@cratis/pi 7.97.2 → 7.99.0

package/package/corpus/harnesses/copilot/instructions/discoverability.instructions.md

@@ -30,5 +30,12 @@ Readability comes first. If a change for search engines or AI assistants makes a
 
 - Public pages need a canonical link, one `<h1>`, Open Graph tags, valid JSON-LD that describes visible content, a sitemap entry and a `robots.txt` that allows crawling. Add no new `HowTo` or `FAQPage` markup; keep the visible Q&A.
 - `llms.txt` is an optional index. Never claim it improves ranking. See **cratis-llm-friendly-documentation**.
-- Package metadata (`Description`, `PackageProjectUrl`, `PackageTags`, npm `description`, `homepage`, `keywords`) and the README opener use the same definition sentence, and the project URL points at the docs page `https://www.cratis.io/<product>/`.
+- Package metadata uses `Cratis` for Authors and Company. Metadata (`Description`, `PackageProjectUrl`, `PackageTags`, npm `description`, `homepage`, `keywords`) and the README opener use the same definition sentence, and the project URL points at the docs page `https://www.cratis.io/<product>/`.
 - State only facts the repository supports: versions, licenses, limits. The claim gate in `BRAND.md`, `MESSAGING.md` and `SITE.md` still applies.
+
+## Facts and publication guardrails
+
+- Each entity page has one sourced "at a glance" block: verifiable facts only, dated counts; never invent customers, user counts, benchmarks, certifications, prices or competitor comparisons.
+- Adoption claims count downloads per product through entry packages only, including predecessor names for a continuation; no sub-package sums or shared-dependency double counting. Round down to a stated threshold, name the month and registries, never say "users" or "customers".
+- Keep description and duplicate-title lint baselines at 0; never raise a baseline to pass. Preserve product names in rendered titles and enforce the site's `llms.txt` / `llms-small.txt` byte budgets.
+- Structured data uses only public, owner-approved founder/company facts. Community member profiles are `noindex`, with no personal data or `Person` entities in markup; this overrides the public-page indexing default above. Keep shared guidance generic: no private/unannounced integration names, legal entity details or factual counts.

package/package/corpus/rules/discoverability.md

@@ -29,5 +29,12 @@ Readability comes first. If a change for search engines or AI assistants makes a
 
 - Public pages need a canonical link, one `<h1>`, Open Graph tags, valid JSON-LD that describes visible content, a sitemap entry and a `robots.txt` that allows crawling. Add no new `HowTo` or `FAQPage` markup; keep the visible Q&A.
 - `llms.txt` is an optional index. Never claim it improves ranking. See **cratis-llm-friendly-documentation**.
-- Package metadata (`Description`, `PackageProjectUrl`, `PackageTags`, npm `description`, `homepage`, `keywords`) and the README opener use the same definition sentence, and the project URL points at the docs page `https://www.cratis.io/<product>/`.
+- Package metadata uses `Cratis` for Authors and Company. Metadata (`Description`, `PackageProjectUrl`, `PackageTags`, npm `description`, `homepage`, `keywords`) and the README opener use the same definition sentence, and the project URL points at the docs page `https://www.cratis.io/<product>/`.
 - State only facts the repository supports: versions, licenses, limits. The claim gate in `BRAND.md`, `MESSAGING.md` and `SITE.md` still applies.
+
+## Facts and publication guardrails
+
+- Each entity page has one sourced "at a glance" block: verifiable facts only, dated counts; never invent customers, user counts, benchmarks, certifications, prices or competitor comparisons.
+- Adoption claims count downloads per product through entry packages only, including predecessor names for a continuation; no sub-package sums or shared-dependency double counting. Round down to a stated threshold, name the month and registries, never say "users" or "customers".
+- Keep description and duplicate-title lint baselines at 0; never raise a baseline to pass. Preserve product names in rendered titles and enforce the site's `llms.txt` / `llms-small.txt` byte budgets.
+- Structured data uses only public, owner-approved founder/company facts. Community member profiles are `noindex`, with no personal data or `Person` entities in markup; this overrides the public-page indexing default above. Keep shared guidance generic: no private/unannounced integration names, legal entity details or factual counts.

package/package/corpus/skills/cratis-discoverability/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: cratis-discoverability
-description: Run the pre-publish check that makes Cratis content easy to find in search and AI answers without making it harder to read - a docs page, blog post, landing page, README or package metadata (title, description, opening definition, canonical links, entity names, alt text, structured data). Use when about to publish or review content for discoverability, SEO, AEO or GEO, or when writing package descriptions and README openers. Not for page voice and structure (cratis-documentation-writing), llms.txt design (cratis-llm-friendly-documentation), distribution plans (cratis-developer-marketing) or length decisions (cratis-content-length).
+description: Check Cratis content before publishing for search and AI answers without sacrificing readability. Use when reviewing discoverability, SEO, AEO or GEO; writing fact blocks or download claims; editing package/repo metadata; checking docs titles, descriptions or LLM export budgets; or reviewing founder/company JSON-LD and member profile indexing. Not for page voice and structure (cratis-documentation-writing), llms.txt design (cratis-llm-friendly-documentation), distribution plans (cratis-developer-marketing) or length decisions (cratis-content-length).
 license: MIT
 ---
 
@@ -13,13 +13,13 @@ drop the fix and say so.
 
