@journeykit/canon 0.36.0 → 0.38.0

package/man/canon-evidence-audit.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence-audit 1  "audit 0.36.0" 
+.TH canon-evidence-audit 1  "audit 0.38.0" 
 .SH NAME
 canon\-evidence\-audit \- Record an external evaluator\*(Aqs re\-audit of one scenario (class `audit`; the verdict follows \-\-audit\-result; canon never runs the evaluator)
 .SH SYNOPSIS
@@ -33,7 +33,7 @@ Spec corpus id of the scenario. Required only when canon.yaml configures more th
 The reference a reader can resolve: a command line, commit sha, or report path. NEVER run or resolved by canon
 .TP
 \fB\-\-summary\fR \fI<TEXT>\fR
-One\-line note (scanned for fabrication markers; line breaks refused)
+One line of text (scanned for fabrication markers). The white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-command\-result\fR \fI<TEXT>\fR
 The real captured output backing \-\-summary (requires \-\-summary; scanned for fabrication markers)
@@ -42,7 +42,7 @@ The real captured output backing \-\-summary (requires \-\-summary; scanned for
 RunId (ULID) of the run that produced this evidence
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR [default: canon]
-The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author; line breaks refused)
+The attesting actor\*(Aqs id (recorded as the attestation\*(Aqs author). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-role\fR \fI<ROLE>\fR
 The attesting role; `canon gate promote` derives its run_seq partition key from it. Default: the declared role (\-\-as / CANON_ROLE); required when none is declared
@@ -65,7 +65,7 @@ EXPERIMENTAL: also bind this report case (a Rust test: its function name); repea
 \fB\-\-max\-artifact\-mib\fR \fI<N>\fR [default: 25]
 Per\-file size limit for the artifact store (.canon/artifacts/sha256/), in MiB; a larger bound file is refused
 .TP
-\fB\-\-evaluator\fR \fI<ID>\fR
+\fB\-\-evaluator\fR \fI<EVALUATOR_ID>\fR
 The external evaluator that re\-audited the scenario (canon never runs it)
 .TP
 \fB\-\-evaluator\-version\fR \fI<TEXT>\fR
@@ -90,7 +90,7 @@ indeterminate
 .RE
 .TP
 \fB\-\-override\-reason\fR \fI<TEXT>\fR
-Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line, recorded on the record with \-\-actor)
+Attest anyway while a subject this record attests for has a brief awaiting the human\*(Aqs answer (one line of text, recorded on the record with \-\-actor)
 .TP
 \fB\-\-promote\fR
 Promote the record this run staged, in the same run; records others staged stay staged (the default under canon.yaml `write: { promote: auto }`)
@@ -118,4 +118,4 @@ The re\-audited scenario (`<area>.<surface>.<nn>`)
 .SH EXTRA
 Records an external evaluator\*(Aqs re\-audit of one scenario: \-\-evaluator, \-\-evaluator\-version, \-\-evaluator\-digest <sha256>, \-\-audit\-result confirmed|refuted|indeterminate, and optional \-\-report/\-\-artifact counterexamples, bound and stored like any report. canon never generates or runs the audit. An audit never becomes the scenario\*(Aqs declared verdict; a refuted latest audit is false\-success in canon gate check, whatever the declared verdict says.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-evidence.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-evidence 1  "evidence 0.36.0" 
+.TH canon-evidence 1  "evidence 0.38.0" 
 .SH NAME
 canon\-evidence \- Author a staged, attributed evidence attestation for a plan task
 .SH SYNOPSIS
@@ -54,4 +54,4 @@ each add to commit it (assigns run_seq).
