@journeykit/canon 0.36.0 → 0.38.0

package/man/canon-artifacts-prune.1

@@ -0,0 +1,75 @@
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.TH canon-artifacts-prune 1  "prune 0.38.0" 
+.SH NAME
+canon\-artifacts\-prune \- Delete the artifact blobs no record binds any more (the bare run previews; \-\-commit \-\-plan\-digest deletes)
+.SH SYNOPSIS
+\fBcanon artifacts prune\fR [\fB\-\-as\fR] [\fB\-\-keep\-days\fR] [\fB\-\-limit\fR] [\fB\-\-cursor\fR] [\fB\-\-all\fR] [\fB\-\-commit\fR] [\fB\-\-plan\-digest\fR] [\fB\-\-repo\fR] [\fB\-\-json\fR] [\fB\-\-input\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
+.SH DESCRIPTION
+Delete the artifact blobs no record binds any more (the bare run previews; \-\-commit \-\-plan\-digest deletes)
+.SH OPTIONS
+.TP
+\fB\-\-as\fR \fI<ROLE>\fR
+The role you act as: planner, implementer, reviewer or orchestrator. Overrides `CANON_ROLE`. `schema` and `context` list only the role\*(Aqs commands, `status` keeps its steps, and `\-\-role` on `evidence add` / `evidence audit` / `review scenario` / `review change` is this role unless given
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+planner
+.IP \(bu 2
+implementer
+.IP \(bu 2
+reviewer
+.IP \(bu 2
+orchestrator
+.RE
+.TP
+\fB\-\-keep\-days\fR \fI<N>\fR
+Also keep the blobs that evidence and reviews written in the last N days bind
+.TP
+\fB\-\-limit\fR \fI<N>\fR [default: 100]
+Return at most this many records per page
+.TP
+\fB\-\-cursor\fR \fI<CURSOR>\fR
+Resume after the last record of the previous page (the `nextCursor` it reported)
+.TP
+\fB\-\-all\fR
+Return every record from the cursor on, not one page
+.TP
+\fB\-\-commit\fR
+Make the change; without it the command only previews.
+.TP
+\fB\-\-plan\-digest\fR \fI<PLAN_DIGEST>\fR
+The digest of the preview this commit carries out.
+.TP
+\fB\-\-repo\fR \fI<DIR>\fR
+The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
+.TP
+\fB\-\-json\fR
+Output JSON instead of the human\-readable form
+.TP
+\fB\-\-input\fR \fI<JSON|FILE|\->\fR
+The arguments as JSON: an object (one run) or an array / NDJSON file or `\-` (a batch); keys are the option names in camelCase, `operands` an array
+.TP
+\fB\-h\fR, \fB\-\-help\fR
+Print help
+.TP
+\fB\-V\fR, \fB\-\-version\fR
+Print version
+.SH EXTRA
+Examples:
+  canon artifacts prune
+  canon artifacts prune \-\-keep\-days 30
+  canon artifacts prune \-\-commit \-\-plan\-digest <PLAN_DIGEST>
+
+The store only grows: a report written anew on every run adds a blob per run. A blob stays while a record binds it: the latest evidence of a task or of a scenario and the reviews still in effect (what `canon gate check` and `canon artifacts verify` read), a record not promoted yet, and, with \-\-keep\-days N, any evidence or review written in the last N days. Every other blob of the configured store is deleted: the local directory .canon/artifacts/sha256, or the objects of the object\-store tier `artifact_store:` names (the same rule; a copy left in the local directory of such a repo is judged by it too).
+
+The bare run previews: it says how many blobs and bytes go and stay, why each kept blob stays, lists the blobs to delete a page at a time (\-\-limit, \-\-cursor, \-\-all; the totals are the whole\*(Aqs) and writes nothing. With nothing to delete it says so and offers no \-\-commit. \-\-commit \-\-plan\-digest deletes exactly that plan (PLAN_STALE, exit 2, nothing deleted, when evidence or a record changed since). A repo whose records or staging cannot be read in full is refused: a blob is never deleted on a guess. After a prune, `canon artifacts verify` and `canon gate check` answer as before.
+
+A deleted local blob leaves the working tree, so commit the removal with the ledger; it stays in git history, and shrinking that history is the repo owner\*(Aqs call, not this command\*(Aqs. A deleted object of a tier cannot be undone: the tier keeps no other copy. A delete that fails stops the run (ARTIFACTS_PRUNE_INCOMPLETE says what was deleted); a new preview lists what remains.
