@nebulacomponents/citable 1.10.0 → 1.12.0

package/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 ## Unreleased
 
+## 1.12.0 — 2026-07-19
+
+### Added
+
+- Independent desktop, mobile, and JavaScript-disabled Chromium render profiles
+  with raw/rendered parity artifacts and bounded interaction discovery.
+- Partial-failure evidence and `--resume-run` recovery that reuses only
+  successful profiles from an immutable source run.
+- Optional repeated local Lighthouse execution with pinned runtime metadata,
+  per-run artifacts, lab/field separation, and median metric summaries.
+
+## 1.11.0 — 2026-07-19
+
+### Added
+
+- Bounded media evidence collection for local PDF text/metadata with page
+  anchors, transcript cues with provenance, and image alt/caption context.
+- Explicit optional OCR behavior and media-to-claim linkage validation through
+  `citable observe media --input <manifest> [--ocr]`.
+- Medium-specific limitations that prevent extraction from being represented as
+  claim support, reading-order validation, transcription accuracy, or semantic equivalence.
+
 ## 1.10.0 — 2026-07-19
 
 ### Added

package/README.md

@@ -155,6 +155,9 @@ citable observe logs --input edge-logs.json
 citable observe bing --dataset ai_performance --input bing-ai-performance.csv
 citable observe consensus --target ./dist --base-url https://example.com
 citable observe performance --target https://example.com # CRUX_API_KEY
+citable observe performance --target https://example.com --lighthouse --repeat 3
+citable observe render --target https://example.com --interactions
+citable observe render --target https://example.com --resume-run <run-id>
 citable apply --input remediation-spec.json          # dry run
 citable apply --input remediation-spec.json --write  # reviewed + hash-locked
 citable monitor [runA runB]
@@ -173,6 +176,7 @@ citable reviews sample <sampling-plan-id> --write
 citable reviews evaluate
 citable schedules run <schedule-id> --ref-date 2026-07-19
 citable project github <run-id>
+citable observe media --input media-manifest.json # add --ocr explicitly when required
 citable substantiate          # claim/evidence assessment (dry run)
 citable validate              # registry schema + referential integrity
 ```
@@ -204,12 +208,16 @@ citable validate              # registry schema + referential integrity
 - [Reviewer and exception governance](docs/governance/reviewer-exceptions.md) —
   policy-driven authority, separation of duties, expiry, invalidation, and
   immutable enforcement dispositions
+- [Known limitations](docs/known-limitations.md) includes medium-specific PDF,
+  transcript, image-context, and optional OCR boundaries.
 
 ## Requirements
 
 Node >= 24.0.0. Network access is used for URL audits and explicitly selected
 live collectors. Render collection requires the optional `playwright` peer and
-an installed Chromium browser. Google index inspection uses `GSC_ACCESS_TOKEN`
+an installed Chromium browser. Local Lighthouse collection requires the
+optional `lighthouse` and `chrome-launcher` peers plus Chrome or Chromium.
+Google index inspection uses `GSC_ACCESS_TOKEN`
 and `--site-url`; CrUX uses `CRUX_API_KEY`. Missing dependencies or credentials
 produce incomplete evidence. Supported frameworks for auto-detection: Next.js,
 Astro, Nuxt, SvelteKit, Gatsby (other stacks: audit their built HTML output).

