@journeykit/canon 0.36.0 → 0.37.0

package/man/canon-prompt-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-prompt-add 1  "add 0.36.0" 
+.TH canon-prompt-add 1  "add 0.37.0" 
 .SH NAME
 canon\-prompt\-add \- Add a prompt bundle from a repository\-local JSON manifest
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print help
 <\fINAME@VERSION\fR>
 The bundle to register, `NAME@VERSION`
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-prompt-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-prompt-show 1  "show 0.36.0" 
+.TH canon-prompt-show 1  "show 0.37.0" 
 .SH NAME
 canon\-prompt\-show \- Select a registered prompt bundle version
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 <\fINAME@VERSION\fR>
 The bundle to show, `NAME@VERSION`
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-prompt.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-prompt 1  "prompt 0.36.0" 
+.TH canon-prompt 1  "prompt 0.37.0" 
 .SH NAME
 canon\-prompt \- Register and select versioned prompt bundles
 .SH SYNOPSIS
@@ -40,4 +40,4 @@ Examples:
   canon prompt add reviewer@v1 \-\-manifest .canon/reviewer.json
   canon prompt show reviewer@v1 \-\-json
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-purge.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-purge 1  "purge 0.36.0" 
+.TH canon-purge 1  "purge 0.37.0" 
 .SH NAME
 canon\-purge \- Remove allowlisted records older than a cutoff: the bare run previews the removal set and its planDigest, `\-\-commit \-\-plan\-digest <PLAN_DIGEST>` deletes it
 .SH SYNOPSIS
@@ -44,7 +44,7 @@ trajectory
 .RE
 .TP
 \fB\-\-before\fR \fI<TIMESTAMP>\fR
-Remove records strictly before this time (RFC3339 or YYYY\-MM\-DD, UTC)
+Remove records strictly before this time: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-commit\fR
 Make the change; without it the command only previews.
@@ -67,4 +67,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-query.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-query 1  "query 0.36.0" 
+.TH canon-query 1  "query 0.37.0" 
 .SH NAME
 canon\-query \- Read stored records across every storage tier
 .SH SYNOPSIS
@@ -64,7 +64,7 @@ finding
 .RE
 .TP
 \fB\-\-since\fR \fI<TIMESTAMP>\fR
-Only records with at >= <since> (RFC3339/ISO\-8601)
+Only records with at >= <since>: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
@@ -108,4 +108,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-regime-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-regime-show 1  "show 0.36.0" 
+.TH canon-regime-show 1  "show 0.37.0" 
 .SH NAME
 canon\-regime\-show \- Build a canonical regime key for hook scripts
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-regime.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-regime 1  "regime 0.36.0" 
+.TH canon-regime 1  "regime 0.37.0" 
 .SH NAME
 canon\-regime \- Build a canonical regime key for hook scripts
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-regime\-show(1)
 Build a canonical regime key for hook scripts
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-report-build.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report-build 1  "build 0.36.0" 
+.TH canon-report-build 1  "build 0.37.0" 
 .SH NAME
 canon\-report\-build \- Write the status report (.canon/REPORT.md)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-report-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report-check 1  "check 0.36.0" 
+.TH canon-report-check 1  "check 0.37.0" 
 .SH NAME
 canon\-report\-check \- Byte\-diff .canon/REPORT.md against a fresh build (0 fresh, 1 missing or drifted); writes nothing
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-report-snapshot.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report-snapshot 1  "snapshot 0.36.0" 
+.TH canon-report-snapshot 1  "snapshot 0.37.0" 
 .SH NAME
 canon\-report\-snapshot \- Export the panel marts to <DIR>/*.parquet plus manifest.json
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print version
 <\fIDIR\fR>
 The output directory (created if absent)
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-report.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report 1  "report 0.36.0" 
+.TH canon-report 1  "report 0.37.0" 
 .SH NAME
 canon\-report \- Build, check, or snapshot the status report
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ Byte\-diff .canon/REPORT.md against a fresh build (0 fresh, 1 missing or drifted
 canon\-report\-snapshot(1)
 Export the panel marts to <DIR>/*.parquet plus manifest.json
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-retrieve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-retrieve 1  "retrieve 0.36.0" 
+.TH canon-retrieve 1  "retrieve 0.37.0" 
 .SH NAME
 canon\-retrieve \- Fetch role\-scoped strategy guidance
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-review-change.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-review-change 1  "change 0.36.0" 
+.TH canon-review-change 1  "change 0.37.0" 