+
+Exit 0 for a preview or a commit, 1 when a delete failed, 2 when the plan is stale or the records or the store cannot be read.
+.SH VERSION
+v0.38.0

package/man/canon-artifacts-store.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-artifacts-store 1  "store 0.36.0" 
+.TH canon-artifacts-store 1  "store 0.38.0" 
 .SH NAME
 canon\-artifacts\-store \- Store the bound files of existing evidence records and current reviews in the artifact store (.canon/artifacts/sha256/)
 .SH SYNOPSIS
@@ -51,4 +51,4 @@ For records written before canon stored bound bytes (0.11\-0.13), and for any ev
 
 Exit 0 when the pass ran (the gate decides whether an unstored file matters), 2 when the ledger cannot be read or a write fails.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-artifacts-verify.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-artifacts-verify 1  "verify 0.36.0" 
+.TH canon-artifacts-verify 1  "verify 0.38.0" 
 .SH NAME
 canon\-artifacts\-verify \- Check that the artifact store holds every file the latest evidence and current reviews bind (\-\-full re\-hashes the stored bytes)
 .SH SYNOPSIS
@@ -45,4 +45,4 @@ Asks the store canon.yaml\*(Aqs `artifacts:` block selects (default: local, .can
 
 Exit 0 when every file is stored, 1 when one is missing or altered (data.problems names each), 2 when the store cannot be used or reached: an unreachable store is a refusal, never a pass.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-artifacts.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-artifacts 1  "artifacts 0.36.0" 
+.TH canon-artifacts 1  "artifacts 0.38.0" 
 .SH NAME
 canon\-artifacts \- Check or move the evidence artifact store (local, or an object\-store tier)
 .SH SYNOPSIS
@@ -41,5 +41,8 @@ Store the bound files of existing evidence records and current reviews in the ar
 .TP
 canon\-artifacts\-move(1)
 Move the local artifact blobs to an object\-store tier, verify them, and remove the local copies
+.TP
+canon\-artifacts\-prune(1)
+Delete the artifact blobs no record binds any more (the bare run previews; \-\-commit \-\-plan\-digest deletes)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-brief-approve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief-approve 1  "approve 0.36.0" 
+.TH canon-brief-approve 1  "approve 0.38.0" 
 .SH NAME
 canon\-brief\-approve \- Record the human\*(Aqs approval of the brief, bound to its text; refused while `brief check` has blockers
 .SH SYNOPSIS
@@ -66,10 +66,12 @@ Examples:
 Several ids take one name, one answer and one timestamp. Every id is checked
 first; one refused id refuses the call (the first refused id\*(Aqs code, with a
 detail for each) and nothing is
-written. Writes `Approved: <who> <when> — "<words>" (brief sha256:<digest>)` into the
-brief (the digest covers the brief without its `Approved:` lines) and records
+written. Writes `Approved: <who> <when> — "<words>" (code tree <id>) (brief sha256:<digest>)` into the
+brief (the digest covers the brief without its `Approved:` lines; the code tree is the work
+tree\*(Aqs as it is now, uncommitted code included, and is left out outside git or with no commit: a
+chore whose approval saw the code tree that is still the current one asks for no evidence) and records
 `canon policy approve` in the same call. Edit the brief afterwards and it reads as
 not approved (BRIEF_APPROVAL_STALE) until a human answers again and this
 runs again. Run it only from the human\*(Aqs answer, with their words as \-\-note.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-brief-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief-check 1  "check 0.36.0" 
+.TH canon-brief-check 1  "check 0.38.0" 
 .SH NAME
 canon\-brief\-check \- Read the brief against the rules: blocker and advisory findings (exit 0 clean, 1 blockers, 2 refused)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 [\fICHANGE_ID\fR]
 The change to read (default: the repo\*(Aqs only live change)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-brief-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief-show 1  "show 0.36.0" 
+.TH canon-brief-show 1  "show 0.38.0" 
 .SH NAME
 canon\-brief\-show \- Show where the change stands and the next one to three steps; never edits
 .SH SYNOPSIS
@@ -50,4 +50,4 @@ Examples:
 
 The operand names the change; without it the repo\*(Aqs only live change is read.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-brief.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-brief 1  "brief 0.36.0" 
+.TH canon-brief 1  "brief 0.38.0" 
 .SH NAME
 canon\-brief \- Check a change\*(Aqs brief (PRD format) and see the next steps; never edits
 .SH SYNOPSIS
@@ -61,4 +61,4 @@ gets one blocker, `brief.old\-format`: `canon migrate` rewrites it. A brief
 with fewer than two known headings (written before 0.19) checks as `brief.legacy`, an