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.10.0
+version: 1.12.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -96,6 +96,8 @@ citable compare-snapshots [runA runB]
 citable action-plan [run-id]          # ordered actions, blockers, semantic gates, verification
 citable observe <mode> [options]      # render/index/citation/log/passage/consensus/performance evidence
 citable observe bing --dataset <search_performance|ai_performance> --input <csv|json>
+citable observe render --target <url> [--interactions] [--resume-run <run-id>]
+citable observe performance --target <url> --lighthouse [--repeat 1..5]
 citable apply --input <spec> [--write] # reviewed, hash-locked remediation; dry run by default
 citable monitor [runA runB]           # observation regression alerts
 citable metrics import --provider <name> --input <csv|json>
@@ -117,6 +119,7 @@ citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
 citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
 citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.10.0
+1.12.0

package/dist/universal/.agents/skills/citable/commands/README.md

@@ -30,10 +30,11 @@ intent, not executability, so statuses are strict:
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
 | /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
+| /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |
-| /citable validate-render | partially implemented by `observe render`; mobile/cross-browser and interaction exploration remain |
+| /citable validate-render | partially implemented by `observe render`; desktop/mobile/JavaScript-disabled profiles and bounded interaction exploration are implemented, while cross-browser and application-specific journeys remain |
 | /citable measure seo/aeo/geo, test-prompts, monitor-crawlers, monitor-contradictions | partially implemented by metric/observation imports, objective evaluation, Google/CrUX live APIs, custom citation adapters, and monitor comparisons |
 
 Shared refusal conditions (all commands): any action that would fabricate

package/dist/universal/.agents/skills/citable/commands/media-evidence.md

@@ -0,0 +1,17 @@
+# Media evidence collection
+
+Use `citable observe media --input <manifest.json>` for bounded local-media
+evidence. The manifest declares source URL, owning page, permission status, and
+linked claim IDs for each PDF, transcript, or image-context source.
+
+PDF collection extracts native text, basic metadata, and stable page anchors.
+It does not establish reading order, table structure, footnote linkage,
+signatures, revisions, scan accuracy, accessibility, or claim support.
+Transcript collection preserves cues but does not verify speakers, timing,
+accuracy, or source-media parity. Image collection records alt text, captions,
+and nearby figure text without inferring visual entailment.
+
+OCR is off by default. `--ocr` explicitly requests the optional `tesseract.js`
+path; an unavailable engine or image produces incomplete evidence, never guessed
+text. Every media-to-claim relationship is declarative and still requires
+human-authoritative semantic review.

package/dist/universal/.agents/skills/citable/commands/observe-and-act.md

@@ -9,7 +9,11 @@ failure_behaviour: unavailable dependency, credential, source run, reviewer, exa
 ## Collection modes
 
 - `observe render --target <URL>` uses optional Playwright. Browser evidence is
-  not search-index evidence.
+  not search-index evidence. It captures independent desktop, mobile, and
+  JavaScript-disabled profiles. `--interactions` exercises at most 20 visible
+  disclosure, inactive-tab, and load-more-like controls; it does not prove an
+  application-specific journey. `--resume-run` reuses only successful profile
+  observations from the named immutable run and recollects failed/absent ones.
 - `observe index --input <JSON>` imports owner exports. With `--target`,
   `--site-url`, and `GSC_ACCESS_TOKEN`, it calls Google URL Inspection, which
   reports the indexed version rather than performing a live indexability test.
@@ -21,6 +25,9 @@ failure_behaviour: unavailable dependency, credential, source run, reviewer, exa
   without IP verification remain low confidence.
 - `observe passages|consensus --target <dir|URL>` performs static extraction.
 - `observe performance` imports evidence or calls CrUX with `CRUX_API_KEY`.
+  `--lighthouse` instead performs 1-5 local lab runs (default 3) using optional
+  `lighthouse` and `chrome-launcher` peers, preserving each result and a median
+  summary. Lab evidence remains separate from CrUX field evidence.
 - `observe corroboration --input <JSON>` records observable external mentions;
   controlled or unverified sources do not become authority claims.