 ## Procedure
 
-1. Name the content type: docs page, blog post, landing page, README or package metadata.
+1. Name the content type: docs page, blog post, landing page, README, package/repo metadata or member profile.
 2. Name the reader's one job and, for docs, the page type (tutorial, how-to, reference, explanation).
-3. Apply the checks for that type below. Fix the draft; do not annotate it.
+3. Apply the checks for that type below, including facts, adoption claims and privacy without waiting for a separate request. Fix the draft; do not annotate it.
 4. For a built site, run the checker and fix errors; warnings are judgment calls to report.
 5. Report what was changed, what was left alone and why.
 
-Read `references/page-checklist.md` for the full per-type checklist and the field lengths.
+Read `references/page-checklist.md` when checking a page, including docs lint baselines and LLM export budgets.
 
 ## Checks by content type
 
@@ -29,7 +29,9 @@ Read `references/page-checklist.md` for the full per-type checklist and the fiel
   definition sentence may follow the opening scenario where it reads naturally. `writing-cratis-docs`
   wins on voice and structure. Product index pages open with the definition sentence.
   Reference pages stay terse: title is the exact name plus its product, no question headings, no
-  intro. Titles are unique across the site and name the product ("Chronicle projections").
+  intro. Titles are unique across the site and name the product ("Chronicle projections"). Keep
+  description and duplicate-title lint baselines at 0; never raise a baseline to pass. Check
+  rendered titles and measure `llms.txt` / `llms-small.txt` bytes against the site budgets.
 - **Blog post.** The title states the topic in the words a reader would search. The intro gives the
   conclusion in two sentences. Show the named author and date, add `lastUpdated` only for real
   changes, link the owning docs pages with `https://www.cratis.io/...`, keep `description` apart
@@ -41,7 +43,19 @@ Read `references/page-checklist.md` for the full per-type checklist and the fiel
   nouns, with no logo-only or metaphor opener. Links are absolute; link the docs page.
 - **Package metadata.** One sentence naming what the package is and which Cratis product it belongs
   to, identical to the README opener. `PackageProjectUrl` and `homepage` point at the docs page, not
-  only at GitHub. Read `references/package-metadata.md` for the field map.
+  only at GitHub. Read `references/package-metadata.md` when editing package fields, GitHub About,
+  Docker Hub descriptions, analyzer help links, template messages or README footers. Check these
+  surfaces together; Authors and Company are `Cratis`.
+
+## Fact blocks and adoption claims
+
+For each entity page, assemble one sourced "at a glance" block from verifiable facts, with dates
+for counts. Read `references/facts-and-adoption.md` when selecting facts or calculating downloads:
+identify entry packages and continuation predecessors, exclude sub-packages and overlapping
+shared dependencies, round down to a stated threshold, and publish the month and registries.
+Downloads are never users or customers. Omit unsupported claims instead of inventing customers,
+user counts, benchmarks, certifications, prices or competitor comparisons. Keep shared guidance
+generic; do not copy private integration names, legal entity details or factual counts into it.
 
 ## Names
 
@@ -53,7 +67,10 @@ Do not invent a name, URL, maturity word or claim that the references do not sta
 
 Describe only what is visible on the page, one `@graph` per page, stable `@id`s. Add no `HowTo` and
 no new `FAQPage`. Read `references/structured-data.md` for the patterns and what each page type
-gets. Do not name people in structured data.
+gets. Use only public, owner-approved founder/company facts. Do not name other people in
+structured data; never add personal data or `Person` entities for community members. Member
+profiles are `noindex`; check profile and CV routes, rendered robots directives and JSON-LD.
+Without approved public founder facts, reference the organization by `@id` instead.
 
 ## Checking a built site
 

package/package/corpus/skills/cratis-discoverability/references/facts-and-adoption.md