 advisory. Without \-\-change, the repo\*(Aqs only live change is checked.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-change-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-change-new 1  "new 0.36.0" 
+.TH canon-change-new 1  "new 0.38.0" 
 .SH NAME
 canon\-change\-new \- Write .canon/changes/<slug>/brief.md, import it, and adopt it into a subject
 .SH SYNOPSIS
@@ -63,4 +63,4 @@ Print version
 <\fICHANGE_ID\fR>
 The change\*(Aqs slug (its change_id)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-change.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-change 1  "change 0.36.0" 
+.TH canon-change 1  "change 0.38.0" 
 .SH NAME
 canon\-change \- Write a plan change (.canon/changes/<slug>/brief.md) and adopt it into a subject
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Write .canon/changes/<slug>/brief.md, import it, and adopt it into a subject
 Examples:
   canon change new add\-login \-\-subject auth \-\-title \*(AqAdd login\*(Aq
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-completion.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-completion 1  "completion 0.36.0" 
+.TH canon-completion 1  "completion 0.38.0" 
 .SH NAME
 canon\-completion \- Write the shell completion script for canon (bash, zsh or fish)
 .SH SYNOPSIS
@@ -57,4 +57,4 @@ Examples:
 
 The script is generated from the command tree, so it completes exactly what the parser accepts. It needs no repo and no network.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-context-pack-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-add 1  "add 0.36.0" 
+.TH canon-context-pack-add 1  "add 0.38.0" 
 .SH NAME
 canon\-context\-pack\-add \- Create an immutable context pack from a repository\-local JSON manifest
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-context-pack-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-show 1  "show 0.36.0" 
+.TH canon-context-pack-show 1  "show 0.38.0" 
 .SH NAME
 canon\-context\-pack\-show \- Show a context pack after verifying its manifest and content objects
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fIPACK_ID\fR>
 Context pack id (sha256:<64 hex digits>)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-context-pack-verify.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack-verify 1  "verify 0.36.0" 
+.TH canon-context-pack-verify 1  "verify 0.38.0" 
 .SH NAME
 canon\-context\-pack\-verify \- Verify a context pack\*(Aqs manifest and immutable content objects
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fIPACK_ID\fR>
 Context pack id (sha256:<64 hex digits>)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-context-pack.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context-pack 1  "context-pack 0.36.0" 
+.TH canon-context-pack 1  "context-pack 0.38.0" 
 .SH NAME
 canon\-context\-pack \- Create, inspect, and verify reproducible context packs
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Examples:
   canon context\-pack show sha256:<pack\-digest> \-\-repo . \-\-json
   canon context\-pack verify sha256:<pack\-digest>
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-context.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-context 1  "context 0.36.0" 
+.TH canon-context 1  "context 0.38.0" 
 .SH NAME
 canon\-context \- Show what you can author here: record kinds, fields, enums, policies
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-dashboard.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dashboard 1  "dashboard 0.36.0" 
+.TH canon-dashboard 1  "dashboard 0.38.0" 
 .SH NAME
 canon\-dashboard \- Serve the local status dashboard
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-demo-init.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo-init 1  "init 0.36.0" 
+.TH canon-demo-init 1  "init 0.38.0" 
 .SH NAME
 canon\-demo\-init \- Scaffold the demo repo (gate starts RED)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-demo-review.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo-review 1  "review 0.36.0" 
+.TH canon-demo-review 1  "review 0.38.0" 
 .SH NAME
 canon\-demo\-review \- Record the missing reviewer evidence (gate turns GREEN)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-demo.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-demo 1  "demo 0.36.0" 
+.TH canon-demo 1  "demo 0.38.0" 
 .SH NAME
 canon\-demo \- Try the evidence loop end\-to\-end in a throwaway demo repo
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Examples:
   canon gate check   # RED
   canon demo review && canon gate check   # GREEN
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-dispatch-begin.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-begin 1  "begin 0.36.0" 
+.TH canon-dispatch-begin 1  "begin 0.38.0" 
 .SH NAME
 canon\-dispatch\-begin \- Mint a Run manifest with retrieved guidance and context/policy lineage