 

package/dist/universal/.agents/skills/citable/manifest.json

@@ -1,11 +1,11 @@
 {
   "name": "citable",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "managedBy": "citable-cli",
   "provider": "codex",
   "providerName": "OpenAI Codex",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.10.0",
+  "sourcePackage": "@nebulacomponents/citable@1.12.0",
   "variantPath": ".agents/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
@@ -13,16 +13,17 @@
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
-    "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
+    "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
+    "commands/observe-and-act.md": "sha256:00b24966c537b2868e722a49fe49b79e73b60b2454ecdb13b1a34ff3475036ae",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
+    "commands/README.md": "sha256:ced929fc2ea3af9be2b87433b88a1add8d6e0938d59c5b3cd24340a7ccc6abdb",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
-    "references/aeo-geo-validation.md": "sha256:e45828d3ccca54a08513cb4235578c8a8ecf1dc47d1cb98e4a497838103bef70",
+    "references/aeo-geo-validation.md": "sha256:47a33e717994191069ce96871e62e9bd6f9db32e8121c8784793ed1a58a1f245",
     "references/anti-patterns.md": "sha256:de63f8e646af0fbf479b45eb1d050ae62a8637acc320d21b87e4a083fd4c47e7",
-    "references/capability-boundaries.md": "sha256:5d59f15cf97529fec26a105095278dc7a17ae3b829103994ec5ddf420897f448",
+    "references/capability-boundaries.md": "sha256:66d6860a6893a1613d4416b2185c48308457bf006bb943817623fd1bd700d9a8",
     "references/evidence-authority.md": "sha256:b81ee09953999f16b19dc0eaba6fffe794b58d152e2adbd95c3179730bc08ffc",
     "rubrics/answer-extractability.md": "sha256:c8e741143c34e53afdb3dc7b6976ce7b4485dce13b12d14c193fccb17bacf1da",
     "rubrics/claim-boundedness.md": "sha256:0bab1b85248c252b966175912ebfae13bf18aa7e41573f7466831ac78b5d3e27",
@@ -54,9 +55,10 @@
     "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
+    "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:bea8eb7ea74442a1be745aa40ff22d25dcd89a82fb0205dfc6c597da40831f64",
+    "schemas/observation.schema.json": "sha256:eebb7deb445b9de8c2ffa603fce441f9a857ce290602d8828915fb630b566693",
     "schemas/page.schema.json": "sha256:627613c35f461177fa946df08edf66fbf6f6bbdfc57eef812572b3af796d5e07",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -70,9 +72,9 @@
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
     "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
+    "SKILL.md": "sha256:b5607872edd36746674f596db543f02004d30c98d4c15b745bfdc42afa77be8d",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
+    "VERSION": "sha256:c92df6bdde330be219d62f48ec6490b01889436f2f59027aab200e74de619168"
   },
-  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
+  "treeHash": "sha256:bf020f14e20b04db5037c18aa9bcbfa6ac5e39522681be610676de380ab7eeec"
 }

package/dist/universal/.agents/skills/citable/references/aeo-geo-validation.md

@@ -9,7 +9,7 @@ not a prediction of citation or recommendation. Report every row as
 | State | Current evidence boundary |
 | --- | --- |
 | Retrieval eligibility | Static policy plus captured synthetic HTTP response; crawler identity remains simulated unless verified logs/IP evidence are supplied |
-| Source extraction and support suitability | Initial-HTML extraction plus registries/detectors/rubrics; rendered-DOM parity remains not established without a renderer |
+| Source extraction and support suitability | Initial HTML plus registries/detectors/rubrics; optional Chromium profiles can establish bounded raw/desktop/mobile/JavaScript-disabled parity, while cross-browser and application-specific journeys remain unproven |
 | Observed citation behavior | Operator-supplied prompt-result observations only; report cohort size and property citation presence, never infer from readiness |
 
 ## AEO checks

package/dist/universal/.agents/skills/citable/references/capability-boundaries.md

@@ -9,6 +9,8 @@ Use the narrowest supported state. Never promote evidence across rows.
