@journeykit/canon 0.35.0 → 0.37.0

package/man/canon-brief-approve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief-approve 1  "approve 0.35.0" 
+.TH canon-brief-approve 1  "approve 0.37.0" 
 .SH NAME
 canon\-brief\-approve \- Record the human\*(Aqs approval of the brief, bound to its text; refused while `brief check` has blockers
 .SH SYNOPSIS
@@ -64,11 +64,14 @@ Examples:
   canon brief approve add\-login add\-search fix\-sync \-\-approver Ana \-\-note \*(AqAll three, go.\*(Aq
 
 Several ids take one name, one answer and one timestamp. Every id is checked
-first; one refused id refuses the call (BRIEF_APPROVE_REFUSED) and nothing is
-written. Writes `Approved: <who> <when> — "<words>" (brief sha256:<digest>)` into the
-brief (the digest covers the brief without its `Approved:` lines) and records
+first; one refused id refuses the call (the first refused id\*(Aqs code, with a
+detail for each) and nothing is
+written. Writes `Approved: <who> <when> — "<words>" (code tree <id>) (brief sha256:<digest>)` into the
+brief (the digest covers the brief without its `Approved:` lines; the code tree is the work
+tree\*(Aqs as it is now, uncommitted code included, and is left out outside git or with no commit: a
+chore whose approval saw the code tree that is still the current one asks for no evidence) and records
 `canon policy approve` in the same call. Edit the brief afterwards and it reads as
-not approved (BRIEF_CHANGED_SINCE_APPROVAL) until a human answers again and this
+not approved (BRIEF_APPROVAL_STALE) until a human answers again and this
 runs again. Run it only from the human\*(Aqs answer, with their words as \-\-note.
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-brief-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief-check 1  "check 0.35.0" 
+.TH canon-brief-check 1  "check 0.37.0" 
 .SH NAME
 canon\-brief\-check \- Read the brief against the rules: blocker and advisory findings (exit 0 clean, 1 blockers, 2 refused)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 [\fICHANGE_ID\fR]
 The change to read (default: the repo\*(Aqs only live change)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-brief-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief-show 1  "show 0.35.0" 
+.TH canon-brief-show 1  "show 0.37.0" 
 .SH NAME
 canon\-brief\-show \- Show where the change stands and the next one to three steps; never edits
 .SH SYNOPSIS
@@ -50,4 +50,4 @@ Examples:
 
 The operand names the change; without it the repo\*(Aqs only live change is read.
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-brief.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief 1  "brief 0.35.0" 
+.TH canon-brief 1  "brief 0.37.0" 
 .SH NAME
 canon\-brief \- Check a change\*(Aqs brief (PRD format) and see the next steps; never edits
 .SH SYNOPSIS
@@ -61,4 +61,4 @@ gets one blocker, `brief.old\-format`: `canon migrate` rewrites it. A brief
 with fewer than two known headings (written before 0.19) checks as `brief.legacy`, an
 advisory. Without \-\-change, the repo\*(Aqs only live change is checked.
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-change-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-change-new 1  "new 0.35.0" 
+.TH canon-change-new 1  "new 0.37.0" 
 .SH NAME
 canon\-change\-new \- Write .canon/changes/<slug>/brief.md, import it, and adopt it into a subject
 .SH SYNOPSIS
@@ -63,4 +63,4 @@ Print version
 <\fICHANGE_ID\fR>
 The change\*(Aqs slug (its change_id)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-change.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-change 1  "change 0.35.0" 
+.TH canon-change 1  "change 0.37.0" 
 .SH NAME
 canon\-change \- Write a plan change (.canon/changes/<slug>/brief.md) and adopt it into a subject
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Write .canon/changes/<slug>/brief.md, import it, and adopt it into a subject
 Examples:
   canon change new add\-login \-\-subject auth \-\-title \*(AqAdd login\*(Aq
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-completion.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-completion 1  "completion 0.35.0" 
+.TH canon-completion 1  "completion 0.37.0" 
 .SH NAME
 canon\-completion \- Write the shell completion script for canon (bash, zsh or fish)
 .SH SYNOPSIS
@@ -57,4 +57,4 @@ Examples:
 
 The script is generated from the command tree, so it completes exactly what the parser accepts. It needs no repo and no network.