 
 See `canon evidence add \-\-help` for exactly what the gate does and does not check.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-export.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-export 1  "export 0.36.0" 
+.TH canon-export 1  "export 0.38.0" 
 .SH NAME
 canon\-export \- Export a redacted retention manifest without deleting records
 .SH SYNOPSIS
@@ -64,10 +64,10 @@ finding
 .RE
 .TP
 \fB\-\-before\fR \fI<TIMESTAMP>\fR
-Only records strictly before this time (RFC3339 or YYYY\-MM\-DD, UTC)
+Only records strictly before this time: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-after\fR \fI<TIMESTAMP>\fR
-Only records at or after this time (RFC3339 or YYYY\-MM\-DD, UTC)
+Only records at or after this time: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-o\fR, \fB\-\-output\fR \fI<FILE>\fR
 Write the manifest to this file (mode 0600) instead of stdout
@@ -105,4 +105,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-feature-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-feature-new 1  "new 0.36.0" 
+.TH canon-feature-new 1  "new 0.38.0" 
 .SH NAME
 canon\-feature\-new \- Create a fresh .feature file for a new area.surface
 .SH SYNOPSIS
@@ -59,4 +59,4 @@ Print version
 <\fISURFACE\fR>
 <area>.<surface> the fresh .feature file scaffolds
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-feature.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-feature 1  "feature 0.36.0" 
+.TH canon-feature 1  "feature 0.38.0" 
 .SH NAME
 canon\-feature \- Scaffold a new .feature spec file
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-feature\-new(1)
 Create a fresh .feature file for a new area.surface
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-finding-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding-add 1  "add 0.36.0" 
+.TH canon-finding-add 1  "add 0.38.0" 
 .SH NAME
 canon\-finding\-add \- Record one code\-review finding (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -68,10 +68,10 @@ deferred
 .RE
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
-The reviewer who raised it, recorded as the finding\*(Aqs reviewer and author (line breaks refused)
+The reviewer who raised it, recorded as the finding\*(Aqs reviewer and author. One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-summary\fR \fI<TEXT>\fR
-One line of what the finding IS, in the reviewer\*(Aqs own words. NEVER checked against the code (line breaks refused)
+One line of what the finding IS, in the reviewer\*(Aqs own words. NEVER checked against the code. The white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
 The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
@@ -205,4 +205,4 @@ The loop:
 Under `write.promote: manual` (no `write:` key), run `canon gate promote` to
 commit it.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-finding-close.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding-close 1  "close 0.36.0" 
+.TH canon-finding-close 1  "close 0.38.0" 
 .SH NAME
 canon\-finding\-close \- Move an already\-committed finding\*(Aqs disposition (promoted in the same run under `write: { promote: auto }` or with \-\-promote; under `write.promote: manual`, commit it with `canon gate promote`)
 .SH SYNOPSIS
@@ -33,15 +33,13 @@ Which review round raised it (1\-based)
 The finding\*(Aqs index within the round (1\-based)
 .TP
 \fB\-\-disposition\fR \fI<DISPOSITION>\fR
-Where it lands: fixed / rejected / deferred / open (reopening is a real transition). fixed records \-\-resolution\-rev, default HEAD, and only fixed may carry one
+Where it lands: fixed / rejected / deferred (`open` is refused: a defect that came back is a new finding). fixed records \-\-resolution\-rev, default HEAD, and only fixed may carry one
 .br
 
 .br
 \fIPossible values:\fR
 .RS 14
 .IP \(bu 2
-open
-.IP \(bu 2
 fixed
 .IP \(bu 2
 rejected
@@ -53,13 +51,13 @@ deferred
 The commit that closed it, any git revision (resolved to the full sha, with the code tree it saw). Permitted only with \-\-disposition fixed, where it defaults to HEAD. Existence only; canon never reads the commit\*(Aqs message or diff
 .TP
 \fB\-\-reason\fR \fI<TEXT>\fR
-Why it was closed, one line. Required for rejected and deferred, optional for fixed and open; stored on the closing version and shown by `finding list`
+Why it was closed, one line. Required for rejected and deferred, optional for fixed; stored on the closing version and shown by `finding list`
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR [default: canon]
 The actor recorded as authoring the TRANSITION — not the original finding\*(Aqs author, which is preserved on the record this supersedes
 .TP
-\fB\-\-role\fR \fI<ROLE>\fR [default: reviewer]
-Attribution only — no partition key derives from it
+\fB\-\-role\fR \fI<ROLE>\fR
+The role the close is recorded under: the declared one (\-\-as, CANON_ROLE), and \-\-role only when it names that role or none is declared; no role is recorded when neither is given. Only a reviewer closes as rejected or deferred
 .TP
 \fB\-\-session\fR \fI<SESSION_ID>\fR
 The session that authored the TRANSITION (recorded as actor.session_id)
@@ -114,4 +112,4 @@ Examples:
   canon finding close s44\-spec\-derived\-worklist \-\-round 1 \-\-seq 9 \\
       \-\-disposition rejected \-\-reason "not a defect"
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-finding-list.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding-list 1  "list 0.36.0" 
+.TH canon-finding-list 1  "list 0.38.0" 
 .SH NAME
 canon\-finding\-list \- List a change\*(Aqs committed findings at their latest version: round, seq, severity, disposition, reviewer and summary
 .SH SYNOPSIS
@@ -48,7 +48,7 @@ Resume after the last record of the previous page (the `nextCursor` it reported)
 Return every record from the cursor on, not one page
 .TP
 \fB\-\-fields\fR \fI<FIELDS>\fR
-With \-\-json, keep only these members of each finding (comma\-separated field paths: severity, disposition, reviewer, summary, resolutionSha, fileRef, reason; round and seq are always kept)
+With \-\-json, keep only these members of each finding (comma\-separated field paths: severity, disposition, reviewer, summary, resolutionSha, fileRef, reason, closedBy, closedRole; round and seq are always kept)
 .TP
 \fB\-h\fR, \fB\-\-help\fR
 Print help
@@ -56,4 +56,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-finding.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-finding 1  "finding 0.36.0" 
+.TH canon-finding 1  "finding 0.38.0" 
 .SH NAME
 canon\-finding \- Record one code\-review finding as a durable record
 .SH SYNOPSIS
@@ -64,4 +64,4 @@ RECORDED OBSERVATION, NOT PROOF — canon never verifies that the defect
 existed, that it was fixed, or that \-\-introduced\-rev is the true cause.
