@journeykit/canon 0.34.0 → 0.36.0

package/man/canon-change-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-change-new 1  "new 0.34.0" 
+.TH canon-change-new 1  "new 0.36.0" 
 .SH NAME
 canon\-change\-new \- Write .canon/changes/<slug>/brief.md, import it, and adopt it into a subject
 .SH SYNOPSIS
@@ -63,4 +63,4 @@ Print version
 <\fICHANGE_ID\fR>
 The change\*(Aqs slug (its change_id)
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-change.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-change 1  "change 0.34.0" 
+.TH canon-change 1  "change 0.36.0" 
 .SH NAME
 canon\-change \- Write a plan change (.canon/changes/<slug>/brief.md) and adopt it into a subject
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Write .canon/changes/<slug>/brief.md, import it, and adopt it into a subject
 Examples:
   canon change new add\-login \-\-subject auth \-\-title \*(AqAdd login\*(Aq
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-completion.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-completion 1  "completion 0.34.0" 
+.TH canon-completion 1  "completion 0.36.0" 
 .SH NAME
 canon\-completion \- Write the shell completion script for canon (bash, zsh or fish)
 .SH SYNOPSIS
@@ -57,4 +57,4 @@ Examples:
 
 The script is generated from the command tree, so it completes exactly what the parser accepts. It needs no repo and no network.
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-context-pack-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-add 1  "add 0.34.0" 
+.TH canon-context-pack-add 1  "add 0.36.0" 
 .SH NAME
 canon\-context\-pack\-add \- Create an immutable context pack from a repository\-local JSON manifest
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-context-pack-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-show 1  "show 0.34.0" 
+.TH canon-context-pack-show 1  "show 0.36.0" 
 .SH NAME
 canon\-context\-pack\-show \- Show a context pack after verifying its manifest and content objects
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fIPACK_ID\fR>
 Context pack id (sha256:<64 hex digits>)
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-context-pack-verify.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-verify 1  "verify 0.34.0" 
+.TH canon-context-pack-verify 1  "verify 0.36.0" 
 .SH NAME
 canon\-context\-pack\-verify \- Verify a context pack\*(Aqs manifest and immutable content objects
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fIPACK_ID\fR>
 Context pack id (sha256:<64 hex digits>)
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-context-pack.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack 1  "context-pack 0.34.0" 
+.TH canon-context-pack 1  "context-pack 0.36.0" 
 .SH NAME
 canon\-context\-pack \- Create, inspect, and verify reproducible context packs
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Examples:
   canon context\-pack show sha256:<pack\-digest> \-\-repo . \-\-json
   canon context\-pack verify sha256:<pack\-digest>
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-context.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context 1  "context 0.34.0" 
+.TH canon-context 1  "context 0.36.0" 
 .SH NAME
 canon\-context \- Show what you can author here: record kinds, fields, enums, policies
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-dashboard.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dashboard 1  "dashboard 0.34.0" 
+.TH canon-dashboard 1  "dashboard 0.36.0" 
 .SH NAME
 canon\-dashboard \- Serve the local status dashboard
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-demo-init.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo-init 1  "init 0.34.0" 
+.TH canon-demo-init 1  "init 0.36.0" 
 .SH NAME
 canon\-demo\-init \- Scaffold the demo repo (gate starts RED)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-demo-review.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo-review 1  "review 0.34.0" 
+.TH canon-demo-review 1  "review 0.36.0" 
 .SH NAME
 canon\-demo\-review \- Record the missing reviewer evidence (gate turns GREEN)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-demo.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo 1  "demo 0.34.0" 
+.TH canon-demo 1  "demo 0.36.0" 
 .SH NAME
 canon\-demo \- Try the evidence loop end\-to\-end in a throwaway demo repo
