+          stream Account.Notes
+            streamId = "2026-10"
+        then Followed
+          no stream
+```
+
+For a composite override, the child form is `streamId` followed by every
+`part = inputOrLiteral`. Mapping order does not change part correspondence.
+Specification routes describe effective facts, not only the command default.
+Cover inherited versus overridden routes, atomic skipped-route failure, matching
+and wrong source/stream, and unrouted input. Read [specification route forms](sources-and-streams.md).
+
+## Admission and evidence
+
+ESM v10 was first published in 4.125.0 (reaction system identity). Production
+routes and observer filters shipped in 4.129.0. Decision 0066 records that already
+shipped extension as a retroactive exception; all three are now one frozen v10
+contract. A consumer admitting v10 must include all three, not just identity.
+Composite **read-model** keys are separate and remain unadmitted (PLAY0268, #599).
+
+Previous CLI 3.46.1/Stage 4.52.0 refused versions above v7 before planning.
+CLI 3.50.0/Stage 4.67.0 admits through v10 to construct checks: production overrides
+still refuse STAGE-ESM-036 and reaction filters STAGE-ESM-035; reducer filters render.
+A supported version number alone never proves target support or a passing render.
+
+Source: Screenplay `v4.135.0:Documentation/screenplay/{event-sources,readmodels,reactions,diagnostics}.md`,
+decisions 0061–0063/0066 and canonical corpus
+`Source/DotNET/Screenplay.CanonicalCorpus/Corpus/EventRoutes/{production-routes,observer-filters}/source/`.
+Stage `v4.67.0:Source/Rendering.Cratis/Semantics/{SemanticVersionFeatures,SemanticVersionFeatureAdmission}.cs`;
+CLI `v3.50.0:Source/Cli/Commands/Render/RenderedSemanticVersions.cs`.

package/package/corpus/skills/cratis-screenplay-toolchain/references/provenance.md

@@ -28,7 +28,14 @@ is adapted with the agreement of Martin Dilger and Nebulit GmbH.
 
 ## Sources read for facts
 
-- Current pin update: Screenplay `v4.131.0` (`71f3ef37`), published
+- Current public/keys/routes/version update: Screenplay `v4.135.0` (`b4e46130`),
+  unchanged release contract, `Semantics/Versions.cs`, `Documentation/screenplay/{events,slices,captures,readmodels,queries,event-sources,diagnostics,interoperability}.md`,
+  decisions 0049–0051 and 0060–0066. Composite view keys remain PLAY0268 (#599);
+  v11 literal lowering is admitted despite interoperability's unreleased label.
+  CLI `v3.50.0` (`546dea12`) pins Stage 4.67.0 and Screenplay 4.131.0;
+  `RenderedSemanticVersions.cs` and Stage's version-feature admission were read,
+  not executed as a new render/browser vector.
+- Previous pin update: Screenplay `v4.131.0` (`71f3ef37`), published
   `screenplay-contract.json`, `Source/DotNET/Screenplay.Mcp/{McpRevisionDiff,McpWorkspaces.Comparison,McpToolSchemas}.cs`
   and `Documentation/screenplay/mcp/reference.md`; CLI `v3.46.1` (`73578fbf`)
   `Directory.Packages.props`, `RenderedSemanticVersions.cs`, `RenderSettings.cs`,

package/package/corpus/skills/cratis-screenplay-toolchain/references/renderable-subset.md

@@ -7,13 +7,19 @@
 - Ownership, publication and recovery
 - Reading V5
 
-Current pins: standalone Screenplay 4.131.0; CLI 3.46.1 bundles Screenplay
-4.130.0 and Stage 4.52.0 (`versions.md`). CLI admits ESM v7 to Stage planning;
-above v7 is CLI-RENDER-004. The historical v7 canonical-corpus check got
+Current pins: standalone Screenplay 4.135.0; CLI 3.50.0 bundles Screenplay
+4.131.0 and Stage 4.67.0 (`versions.md`). CLI/Stage admit through v10 to construct
+checks, not blanket rendering; above v10 is CLI-RENDER-004 (direct Stage:
+STAGE-ESM-016). v9 publication/foreign facts and v10 reaction identity,
+reaction filters and production overrides still refuse STAGE-ESM-032–036;
+reducer filters render. v8 routes reach specific checks (including routed
+read-model/query replay refusal STAGE-ESM-030). Case tables and v8+ `long`
+whole numbers apply to the current default. Previous CLI 3.46.1/Stage 4.52.0
+admitted only through v7 and applied neither newer rule. The historical v7 canonical-corpus check got
 STAGE-ESM-028/029 for generated values/responses
 (`v3.41.0:Source/Cli.Specs/for_ScreenplayPlanning/when_planning_an_esm_v7_model.cs`).
 The following detailed Stage 4.24.x results are **historical**, not reverified
-4.52.0 claims. Run the bundled renderer before asserting current renderability.
+4.67.0 claims. Run the bundled renderer before asserting current renderability.
 
 Historical sources, all read at tags: Stage v4.24.1 `Source/Rendering.Cratis/Semantics/SemanticSurfaceLedger.cs`
 (an exhaustive map of every ESM member to Rendered, Rejected(code) or Ignored),
@@ -61,7 +67,7 @@ accepted with PLAY0565 information); either still refuses binding. Identity bloc
 purposes and event `subject` are authoring metadata, not provider realization;
 executing identity detail reads still refuses PLAY0268. Current source/stream
 routes are admitted as v8, including composite ids, not the historical binding
-refusal above; CLI 3.46.1 still refuses versions above v7. Never split hand-joined
+refusal above; current CLI 3.50.0 reaches Stage's v8 route checks. Never split hand-joined
 legacy ids or drop protected ids into routing to fit a renderer (PLAY0515).
 
 ## Authoring consequences in renderable mode