 | Verified crawler reached edge | Imported evidence | `observe logs` record plus provider-published IP verification where supported |
 | Observed in production logs | Imported evidence | Timestamped `observe logs` artifact with URL, status, bytes, latency, cache result, UA, and verification result |
 | Indexed | Google API or imported evidence | `observe index`; Google inspection covers the indexed version, other engines require owner exports |
+| Rendered profile observed | Optional local browser evidence | Successful profile-specific Chromium DOM, text, screenshot, failed requests, interactions, viewport, and configuration; failed profiles remain independent |
+| Render parity compared | Bounded local comparison | Raw/desktop and mobile/desktop word ratios from the same run or explicitly resumed immutable profiles; not semantic equivalence |
 | Returned by retrieval | Operator supplied | Provider observation containing retrieved source URL |
 | Cited | Import or disclosed adapter | Complete `observe citations` answer with citation URL and product/adapter mode |
 | Materially supports answer | Human review required | `citation_review` maps answer claim to source passage and names the reviewer |

package/dist/universal/.agents/skills/citable/schemas/media-manifest.schema.json

@@ -0,0 +1,2 @@
+{
+  "$id":"citable://schemas/media-manifest.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Media evidence import manifest","type":"object","additionalProperties":false,"required":["version","items"],"properties":{"version":{"const":1},"items":{"type":"array","minItems":1,"items":{"type":"object","additionalProperties":false,"required":["media_id","type","path","source_url","page_url","claim_ids","permission_status"],"properties":{"media_id":{"type":"string","pattern":"^MEDIA-[A-Z0-9][A-Z0-9_-]*$"},"type":{"type":"string","enum":["pdf","transcript","image"]},"path":{"type":"string","minLength":1},"source_url":{"type":["string","null"]},"page_url":{"type":["string","null"]},"claim_ids":{"type":"array","uniqueItems":true,"items":{"type":"string"}},"permission_status":{"type":"string","enum":["owner_authorized","licensed","public_unknown","internal"]},"image_src":{"type":"string"},"language":{"type":"string"},"published_at":{"type":"string","format":"date-time"}}}}}}

package/dist/universal/.agents/skills/citable/schemas/observation.schema.json

@@ -7,7 +7,7 @@
   "required": ["observation_id", "kind", "state", "collected_at", "collection_method", "confidence", "source", "evidence_hash", "data"],
   "properties": {
     "observation_id": { "type": "string", "minLength": 1 },
-    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric"] },
+    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image"] },
     "state": { "type": "string", "enum": ["observed", "not_observed", "not_evidenced", "incomplete", "review_required", "failed"] },
     "collected_at": { "type": "string", "format": "date-time" },
     "collection_method": { "type": "string", "enum": ["live_api", "browser", "owner_import", "synthetic_fetch", "static_analysis", "human_review"] },

package/dist/universal/.claude/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.10.0
+version: 1.12.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -96,6 +96,8 @@ citable compare-snapshots [runA runB]
 citable action-plan [run-id]          # ordered actions, blockers, semantic gates, verification
 citable observe <mode> [options]      # render/index/citation/log/passage/consensus/performance evidence
 citable observe bing --dataset <search_performance|ai_performance> --input <csv|json>
+citable observe render --target <url> [--interactions] [--resume-run <run-id>]
+citable observe performance --target <url> --lighthouse [--repeat 1..5]
 citable apply --input <spec> [--write] # reviewed, hash-locked remediation; dry run by default
 citable monitor [runA runB]           # observation regression alerts
 citable metrics import --provider <name> --input <csv|json>
@@ -117,6 +119,7 @@ citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
 citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
 citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema

package/dist/universal/.claude/skills/citable/VERSION

@@ -1 +1 @@
-1.10.0
+1.12.0

package/dist/universal/.claude/skills/citable/commands/README.md

@@ -30,10 +30,11 @@ intent, not executability, so statuses are strict:
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
 | /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
+| /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |
-| /citable validate-render | partially implemented by `observe render`; mobile/cross-browser and interaction exploration remain |
+| /citable validate-render | partially implemented by `observe render`; desktop/mobile/JavaScript-disabled profiles and bounded interaction exploration are implemented, while cross-browser and application-specific journeys remain |
 | /citable measure seo/aeo/geo, test-prompts, monitor-crawlers, monitor-contradictions | partially implemented by metric/observation imports, objective evaluation, Google/CrUX live APIs, custom citation adapters, and monitor comparisons |
 
 Shared refusal conditions (all commands): any action that would fabricate

package/dist/universal/.claude/skills/citable/commands/media-evidence.md

@@ -0,0 +1,17 @@
+# Media evidence collection
+
+Use `citable observe media --input <manifest.json>` for bounded local-media
+evidence. The manifest declares source URL, owning page, permission status, and
+linked claim IDs for each PDF, transcript, or image-context source.