@@ -0,0 +1,49 @@
+# Fact blocks and adoption numbers
+
+## At a glance
+
+1. Identify the entity the page defines. Add one visible "at a glance" block per entity page,
+   near its definition, not repeated promotional blocks throughout the page.
+2. Select only verifiable facts: what it is, license, public status, supported capabilities and
+   approved public company/founder facts. Attach a source to every fact; counts need both a
+   source and an as-of month. A date alone is not evidence.
+3. Check the source supports the exact wording. Distinguish vendor claims from independent
+   measurements; repository creation is not a founding date, and contributors are not employees.
+4. Omit anything unsupported. Never invent customers, user counts, benchmarks, certifications,
+   prices or competitor comparisons. Do not turn an unpublished term into a public promise.
+
+A minimal block can say `License: MIT ([license](<public source URL>))` after checking that
+source. Add a download row only after the calculation below. Keep the dated calculation and
+source links in the owning project's evidence, with one maintained source of truth for reused
+claims. Shared corpus guidance must not copy factual counts, legal entity details or names of
+private/unannounced integrations from that evidence.
+
+## Counting downloads
+
+1. Work per product, registry and era. List the user-installed entry packages or server images,
+   their public registry sources, observation month and counter meaning. Count entry packages
+   only: exclude sub-packages, add-ons and starter/meta-packages that repeat those installs.
+2. For a product continuation, include predecessor package names and explain the lineage from
+   public evidence. Distinct historical entry distributions may count; do not include an
+   unrelated product simply because it shares an organization or dependency.
+3. Record registry measurements and gaps: NuGet displayed totals may be rounded, npm totals
+   need complete time ranges, Docker Hub reports pulls, and Hex reports downloads. Do not
+   silently replace missing or incomplete measurements with estimates or claim an unmeasured
+   registry. These are downloads/pulls, not unique adoption.
+4. Sum the included entry counters once per product. Do not add shared dependencies to a
+   company headline: their downloads overlap consuming products. Avoid a cross-product total
+   unless its exclusions and overlap are documented; per-product claims are the default.
+5. Choose a conservative threshold below the supported total and round down, never to nearest
+   or up. Publish "more than <rounded threshold> downloads as of <month year>, across <named
+   registries>, including <public predecessor names>". For Docker, explain that pulls are part
+   of the combined measure. Never relabel downloads as users, customers, teams or installations.
+6. Recheck the calculation and source completeness before publishing. Keep one maintained
+   calculation for reuse; never change its date without refreshing the measurements. If evidence is incomplete, omit the claim and report the gap.
+
+## Verification
+
+A pass has one visible block per entity page, a working source for every fact, a date on every
+count, and a reproducible download calculation listing included entries, excluded dependencies,
+predecessors, registry coverage and rounding threshold. Compare visible wording and JSON-LD
+with those sources. No unsupported claim or private detail should remain; report missing
+sources rather than filling gaps.

package/package/corpus/skills/cratis-discoverability/references/package-metadata.md

@@ -4,6 +4,8 @@
 
 - Field map
 - Writing the description
+- Repository and distribution surfaces
+- Verification
 - Pitfalls
 
 ## Field map
@@ -14,7 +16,8 @@
 | Tags | `<PackageTags>`, 5-10, `cratis` plus category terms | `keywords`, the same list |
 | Project URL | `<PackageProjectUrl>` = `https://www.cratis.io/<product>/` | `homepage`, the same |
 | Repository | `RepositoryUrl` | `repository` |
-| Authors | `Cratis` | `author` `Cratis` |
+| Authors | `<Authors>Cratis</Authors>` (plural) | `author` `Cratis` |
+| Company | `<Company>Cratis</Company>` | No standard field; do not invent one |
 | License | `PackageLicenseExpression` `MIT` | `license` `MIT` |
 | Readme | A packed README with the same opener | `README.md` |
 
@@ -28,6 +31,35 @@ One sentence: what it is, for whom, and which Cratis product it belongs to - "<w
 Cratis Chronicle, the open-source event-sourcing database"). The text equals the README opener and
 the GitHub About text. Tags are specific ("event-sourcing", "cqrs", "dotnet"); never "utilities".
 
+## Repository and distribution surfaces
+
+- Set GitHub About's description to the same sentence, its website to the product docs page on
+  `https://www.cratis.io`, and topics to `cratis` plus accurate category terms.
+- Docker Hub's short description defines the image and names the parent product. Its full
+  description explains what it runs, how to start it and where the product docs live; keep the
+  definition and links aligned with the README. Do not add unsupported adoption or performance claims.
+- Analyzer `helpLinkUri` values link to the relevant diagnostic documentation on
+  `https://www.cratis.io`; keep the diagnostic path, not just the product homepage.
+- Template post-action messages and README footers link to the relevant docs on
+  `https://www.cratis.io`. Check nested READMEs and image READMEs, not just the repository root.
+- Preserve repository URLs as repository URLs. Do not rewrite schema identifiers, test fixtures,
+  negative examples or managed corpus copies while fixing user-facing links.
+
+## Verification
+
+Inspect effective NuGet properties on a packable project, including inherited values:
+
+```sh
+dotnet msbuild <packable.csproj> -getProperty:Authors -getProperty:Company -getProperty:Description -getProperty:PackageProjectUrl
+```
+
+A pass shows `Cratis` for Authors and Company, a nonempty parent-product definition and the
+existing product docs URL. Check npm `author`, `description`, `homepage` and `keywords` against the
+field map. Request each changed www URL and require HTTP 200 at the intended destination; fix
+broken paths rather than merely swapping hosts. Inspect GitHub About and Docker Hub metadata
+where available. Report remote metadata that cannot be checked or needs owner approval to change;
+a local README edit is not proof that a registry or repository setting changed.
+
 ## Pitfalls
 