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Examples:
   canon gate check   # RED
   canon demo review && canon gate check   # GREEN
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-dispatch-begin.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-begin 1  "begin 0.34.0" 
+.TH canon-dispatch-begin 1  "begin 0.36.0" 
 .SH NAME
 canon\-dispatch\-begin \- Mint a Run manifest with retrieved guidance and context/policy lineage
 .SH SYNOPSIS
@@ -77,4 +77,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-dispatch-diff.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-diff 1  "diff 0.34.0" 
+.TH canon-dispatch-diff 1  "diff 0.36.0" 
 .SH NAME
 canon\-dispatch\-diff \- Diff the declared plan DAG against the observed execution graph
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-dispatch-end.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-end 1  "end 0.34.0" 
+.TH canon-dispatch-end 1  "end 0.36.0" 
 .SH NAME
 canon\-dispatch\-end \- Close a dispatched run with a terminal status and an ended_at
 .SH SYNOPSIS
@@ -57,4 +57,4 @@ Print version
 <\fIRUN_ID\fR>
 The RunId (ULID) minted by `canon dispatch begin`
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-dispatch.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch 1  "dispatch 0.34.0" 
+.TH canon-dispatch 1  "dispatch 0.36.0" 
 .SH NAME
 canon\-dispatch \- Begin an agent run with retrieved guidance recorded
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ Close a dispatched run with a terminal status and an ended_at
 canon\-dispatch\-diff(1)
 Diff the declared plan DAG against the observed execution graph
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-divergence-accept.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-accept 1  "accept 0.34.0" 
+.TH canon-divergence-accept 1  "accept 0.36.0" 
 .SH NAME
 canon\-divergence\-accept \- Accept a divergent scenario as a tracked known gap (a reviewer step): its latest evidence must be divergent and not the accepting actor\*(Aqs or session\*(Aqs. The acceptance pins that evidence, so new evidence ends it, and lapses at \-\-expiry; until then the ship guard counts the cell as covered while `status` and `gate check` list it as `accepted\-divergence`
 .SH SYNOPSIS
@@ -74,4 +74,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The accepted scenarios (`<area>.<surface>.<nn>`), one acceptance each, all or nothing
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-divergence-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-add 1  "add 0.34.0" 
+.TH canon-divergence-add 1  "add 0.36.0" 
 .SH NAME
 canon\-divergence\-add \- Add a divergence candidate, staged with no run_seq yet (commit it with `canon gate promote \-\-kind divergence`, or in the same run with \-\-promote / `write: { promote: auto }`)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-state\fR \fI<STATE>\fR [default: open]
 The divergence state to record (deferred needs \-\-reason and \-\-expiry)
@@ -94,4 +94,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-divergence-defer.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-defer 1  "defer 0.34.0" 
+.TH canon-divergence-defer 1  "defer 0.36.0" 
 .SH NAME
 canon\-divergence\-defer \- Directly record a deferred divergence (requires \-\-reason/\-\-expiry)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-round\fR \fI<N>\fR [default: 1]
 The review round this version belongs to (1\-based)
@@ -68,4 +68,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-divergence-list.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-list 1  "list 0.34.0" 
+.TH canon-divergence-list 1  "list 0.36.0" 
 .SH NAME
 canon\-divergence\-list \- List the current divergence burn\-down state
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-divergence-resolve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-resolve 1  "resolve 0.34.0" 
+.TH canon-divergence-resolve 1  "resolve 0.36.0" 
 .SH NAME
 canon\-divergence\-resolve \- Directly record a resolved divergence
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-round\fR \fI<N>\fR [default: 1]
 The review round this version belongs to (1\-based)
@@ -65,4 +65,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-divergence.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence 1  "divergence 0.34.0" 