 See `canon finding add \-\-help` for exactly what it does and does not establish.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-format.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-format 1  "format 0.36.0" 
+.TH canon-format 1  "format 0.38.0" 
 .SH NAME
 canon\-format \- Validate a spec/artifact corpus against canon\*(Aqs format
 .SH SYNOPSIS
@@ -46,4 +46,4 @@ Examples:
   canon format spec
   canon format spec \-\-repo ~/work/myrepo
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-gate-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate-check 1  "check 0.36.0" 
+.TH canon-gate-check 1  "check 0.38.0" 
 .SH NAME
 canon\-gate\-check \- Run the coverage/ledger/staleness/trust checks (0 clean, 1 red, 2 usage)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-gate-install-hooks.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate-install-hooks 1  "install-hooks 0.36.0" 
+.TH canon-gate-install-hooks 1  "install-hooks 0.38.0" 
 .SH NAME
 canon\-gate\-install\-hooks \- Install the gate hook into .claude/settings.json / .codex/hooks.json
 .SH SYNOPSIS
@@ -56,4 +56,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-gate-promote.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate-promote 1  "promote 0.36.0" 
+.TH canon-gate-promote 1  "promote 0.38.0" 
 .SH NAME
 canon\-gate\-promote \- Promote staged records (evidence, findings, divergences) to the committed ledger
 .SH SYNOPSIS
@@ -59,4 +59,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-gate.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-gate 1  "gate 0.36.0" 
+.TH canon-gate 1  "gate 0.38.0" 
 .SH NAME
 canon\-gate \- Run evidence gates, promote staged records, install hooks
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Examples:
   canon task done my\-change#3
   canon gate install\-hooks
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-ingest-plans.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-ingest-plans 1  "plans 0.36.0" 
+.TH canon-ingest-plans 1  "plans 0.38.0" 
 .SH NAME
 canon\-ingest\-plans \- Import plans as Change/Task records: canon\*(Aqs own .canon/changes, then the configured external sources (openspec, superpowers)
 .SH SYNOPSIS
@@ -50,4 +50,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-ingest-records.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-ingest-records 1  "records 0.36.0" 
+.TH canon-ingest-records 1  "records 0.38.0" 
 .SH NAME
 canon\-ingest\-records \- Import review/divergence/task/handoff records and derive verdicts
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-ingest-sessions.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-ingest-sessions 1  "sessions 0.36.0" 
+.TH canon-ingest-sessions 1  "sessions 0.38.0" 
 .SH NAME
 canon\-ingest\-sessions \- Import agent CLI session transcripts (omp/pi, Claude Code, Codex, Hermes)
 .SH SYNOPSIS
@@ -59,4 +59,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-ingest.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-ingest 1  "ingest 0.36.0" 
+.TH canon-ingest 1  "ingest 0.38.0" 
 .SH NAME
 canon\-ingest \- Import agent sessions, records, and plans into canon\*(Aqs store
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Examples:
   canon ingest records
   canon ingest plans
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-init.1

@@ -1,10 +1,10 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-init 1  "init 0.36.0" 
+.TH canon-init 1  "init 0.38.0" 
 .SH NAME
 canon\-init \- Set up canon in a repo (canon.yaml, a starter policy, the AGENTS.md block, a plans home)
 .SH SYNOPSIS
-\fBcanon init\fR [\fB\-\-as\fR] [\fB\-\-repo\fR] [\fB\-\-check\fR] [\fB\-\-no\-agents\-md\fR] [\fB\-\-policy\fR] [\fB\-\-no\-policy\fR] [\fB\-\-providers\fR] [\fB\-\-language\fR] [\fB\-\-dry\-run\fR] [\fB\-\-json\fR] [\fB\-\-input\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
+\fBcanon init\fR [\fB\-\-as\fR] [\fB\-\-repo\fR] [\fB\-\-check\fR] [\fB\-\-no\-agents\-md\fR] [\fB\-\-policy\fR] [\fB\-\-no\-policy\fR] [\fB\-\-harness\fR] [\fB\-\-no\-harness\fR] [\fB\-\-language\fR] [\fB\-\-dry\-run\fR] [\fB\-\-json\fR] [\fB\-\-input\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
 .SH DESCRIPTION
 Set up canon in a repo (canon.yaml, a starter policy, the AGENTS.md block, a plans home)
 .SH OPTIONS
@@ -53,8 +53,25 @@ strict: Standard, plus independent review