 - An empty `Description`.

package/package/corpus/skills/cratis-discoverability/references/page-checklist.md

@@ -9,6 +9,7 @@
 - Landing pages
 - READMEs
 - Before publishing a site change
+- Docs-site guardrails
 
 ## Field targets
 
@@ -29,7 +30,7 @@ Lengths are targets, counted in characters including any site suffix.
 - [ ] Description written by hand; not the title, not another page's description.
 - [ ] The `description` answers what the page is or achieves in one self-contained sentence; the first paragraph does too on landing, index, glossary and README pages.
 - [ ] Canonical names; first mention uses the full "Cratis X" form.
-- [ ] Facts, numbers and comparisons carry a source or a date; nothing beyond the claim gate.
+- [ ] Facts, numbers and comparisons carry a source, and counts also carry a date; nothing beyond the claim gate.
 - [ ] Links have descriptive text. Root-relative inside the docs site, absolute
       `https://www.cratis.io/...` elsewhere.
 - [ ] Images have alt text (empty only when decorative) and sensible size.
@@ -86,3 +87,17 @@ Lengths are targets, counted in characters including any site suffix.
 - [ ] The content is in the raw HTML the server returns, not only rendered by JavaScript.
 - [ ] Internal links resolve; no apex `cratis.io` links.
 - [ ] A real HTTP 404 for unknown URLs; redirect stubs keep a canonical and stay out of the sitemap.
+
+## Docs-site guardrails
+
+- Keep missing-description and duplicate-title lint baselines at 0. Never raise a baseline to pass;
+  fix authored metadata or its generator and rerun the site's lint with no new exceptions.
+- Inspect rendered browser titles, not only frontmatter: retain the product name, add language
+  context for variants and distinguish repeated generic titles without changing page headings.
+- Measure UTF-8 bytes of `llms.txt` and `llms-small.txt`, including product/nested-product exports,
+  against the site's configured budgets. Keep `llms.txt` an index and `llms-small.txt` curated
+  starting points with one-line summaries, not a full inventory. Trim duplication and curation,
+  not human documentation or useful code examples. Do not raise budgets to hide growth.
+- Run the site's lint and enforced export-budget checks after its build; require exit 0 and
+  measured files within their limits. The built-site checker alone does not enforce these gates.
+  For export design, use **cratis-llm-friendly-documentation**.

package/package/corpus/skills/cratis-discoverability/references/structured-data.md

@@ -13,8 +13,17 @@
 - Markup describes what is visible on the page, and every date is a real one.
 - Add no `HowTo`. Add no new `FAQPage`; keep the visible question and answer text. Use `QAPage` only
   for real user questions and answers.
-- Do not name people (`Person`, `author` name) in structured data unless the owner has approved it.
-  Reference the organization by `@id`.
+- Use only public, owner-approved founder/company facts that are visible on the page. Founder
+  `Person` nodes may be linked from the organization with stable `@id`s and public profile links;
+  do not infer roles, employment or relationships from contributor accounts. Without this approval,
+  reference the organization by `@id` instead of naming a person.
+- Never add personal data or `Person` entities for community members, even if a profile displays
+  them. Do not serialize job titles, email, location, interests or CV details into JSON-LD.
+  Member profile and CV pages must emit `noindex`; keep them out of the sitemap. Do not apply
+  this policy to the community home or join page. Check rendered robots metadata or the
+  `X-Robots-Tag` header; blocking crawling alone does not establish `noindex`.
+- Shared guidance stays generic: no private/unannounced integration names, legal entity details
+  or factual counts copied from source material.
 - Do not add `offers`, an address or contact data without approval (see `SITE.md`).
 - Validate with the schema.org validator or Google's Rich Results Test. Invalid markup is worse than
   none. Static sites hand-write `<script type="application/ld+json">`; Astro sites generate it in
@@ -31,6 +40,7 @@
 | Blog post | `BlogPosting` (`datePublished`, `dateModified`, `publisher`, `image`) |
 | Repository or sample code | `SoftwareSourceCode` |
 | Legal pages | `WebPage` |
+| Member profiles and CV pages | no `Person` or personal structured data; `noindex` |
 | 404 and app hosts | none |
 