+.TH canon-divergence 1  "divergence 0.36.0" 
 .SH NAME
 canon\-divergence \- Stage, promote, resolve, and inspect spec divergences
 .SH SYNOPSIS
@@ -48,4 +48,4 @@ Accept a divergent scenario as a tracked known gap (a reviewer step): its latest
 canon\-divergence\-list(1)
 List the current divergence burn\-down state
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-evidence-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-add 1  "add 0.34.0" 
+.TH canon-evidence-add 1  "add 0.36.0" 
 .SH NAME
 canon\-evidence\-add \- Record one attributed EvidenceRecord for a task or scenario (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Plan task this evidence attests to (<change_id>#<n>); required unless \-\-scenario is given
 .TP
 \fB\-\-project\fR \fI<PROJECT_ID>\fR
-Spec corpus id for \-\-scenario (canon keys a scenario by the composite (project_id, scenario_id)). Must name a spec root configured in canon.yaml, or the add is refused (UNKNOWN_SPEC_ROOT) before anything is written
+Spec corpus id for \-\-scenario (canon keys a scenario by the composite (project_id, scenario_id)). Must name a spec root configured in canon.yaml, or the add is refused (SPEC_ROOT_NOT_FOUND) before anything is written
 .TP
 \fB\-\-class\fR \fI<CLASS>\fR
 What CLASS of evidence is attested to (test\-run, review, ...); default `test\-run` when a \-\-report is given. `audit` is refused: an external evaluator\*(Aqs re\-audit is `canon evidence audit`
@@ -98,7 +98,7 @@ Armored SSH detached signature file. Canon never signs on the user\*(Aqs behalf
 Timestamp (RFC3339 or YYYY\-MM\-DD) included in the signed approval payload
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-artifact\fR \fI<PATH>\fR
 EXPERIMENTAL: bind any file (trace, screenshots, agent QA log, report) by sha256; repeatable; must be inside the repo; with \-\-all\-scenarios only as <scenario\-id>=<path>, bound to that scenario\*(Aqs record alone
@@ -160,9 +160,9 @@ RE\-ATTESTING NEVER DROPS A BINDING SILENTLY (\-\-drop\-attachment).
 For a scenario, a record that leaves out a file the scenario\*(Aqs latest record binds is refused (exit 2) until it re\-binds the file (new bytes at the same path are fine) or names it with \-\-drop\-attachment <path> (repeatable) \-\-drop\-reason <text>. The drop is recorded on the record and listed by canon status. Task\-only evidence has no drop guard.
 
 NOTHING IS ATTESTED BEFORE THE BRIEF IS APPROVED (\-\-override\-reason).
-While a subject this record attests for (the scenario\*(Aqs @subject owner, or any subject adopting the task\*(Aqs change) has an unapproved brief the record answers to, the add is refused. A scenario tagged @flow:<change>.<F\-id> answers to the changes its tags name; an untagged one to every adopted change whose brief has an `Approved:` line (an edit since refuses it), or, with none, to its subject\*(Aqs newest tagged change or newest adopted change; a task to its own change; an unapproved chore or a pending draft never blocks evidence (exit 1, nothing staged): stop, report the brief and wait for the human\*(Aqs answer. \-\-override\-reason <text> attests anyway; the reason, the waived subjects and \-\-actor are recorded on the record and listed by canon status and canon gate check. A subject with no proposal.md to answer is unaffected; review scenario and finding add are never refused.
+While a subject this record attests for (the scenario\*(Aqs @subject owner, or any subject adopting the task\*(Aqs change) has an unapproved brief the record answers to, the add is refused. A scenario tagged @flow:<change>.<F\-id> answers to the changes its tags name; an untagged one to every adopted change whose brief has an `Approved:` line (an edit since refuses it), or, with none, to its subject\*(Aqs newest tagged change or newest adopted change; a task to its own change; an unapproved chore or a pending draft never blocks evidence (exit 2, nothing staged): stop, report the brief and wait for the human\*(Aqs answer. \-\-override\-reason <text> attests anyway; the reason, the waived subjects and \-\-actor are recorded on the record and listed by canon status and canon gate check. A subject with no proposal.md to answer is unaffected; review scenario and finding add are never refused.
 
 AUDITS.
