@journeykit/canon 0.36.0 → 0.38.0

package/man/canon-query.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-query 1  "query 0.36.0" 
+.TH canon-query 1  "query 0.38.0" 
 .SH NAME
 canon\-query \- Read stored records across every storage tier
 .SH SYNOPSIS
@@ -64,7 +64,7 @@ finding
 .RE
 .TP
 \fB\-\-since\fR \fI<TIMESTAMP>\fR
-Only records with at >= <since> (RFC3339/ISO\-8601)
+Only records with at >= <since>: an RFC 3339 date (`2030\-01\-01`, UTC midnight) or date\-time (`2030\-01\-01T10:00:00Z`)
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
@@ -108,4 +108,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-regime-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-regime-show 1  "show 0.36.0" 
+.TH canon-regime-show 1  "show 0.38.0" 
 .SH NAME
 canon\-regime\-show \- Build a canonical regime key for hook scripts
 .SH SYNOPSIS
@@ -47,4 +47,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-regime.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-regime 1  "regime 0.36.0" 
+.TH canon-regime 1  "regime 0.38.0" 
 .SH NAME
 canon\-regime \- Build a canonical regime key for hook scripts
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-regime\-show(1)
 Build a canonical regime key for hook scripts
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-report-build.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report-build 1  "build 0.36.0" 
+.TH canon-report-build 1  "build 0.38.0" 
 .SH NAME
 canon\-report\-build \- Write the status report (.canon/REPORT.md)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-report-check.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report-check 1  "check 0.36.0" 
+.TH canon-report-check 1  "check 0.38.0" 
 .SH NAME
 canon\-report\-check \- Byte\-diff .canon/REPORT.md against a fresh build (0 fresh, 1 missing or drifted); writes nothing
 .SH SYNOPSIS
@@ -38,4 +38,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-report-snapshot.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report-snapshot 1  "snapshot 0.36.0" 
+.TH canon-report-snapshot 1  "snapshot 0.38.0" 
 .SH NAME
 canon\-report\-snapshot \- Export the panel marts to <DIR>/*.parquet plus manifest.json
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print version
 <\fIDIR\fR>
 The output directory (created if absent)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-report.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-report 1  "report 0.36.0" 
+.TH canon-report 1  "report 0.38.0" 
 .SH NAME
 canon\-report \- Build, check, or snapshot the status report
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ Byte\-diff .canon/REPORT.md against a fresh build (0 fresh, 1 missing or drifted
 canon\-report\-snapshot(1)
 Export the panel marts to <DIR>/*.parquet plus manifest.json
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-retrieve.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-retrieve 1  "retrieve 0.36.0" 
+.TH canon-retrieve 1  "retrieve 0.38.0" 
 .SH NAME
 canon\-retrieve \- Fetch role\-scoped strategy guidance
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-review-change.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-review-change 1  "change 0.36.0" 
+.TH canon-review-change 1  "change 0.38.0" 
 .SH NAME
 canon\-review\-change \- Write one attributed Review record for a chore change directly to the ledger (exactly one provenance ref required). The review signs the chore\*(Aqs invariants and checks against the diff and pins the change\*(Aqs brief; an edit to the brief stales it. A chore needs exactly this one review before `subject move \-\-to shipped`
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenarios. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
-The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer; line breaks refused)
+The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
 The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
@@ -95,4 +95,4 @@ Print version
 <\fICHANGE_ID\fR>
 The chore change to review
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-review-scenario.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-review-scenario 1  "scenario 0.36.0" 
+.TH canon-review-scenario 1  "scenario 0.38.0" 
 .SH NAME