 ## Pattern

package/package/corpus/skills/cratis-discoverability/verification.json

@@ -1,13 +1,37 @@
 {
   "skill": "cratis-discoverability",
-  "input": "Run the pre-publish discoverability check on a new blog post, a package README and the package metadata for a Cratis library.",
+  "input": "Run the pre-publish discoverability check on entity facts and download claims, package/repo metadata, docs-site guardrails and founder/company or member profile structured data.",
   "fixtures": [],
   "assertions": [
     { "kind": "skill-contains", "value": "If a fix makes the page worse to read," },
     { "kind": "skill-contains", "value": "Add no `HowTo` and" },
-    { "kind": "skill-contains", "value": "Do not name people in structured data." },
+    { "kind": "skill-contains", "value": "never add personal data or `Person` entities for community members." },
     { "kind": "skill-contains", "value": "Apex `https://cratis.io/` links: the docs host is `https://www.cratis.io`." },
     { "kind": "skill-contains", "value": "no logo-only or metaphor opener" },
-    { "kind": "skill-contains", "value": "Padding to a word count: there is no minimum length" }
+    { "kind": "skill-contains", "value": "Padding to a word count: there is no minimum length" },
+    { "kind": "skill-contains", "value": "one sourced \"at a glance\" block" },
+    { "kind": "skill-contains", "value": "Downloads are never users or customers." },
+    { "kind": "skill-contains", "value": "Authors and Company are `Cratis`." },
+    { "kind": "skill-contains", "value": "never raise a baseline to pass." },
+    { "kind": "skill-contains", "value": "Member\nprofiles are `noindex`" },
+    { "kind": "skill-contains", "value": "Attach a source to every fact", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "Never invent customers, user counts, benchmarks, certifications,", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "Count entry packages\n   only", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "include predecessor package names", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "round down, never to nearest", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "as of <month year>, across <named\n   registries>", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "Do not add shared dependencies", "file": "references/facts-and-adoption.md" },
+    { "kind": "skill-contains", "value": "<Company>Cratis</Company>", "file": "references/package-metadata.md" },
+    { "kind": "skill-contains", "value": "https://www.cratis.io/<product>/", "file": "references/package-metadata.md" },
+    { "kind": "skill-contains", "value": "GitHub About", "file": "references/package-metadata.md" },
+    { "kind": "skill-contains", "value": "Docker Hub's short description", "file": "references/package-metadata.md" },
+    { "kind": "skill-contains", "value": "Analyzer `helpLinkUri`", "file": "references/package-metadata.md" },
+    { "kind": "skill-contains", "value": "Template post-action messages and README footers", "file": "references/package-metadata.md" },
+    { "kind": "skill-contains", "value": "lint baselines at 0", "file": "references/page-checklist.md" },
+    { "kind": "skill-contains", "value": "Measure UTF-8 bytes of `llms.txt` and `llms-small.txt`", "file": "references/page-checklist.md" },
+    { "kind": "skill-contains", "value": "retain the product name", "file": "references/page-checklist.md" },
+    { "kind": "skill-contains", "value": "public, owner-approved founder/company facts", "file": "references/structured-data.md" },
+    { "kind": "skill-contains", "value": "Never add personal data or `Person` entities for community members", "file": "references/structured-data.md" },
+    { "kind": "skill-contains", "value": "no private/unannounced integration names, legal entity details", "file": "references/structured-data.md" }
   ]
 }

package/package/corpus/skills/cratis-screenplay-command-surface/references/constraints-produces-concurrency.md

@@ -1,5 +1,12 @@
 # Constraints, produces mappings and concurrency
 
+## Contents
+
+- `constraint` — uniqueness at append time
+- Refuse a command on an unknown id
+- `concurrency`
+- `produces`
+
 This reference holds the detailed forms for append-time `constraint` uniqueness, `produces` mapping sources and conditions, and the `concurrency` block.
 
 ## `constraint` — uniqueness at append time
@@ -39,6 +46,48 @@ belongs in `validate`/`require`. Use a constraint when two concurrent appends mu
 not both win — a `validate` rule cannot do that. Stage renders only single-text-property and
 `unique event` constraints (`STAGE-ESM-014`; `cratis-stage-rendering-and-sandbox` `references/admission.md`).
 
+## Refuse a command on an unknown id
+
+Without a guard, a command naming an id that has no state is accepted and appends its event. Guard
+existence with a protected read: after authorization and property rules, and before any `require`
+or mapping runs, it rejects with `<ReadModel> '<key>' does not exist.` The preamble goes in the root document, the read model's key property is
+named `id` (`STAGE-ESM-044` otherwise, found by `cratis render --check`), and the view needs a
+`remove with` event. Complete model; it validates with `--executable`, renders with `--check`,
+and the specification passes in `screenplay test`:
+
+```screenplay
+domain Tasks
+command reads protected
+module Work
+  feature Closing
+    slice StateView TaskStatus
+      event TaskOpened
+        title String
+      event TaskDeleted
+      readmodel Task
+        id String key
+        title String
+      projection TaskProjection => Task
+        from TaskOpened
+        remove with TaskDeleted
+    slice StateChange CloseTask
+      event TaskClosed
+        reason String
+      command CloseTask
+        taskId String identifier
+        reads Task by taskId
+        produces TaskClosed
+          for taskId
+          reason = "done"
+      specification ClosingAnUnknownTask
+        when CloseTask
+          taskId = "missing"
+        then error "Task 'missing' does not exist."
+```
+
+Admission, races and refused read shapes: [protected reads](protected-reads.md). A `validate` rule or a
+screen guard cannot check existence, and a `unique` constraint only guards duplicates.
+
 ## `concurrency`
 