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-context-pack-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-add 1  "add 0.35.0" 
+.TH canon-context-pack-add 1  "add 0.37.0" 
 .SH NAME
 canon\-context\-pack\-add \- Create an immutable context pack from a repository\-local JSON manifest
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-context-pack-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-show 1  "show 0.35.0" 
+.TH canon-context-pack-show 1  "show 0.37.0" 
 .SH NAME
 canon\-context\-pack\-show \- Show a context pack after verifying its manifest and content objects
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fIPACK_ID\fR>
 Context pack id (sha256:<64 hex digits>)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-context-pack-verify.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-verify 1  "verify 0.35.0" 
+.TH canon-context-pack-verify 1  "verify 0.37.0" 
 .SH NAME
 canon\-context\-pack\-verify \- Verify a context pack\*(Aqs manifest and immutable content objects
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fIPACK_ID\fR>
 Context pack id (sha256:<64 hex digits>)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-context-pack.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack 1  "context-pack 0.35.0" 
+.TH canon-context-pack 1  "context-pack 0.37.0" 
 .SH NAME
 canon\-context\-pack \- Create, inspect, and verify reproducible context packs
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Examples:
   canon context\-pack show sha256:<pack\-digest> \-\-repo . \-\-json
   canon context\-pack verify sha256:<pack\-digest>
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-context.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context 1  "context 0.35.0" 
+.TH canon-context 1  "context 0.37.0" 
 .SH NAME
 canon\-context \- Show what you can author here: record kinds, fields, enums, policies
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-dashboard.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dashboard 1  "dashboard 0.35.0" 
+.TH canon-dashboard 1  "dashboard 0.37.0" 
 .SH NAME
 canon\-dashboard \- Serve the local status dashboard
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-demo-init.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo-init 1  "init 0.35.0" 
+.TH canon-demo-init 1  "init 0.37.0" 
 .SH NAME
 canon\-demo\-init \- Scaffold the demo repo (gate starts RED)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-demo-review.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo-review 1  "review 0.35.0" 
+.TH canon-demo-review 1  "review 0.37.0" 
 .SH NAME
 canon\-demo\-review \- Record the missing reviewer evidence (gate turns GREEN)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-demo.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo 1  "demo 0.35.0" 
+.TH canon-demo 1  "demo 0.37.0" 
 .SH NAME
 canon\-demo \- Try the evidence loop end\-to\-end in a throwaway demo repo
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Examples:
   canon gate check   # RED
   canon demo review && canon gate check   # GREEN
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-dispatch-begin.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-begin 1  "begin 0.35.0" 
+.TH canon-dispatch-begin 1  "begin 0.37.0" 
 .SH NAME
 canon\-dispatch\-begin \- Mint a Run manifest with retrieved guidance and context/policy lineage
 .SH SYNOPSIS
@@ -77,4 +77,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-dispatch-diff.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-diff 1  "diff 0.35.0" 
+.TH canon-dispatch-diff 1  "diff 0.37.0" 
 .SH NAME
 canon\-dispatch\-diff \- Diff the declared plan DAG against the observed execution graph
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-dispatch-end.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-end 1  "end 0.35.0" 
+.TH canon-dispatch-end 1  "end 0.37.0" 
 .SH NAME
 canon\-dispatch\-end \- Close a dispatched run with a terminal status and an ended_at
 .SH SYNOPSIS
@@ -57,4 +57,4 @@ Print version
 <\fIRUN_ID\fR>
 The RunId (ULID) minted by `canon dispatch begin`
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-dispatch.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch 1  "dispatch 0.35.0" 
+.TH canon-dispatch 1  "dispatch 0.37.0" 
 .SH NAME
 canon\-dispatch \- Begin an agent run with retrieved guidance recorded
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ Close a dispatched run with a terminal status and an ended_at
 canon\-dispatch\-diff(1)
 Diff the declared plan DAG against the observed execution graph
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-divergence-accept.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-accept 1  "accept 0.35.0" 
+.TH canon-divergence-accept 1  "accept 0.37.0" 
 .SH NAME
 canon\-divergence\-accept \- Accept a divergent scenario as a tracked known gap (a reviewer step): its latest evidence must be divergent and not the accepting actor\*(Aqs or session\*(Aqs. The acceptance pins that evidence, so new evidence ends it, and lapses at \-\-expiry; until then the ship guard counts the cell as covered while `status` and `gate check` list it as `accepted\-divergence`