 canon\-review\-scenario \- Write one attributed Review record per scenario directly to the ledger, nothing to promote (exactly one provenance ref required). A review pins the scenario\*(Aqs digest and what its latest evidence says (verdict and checks); it counts only while both are unchanged. Each scenario must be indexed, or nothing is written (exit 2)
 .SH SYNOPSIS
@@ -30,7 +30,7 @@ orchestrator
 Spec corpus id of the scenarios. Required only when canon.yaml configures more than one spec root
 .TP
 \fB\-\-actor\fR \fI<ACTOR_ID>\fR
-The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer; line breaks refused)
+The reviewer\*(Aqs id (recorded as the review\*(Aqs author and as its reviewer). One line of text: the white space around it is trimmed; a control character or line break inside it is refused
 .TP
 \fB\-\-rev\fR \fI<REV>\fR [default: HEAD]
 The commit this record is about: any git revision (`HEAD~1`, a branch, a tag, a short sha); the full sha is recorded with the code tree it saw. The default HEAD records the working tree as it stands (uncommitted code included), and a commit made from it has the same code tree. Outside git, or with no commit, the command refuses (COMMIT_REQUIRED)
@@ -95,4 +95,4 @@ Print version
 <\fISCENARIO_ID\fR>
 The reviewed scenarios (`<area>.<surface>.<nn>`), one review each, all or nothing. Each must have a record (`canon inventory sync`), or nothing is written (exit 2)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-review.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-review 1  "review 0.36.0" 
+.TH canon-review 1  "review 0.38.0" 
 .SH NAME
 canon\-review \- Record an attributed review verdict
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Write one attributed Review record per scenario directly to the ledger, nothing
 canon\-review\-change(1)
 Write one attributed Review record for a chore change directly to the ledger (exactly one provenance ref required). The review signs the chore\*(Aqs invariants and checks against the diff and pins the change\*(Aqs brief; an edit to the brief stales it. A chore needs exactly this one review before `subject move \-\-to shipped`
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-scenario-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-scenario-new 1  "new 0.36.0" 
+.TH canon-scenario-new 1  "new 0.38.0" 
 .SH NAME
 canon\-scenario\-new \- Append a tagged scenario stub to its .feature file (created if missing); many at once with `\-\-input`
 .SH SYNOPSIS
@@ -77,4 +77,4 @@ Print version
 <\fISCENARIO_ID\fR>
 <area>.<surface>.<nn> scenario tag
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-scenario.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-scenario 1  "scenario 0.36.0" 
+.TH canon-scenario 1  "scenario 0.38.0" 
 .SH NAME
 canon\-scenario \- Add a tagged scenario to a .feature spec file
 .SH SYNOPSIS
@@ -36,4 +36,4 @@ Print version
 canon\-scenario\-new(1)
 Append a tagged scenario stub to its .feature file (created if missing); many at once with `\-\-input`
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-schema.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-schema 1  "schema 0.36.0" 
+.TH canon-schema 1  "schema 0.38.0" 
 .SH NAME
 canon\-schema \- Describe canon\*(Aqs own commands: list them, or show one command\*(Aqs arguments, options, effect and exit codes
 .SH SYNOPSIS
@@ -74,4 +74,4 @@ A command whose effect depends on its arguments carries `effectNote`.
 
 The tree holds the options commands share, defined once; a command names them. A command document is its call surface only: members at their default and the options and codes every command has (`\-\-json`, `\-\-input`, `\-\-fields`, `USAGE`, `INTERNAL`, ...) are left out. `\-\-schemas` with a command path prints the JSON Schemas the command\*(Aqs refs reach, `Input` (the schema of one `\-\-input` document) and the `rejects` of its validators.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-search.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-search 1  "search 0.36.0" 
+.TH canon-search 1  "search 0.38.0" 
 .SH NAME
 canon\-search \- Search records, brief sections and scenario text, with each hit\*(Aqs neighbors in the record graph
 .SH SYNOPSIS
@@ -101,4 +101,4 @@ A read that first brings a derived index up to date: .canon/index/search.db, git
 rebuilt in full when any input changed; deleting it changes nothing but data.index.rebuilt.