 Five dimensions, each at most once, and at most one `concurrency` block per

package/package/corpus/skills/cratis-screenplay-command-surface/references/enum-numbers.md

@@ -34,6 +34,8 @@ module Invoicing
 
 ## Source rules
 
+- Member names are lowercase identifiers: `hourly`, not `Hourly`. A capitalised member is
+  PLAY0009 ("expected an identifier"); rename it, and use the same name in specifications.
 - Number **all members or none**; there is no implicit continuation after a pin.
 - Numbers are unique whole int32 values, from -2147483648 through 2147483647.
   Gaps and negative numbers are allowed; aliases and flags semantics are not.

package/package/corpus/skills/cratis-screenplay-command-surface/references/validate-rules.md

@@ -1,5 +1,13 @@
 # Validation rule forms
 
+## Contents
+
+- Rule vocabulary
+- `require` message
+- Date and DateTime comparisons
+- `not empty` means non-blank text
+- Rules whose logic is code
+
 ## Rule vocabulary
 
 | Rule | Example |
@@ -24,6 +32,16 @@ modifier generates check digits but does not add validation. Check digits catch
 typos, not forgery. For generated-concept proof statuses, deterministic regex
 limits and PLAY0688 repairs, read [generated rules](generated-values-and-responses.md#generated-concept-rules-esm-v20).
 
+## `require` message
+
+The `message` of a whole-command `require` goes on the next, indented line, not on the `require` line:
+
+```screenplay excerpt
+validate
+  require to >= from
+    message "The end must not be before the start"
+```
+
 ## Date and DateTime comparisons
 
 Requires Screenplay 4.199.0 (ESM v26; `screenplay --version`); older binders refuse

package/package/corpus/skills/cratis-screenplay-event-modeling/references/slice-type-rules.md

@@ -10,3 +10,7 @@ automation: model it as one `StateChange` slice with several `produces` blocks.
 
 **Translation is workflow-specific anti-corruption.** Generic infrastructure every
 workflow needs (event persistence, message transport) is not a `Translate` slice.
+
+**Events have no optional properties for the `cratis` target.** An event property
+marked `optional` validates, but `cratis render --check` refuses it (`STAGE-ESM-005`).
+Make it required, or leave it out of the event; whether the detail is a separate fact is a modeling decision.

package/package/corpus/skills/cratis-screenplay-read-surface/references/guarded-actions.md

@@ -64,6 +64,9 @@ of executing the newly selected command.
 
 ## Guard boundaries
 
+A guard hides an offer; it does not make a command on an unknown id fail. Existence is refused in the
+command: [refuse a command on an unknown id](../../cratis-screenplay-command-surface/references/constraints-produces-concurrency.md#refuse-a-command-on-an-unknown-id).
+
 Conditions compare item paths to literals, not other paths, route/screen state,
 `$context` or `$env`. Equality/inequality, numeric ordering, string contains/starts
 with and grouped and/or are supported; and binds tighter than or. Collections

package/package/corpus/skills/cratis-screenplay-read-surface/references/named-keys.md

@@ -27,6 +27,17 @@ selection is:
    candidates and requires exactly one. An admitted list query here is a collection
    query without context-derived `by`, filters or scope.
 
+Two `*Id` properties (`orderId`, `customerId`) with only a list query are ambiguous
+(PLAY0268). Add one keyed query, whose `by` names the identity:
+
+```screenplay excerpt
+readmodel Order
+  orderId String
+  customerId String
+query OrderById => Order optional
+  by orderId String
+```
+
 A projection-only/queryless read model needs an explicit `key`: a lone `*Id`
 property alone does not infer identity. Never use the command's `identifier`
 modifier on a read model.

package/package/corpus/skills/cratis-screenplay-read-surface/references/screen-patterns.md

@@ -37,6 +37,8 @@ The person looks at where something stands and decides what to do next.
   events so far. Every field shown has a source in that read model.
 - The available actions depend on state. A static `action` line is always offered; an action that
   must differ by state is a guarded action (`references/guarded-actions.md`), never prose.
+- A list the screen renders is `query <Name> => observable <ReadModel>[]`. A snapshot list renders too, but
+  it is read once and does not follow later events; `observable` keeps the table current after a command.
 - A status screen with no incoming view is a gap; only a blank creation form is exempt.
 
 ## Error state

package/package/corpus/skills/cratis-screenplay-specifications/SKILL.md

@@ -34,6 +34,24 @@ Requires Screenplay 4.145.0 or later (`screenplay --version`) for `run-specifica
 
 Read [source notes](references/source-notes.md) for the retained inline-fact and action-syntax evidence; run the changed examples at the standalone pin.
 