+
+PDF collection extracts native text, basic metadata, and stable page anchors.
+It does not establish reading order, table structure, footnote linkage,
+signatures, revisions, scan accuracy, accessibility, or claim support.
+Transcript collection preserves cues but does not verify speakers, timing,
+accuracy, or source-media parity. Image collection records alt text, captions,
+and nearby figure text without inferring visual entailment.
+
+OCR is off by default. `--ocr` explicitly requests the optional `tesseract.js`
+path; an unavailable engine or image produces incomplete evidence, never guessed
+text. Every media-to-claim relationship is declarative and still requires
+human-authoritative semantic review.

package/dist/universal/.claude/skills/citable/commands/observe-and-act.md

@@ -9,7 +9,11 @@ failure_behaviour: unavailable dependency, credential, source run, reviewer, exa
 ## Collection modes
 
 - `observe render --target <URL>` uses optional Playwright. Browser evidence is
-  not search-index evidence.
+  not search-index evidence. It captures independent desktop, mobile, and
+  JavaScript-disabled profiles. `--interactions` exercises at most 20 visible
+  disclosure, inactive-tab, and load-more-like controls; it does not prove an
+  application-specific journey. `--resume-run` reuses only successful profile
+  observations from the named immutable run and recollects failed/absent ones.
 - `observe index --input <JSON>` imports owner exports. With `--target`,
   `--site-url`, and `GSC_ACCESS_TOKEN`, it calls Google URL Inspection, which
   reports the indexed version rather than performing a live indexability test.
@@ -21,6 +25,9 @@ failure_behaviour: unavailable dependency, credential, source run, reviewer, exa
   without IP verification remain low confidence.
 - `observe passages|consensus --target <dir|URL>` performs static extraction.
 - `observe performance` imports evidence or calls CrUX with `CRUX_API_KEY`.
+  `--lighthouse` instead performs 1-5 local lab runs (default 3) using optional
+  `lighthouse` and `chrome-launcher` peers, preserving each result and a median
+  summary. Lab evidence remains separate from CrUX field evidence.
 - `observe corroboration --input <JSON>` records observable external mentions;
   controlled or unverified sources do not become authority claims.
 

package/dist/universal/.claude/skills/citable/manifest.json

@@ -1,11 +1,11 @@
 {
   "name": "citable",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "managedBy": "citable-cli",
   "provider": "claude",
   "providerName": "Claude Code",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.10.0",
+  "sourcePackage": "@nebulacomponents/citable@1.12.0",
   "variantPath": ".claude/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
@@ -13,16 +13,17 @@
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
-    "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
+    "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
+    "commands/observe-and-act.md": "sha256:00b24966c537b2868e722a49fe49b79e73b60b2454ecdb13b1a34ff3475036ae",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
+    "commands/README.md": "sha256:ced929fc2ea3af9be2b87433b88a1add8d6e0938d59c5b3cd24340a7ccc6abdb",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
-    "references/aeo-geo-validation.md": "sha256:e45828d3ccca54a08513cb4235578c8a8ecf1dc47d1cb98e4a497838103bef70",
+    "references/aeo-geo-validation.md": "sha256:47a33e717994191069ce96871e62e9bd6f9db32e8121c8784793ed1a58a1f245",
     "references/anti-patterns.md": "sha256:de63f8e646af0fbf479b45eb1d050ae62a8637acc320d21b87e4a083fd4c47e7",
-    "references/capability-boundaries.md": "sha256:5d59f15cf97529fec26a105095278dc7a17ae3b829103994ec5ddf420897f448",
+    "references/capability-boundaries.md": "sha256:66d6860a6893a1613d4416b2185c48308457bf006bb943817623fd1bd700d9a8",
     "references/evidence-authority.md": "sha256:b81ee09953999f16b19dc0eaba6fffe794b58d152e2adbd95c3179730bc08ffc",
     "rubrics/answer-extractability.md": "sha256:c8e741143c34e53afdb3dc7b6976ce7b4485dce13b12d14c193fccb17bacf1da",
     "rubrics/claim-boundedness.md": "sha256:0bab1b85248c252b966175912ebfae13bf18aa7e41573f7466831ac78b5d3e27",
@@ -54,9 +55,10 @@
     "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