 Exit 0 with empty hits when nothing matches; exit 2 for an empty text.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-selftest.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-selftest 1  "selftest 0.36.0" 
+.TH canon-selftest 1  "selftest 0.38.0" 
 .SH NAME
 canon\-selftest \- Run canon\*(Aqs built\-in fixture self\-tests
 .SH SYNOPSIS
@@ -66,4 +66,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-skills-check.1

@@ -1,10 +1,10 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-check 1  "check 0.36.0" 
+.TH canon-skills-check 1  "check 0.38.0" 
 .SH NAME
 canon\-skills\-check \- Check canonical projections without writing; exit 1 on drift, a legacy remnant, or a lock another canon version wrote
 .SH SYNOPSIS
-\fBcanon skills check\fR [\fB\-\-as\fR] [\fB\-\-skills\-source\fR] [\fB\-\-repo\fR] [\fB\-\-providers\fR] [\fB\-\-json\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
+\fBcanon skills check\fR [\fB\-\-as\fR] [\fB\-\-skills\-source\fR] [\fB\-\-repo\fR] [\fB\-\-harness\fR] [\fB\-\-no\-harness\fR] [\fB\-\-json\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
 .SH DESCRIPTION
 Check canonical projections without writing; exit 1 on drift, a legacy remnant, or a lock another canon version wrote
 .SH OPTIONS
@@ -32,8 +32,25 @@ Source directory; defaults to CANON_SKILLS_SOURCE or canon/skills
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
-\fB\-\-providers\fR \fI<LIST>\fR
-Providers to inspect (`claude`, `codex`, `omp`, `pi`, or a comma\-separated list). Omitted: as for install
+\fB\-\-harness\fR \fI<NAME>\fR
+A harness to inspect (repeatable, once per name): `claude`, `codex`, `omp` or `pi`. Omitted, and no `\-\-no\-harness`: as for install
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+claude
+.IP \(bu 2
+codex
+.IP \(bu 2
+omp
+.IP \(bu 2
+pi
+.RE
+.TP
+\fB\-\-no\-harness\fR
+Inspect no harness: the selection is an empty list
 .TP
 \fB\-\-json\fR
 Output JSON instead of the human\-readable form
@@ -44,4 +61,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-skills-doctor.1

@@ -1,12 +1,12 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-doctor 1  "doctor 0.36.0" 
+.TH canon-skills-doctor 1  "doctor 0.38.0" 
 .SH NAME
-canon\-skills\-doctor \- Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a provider that is not selected, and other skills whose description claims build work; reports only, never edits
+canon\-skills\-doctor \- Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a harness that is not selected, and other skills whose description claims build work; reports only, never edits
 .SH SYNOPSIS
-\fBcanon skills doctor\fR [\fB\-\-as\fR] [\fB\-\-skills\-source\fR] [\fB\-\-repo\fR] [\fB\-\-providers\fR] [\fB\-\-json\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
+\fBcanon skills doctor\fR [\fB\-\-as\fR] [\fB\-\-skills\-source\fR] [\fB\-\-repo\fR] [\fB\-\-harness\fR] [\fB\-\-no\-harness\fR] [\fB\-\-json\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
 .SH DESCRIPTION
-Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a provider that is not selected, and other skills whose description claims build work; reports only, never edits
+Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a harness that is not selected, and other skills whose description claims build work; reports only, never edits
 .SH OPTIONS
 .TP
 \fB\-\-as\fR \fI<ROLE>\fR
@@ -32,8 +32,25 @@ Source directory; defaults to CANON_SKILLS_SOURCE or canon/skills
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
-\fB\-\-providers\fR \fI<LIST>\fR
-Providers to inspect (`claude`, `codex`, `omp`, `pi`, or a comma\-separated list). Omitted: as for install
+\fB\-\-harness\fR \fI<NAME>\fR
+A harness to inspect (repeatable, once per name): `claude`, `codex`, `omp` or `pi`. Omitted, and no `\-\-no\-harness`: as for install