 .SH SYNOPSIS
@@ -36,7 +36,7 @@ Why the gap is accepted
 Where the gap is tracked: an issue URL or reference
 .TP
 \fB\-\-expiry\fR \fI<TIMESTAMP>\fR
-The date (YYYY\-MM\-DD, UTC) the acceptance stops holding; none means it holds until new evidence
+When the acceptance stops holding: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`); none means it holds until new evidence
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
 The reviewer recording this (recorded as the divergence\*(Aqs reviewer and actor)
@@ -74,4 +74,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The accepted scenarios (`<area>.<surface>.<nn>`), one acceptance each, all or nothing
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-divergence-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-add 1  "add 0.35.0" 
+.TH canon-divergence-add 1  "add 0.37.0" 
 .SH NAME
 canon\-divergence\-add \- Add a divergence candidate, staged with no run_seq yet (commit it with `canon gate promote \-\-kind divergence`, or in the same run with \-\-promote / `write: { promote: auto }`)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-state\fR \fI<STATE>\fR [default: open]
 The divergence state to record (deferred needs \-\-reason and \-\-expiry)
@@ -53,7 +53,7 @@ deferred
 Why the divergence is recorded; required with `\-\-state deferred`
 .TP
 \fB\-\-expiry\fR \fI<TIMESTAMP>\fR
-When a deferral lapses (RFC3339 or YYYY\-MM\-DD, UTC); required with `\-\-state deferred`
+When a deferral lapses: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`); required with `\-\-state deferred`
 .TP
 \fB\-\-round\fR \fI<N>\fR [default: 1]
 The review round this version belongs to (1\-based)
@@ -94,4 +94,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-divergence-defer.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-defer 1  "defer 0.35.0" 
+.TH canon-divergence-defer 1  "defer 0.37.0" 
 .SH NAME
 canon\-divergence\-defer \- Directly record a deferred divergence (requires \-\-reason/\-\-expiry)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-round\fR \fI<N>\fR [default: 1]
 The review round this version belongs to (1\-based)
@@ -45,7 +45,7 @@ The acting session (recorded as actor.session_id); optional
 Why the divergence is deferred
 .TP
 \fB\-\-expiry\fR \fI<TIMESTAMP>\fR
-When the deferral lapses (RFC3339 or YYYY\-MM\-DD, UTC)
+When the deferral lapses: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-role\fR \fI<ROLE>\fR
 The role this record is attributed to (default: the role declared with \-\-as / CANON_ROLE)
@@ -68,4 +68,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-divergence-list.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-list 1  "list 0.35.0" 
+.TH canon-divergence-list 1  "list 0.37.0" 
 .SH NAME
 canon\-divergence\-list \- List the current divergence burn\-down state
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
 \fB\-\-as\-of\fR \fI<TIMESTAMP>\fR
-Governs Deferred expiry; defaults to now
+Governs Deferred expiry; an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`); defaults to now
 .TP
 \fB\-\-json\fR
 Print `{data, meta}` as JSON
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-divergence-resolve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-resolve 1  "resolve 0.35.0" 
+.TH canon-divergence-resolve 1  "resolve 0.37.0" 
 .SH NAME
 canon\-divergence\-resolve \- Directly record a resolved divergence
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-round\fR \fI<N>\fR [default: 1]
 The review round this version belongs to (1\-based)
@@ -65,4 +65,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-divergence.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence 1  "divergence 0.35.0" 
+.TH canon-divergence 1  "divergence 0.37.0" 
 .SH NAME
 canon\-divergence \- Stage, promote, resolve, and inspect spec divergences
 .SH SYNOPSIS
@@ -48,4 +48,4 @@ Accept a divergent scenario as a tracked known gap (a reviewer step): its latest
 canon\-divergence\-list(1)
 List the current divergence burn\-down state
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-evidence-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-add 1  "add 0.35.0" 
+.TH canon-evidence-add 1  "add 0.37.0" 
 .SH NAME
 canon\-evidence\-add \- Record one attributed EvidenceRecord for a task or scenario (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Plan task this evidence attests to (<change_id>#<n>); required unless \-\-scenario is given
 .TP
 \fB\-\-project\fR \fI<PROJECT_ID>\fR
-Spec corpus id for \-\-scenario (canon keys a scenario by the composite (project_id, scenario_id)). Must name a spec root configured in canon.yaml, or the add is refused (UNKNOWN_SPEC_ROOT) before anything is written
+Spec corpus id for \-\-scenario (canon keys a scenario by the composite (project_id, scenario_id)). Must name a spec root configured in canon.yaml, or the add is refused (SPEC_ROOT_NOT_FOUND) before anything is written
 .TP
 \fB\-\-class\fR \fI<CLASS>\fR