 \fB\-\-no\-policy\fR
 Do not write the starter .canon/policy.yaml
 .TP
-\fB\-\-providers\fR \fI<LIST>\fR
-Harnesses to install the canon skill for, without asking (`claude`, `codex`, `omp`, `pi`, comma\-separated; `none` for none)
+\fB\-\-harness\fR \fI<NAME>\fR
+A harness to install the canon skill for, without asking (repeatable, once per name): `claude`, `codex`, `omp` or `pi`. Omitted, and no `\-\-no\-harness`: the detected harnesses
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+claude
+.IP \(bu 2
+codex
+.IP \(bu 2
+omp
+.IP \(bu 2
+pi
+.RE
+.TP
+\fB\-\-no\-harness\fR
+Install the canon skill for no harness: records an empty `skills.providers`
 .TP
 \fB\-\-language\fR \fI<TAG>\fR
 Language the briefs are written in (`en`, `ko`, or any tag: `en` headings, structure rules only); recorded as `language:` in canon.yaml
@@ -77,7 +94,7 @@ Print version
 Examples:
   canon init
   canon init \-\-policy light
-  canon init \-\-providers claude,codex
+  canon init \-\-harness claude \-\-harness codex
   canon init \-\-no\-agents\-md \-\-no\-policy
   canon init \-\-check
 
@@ -86,13 +103,15 @@ scenario; standard adds a `@case:failure` scenario per feature surface; strict
 adds independent review. The level is the first line of .canon/policy.yaml and
 `canon status` shows it.
 
-Harnesses (\-\-providers): init never asks. Without \-\-providers it takes the
+Harnesses (\-\-harness, \-\-no\-harness): init never asks. Without either it takes the
 detected harnesses (.claude, .codex, .omp, .pi directories), on a terminal or
 not; with none detected it installs nothing and says how to choose. The answer is
-recorded as `skills: { providers: [...] }` in canon.yaml (`\-\-providers none`
-records `[]`).
+recorded as `skills: { providers: [...] }` in canon.yaml (`\-\-no\-harness`
+records `[]`). `\-\-harness` is given once per name, each one of claude, codex, omp or
+pi in lowercase; a name given twice counts once, and `\-\-harness` with `\-\-no\-harness`
+is refused.
 
 Rerunning in a repo that has canon.yaml leaves canon.yaml and .canon/policy.yaml
 alone and only refreshes the canon block in AGENTS.md.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-inventory-sync.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-inventory-sync 1  "sync 0.36.0" 
+.TH canon-inventory-sync 1  "sync 0.38.0" 
 .SH NAME
 canon\-inventory\-sync \- Validate each spec root, then materialize scenario index records
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-inventory.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-inventory 1  "inventory 0.36.0" 
+.TH canon-inventory 1  "inventory 0.38.0" 
 .SH NAME
 canon\-inventory \- Index a validated .feature corpus into the scenario ledger
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-inventory\-sync(1)
 Validate each spec root, then materialize scenario index records
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-ledger-compact.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-ledger-compact 1  "compact 0.36.0" 
+.TH canon-ledger-compact 1  "compact 0.38.0" 
 .SH NAME
 canon\-ledger\-compact \- Move superseded versions of every record out of the ledger into the archive
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-ledger.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-ledger 1  "ledger 0.36.0" 
+.TH canon-ledger 1  "ledger 0.38.0" 
 .SH NAME
 canon\-ledger \- Keep the ledger to the current version of each record
 .SH SYNOPSIS
@@ -51,4 +51,4 @@ this is for a ledger written before 0.23, or after an interrupted move. Idempote
 `canon migrate` runs it. A record that carries a standing claim (a flagged overlay, a
 brief override, an approval at the current evidence) stays in the ledger.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-migrate.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-migrate 1  "migrate 0.36.0" 
+.TH canon-migrate 1  "migrate 0.38.0" 
 .SH NAME
 canon\-migrate \- Bring a repo from an earlier canon up to date: the 0.17 layout (specs, changes, approvals, skills, .gitignore), the 0.28 hooks, scripts and skill stub (backed up under .canon/migrate\-backup/), the 0.23 latest\-only ledger (superseded versions to .canon/archive) and 0.23 review pins
 .SH SYNOPSIS
@@ -120,4 +120,4 @@ kept. canon.yaml is written atomically.