 .SH NAME
 canon\-review\-change \- Write one attributed Review record for a chore change directly to the ledger (exactly one provenance ref required). The review signs the chore\*(Aqs invariants and checks against the diff and pins the change\*(Aqs brief; an edit to the brief stales it. A chore needs exactly this one review before `subject move \-\-to shipped`
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenarios. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
-The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer; line breaks refused)
+The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
 The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
@@ -95,4 +95,4 @@ Print version
 <\fICHANGE_ID\fR>
 The chore change to review
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-review-scenario.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-review-scenario 1  "scenario 0.36.0" 
+.TH canon-review-scenario 1  "scenario 0.37.0" 
 .SH NAME
 canon\-review\-scenario \- Write one attributed Review record per scenario directly to the ledger, nothing to promote (exactly one provenance ref required). A review pins the scenario\*(Aqs digest and what its latest evidence says (verdict and checks); it counts only while both are unchanged. Each scenario must be indexed, or nothing is written (exit 2)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenarios. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
-The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer; line breaks refused)
+The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
 The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
@@ -95,4 +95,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The reviewed scenarios (`<area>.<surface>.<nn>`), one review each, all or nothing. Each must have a record (`canon inventory sync`), or nothing is written (exit 2)
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-review.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-review 1  "review 0.36.0" 
+.TH canon-review 1  "review 0.37.0" 
 .SH NAME
 canon\-review \- Record an attributed review verdict
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Write one attributed Review record per scenario directly to the ledger, nothing
 canon\-review\-change(1)
 Write one attributed Review record for a chore change directly to the ledger (exactly one provenance ref required). The review signs the chore\*(Aqs invariants and checks against the diff and pins the change\*(Aqs brief; an edit to the brief stales it. A chore needs exactly this one review before `subject move \-\-to shipped`
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-scenario-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-scenario-new 1  "new 0.36.0" 
+.TH canon-scenario-new 1  "new 0.37.0" 
 .SH NAME
 canon\-scenario\-new \- Append a tagged scenario stub to its .feature file (created if missing); many at once with `\-\-input`
 .SH SYNOPSIS
@@ -77,4 +77,4 @@ Print version
 <\fISCENARIO_ID\fR>
 <area>.<surface>.<nn> scenario tag
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-scenario.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-scenario 1  "scenario 0.36.0" 
+.TH canon-scenario 1  "scenario 0.37.0" 
 .SH NAME
 canon\-scenario \- Add a tagged scenario to a .feature spec file
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-scenario\-new(1)
 Append a tagged scenario stub to its .feature file (created if missing); many at once with `\-\-input`
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-schema.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-schema 1  "schema 0.36.0" 
+.TH canon-schema 1  "schema 0.37.0" 
 .SH NAME
 canon\-schema \- Describe canon\*(Aqs own commands: list them, or show one command\*(Aqs arguments, options, effect and exit codes
 .SH SYNOPSIS
@@ -74,4 +74,4 @@ A command whose effect depends on its arguments carries `effectNote`.
 
 The tree holds the options commands share, defined once; a command names them. A command document is its call surface only: members at their default and the options and codes every command has (`\-\-json`, `\-\-input`, `\-\-fields`, `USAGE`, `INTERNAL`, ...) are left out. `\-\-schemas` with a command path prints the JSON Schemas the command\*(Aqs refs reach, `Input` (the schema of one `\-\-input` document) and the `rejects` of its validators.
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-search.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-search 1  "search 0.36.0" 
+.TH canon-search 1  "search 0.37.0" 
 .SH NAME
 canon\-search \- Search records, brief sections and scenario text, with each hit\*(Aqs neighbors in the record graph
 .SH SYNOPSIS
@@ -101,4 +101,4 @@ A read that first brings a derived index up to date: .canon/index/search.db, git
 rebuilt in full when any input changed; deleting it changes nothing but data.index.rebuilt.
 Exit 0 with empty hits when nothing matches; exit 2 for an empty text.