 An external evaluator\*(Aqs re\-audit is `canon evidence audit <SCENARIO_ID>`, not `\-\-kind audit`.
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-evidence-approval-payload.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-approval-payload 1  "approval-payload 0.34.0" 
+.TH canon-evidence-approval-payload 1  "approval-payload 0.36.0" 
 .SH NAME
 canon\-evidence\-approval\-payload \- Emit exact bytes for external `ssh\-keygen \-Y sign \-n canon\-approval\-v1`
 .SH SYNOPSIS
@@ -39,7 +39,7 @@ The scenario the approval is for; give this or \-\-task
 The dispatch run the approved work belongs to
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-surface\-ref\fR \fI<PATH_OR_EFFECT>\fR
 The risk surface being approved: a repository\-relative path or `effect:<kebab\-slug>` (repeatable)
@@ -62,4 +62,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-evidence-audit.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-audit 1  "audit 0.34.0" 
+.TH canon-evidence-audit 1  "audit 0.36.0" 
 .SH NAME
 canon\-evidence\-audit \- Record an external evaluator\*(Aqs re\-audit of one scenario (class `audit`; the verdict follows \-\-audit\-result; canon never runs the evaluator)
 .SH SYNOPSIS
@@ -27,7 +27,7 @@ orchestrator
 .RE
 .TP
 \fB\-\-project\fR \fI<PROJECT_ID>\fR
-Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root; refused (UNKNOWN_SPEC_ROOT) when it names none
+Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root; refused (SPEC_ROOT_NOT_FOUND) when it names none
 .TP
 \fB\-\-ref\fR \fI<TEXT>\fR
 The reference a reader can resolve: a command line, commit sha, or report path. NEVER run or resolved by canon
@@ -51,7 +51,7 @@ The attesting role; `canon gate promote` derives its run_seq partition key from
 The attesting session (recorded as actor.session_id)
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-artifact\fR \fI<PATH>\fR
 EXPERIMENTAL: bind any file (trace, log, report) by sha256; repeatable; must be inside the repo
@@ -118,4 +118,4 @@ The re\-audited scenario (`<area>.<surface>.<nn>`)
 .SH EXTRA
 Records an external evaluator\*(Aqs re\-audit of one scenario: \-\-evaluator, \-\-evaluator\-version, \-\-evaluator\-digest <sha256>, \-\-audit\-result confirmed|refuted|indeterminate, and optional \-\-report/\-\-artifact counterexamples, bound and stored like any report. canon never generates or runs the audit. An audit never becomes the scenario\*(Aqs declared verdict; a refuted latest audit is false\-success in canon gate check, whatever the declared verdict says.
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-evidence.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence 1  "evidence 0.34.0" 
+.TH canon-evidence 1  "evidence 0.36.0" 
 .SH NAME
 canon\-evidence \- Author a staged, attributed evidence attestation for a plan task
 .SH SYNOPSIS
@@ -54,4 +54,4 @@ each add to commit it (assigns run_seq).
 
 See `canon evidence add \-\-help` for exactly what the gate does and does not check.