+    "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:bea8eb7ea74442a1be745aa40ff22d25dcd89a82fb0205dfc6c597da40831f64",
+    "schemas/observation.schema.json": "sha256:eebb7deb445b9de8c2ffa603fce441f9a857ce290602d8828915fb630b566693",
     "schemas/page.schema.json": "sha256:627613c35f461177fa946df08edf66fbf6f6bbdfc57eef812572b3af796d5e07",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -70,9 +72,9 @@
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
     "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
+    "SKILL.md": "sha256:b5607872edd36746674f596db543f02004d30c98d4c15b745bfdc42afa77be8d",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
+    "VERSION": "sha256:c92df6bdde330be219d62f48ec6490b01889436f2f59027aab200e74de619168"
   },
-  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
+  "treeHash": "sha256:bf020f14e20b04db5037c18aa9bcbfa6ac5e39522681be610676de380ab7eeec"
 }

package/dist/universal/.claude/skills/citable/references/aeo-geo-validation.md

@@ -9,7 +9,7 @@ not a prediction of citation or recommendation. Report every row as
 | State | Current evidence boundary |
 | --- | --- |
 | Retrieval eligibility | Static policy plus captured synthetic HTTP response; crawler identity remains simulated unless verified logs/IP evidence are supplied |
-| Source extraction and support suitability | Initial-HTML extraction plus registries/detectors/rubrics; rendered-DOM parity remains not established without a renderer |
+| Source extraction and support suitability | Initial HTML plus registries/detectors/rubrics; optional Chromium profiles can establish bounded raw/desktop/mobile/JavaScript-disabled parity, while cross-browser and application-specific journeys remain unproven |
 | Observed citation behavior | Operator-supplied prompt-result observations only; report cohort size and property citation presence, never infer from readiness |
 
 ## AEO checks

package/dist/universal/.claude/skills/citable/references/capability-boundaries.md

@@ -9,6 +9,8 @@ Use the narrowest supported state. Never promote evidence across rows.
 | Verified crawler reached edge | Imported evidence | `observe logs` record plus provider-published IP verification where supported |
 | Observed in production logs | Imported evidence | Timestamped `observe logs` artifact with URL, status, bytes, latency, cache result, UA, and verification result |
 | Indexed | Google API or imported evidence | `observe index`; Google inspection covers the indexed version, other engines require owner exports |
+| Rendered profile observed | Optional local browser evidence | Successful profile-specific Chromium DOM, text, screenshot, failed requests, interactions, viewport, and configuration; failed profiles remain independent |
+| Render parity compared | Bounded local comparison | Raw/desktop and mobile/desktop word ratios from the same run or explicitly resumed immutable profiles; not semantic equivalence |
 | Returned by retrieval | Operator supplied | Provider observation containing retrieved source URL |
 | Cited | Import or disclosed adapter | Complete `observe citations` answer with citation URL and product/adapter mode |
 | Materially supports answer | Human review required | `citation_review` maps answer claim to source passage and names the reviewer |

package/dist/universal/.claude/skills/citable/schemas/media-manifest.schema.json

@@ -0,0 +1,2 @@
+{
+  "$id":"citable://schemas/media-manifest.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Media evidence import manifest","type":"object","additionalProperties":false,"required":["version","items"],"properties":{"version":{"const":1},"items":{"type":"array","minItems":1,"items":{"type":"object","additionalProperties":false,"required":["media_id","type","path","source_url","page_url","claim_ids","permission_status"],"properties":{"media_id":{"type":"string","pattern":"^MEDIA-[A-Z0-9][A-Z0-9_-]*$"},"type":{"type":"string","enum":["pdf","transcript","image"]},"path":{"type":"string","minLength":1},"source_url":{"type":["string","null"]},"page_url":{"type":["string","null"]},"claim_ids":{"type":"array","uniqueItems":true,"items":{"type":"string"}},"permission_status":{"type":"string","enum":["owner_authorized","licensed","public_unknown","internal"]},"image_src":{"type":"string"},"language":{"type":"string"},"published_at":{"type":"string","format":"date-time"}}}}}}