   every agent role). `\-\-revert` restores them byte for byte and refuses, naming the file, when one changed
   since the migrate.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-plugin-sync.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-plugin-sync 1  "sync 0.36.0" 
+.TH canon-plugin-sync 1  "sync 0.38.0" 
 .SH NAME
 canon\-plugin\-sync \- Validate and write a plugin\*(Aqs overlay records
 .SH SYNOPSIS
@@ -50,4 +50,4 @@ Print version
 <\fIPLUGIN_ID\fR>
 A .canon/plugins/<id>/plugin.yaml manifest id (e.g. porting)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-plugin.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-plugin 1  "plugin 0.36.0" 
+.TH canon-plugin 1  "plugin 0.38.0" 
 .SH NAME
 canon\-plugin \- Sync plugin overlay records onto the ledger
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-plugin\-sync(1)
 Validate and write a plugin\*(Aqs overlay records
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-policy-approve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-policy-approve 1  "approve 0.36.0" 
+.TH canon-policy-approve 1  "approve 0.38.0" 
 .SH NAME
 canon\-policy\-approve \- Approve the current .canon/policy.yaml (written directly; nothing to promote)
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-policy-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-policy-show 1  "show 0.36.0" 
+.TH canon-policy-show 1  "show 0.38.0" 
 .SH NAME
 canon\-policy\-show \- Show the policy\*(Aqs digest and its approval (who, when, which bytes)
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-policy.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-policy 1  "policy 0.36.0" 
+.TH canon-policy 1  "policy 0.38.0" 
 .SH NAME
 canon\-policy \- Record who approved the gate\*(Aqs policy (.canon/policy.yaml) and which bytes
 .SH SYNOPSIS
@@ -49,4 +49,4 @@ approval (or whose approval cannot be read) fails closed: `gate check` exits 1
 and `subject move` refuses to ship or reopen; `\-\-override\-reason` does not
 waive it. `canon policy show` reads the approval back.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-prompt-add.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-prompt-add 1  "add 0.36.0" 
+.TH canon-prompt-add 1  "add 0.38.0" 
 .SH NAME
 canon\-prompt\-add \- Add a prompt bundle from a repository\-local JSON manifest
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print help
 <\fINAME@VERSION\fR>
 The bundle to register, `NAME@VERSION`
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-prompt-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-prompt-show 1  "show 0.36.0" 
+.TH canon-prompt-show 1  "show 0.38.0" 
 .SH NAME
 canon\-prompt\-show \- Select a registered prompt bundle version
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 <\fINAME@VERSION\fR>
 The bundle to show, `NAME@VERSION`
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-prompt.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-prompt 1  "prompt 0.36.0" 
+.TH canon-prompt 1  "prompt 0.38.0" 
 .SH NAME
 canon\-prompt \- Register and select versioned prompt bundles
 .SH SYNOPSIS
@@ -40,4 +40,4 @@ Examples:
   canon prompt add reviewer@v1 \-\-manifest .canon/reviewer.json
   canon prompt show reviewer@v1 \-\-json
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-purge.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-purge 1  "purge 0.36.0" 
+.TH canon-purge 1  "purge 0.38.0" 
 .SH NAME
 canon\-purge \- Remove allowlisted records older than a cutoff: the bare run previews the removal set and its planDigest, `\-\-commit \-\-plan\-digest <PLAN_DIGEST>` deletes it
 .SH SYNOPSIS
@@ -44,7 +44,7 @@ trajectory
 .RE
 .TP
 \fB\-\-before\fR \fI<TIMESTAMP>\fR
-Remove records strictly before this time (RFC3339 or YYYY\-MM\-DD, UTC)
+Remove records strictly before this time: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-commit\fR
 Make the change; without it the command only previews.
@@ -67,4 +67,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0