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-export.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-export 1  "export 0.34.0" 
+.TH canon-export 1  "export 0.36.0" 
 .SH NAME
 canon\-export \- Export a redacted retention manifest without deleting records
 .SH SYNOPSIS
@@ -105,4 +105,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-feature-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-feature-new 1  "new 0.34.0" 
+.TH canon-feature-new 1  "new 0.36.0" 
 .SH NAME
 canon\-feature\-new \- Create a fresh .feature file for a new area.surface
 .SH SYNOPSIS
@@ -59,4 +59,4 @@ Print version
 <\fISURFACE\fR>
 <area>.<surface> the fresh .feature file scaffolds
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-feature.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-feature 1  "feature 0.34.0" 
+.TH canon-feature 1  "feature 0.36.0" 
 .SH NAME
 canon\-feature \- Scaffold a new .feature spec file
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-feature\-new(1)
 Create a fresh .feature file for a new area.surface
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-finding-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding-add 1  "add 0.34.0" 
+.TH canon-finding-add 1  "add 0.36.0" 
 .SH NAME
 canon\-finding\-add \- Record one code\-review finding (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -74,7 +74,7 @@ The reviewer who raised it, recorded as the finding\*(Aqs reviewer and author (l
 One line of what the finding IS, in the reviewer\*(Aqs own words. NEVER checked against the code (line breaks refused)
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-resolution\-rev\fR \fI<REV>\fR
 The commit that closed it, any git revision (resolved to the full sha, with the code tree it saw). Permitted only with \-\-disposition fixed, where it defaults to HEAD. Existence only; canon never reads the commit\*(Aqs message or diff
@@ -205,4 +205,4 @@ The loop:
 Under `write.promote: manual` (no `write:` key), run `canon gate promote` to
 commit it.
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-finding-close.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding-close 1  "close 0.34.0" 
+.TH canon-finding-close 1  "close 0.36.0" 
 .SH NAME
 canon\-finding\-close \- Move an already\-committed finding\*(Aqs disposition (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -114,4 +114,4 @@ Examples:
   canon finding close s44\-spec\-derived\-worklist \-\-round 1 \-\-seq 9 \\
       \-\-disposition rejected \-\-reason "not a defect"
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-finding-list.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding-list 1  "list 0.34.0" 
+.TH canon-finding-list 1  "list 0.36.0" 
 .SH NAME
 canon\-finding\-list \- List a change\*(Aqs committed findings at their latest version: round, seq, severity, disposition, reviewer and summary
 .SH SYNOPSIS
@@ -56,4 +56,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-finding.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding 1  "finding 0.34.0" 
+.TH canon-finding 1  "finding 0.36.0" 
 .SH NAME
 canon\-finding \- Record one code\-review finding as a durable record
 .SH SYNOPSIS
@@ -64,4 +64,4 @@ RECORDED OBSERVATION, NOT PROOF — canon never verifies that the defect
 existed, that it was fixed, or that \-\-introduced\-rev is the true cause.
 See `canon finding add \-\-help` for exactly what it does and does not establish.
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-format.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-format 1  "format 0.34.0" 
+.TH canon-format 1  "format 0.36.0" 
 .SH NAME
 canon\-format \- Validate a spec/artifact corpus against canon\*(Aqs format
 .SH SYNOPSIS
@@ -46,4 +46,4 @@ Examples:
   canon format spec
   canon format spec \-\-repo ~/work/myrepo
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-gate-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate-check 1  "check 0.34.0" 
+.TH canon-gate-check 1  "check 0.36.0" 
 .SH NAME
 canon\-gate\-check \- Run the coverage/ledger/staleness/trust checks (0 clean, 1 red, 2 usage)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-gate-install-hooks.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate-install-hooks 1  "install-hooks 0.34.0" 
+.TH canon-gate-install-hooks 1  "install-hooks 0.36.0" 
 .SH NAME
 canon\-gate\-install\-hooks \- Install the gate hook into .claude/settings.json / .codex/hooks.json
 .SH SYNOPSIS
@@ -56,4 +56,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-gate-promote.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate-promote 1  "promote 0.34.0" 
+.TH canon-gate-promote 1  "promote 0.36.0" 
 .SH NAME
 canon\-gate\-promote \- Promote staged records (evidence, findings, divergences) to the committed ledger
 .SH SYNOPSIS
@@ -59,4 +59,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.34.0
+v0.36.0

package/man/canon-gate.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate 1  "gate 0.34.0" 
+.TH canon-gate 1  "gate 0.36.0" 
 .SH NAME
 canon\-gate \- Run evidence gates, promote staged records, install hooks
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Examples:
   canon task done my\-change#3
   canon gate install\-hooks
 .SH VERSION
-v0.34.0
+v0.36.0