package/dist/universal/.claude/skills/citable/schemas/observation.schema.json

@@ -7,7 +7,7 @@
   "required": ["observation_id", "kind", "state", "collected_at", "collection_method", "confidence", "source", "evidence_hash", "data"],
   "properties": {
     "observation_id": { "type": "string", "minLength": 1 },
-    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric"] },
+    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image"] },
     "state": { "type": "string", "enum": ["observed", "not_observed", "not_evidenced", "incomplete", "review_required", "failed"] },
     "collected_at": { "type": "string", "format": "date-time" },
     "collection_method": { "type": "string", "enum": ["live_api", "browser", "owner_import", "synthetic_fetch", "static_analysis", "human_review"] },

package/dist/universal/.cursor/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.10.0
+version: 1.12.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -96,6 +96,8 @@ citable compare-snapshots [runA runB]
 citable action-plan [run-id]          # ordered actions, blockers, semantic gates, verification
 citable observe <mode> [options]      # render/index/citation/log/passage/consensus/performance evidence
 citable observe bing --dataset <search_performance|ai_performance> --input <csv|json>
+citable observe render --target <url> [--interactions] [--resume-run <run-id>]
+citable observe performance --target <url> --lighthouse [--repeat 1..5]
 citable apply --input <spec> [--write] # reviewed, hash-locked remediation; dry run by default
 citable monitor [runA runB]           # observation regression alerts
 citable metrics import --provider <name> --input <csv|json>
@@ -117,6 +119,7 @@ citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
 citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
 citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema

package/dist/universal/.cursor/skills/citable/VERSION

@@ -1 +1 @@
-1.10.0
+1.12.0

package/dist/universal/.cursor/skills/citable/commands/README.md

@@ -30,10 +30,11 @@ intent, not executability, so statuses are strict:
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
 | /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
+| /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |
-| /citable validate-render | partially implemented by `observe render`; mobile/cross-browser and interaction exploration remain |
+| /citable validate-render | partially implemented by `observe render`; desktop/mobile/JavaScript-disabled profiles and bounded interaction exploration are implemented, while cross-browser and application-specific journeys remain |
 | /citable measure seo/aeo/geo, test-prompts, monitor-crawlers, monitor-contradictions | partially implemented by metric/observation imports, objective evaluation, Google/CrUX live APIs, custom citation adapters, and monitor comparisons |
 
 Shared refusal conditions (all commands): any action that would fabricate

package/dist/universal/.cursor/skills/citable/commands/media-evidence.md

@@ -0,0 +1,17 @@
+# Media evidence collection
+
+Use `citable observe media --input <manifest.json>` for bounded local-media
+evidence. The manifest declares source URL, owning page, permission status, and
+linked claim IDs for each PDF, transcript, or image-context source.
+
+PDF collection extracts native text, basic metadata, and stable page anchors.
+It does not establish reading order, table structure, footnote linkage,
+signatures, revisions, scan accuracy, accessibility, or claim support.
+Transcript collection preserves cues but does not verify speakers, timing,
+accuracy, or source-media parity. Image collection records alt text, captions,
+and nearby figure text without inferring visual entailment.
+
+OCR is off by default. `--ocr` explicitly requests the optional `tesseract.js`
+path; an unavailable engine or image produces incomplete evidence, never guessed
+text. Every media-to-claim relationship is declarative and still requires
+human-authoritative semantic review.

package/dist/universal/.cursor/skills/citable/commands/observe-and-act.md

@@ -9,7 +9,11 @@ failure_behaviour: unavailable dependency, credential, source run, reviewer, exa
 ## Collection modes
 
 - `observe render --target <URL>` uses optional Playwright. Browser evidence is
-  not search-index evidence.