+## State every property
+
+A `when` command and each `then` event list **every** property, including `optional`
+ones, with a concrete value; omitting one is PLAY0524. Only a read-model property may be `null` (PLAY0350).
+This model fails with PLAY0524 on both `when` and `then` until `note = "none"` is added:
+
+```screenplay excerpt
+event TaskOpened
+  note String optional
+specification Opening
+  when OpenTask
+    taskId = "t1"
+    title = "Write"
+  then TaskOpened
+    for "t1"
+    title = "Write"
+```
+
 ## Reference execution — what actually runs
 
 Screenplay's reference runner executes specifications against an immutable

package/package/corpus/skills/cratis-screenplay-specifications/references/generated-fixtures.md

@@ -25,6 +25,8 @@ a seed is not a portable fixture.
 
 ## When not to
 
+A fixture still states every command and event property with a concrete value, optional ones included (PLAY0524); a generated value does not excuse an omitted field.
+
 Pins do not prove randomness, authorization, idempotency, storage freshness or
 secret safety. Client-minted IDs stay inputs; gapless invoice numbering needs an
 allocator, not a random fixture or pattern. Check digits catch typos, not forgery;

package/package/corpus/skills/cratis-screenplay-toolchain/SKILL.md

@@ -218,6 +218,8 @@ unresolved questions: the standalone tool has `--open-questions fail`; `cratis s
 does through `--open-questions report|fail`. It is separate from compilation and `--warnaserror`.
 Requires Cratis CLI 3.60.0 or later (`cratis --version`) for that option; older CLIs lack it.
 
+Read [fast path](references/fast-path.md) for the ordered requirements-to-running-app checklist (validate, `render --check`, render, build, run).
+
 ## Route near misses
 
 Read [references/neighbouring-skills.md](references/neighbouring-skills.md) when the work is modeling phases, MCP editing, construct depth, rendering or running systems.

package/package/corpus/skills/cratis-screenplay-toolchain/references/fast-path.md

@@ -0,0 +1,24 @@
+# Fast path: requirements to a running Cratis app
+
+Run these in order and stop at the first failure; each step catches what the one before cannot.
+`<root>` is the model folder, `<dir>` the render destination.
+
+1. **Model** the requirements (`cratis-screenplay-modeling-lifecycle`). Enum members lowercase,
+   specifications state every property, no optional event property, list queries `observable`
+   (`references/traps.md` 46-47).
+2. **Validate:** `cratis screenplay validate --executable --warnings-as-errors <root>`. Pass: exit 0 and no error.
+   It binds the model but does not run the renderer's admission.
+3. **Admit:** `cratis render <root> --target cratis --name <App> --destination <dir> --check`.
+   It plans without writing; a refusal (for example `STAGE-ESM-005`, an optional event
+   property) lists every blocker at once. Fix and repeat until it reports no error diagnostic. Exit 6 on a
+   clean plan means only that changes are pending; nothing is published.
+4. **Render:** the same command without `--check`. Publication succeeded when it exits 0 and the receipt shows
+   `refused: 0` and `recoveryPending: false`.
+5. **Build:** `dotnet build <dir>/<App>.csproj` (Debug).
+6. **Services:** `docker compose up -d` in `<dir>` (Chronicle and MongoDB).
+7. **Backend:** `dotnet run --project <App>.csproj` in `<dir>`.
+8. **Frontend:** in `<dir>`, `yarn` then `yarn dev` (npm: `npm install`, `npm run dev`); open the URL Vite
+   prints. It proxies API calls to the backend.
+
+The rendered `README.md` repeats steps 6-8 for the pinned scaffold. Re-render and gap-fill rules:
+`cratis-screenplay-render-and-gap-fill`.