 .SH SYNOPSIS
@@ -44,7 +44,7 @@ Declared provider metadata (copied verbatim; never inferred from \-\-actor)
 \fB\-\-model\fR \fI<NAME>\fR
 Declared model metadata (copied verbatim)
 .TP
-\fB\-\-skill\fR \fI<ID>\fR
+\fB\-\-skill\fR \fI<SKILL_ID>\fR
 Skill that contributed to this run
 .TP
 \fB\-\-skill\-digest\fR \fI<DIGEST>\fR
@@ -77,4 +77,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-dispatch-diff.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-diff 1  "diff 0.36.0" 
+.TH canon-dispatch-diff 1  "diff 0.38.0" 
 .SH NAME
 canon\-dispatch\-diff \- Diff the declared plan DAG against the observed execution graph
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-dispatch-end.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch-end 1  "end 0.36.0" 
+.TH canon-dispatch-end 1  "end 0.38.0" 
 .SH NAME
 canon\-dispatch\-end \- Close a dispatched run with a terminal status and an ended_at
 .SH SYNOPSIS
@@ -57,4 +57,4 @@ Print version
 <\fIRUN_ID\fR>
 The RunId (ULID) minted by `canon dispatch begin`
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-dispatch.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-dispatch 1  "dispatch 0.36.0" 
+.TH canon-dispatch 1  "dispatch 0.38.0" 
 .SH NAME
 canon\-dispatch \- Begin an agent run with retrieved guidance recorded
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ Close a dispatched run with a terminal status and an ended_at
 canon\-dispatch\-diff(1)
 Diff the declared plan DAG against the observed execution graph
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-divergence-accept.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-accept 1  "accept 0.36.0" 
+.TH canon-divergence-accept 1  "accept 0.38.0" 
 .SH NAME
 canon\-divergence\-accept \- Accept a divergent scenario as a tracked known gap (a reviewer step): its latest evidence must be divergent and not the accepting actor\*(Aqs or session\*(Aqs. The acceptance pins that evidence, so new evidence ends it, and lapses at \-\-expiry; until then the ship guard counts the cell as covered while `status` and `gate check` list it as `accepted\-divergence`
 .SH SYNOPSIS
@@ -36,7 +36,7 @@ Why the gap is accepted
 Where the gap is tracked: an issue URL or reference
 .TP
 \fB\-\-expiry\fR \fI<TIMESTAMP>\fR
-The date (YYYY\-MM\-DD, UTC) the acceptance stops holding; none means it holds until new evidence
+When the acceptance stops holding: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`); none means it holds until new evidence
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
 The reviewer recording this (recorded as the divergence\*(Aqs reviewer and actor)
@@ -74,4 +74,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The accepted scenarios (`<area>.<surface>.<nn>`), one acceptance each, all or nothing
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-divergence-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-add 1  "add 0.36.0" 
+.TH canon-divergence-add 1  "add 0.38.0" 
 .SH NAME
 canon\-divergence\-add \- Add a divergence candidate, staged with no run_seq yet (commit it with `canon gate promote \-\-kind divergence`, or in the same run with \-\-promote / `write: { promote: auto }`)
 .SH SYNOPSIS
@@ -53,7 +53,7 @@ deferred
 Why the divergence is recorded; required with `\-\-state deferred`
 .TP
 \fB\-\-expiry\fR \fI<TIMESTAMP>\fR
-When a deferral lapses (RFC3339 or YYYY\-MM\-DD, UTC); required with `\-\-state deferred`
+When a deferral lapses: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`); required with `\-\-state deferred`
 .TP
 \fB\-\-round\fR \fI<N>\fR [default: 1]
 The review round this version belongs to (1\-based)
@@ -94,4 +94,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-divergence-defer.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-defer 1  "defer 0.36.0" 
+.TH canon-divergence-defer 1  "defer 0.38.0" 
 .SH NAME
 canon\-divergence\-defer \- Directly record a deferred divergence (requires \-\-reason/\-\-expiry)
 .SH SYNOPSIS
@@ -45,7 +45,7 @@ The acting session (recorded as actor.session_id); optional
 Why the divergence is deferred
 .TP
 \fB\-\-expiry\fR \fI<TIMESTAMP>\fR
-When the deferral lapses (RFC3339 or YYYY\-MM\-DD, UTC)
+When the deferral lapses: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-role\fR \fI<ROLE>\fR
 The role this record is attributed to (default: the role declared with \-\-as / CANON_ROLE)
@@ -68,4 +68,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-divergence-list.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-list 1  "list 0.36.0" 
+.TH canon-divergence-list 1  "list 0.38.0" 
 .SH NAME
 canon\-divergence\-list \- List the current divergence burn\-down state
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
 \fB\-\-as\-of\fR \fI<TIMESTAMP>\fR
-Governs Deferred expiry; defaults to now