+  not search-index evidence. It captures independent desktop, mobile, and
+  JavaScript-disabled profiles. `--interactions` exercises at most 20 visible
+  disclosure, inactive-tab, and load-more-like controls; it does not prove an
+  application-specific journey. `--resume-run` reuses only successful profile
+  observations from the named immutable run and recollects failed/absent ones.
 - `observe index --input <JSON>` imports owner exports. With `--target`,
   `--site-url`, and `GSC_ACCESS_TOKEN`, it calls Google URL Inspection, which
   reports the indexed version rather than performing a live indexability test.
@@ -21,6 +25,9 @@ failure_behaviour: unavailable dependency, credential, source run, reviewer, exa
   without IP verification remain low confidence.
 - `observe passages|consensus --target <dir|URL>` performs static extraction.
 - `observe performance` imports evidence or calls CrUX with `CRUX_API_KEY`.
+  `--lighthouse` instead performs 1-5 local lab runs (default 3) using optional
+  `lighthouse` and `chrome-launcher` peers, preserving each result and a median
+  summary. Lab evidence remains separate from CrUX field evidence.
 - `observe corroboration --input <JSON>` records observable external mentions;
   controlled or unverified sources do not become authority claims.
 

package/dist/universal/.cursor/skills/citable/manifest.json

@@ -1,11 +1,11 @@
 {
   "name": "citable",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "managedBy": "citable-cli",
   "provider": "cursor",
   "providerName": "Cursor",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.10.0",
+  "sourcePackage": "@nebulacomponents/citable@1.12.0",
   "variantPath": ".cursor/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
@@ -13,16 +13,17 @@
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
-    "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
+    "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
+    "commands/observe-and-act.md": "sha256:00b24966c537b2868e722a49fe49b79e73b60b2454ecdb13b1a34ff3475036ae",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
+    "commands/README.md": "sha256:ced929fc2ea3af9be2b87433b88a1add8d6e0938d59c5b3cd24340a7ccc6abdb",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
-    "references/aeo-geo-validation.md": "sha256:e45828d3ccca54a08513cb4235578c8a8ecf1dc47d1cb98e4a497838103bef70",
+    "references/aeo-geo-validation.md": "sha256:47a33e717994191069ce96871e62e9bd6f9db32e8121c8784793ed1a58a1f245",
     "references/anti-patterns.md": "sha256:de63f8e646af0fbf479b45eb1d050ae62a8637acc320d21b87e4a083fd4c47e7",
-    "references/capability-boundaries.md": "sha256:5d59f15cf97529fec26a105095278dc7a17ae3b829103994ec5ddf420897f448",
+    "references/capability-boundaries.md": "sha256:66d6860a6893a1613d4416b2185c48308457bf006bb943817623fd1bd700d9a8",
     "references/evidence-authority.md": "sha256:b81ee09953999f16b19dc0eaba6fffe794b58d152e2adbd95c3179730bc08ffc",
     "rubrics/answer-extractability.md": "sha256:c8e741143c34e53afdb3dc7b6976ce7b4485dce13b12d14c193fccb17bacf1da",
     "rubrics/claim-boundedness.md": "sha256:0bab1b85248c252b966175912ebfae13bf18aa7e41573f7466831ac78b5d3e27",
@@ -54,9 +55,10 @@
     "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
+    "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:bea8eb7ea74442a1be745aa40ff22d25dcd89a82fb0205dfc6c597da40831f64",
+    "schemas/observation.schema.json": "sha256:eebb7deb445b9de8c2ffa603fce441f9a857ce290602d8828915fb630b566693",
     "schemas/page.schema.json": "sha256:627613c35f461177fa946df08edf66fbf6f6bbdfc57eef812572b3af796d5e07",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -70,9 +72,9 @@
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
     "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
+    "SKILL.md": "sha256:b5607872edd36746674f596db543f02004d30c98d4c15b745bfdc42afa77be8d",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
+    "VERSION": "sha256:c92df6bdde330be219d62f48ec6490b01889436f2f59027aab200e74de619168"
   },
-  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
+  "treeHash": "sha256:bf020f14e20b04db5037c18aa9bcbfa6ac5e39522681be610676de380ab7eeec"
 }