 What CLASS of evidence is attested to (test\-run, review, ...); default `test\-run` when a \-\-report is given. `audit` is refused: an external evaluator\*(Aqs re\-audit is `canon evidence audit`
@@ -54,7 +54,7 @@ divergent
 .RE
 .TP
 \fB\-\-summary\fR \fI<TEXT>\fR
-One\-line note, with or without \-\-task; a task\*(Aqs flipped row shows it as the latest summary (scanned for fabrication markers; line breaks refused)
+One line of text, with or without \-\-task; a task\*(Aqs flipped row shows it as the latest summary (scanned for fabrication markers). The white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-command\-result\fR \fI<TEXT>\fR
 The real captured output backing \-\-summary (requires \-\-summary; scanned for fabrication markers)
@@ -69,7 +69,7 @@ RunId (ULID) of the run that produced this evidence
 Explicit risk binding: repository\-relative path or effect:<kebab\-slug>; persisted as surface_ref
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR [default: canon]
-The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author; line breaks refused)
+The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-role\fR \fI<ROLE>\fR
 The attesting role; `canon gate promote` derives its run_seq partition key from it. Default: the declared role (\-\-as / CANON_ROLE); required when none is declared
@@ -95,10 +95,10 @@ human
 Armored SSH detached signature file. Canon never signs on the user\*(Aqs behalf
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-Timestamp (RFC3339 or YYYY\-MM\-DD) included in the signed approval payload
+The approval time included in the signed approval payload: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused), the value the signature was made over
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-artifact\fR \fI<PATH>\fR
 EXPERIMENTAL: bind any file (trace, screenshots, agent QA log, report) by sha256; repeatable; must be inside the repo; with \-\-all\-scenarios only as <scenario\-id>=<path>, bound to that scenario\*(Aqs record alone
@@ -116,7 +116,7 @@ One record per indexed scenario of \-\-project that owns a case in the \-\-repor
 Per\-file size limit for the artifact store (.canon/artifacts/sha256/), in MiB; a larger bound file is refused
 .TP
 \fB\-\-override\-reason\fR \fI<TEXT>\fR
-Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line, recorded on the record with \-\-actor)
+Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line of text, recorded on the record with \-\-actor)
 .TP
 \fB\-\-promote\fR
 Promote the record this run staged, in the same run; records others staged stay staged (the default under canon.yaml `write: { promote: auto }`)
@@ -160,9 +160,9 @@ RE\-ATTESTING NEVER DROPS A BINDING SILENTLY (\-\-drop\-attachment).
 For a scenario, a record that leaves out a file the scenario\*(Aqs latest record binds is refused (exit 2) until it re\-binds the file (new bytes at the same path are fine) or names it with \-\-drop\-attachment <path> (repeatable) \-\-drop\-reason <text>. The drop is recorded on the record and listed by canon status. Task\-only evidence has no drop guard.
 
 NOTHING IS ATTESTED BEFORE THE BRIEF IS APPROVED (\-\-override\-reason).
-While a subject this record attests for (the scenario\*(Aqs @subject owner, or any subject adopting the task\*(Aqs change) has an unapproved brief the record answers to, the add is refused. A scenario tagged @flow:<change>.<F\-id> answers to the changes its tags name; an untagged one to every adopted change whose brief has an `Approved:` line (an edit since refuses it), or, with none, to its subject\*(Aqs newest tagged change or newest adopted change; a task to its own change; an unapproved chore or a pending draft never blocks evidence (exit 1, nothing staged): stop, report the brief and wait for the human\*(Aqs answer. \-\-override\-reason <text> attests anyway; the reason, the waived subjects and \-\-actor are recorded on the record and listed by canon status and canon gate check. A subject with no proposal.md to answer is unaffected; review scenario and finding add are never refused.
+While a subject this record attests for (the scenario\*(Aqs @subject owner, or any subject adopting the task\*(Aqs change) has an unapproved brief the record answers to, the add is refused. A scenario tagged @flow:<change>.<F\-id> answers to the changes its tags name; an untagged one to every adopted change whose brief has an `Approved:` line (an edit since refuses it), or, with none, to its subject\*(Aqs newest tagged change or newest adopted change; a task to its own change; an unapproved chore or a pending draft never blocks evidence (exit 2, nothing staged): stop, report the brief and wait for the human\*(Aqs answer. \-\-override\-reason <text> attests anyway; the reason, the waived subjects and \-\-actor are recorded on the record and listed by canon status and canon gate check. A subject with no proposal.md to answer is unaffected; review scenario and finding add are never refused.
 
 AUDITS.
 An external evaluator\*(Aqs re\-audit is `canon evidence audit <SCENARIO_ID>`, not `\-\-kind audit`.