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+claude
+.IP \(bu 2
+codex
+.IP \(bu 2
+omp
+.IP \(bu 2
+pi
+.RE
+.TP
+\fB\-\-no\-harness\fR
+Inspect no harness: the selection is an empty list
 .TP
 \fB\-\-json\fR
 Output JSON instead of the human\-readable form
@@ -44,4 +61,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-skills-install.1

@@ -1,10 +1,10 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-install 1  "install 0.36.0" 
+.TH canon-skills-install 1  "install 0.38.0" 
 .SH NAME
 canon\-skills\-install \- Install the canonical `canon` bundle or legacy developer skills
 .SH SYNOPSIS
-\fBcanon skills install\fR [\fB\-\-as\fR] [\fB\-\-skills\-source\fR] [\fB\-\-repo\fR] [\fB\-\-providers\fR] [\fB\-\-dry\-run\fR] [\fB\-\-json\fR] [\fB\-\-input\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
+\fBcanon skills install\fR [\fB\-\-as\fR] [\fB\-\-skills\-source\fR] [\fB\-\-repo\fR] [\fB\-\-harness\fR] [\fB\-\-no\-harness\fR] [\fB\-\-dry\-run\fR] [\fB\-\-json\fR] [\fB\-\-input\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fB\-V\fR|\fB\-\-version\fR] 
 .SH DESCRIPTION
 Install the canonical `canon` bundle or legacy developer skills
 .SH OPTIONS
@@ -32,8 +32,25 @@ Developer override: read SKILL.src.md\*(Aqs frontmatter and scripts/ from this d
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
 .TP
-\fB\-\-providers\fR \fI<LIST>\fR
-Providers to project (`claude`, `codex`, `omp`, `pi`, a comma\-separated list, or `none`); also rewrites `skills.providers` in the target\*(Aqs canon.yaml. Omitted: canon.yaml `skills.providers`, else the install lock\*(Aqs providers, else the detected `.claude`, `.codex`, `.omp`, `.pi` directories; none detected installs nothing. Codex is projected to `.agents/skills/canon/`
+\fB\-\-harness\fR \fI<NAME>\fR
+A harness to project (repeatable, once per name): `claude`, `codex`, `omp` or `pi`; also rewrites `skills.providers` in the target\*(Aqs canon.yaml. Omitted, and no `\-\-no\-harness`: canon.yaml `skills.providers`, else the install lock\*(Aqs providers, else the detected `.claude`, `.codex`, `.omp`, `.pi` directories; none detected installs nothing. Codex is projected to `.agents/skills/canon/`
+.br
+
+.br
+\fIPossible values:\fR
+.RS 14
+.IP \(bu 2
+claude
+.IP \(bu 2
+codex
+.IP \(bu 2
+omp
+.IP \(bu 2
+pi
+.RE
+.TP
+\fB\-\-no\-harness\fR
+Project no harness: records an empty `skills.providers` in the target\*(Aqs canon.yaml and installs nothing
 .TP
 \fB\-\-dry\-run\fR
 Validate fully and report what would be written, without writing anything
@@ -50,4 +67,4 @@ Print help
 \fB\-V\fR, \fB\-\-version\fR
 Print version
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-skills-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills-show 1  "show 0.36.0" 
+.TH canon-skills-show 1  "show 0.38.0" 
 .SH NAME
 canon\-skills\-show \- Print a guide built into this binary (markdown on stdout); the installed SKILL.md is a stub that points here
 .SH SYNOPSIS
@@ -101,4 +101,4 @@ role\-planner
 role\-reviewer
 .RE
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-skills.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-skills 1  "skills 0.36.0" 
+.TH canon-skills 1  "skills 0.38.0" 
 .SH NAME
 canon\-skills \- Install canon\*(Aqs agent guides into a repo
 .SH SYNOPSIS
@@ -40,9 +40,9 @@ canon\-skills\-check(1)
 Check canonical projections without writing; exit 1 on drift, a legacy remnant, or a lock another canon version wrote
 .TP
 canon\-skills\-doctor(1)
-Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a provider that is not selected, and other skills whose description claims build work; reports only, never edits