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-selftest.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-selftest 1  "selftest 0.36.0" 
+.TH canon-selftest 1  "selftest 0.37.0" 
 .SH NAME
 canon\-selftest \- Run canon\*(Aqs built\-in fixture self\-tests
 .SH SYNOPSIS
@@ -66,4 +66,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-skills-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-check 1  "check 0.36.0" 
+.TH canon-skills-check 1  "check 0.37.0" 
 .SH NAME
 canon\-skills\-check \- Check canonical projections without writing; exit 1 on drift, a legacy remnant, or a lock another canon version wrote
 .SH SYNOPSIS
@@ -33,7 +33,7 @@ Source directory; defaults to CANON_SKILLS_SOURCE or canon/skills
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
 \fB\-\-providers\fR \fI<LIST>\fR
-Providers to inspect (`claude`, `codex`, `omp`, `pi`, or a comma\-separated list). Omitted: as for install
+Providers to inspect: `none`, or `claude`, `codex`, `omp`, `pi` in lowercase joined by single commas (no space, no empty item). Omitted: as for install
 .TP
 \fB\-\-json\fR
 Output JSON instead of the human\-readable form
@@ -44,4 +44,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-skills-doctor.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-doctor 1  "doctor 0.36.0" 
+.TH canon-skills-doctor 1  "doctor 0.37.0" 
 .SH NAME
 canon\-skills\-doctor \- Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a provider that is not selected, and other skills whose description claims build work; reports only, never edits
 .SH SYNOPSIS
@@ -33,7 +33,7 @@ Source directory; defaults to CANON_SKILLS_SOURCE or canon/skills
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
 \fB\-\-providers\fR \fI<LIST>\fR
-Providers to inspect (`claude`, `codex`, `omp`, `pi`, or a comma\-separated list). Omitted: as for install
+Providers to inspect: `none`, or `claude`, `codex`, `omp`, `pi` in lowercase joined by single commas (no space, no empty item). Omitted: as for install
 .TP
 \fB\-\-json\fR
 Output JSON instead of the human\-readable form
@@ -44,4 +44,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-skills-install.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-install 1  "install 0.36.0" 
+.TH canon-skills-install 1  "install 0.37.0" 
 .SH NAME
 canon\-skills\-install \- Install the canonical `canon` bundle or legacy developer skills
 .SH SYNOPSIS
@@ -33,7 +33,7 @@ Developer override: read SKILL.src.md\*(Aqs frontmatter and scripts/ from this d
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
 \fB\-\-providers\fR \fI<LIST>\fR
-Providers to project (`claude`, `codex`, `omp`, `pi`, a comma\-separated list, or `none`); also rewrites `skills.providers` in the target\*(Aqs canon.yaml. Omitted: canon.yaml `skills.providers`, else the install lock\*(Aqs providers, else the detected `.claude`, `.codex`, `.omp`, `.pi` directories; none detected installs nothing. Codex is projected to `.agents/skills/canon/`
+Providers to project: `none`, or `claude`, `codex`, `omp`, `pi` in lowercase joined by single commas (no space, no empty item); also rewrites `skills.providers` in the target\*(Aqs canon.yaml. Omitted: canon.yaml `skills.providers`, else the install lock\*(Aqs providers, else the detected `.claude`, `.codex`, `.omp`, `.pi` directories; none detected installs nothing. Codex is projected to `.agents/skills/canon/`
 .TP
 \fB\-\-dry\-run\fR
 Validate fully and report what would be written, without writing anything
@@ -50,4 +50,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-skills-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-show 1  "show 0.36.0" 
+.TH canon-skills-show 1  "show 0.37.0" 
 .SH NAME
 canon\-skills\-show \- Print a guide built into this binary (markdown on stdout); the installed SKILL.md is a stub that points here
 .SH SYNOPSIS
@@ -101,4 +101,4 @@ role\-planner
 role\-reviewer
 .RE
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-skills.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills 1  "skills 0.36.0" 
+.TH canon-skills 1  "skills 0.37.0" 
 .SH NAME
 canon\-skills \- Install canon\*(Aqs agent guides into a repo
 .SH SYNOPSIS
@@ -45,4 +45,4 @@ Print diagnostics for canonical projections, the install lock\*(Aqs canon versio
 canon\-skills\-show(1)
 Print a guide built into this binary (markdown on stdout); the installed SKILL.md is a stub that points here
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-status.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-status 1  "status 0.36.0" 
+.TH canon-status 1  "status 0.37.0" 
 .SH NAME
 canon\-status \- Show where this repo stands: subjects by status, their gaps, and the next commands
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ scenarios, with an `Approved:` line, or a chore; each has a status (approved,
 unapproved, changed) and a reason. A never\-approved untagged feature change is a
 pending draft (`pendingDrafts`) and blocks nothing. `statusVersion` is 4.