+Governs Deferred expiry; an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`); defaults to now
 .TP
 \fB\-\-json\fR
 Print `{data, meta}` as JSON
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-divergence-resolve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence-resolve 1  "resolve 0.36.0" 
+.TH canon-divergence-resolve 1  "resolve 0.38.0" 
 .SH NAME
 canon\-divergence\-resolve \- Directly record a resolved divergence
 .SH SYNOPSIS
@@ -65,4 +65,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The scenario (`<area>.<surface>.<nn>`)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-divergence.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-divergence 1  "divergence 0.36.0" 
+.TH canon-divergence 1  "divergence 0.38.0" 
 .SH NAME
 canon\-divergence \- Stage, promote, resolve, and inspect spec divergences
 .SH SYNOPSIS
@@ -48,4 +48,4 @@ Accept a divergent scenario as a tracked known gap (a reviewer step): its latest
 canon\-divergence\-list(1)
 List the current divergence burn\-down state
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-evidence-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-add 1  "add 0.36.0" 
+.TH canon-evidence-add 1  "add 0.38.0" 
 .SH NAME
 canon\-evidence\-add \- Record one attributed EvidenceRecord for a task or scenario (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -54,7 +54,7 @@ divergent
 .RE
 .TP
 \fB\-\-summary\fR \fI<TEXT>\fR
-One\-line note, with or without \-\-task; a task\*(Aqs flipped row shows it as the latest summary (scanned for fabrication markers; line breaks refused)
+One line of text, with or without \-\-task; a task\*(Aqs flipped row shows it as the latest summary (scanned for fabrication markers). The white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-command\-result\fR \fI<TEXT>\fR
 The real captured output backing \-\-summary (requires \-\-summary; scanned for fabrication markers)
@@ -69,7 +69,7 @@ RunId (ULID) of the run that produced this evidence
 Explicit risk binding: repository\-relative path or effect:<kebab\-slug>; persisted as surface_ref
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR [default: canon]
-The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author; line breaks refused)
+The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-role\fR \fI<ROLE>\fR
 The attesting role; `canon gate promote` derives its run_seq partition key from it. Default: the declared role (\-\-as / CANON_ROLE); required when none is declared
@@ -95,7 +95,7 @@ human
 Armored SSH detached signature file. Canon never signs on the user\*(Aqs behalf
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-Timestamp (RFC3339 or YYYY\-MM\-DD) included in the signed approval payload
+The approval time included in the signed approval payload: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused), the value the signature was made over
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
 The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
@@ -116,7 +116,7 @@ One record per indexed scenario of \-\-project that owns a case in the \-\-repor
 Per\-file size limit for the artifact store (.canon/artifacts/sha256/), in MiB; a larger bound file is refused
 .TP
 \fB\-\-override\-reason\fR \fI<TEXT>\fR
-Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line, recorded on the record with \-\-actor)
+Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line of text, recorded on the record with \-\-actor)
 .TP
 \fB\-\-promote\fR
 Promote the record this run staged, in the same run; records others staged stay staged (the default under canon.yaml `write: { promote: auto }`)
@@ -165,4 +165,4 @@ While a subject this record attests for (the scenario\*(Aqs @subject owner, or a
 AUDITS.
 An external evaluator\*(Aqs re\-audit is `canon evidence audit <SCENARIO_ID>`, not `\-\-kind audit`.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-evidence-approval-payload.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-approval-payload 1  "approval-payload 0.36.0" 
+.TH canon-evidence-approval-payload 1  "approval-payload 0.38.0" 
 .SH NAME
 canon\-evidence\-approval\-payload \- Emit exact bytes for external `ssh\-keygen \-Y sign \-n canon\-approval\-v1`
 .SH SYNOPSIS
@@ -48,7 +48,7 @@ The risk surface being approved: a repository\-relative path or `effect:<kebab\-
 Who approved (the human whose detached signature the payload is for)
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-The approval time that is signed into the payload: RFC3339, or YYYY\-MM\-DD (UTC midnight)
+The approval time that is signed into the payload: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused). Fix it once and give the same value to the signature and to `evidence add`
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
@@ -62,4 +62,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0