+Print diagnostics for canonical projections, the install lock\*(Aqs canon version, legacy remnants, canon projections for a harness that is not selected, and other skills whose description claims build work; reports only, never edits
 .TP
 canon\-skills\-show(1)
 Print a guide built into this binary (markdown on stdout); the installed SKILL.md is a stub that points here
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-status.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-status 1  "status 0.36.0" 
+.TH canon-status 1  "status 0.38.0" 
 .SH NAME
 canon\-status \- Show where this repo stands: subjects by status, their gaps, and the next commands
 .SH SYNOPSIS
@@ -53,4 +53,4 @@ scenarios, with an `Approved:` line, or a chore; each has a status (approved,
 unapproved, changed) and a reason. A never\-approved untagged feature change is a
 pending draft (`pendingDrafts`) and blocks nothing. `statusVersion` is 4.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-strategy-approval-payload.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy-approval-payload 1  "approval-payload 0.36.0" 
+.TH canon-strategy-approval-payload 1  "approval-payload 0.38.0" 
 .SH NAME
 canon\-strategy\-approval\-payload \- The unsigned approval payload bytes an external signer signs (a read: identical arguments give identical bytes)
 .SH SYNOPSIS
@@ -33,7 +33,7 @@ The paired evaluation bundle the approval is for
 Who approves (the human whose detached signature the payload is for)
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-The approval time that is signed into the payload: RFC3339, or YYYY\-MM\-DD (UTC midnight)
+The approval time that is signed into the payload: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused). Fix it once and give the same value to the signature and to `strategy rollback`
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
 The repo to act on (default: the nearest ancestor directory holding a canon.yaml)
@@ -50,4 +50,4 @@ Print version
 <\fISTRATEGY_ID\fR>
 The StrategyId (ULID) whose approval payload to print
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-strategy-promote.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy-promote 1  "promote 0.36.0" 
+.TH canon-strategy-promote 1  "promote 0.38.0" 
 .SH NAME
 canon\-strategy\-promote \- Promote a strategy after paired evaluation and signed approval
 .SH SYNOPSIS
@@ -56,4 +56,4 @@ Print version
 <\fISTRATEGY_ID\fR>
 The StrategyId (ULID) to promote
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-strategy-rollback.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy-rollback 1  "rollback 0.36.0" 
+.TH canon-strategy-rollback 1  "rollback 0.38.0" 
 .SH NAME
 canon\-strategy\-rollback \- Disable an active strategy with durable rollback provenance
 .SH SYNOPSIS
@@ -36,9 +36,9 @@ The approver; must be a policy\-pinned approver
 Detached signature file over the rollback payload
 .TP
 \fB\-\-approval\-at\fR \fI<TIMESTAMP>\fR
-When the approver signed: RFC3339, or YYYY\-MM\-DD (UTC midnight)
+When the approver signed: an RFC 3339 date\-time (`2030\-01\-01T10:00:00Z`; a date alone is refused), the value the signature was made over
 .TP
-\fB\-\-contradicting\-trajectory\fR \fI<ID>\fR
+\fB\-\-contradicting\-trajectory\fR \fI<TRAJECTORY_ID>\fR
 A trajectory that contradicts the strategy (must exist in the trajectory store)
 .TP
 \fB\-\-repo\fR \fI<DIR>\fR
@@ -59,4 +59,4 @@ Print version
 <\fISTRATEGY_ID\fR>
 The StrategyId (ULID) to roll back
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-strategy.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-strategy 1  "strategy 0.36.0" 
+.TH canon-strategy 1  "strategy 0.38.0" 
 .SH NAME
 canon\-strategy \- Promote a proven strategy into the git\-tracked tier
 .SH SYNOPSIS
@@ -42,4 +42,4 @@ The unsigned approval payload bytes an external signer signs (a read: identical