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-evidence-approval-payload.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-approval-payload 1  "approval-payload 0.35.0" 
+.TH canon-evidence-approval-payload 1  "approval-payload 0.37.0" 
 .SH NAME
 canon\-evidence\-approval\-payload \- Emit exact bytes for external `ssh\-keygen \-Y sign \-n canon\-approval\-v1`
 .SH SYNOPSIS
@@ -39,7 +39,7 @@ The scenario the approval is for; give this or \-\-task
 The dispatch run the approved work belongs to
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-surface\-ref\fR \fI<PATH_OR_EFFECT>\fR
 The risk surface being approved: a repository\-relative path or `effect:<kebab\-slug>` (repeatable)
@@ -48,7 +48,7 @@ The risk surface being approved: a repository\-relative path or `effect:<kebab\-
 Who approved (the human whose detached signature the payload is for)
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-The approval time that is signed into the payload: RFC3339, or YYYY\-MM\-DD (UTC midnight)
+The approval time that is signed into the payload: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused). Fix it once and give the same value to the signature and to `evidence add`
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
@@ -62,4 +62,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-evidence-audit.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-audit 1  "audit 0.35.0" 
+.TH canon-evidence-audit 1  "audit 0.37.0" 
 .SH NAME
 canon\-evidence\-audit \- Record an external evaluator\*(Aqs re\-audit of one scenario (class `audit`; the verdict follows \-\-audit\-result; canon never runs the evaluator)
 .SH SYNOPSIS
@@ -27,13 +27,13 @@ orchestrator
 .RE
 .TP
 \fB\-\-project\fR \fI<PROJECT_ID>\fR
-Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root; refused (UNKNOWN_SPEC_ROOT) when it names none
+Spec corpus id of the scenario. Required only when canon.yaml configures more than one spec root; refused (SPEC_ROOT_NOT_FOUND) when it names none
 .TP
 \fB\-\-ref\fR \fI<TEXT>\fR
 The reference a reader can resolve: a command line, commit sha, or report path. NEVER run or resolved by canon
 .TP
 \fB\-\-summary\fR \fI<TEXT>\fR
-One\-line note (scanned for fabrication markers; line breaks refused)
+One line of text (scanned for fabrication markers). The white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-command\-result\fR \fI<TEXT>\fR
 The real captured output backing \-\-summary (requires \-\-summary; scanned for fabrication markers)
@@ -42,7 +42,7 @@ The real captured output backing \-\-summary (requires \-\-summary; scanned for
 RunId (ULID) of the run that produced this evidence
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR [default: canon]
-The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author; line breaks refused)
+The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-role\fR \fI<ROLE>\fR
 The attesting role; `canon gate promote` derives its run_seq partition key from it. Default: the declared role (\-\-as / CANON_ROLE); required when none is declared
@@ -51,7 +51,7 @@ The attesting role; `canon gate promote` derives its run_seq partition key from
 The attesting session (recorded as actor.session_id)
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
-The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (NO_COMMIT)
+The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
 .TP
 \fB\-\-artifact\fR \fI<PATH>\fR
 EXPERIMENTAL: bind any file (trace, log, report) by sha256; repeatable; must be inside the repo
@@ -90,7 +90,7 @@ indeterminate
 .RE
 .TP
 \fB\-\-override\-reason\fR \fI<TEXT>\fR
-Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line, recorded on the record with \-\-actor)
+Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line of text, recorded on the record with \-\-actor)
 .TP
 \fB\-\-promote\fR
 Promote the record this run staged, in the same run; records others staged stay staged (the default under canon.yaml `write: { promote: auto }`)
@@ -118,4 +118,4 @@ The re\-audited scenario (`<area>.<surface>.<nn>`)
 .SH EXTRA
 Records an external evaluator\*(Aqs re\-audit of one scenario: \-\-evaluator, \-\-evaluator\-version, \-\-evaluator\-digest <sha256>, \-\-audit\-result confirmed|refuted|indeterminate, and optional \-\-report/\-\-artifact counterexamples, bound and stored like any report. canon never generates or runs the audit. An audit never becomes the scenario\*(Aqs declared verdict; a refuted latest audit is false\-success in canon gate check, whatever the declared verdict says.
 .SH VERSION
-v0.35.0
+v0.37.0

package/man/canon-evidence.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence 1  "evidence 0.35.0" 
+.TH canon-evidence 1  "evidence 0.37.0" 
 .SH NAME
 canon\-evidence \- Author a staged, attributed evidence attestation for a plan task
 .SH SYNOPSIS
@@ -54,4 +54,4 @@ each add to commit it (assigns run_seq).
 
 See `canon evidence add \-\-help` for exactly what the gate does and does not check.
 .SH VERSION
-v0.35.0
+v0.37.0