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-strategy-approval-payload.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy-approval-payload 1  "approval-payload 0.36.0" 
+.TH canon-strategy-approval-payload 1  "approval-payload 0.37.0" 
 .SH NAME
 canon\-strategy\-approval\-payload \- The unsigned approval payload bytes an external signer signs (a read: identical arguments give identical bytes)
 .SH SYNOPSIS
@@ -33,7 +33,7 @@ The paired evaluation bundle the approval is for
 Who approves (the human whose detached signature the payload is for)
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-The approval time that is signed into the payload: RFC3339, or YYYY\-MM\-DD (UTC midnight)
+The approval time that is signed into the payload: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused). Fix it once and give the same value to the signature and to `strategy rollback`
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
@@ -50,4 +50,4 @@ Print version
 <\fISTRATEGY_ID\fR>
 The StrategyId (ULID) whose approval payload to print
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-strategy-promote.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy-promote 1  "promote 0.36.0" 
+.TH canon-strategy-promote 1  "promote 0.37.0" 
 .SH NAME
 canon\-strategy\-promote \- Promote a strategy after paired evaluation and signed approval
 .SH SYNOPSIS
@@ -56,4 +56,4 @@ Print version
 <\fISTRATEGY_ID\fR>
 The StrategyId (ULID) to promote
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-strategy-rollback.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy-rollback 1  "rollback 0.36.0" 
+.TH canon-strategy-rollback 1  "rollback 0.37.0" 
 .SH NAME
 canon\-strategy\-rollback \- Disable an active strategy with durable rollback provenance
 .SH SYNOPSIS
@@ -36,7 +36,7 @@ The approver; must be a policy\-pinned approver
 Detached signature file over the rollback payload
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-When the approver signed: RFC3339, or YYYY\-MM\-DD (UTC midnight)
+When the approver signed: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused), the value the signature was made over
 .TP
 \fB\-\-contradicting\-trajectory\fR \fI<ID>\fR
 A trajectory that contradicts the strategy (must exist in the trajectory store)
@@ -59,4 +59,4 @@ Print version
 <\fISTRATEGY_ID\fR>
 The StrategyId (ULID) to roll back
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-strategy.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy 1  "strategy 0.36.0" 
+.TH canon-strategy 1  "strategy 0.37.0" 
 .SH NAME
 canon\-strategy \- Promote a proven strategy into the git\-tracked tier
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ The unsigned approval payload bytes an external signer signs (a read: identical
 canon\-strategy\-rollback(1)
 Disable an active strategy with durable rollback provenance
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-subject-adopt.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-adopt 1  "adopt 0.36.0" 
+.TH canon-subject-adopt 1  "adopt 0.37.0" 
 .SH NAME
 canon\-subject\-adopt \- Link an imported plan change to a subject (adopting it under another subject adds that subject; a change may belong to several)
 .SH SYNOPSIS
@@ -50,4 +50,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject to adopt the change under
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-subject-move.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-move 1  "move 0.36.0" 
+.TH canon-subject-move 1  "move 0.37.0" 
 .SH NAME
 canon\-subject\-move \- Move a subject to another lifecycle state (shipping is evidence\-gated; with spec_coverage.require_review, entering its scope is review\-gated; shipped → verifying reopens with \-\-reason)
 .SH SYNOPSIS
@@ -77,4 +77,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject to move
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-subject-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-new 1  "new 0.36.0" 
+.TH canon-subject-new 1  "new 0.37.0" 
 .SH NAME
 canon\-subject\-new \- Author a new subject at status `proposed`
 .SH SYNOPSIS
@@ -62,4 +62,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject\*(Aqs kebab\-slug id
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-subject-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-show 1  "show 0.36.0" 
+.TH canon-subject-show 1  "show 0.37.0" 
 .SH NAME
 canon\-subject\-show \- Show a subject (read\-only)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject to show
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-subject-unadopt.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-unadopt 1  "unadopt 0.36.0" 
+.TH canon-subject-unadopt 1  "unadopt 0.37.0" 
 .SH NAME
 canon\-subject\-unadopt \- Take a change back out of a subject (the mirror of adopt; refused for a change whose brief is approved)
 .SH SYNOPSIS
@@ -60,4 +60,4 @@ change whose brief carries an `Approved:` line: it is the subject\*(Aqs approved
 scope, and for a change a scenario the subject owns is tagged
 `@flow:<change>.*` for (remove or retag it first). A pair that is not linked writes nothing and exits 0.
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-subject.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject 1  "subject 0.36.0" 
+.TH canon-subject 1  "subject 0.37.0" 
 .SH NAME
 canon\-subject \- Create and manage subjects (durable product units)
 .SH SYNOPSIS
@@ -48,4 +48,4 @@ Show a subject (read\-only)
 canon\-subject\-move(1)
 Move a subject to another lifecycle state (shipping is evidence\-gated; with spec_coverage.require_review, entering its scope is review\-gated; shipped → verifying reopens with \-\-reason)
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-task-done.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-task-done 1  "done 0.36.0" 
+.TH canon-task-done 1  "done 0.37.0" 
 .SH NAME
 canon\-task\-done \- Flip one task checkbox, gated on real evidence (fails closed)
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print version
 <\fITASK_ID\fR>
 The task id (<change_id>#<n>)
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-task.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-task 1  "task 0.36.0" 
+.TH canon-task 1  "task 0.37.0" 
 .SH NAME
 canon\-task \- Flip a plan task\*(Aqs checkbox once committed evidence supports it
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Flip one task checkbox, gated on real evidence (fails closed)
 Examples:
   canon task done my\-change#3
 .SH VERSION
-v0.36.0
+v0.37.0

package/man/canon-tier-age.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-tier-age 1  "age 0.36.0" 
+.TH canon-tier-age 1  "age 0.37.0" 
 .SH NAME
 canon\-tier\-age \- Apply canon.yaml aging rules, moving old records to their destination tier
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.37.0