 canon\-strategy\-rollback(1)
 Disable an active strategy with durable rollback provenance
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-subject-adopt.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-adopt 1  "adopt 0.36.0" 
+.TH canon-subject-adopt 1  "adopt 0.38.0" 
 .SH NAME
 canon\-subject\-adopt \- Link an imported plan change to a subject (adopting it under another subject adds that subject; a change may belong to several)
 .SH SYNOPSIS
@@ -50,4 +50,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject to adopt the change under
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-subject-move.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-move 1  "move 0.36.0" 
+.TH canon-subject-move 1  "move 0.38.0" 
 .SH NAME
 canon\-subject\-move \- Move a subject to another lifecycle state (shipping is evidence\-gated; with spec_coverage.require_review, entering its scope is review\-gated; shipped → verifying reopens with \-\-reason)
 .SH SYNOPSIS
@@ -77,4 +77,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject to move
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-subject-new.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-new 1  "new 0.36.0" 
+.TH canon-subject-new 1  "new 0.38.0" 
 .SH NAME
 canon\-subject\-new \- Author a new subject at status `proposed`
 .SH SYNOPSIS
@@ -62,4 +62,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject\*(Aqs kebab\-slug id
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-subject-show.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-show 1  "show 0.36.0" 
+.TH canon-subject-show 1  "show 0.38.0" 
 .SH NAME
 canon\-subject\-show \- Show a subject (read\-only)
 .SH SYNOPSIS
@@ -41,4 +41,4 @@ Print version
 <\fISUBJECT_ID\fR>
 The subject to show
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-subject-unadopt.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject-unadopt 1  "unadopt 0.36.0" 
+.TH canon-subject-unadopt 1  "unadopt 0.38.0" 
 .SH NAME
 canon\-subject\-unadopt \- Take a change back out of a subject (the mirror of adopt; refused for a change whose brief is approved)
 .SH SYNOPSIS
@@ -60,4 +60,4 @@ change whose brief carries an `Approved:` line: it is the subject\*(Aqs approved
 scope, and for a change a scenario the subject owns is tagged
 `@flow:<change>.*` for (remove or retag it first). A pair that is not linked writes nothing and exits 0.
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-subject.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-subject 1  "subject 0.36.0" 
+.TH canon-subject 1  "subject 0.38.0" 
 .SH NAME
 canon\-subject \- Create and manage subjects (durable product units)
 .SH SYNOPSIS
@@ -48,4 +48,4 @@ Show a subject (read\-only)
 canon\-subject\-move(1)
 Move a subject to another lifecycle state (shipping is evidence\-gated; with spec_coverage.require_review, entering its scope is review\-gated; shipped → verifying reopens with \-\-reason)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-task-done.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-task-done 1  "done 0.36.0" 
+.TH canon-task-done 1  "done 0.38.0" 
 .SH NAME
 canon\-task\-done \- Flip one task checkbox, gated on real evidence (fails closed)
 .SH SYNOPSIS
@@ -44,4 +44,4 @@ Print version
 <\fITASK_ID\fR>
 The task id (<change_id>#<n>)
 .SH VERSION
-v0.36.0
+v0.38.0

package/man/canon-task.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH canon-task 1  "task 0.36.0" 
+.TH canon-task 1  "task 0.38.0" 
 .SH NAME
 canon\-task \- Flip a plan task\*(Aqs checkbox once committed evidence supports it
 .SH SYNOPSIS
@@ -39,4 +39,4 @@ Flip one task checkbox, gated on real evidence (fails closed)
 Examples:
   canon task done my\-change#3
 .SH VERSION
-v0.36.0
+v0.38.0