package/package/corpus/skills/cratis-screenplay-toolchain/references/traps.md

@@ -18,7 +18,7 @@ Compiler syntax: `cheat-sheet.md`. Negative capability claims depend on the tool
 14. AutoMap is on by default: same-named event properties fill read-model properties silently (scoped: case-insensitive, same type only; flat-bound: exact name, no type check, so a type mismatch invalidates the model). Use `no automap` for control.
 15. `given readmodel` bypasses the projection; prove a projection with `given` events + `when append`/command + `then readmodel`/`then query`.
 16. PLAY0285/0286/0287 are static spec checks: do not edit expectations blindly. An older bundled compiler can report PLAY0285 falsely on reaction cascades; confirm with the standalone tool before changing a `then`.
-17. `null` in specs only for optional read-model properties (PLAY0350); omit the property or record a gap; whether an optional detail is really a separate fact is a review question, not the fix for this code.
+17. `null` in specs only for optional read-model properties (PLAY0350). A `when` command or `then` event states every property with a concrete value, optional ones too (PLAY0524); whether an optional detail is really a separate fact is a review question, not the fix for this code.
 18. `then` events are exhaustive and ordered (use `then events in any order` for order only). From ESM v6 they include reaction cascades; after `when append` they list only what followed the append.
 19. Under `command reads protected`, omitted `by` uses the command identifier; absent identifier is PLAY0782. Eligible reads bind v25; legacy reads and `concurrency` retain PLAY0271. Combining reads/concurrency under opt-in is PLAY0783.
 20. Declare each event once, in its producing slice; renaming a persisted event needs `id "OldName"`; renaming a constraint discards its index.
@@ -70,3 +70,5 @@ Traps 39 to 44 are tool traps.
 43. `modelRevision` is canonical semantic (line positions and descriptions do not change it; a file move only if it changes logical placement or application identity) and, without `identities.json`, changes with the root folder name; it is not comparable with a render's `semanticRevision`. Source identity for verdicts is the commit plus the digest from the source-identity helper (`cratis-screenplay-modeling-lifecycle` `references/verdicts-and-modes.md` "Source identity").
 44. `cratis render` neither builds nor tests; `--name` is required for plain source; `.cratis-render/` is control state and is never staged; rendered apps pin their own Arc and Chronicle versions (`[ProtectedDecision]` is available to gap-fill, not automatically emitted). `cratis` file mode versus folder mode (trap 6) and a stale `cratis` on `PATH` (`which -a cratis`) both silently change what a verdict means.
 45. A reducer cannot be re-keyed: its instances follow the event-source id, so a query `by` another identity type warns PLAY0690 (`--warnaserror` fails it; editors only show it when the host supplies native findings). Aggregate by a payload value with a projection keyed on each `from`, or a join: projections [reducer identity](../../cratis-screenplay-projections/references/reducer-identity.md).
+46. Enum members are lowercase identifiers (`hourly`, not `Hourly`; PLAY0009). A specification states every property of the command and events, optional ones too (PLAY0524). A read model with two `*Id` properties needs one keyed query, `query OrderById => Order optional` with `by orderId String` (PLAY0268 otherwise). A `require` message goes on the next indented line (trap 38). Screen list queries are `observable`.
+47. Cratis events have no optional properties (STAGE-ESM-005), and `validate --executable` does not catch it: run `cratis render <folder> --target cratis --name <App> --destination <dir> --check` right after validate, since it runs the renderer's admission and writes nothing.

package/package/corpus/skills/cratis-screenplay-ui-composition/references/application-shell.md

@@ -2,6 +2,7 @@
 
 ## Contents
 
+- Default shell
 - One complete shell
 - Navigation regions: inherit, extend or override
 - Toolbar buttons that invoke a State Change slice
@@ -20,6 +21,12 @@ Every construct here is authoring syntax. The executable model defers it (`PLAY0
 tree, and none of it changes a backend. The Scene designer, the Stage runtime and Studio read the same lines, so the
 Screenplay is the one place to write them.
 
+## Default shell
+
+Requires Stage 4.189.3 or later (the CLI that bundles it) for a rendered frontend to get a default application shell without a
+`layout` or `ui profile`. Declare a `layout` and a `ui profile` only to customize that shell
+(navigation, logo, templates, sample data), as below.
+
 ## One complete shell
 
 ```screenplay

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/admission.md

@@ -2,6 +2,7 @@
 
 ## Contents
 
+- Probe before the first real render
 - How a refusal arrives
 - Event-reaction boundary
 - Recovery, stored identity and baseline boundaries
@@ -57,6 +58,13 @@ Binding with the CLI's bundled compiler is a separate
 prerequisite. The exhaustive construct table is `references/renderable-subset.md` in
 `cratis-screenplay-toolchain`; run the real render before claiming anything is admitted.
 
+## Probe before the first real render
+
+`cratis screenplay validate --executable` binds the model but does not run Stage admission, so a
+renderer refusal such as `STAGE-ESM-005` (Cratis events have no optional properties) passes it.
+Run `cratis render <root> --target cratis --name <App> --destination <dir> --check` right after validate:
+it runs the same admission, collects every refusal and writes nothing.
+
 ## How a refusal arrives
 
 One blocking diagnostic fails the **whole** plan and nothing is published (exit 5).

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/rendered-application.md

@@ -3,6 +3,7 @@
 ## Contents
 
 - Scaffold
+- Lists on screen
 - Reducer layout for new applications
 - What is managed
 - `Customizations/` (unmanaged)
@@ -50,6 +51,13 @@ is off), but any override must be proven with a restore and build. The compose f
 `35000`, keeps data in the named volumes `chronicle-data` and `chronicle-config`, and
 `docker compose down --volumes` is the only thing that deletes them.
 
+## Lists on screen
+
+A `data <ReadModel>[] via query <Query>` list renders from either list-query mode, but
+`observable` renders `Observe<T>()` and a first-result wait, while a snapshot renders a one-shot
+`GetInstances<T>()`. Declare `query <Name> => observable <ReadModel>[]` for any list a person watches change.
+Run `cratis render --check` first (`references/admission.md`) to catch refusals before a real render.
+
 ## Reducer layout for new applications
 
 Requires Stage 4.128.0 for the Cratis C# self-reducing profile; older renderers emit

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cratis/pi",
-  "version": "7.97.2",
+  "version": "7.99.0",
   "description": "Configuration-aware Cratis AI integration for Pi",
   "type": "module",
   "files": [