@nebulacomponents/citable 1.13.0 → 1.14.0

package/dist/universal/.claude/skills/citable/schemas/canonical-index-import.schema.json

@@ -0,0 +1,30 @@
+{
+  "$id": "citable://schemas/canonical-index-import.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Engine-selected canonical import",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "collected_at", "collection_authority", "authenticity_status", "observations"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "collected_at": { "type": "string", "format": "date-time" },
+    "collection_authority": { "type": "string", "enum": ["owner_export", "third_party_export"] },
+    "authenticity_status": { "type": "string", "enum": ["cryptographically_authenticated", "owner_attested", "transport_authenticated", "checksum_protected_only", "unverified"] },
+    "observations": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["url", "engine", "selected_canonical", "indexed", "observed_at"],
+        "properties": {
+          "url": { "type": "string", "format": "uri", "pattern": "^https://" },
+          "engine": { "type": "string", "minLength": 1 },
+          "selected_canonical": { "type": ["string", "null"], "format": "uri" },
+          "indexed": { "type": ["boolean", "null"] },
+          "observed_at": { "type": "string", "format": "date-time" }
+        }
+      }
+    }
+  }
+}

package/dist/universal/.claude/skills/citable/schemas/common.defs.json

@@ -17,7 +17,18 @@
         "created": { "$ref": "#/definitions/isoDate" },
         "updated": { "$ref": "#/definitions/isoDate" },
         "created_by": { "type": "string" },
-        "source": { "type": "string" }
+        "source": { "type": "string" },
+        "seededFrom": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["seedName", "seedVersion", "importedAt"],
+          "properties": {
+            "seedName": { "type": "string", "minLength": 1 },
+            "seedVersion": { "type": "string", "minLength": 1 },
+            "importedAt": { "$ref": "#/definitions/isoDate" },
+            "contentFingerprint": { "type": "string", "minLength": 1 }
+          }
+        }
       }
     },
     "registryFile": {

package/dist/universal/.claude/skills/citable/schemas/corroboration-import.schema.json

@@ -0,0 +1,48 @@
+{
+  "$id": "citable://schemas/corroboration-import.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "External corroboration import",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "provider", "dataset", "collected_at", "collection_authority", "authenticity_status", "representativeness", "coverage", "mentions"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "provider": { "type": "string", "minLength": 1 },
+    "dataset": { "const": "external_mentions" },
+    "collected_at": { "type": "string", "format": "date-time" },
+    "collection_authority": { "type": "string", "enum": ["owner_export", "third_party_export", "manual_entry"] },
+    "authenticity_status": { "type": "string", "enum": ["cryptographically_authenticated", "provider_range_verified", "owner_attested", "transport_authenticated", "checksum_protected_only", "unverified"] },
+    "representativeness": { "type": "string", "enum": ["production_population", "complete_export", "statistically_sampled", "convenience_sample", "single_observation", "unknown"] },
+    "coverage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["population", "sampled", "exclusions"],
+      "properties": {
+        "population": { "type": "string", "minLength": 1 },
+        "sampled": { "type": "integer", "minimum": 1 },
+        "exclusions": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+      }
+    },
+    "mentions": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["source_url", "publisher", "entity", "source_control", "relationship_disclosure", "source_type", "observed_at"],
+        "properties": {
+          "source_url": { "type": "string", "format": "uri", "pattern": "^https://" },
+          "canonical_url": { "type": "string", "format": "uri", "pattern": "^https://" },
+          "publisher": { "type": "string", "minLength": 1 },
+          "entity": { "type": "string", "minLength": 1 },
+          "source_control": { "type": "string", "enum": ["independent", "owner_controlled", "affiliated", "unknown"] },
+          "relationship_disclosure": { "type": "string", "enum": ["none_disclosed", "affiliated", "sponsored", "unknown"] },
+          "source_type": { "type": "string", "enum": ["editorial", "standards", "academic", "review", "directory", "social", "forum", "backlink", "other"] },
+          "observed_at": { "type": "string", "format": "date-time" },
+          "context_excerpt": { "type": "string" },
+          "claim_ids": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+        }
+      }
+    }
+  }
+}

package/dist/universal/.claude/skills/citable/schemas/entity-graph.schema.json

@@ -0,0 +1,75 @@
+{
+  "$id": "citable://schemas/entity-graph.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Normalized JSON-LD entity graph",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "nodes", "edges", "unresolved_references", "parse_failures", "limitations"],
+  "properties": {
+    "version": { "const": 1 },
+    "nodes": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["node_id", "types", "names", "source_blocks", "visible_support"],
+        "properties": {
+          "node_id": { "type": "string", "minLength": 1 },
+          "types": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+          "names": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+          "source_blocks": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["url", "block_hash"],
+              "properties": {
+                "url": { "type": "string", "minLength": 1 },
+                "block_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+              }
+            }
+          },
+          "visible_support": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["status", "matched_fields"],
+            "properties": {
+              "status": { "type": "string", "enum": ["supported", "not_observed", "not_testable"] },
+              "matched_fields": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+            }
+          }
+        }
+      }
+    },
+    "edges": { "type": "array", "items": { "$ref": "#/definitions/edge" } },
+    "unresolved_references": { "type": "array", "items": { "$ref": "#/definitions/edge" } },
+    "parse_failures": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["url", "error", "raw_hash"],
+        "properties": {
+          "url": { "type": "string", "minLength": 1 },
+          "error": { "type": "string", "minLength": 1 },
+          "raw_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+        }
+      }
+    },
+    "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+  },
+  "definitions": {
+    "edge": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["source_id", "relation", "target_id", "source_url", "target_declared"],
+      "properties": {
+        "source_id": { "type": "string", "minLength": 1 },
+        "relation": { "type": "string", "minLength": 1 },
+        "target_id": { "type": "string", "minLength": 1 },
+        "source_url": { "type": "string", "minLength": 1 },
+        "target_declared": { "type": "boolean" }
+      }
+    }
+  }
+}

package/dist/universal/.claude/skills/citable/schemas/entity.schema.json

@@ -23,6 +23,19 @@
         "canonical_url": { "type": "string" },
         "external_identifiers": { "type": "array", "items": { "type": ["string", "object"] } },
         "authoritative_profiles": { "type": "array", "items": { "type": "string" } },
+        "affiliations": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["entity_id", "relationship", "disclosure_status"],
+            "properties": {
+              "entity_id": { "$ref": "citable://schemas/common.defs.json#/definitions/id" },
+              "relationship": { "type": "string", "enum": ["employee", "contractor", "member", "owner", "partner", "other"] },
+              "disclosure_status": { "type": "string", "enum": ["disclosed", "not_disclosed", "unknown"] }
+            }
+          }
+        },
         "category": { "type": "string" },
         "secondary_categories": { "type": "array", "items": { "type": "string" } },
         "definition": { "type": "string" },

package/dist/universal/.claude/skills/citable/schemas/observation.schema.json

@@ -7,7 +7,7 @@
   "required": ["observation_id", "kind", "state", "collected_at", "collection_method", "confidence", "source", "evidence_hash", "data"],
   "properties": {
     "observation_id": { "type": "string", "minLength": 1 },
-    "kind": { "type": "string", "enum": ["render", "browser_journey", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image", "representation_drift"] },
+    "kind": { "type": "string", "enum": ["render", "browser_journey", "index", "citation", "citation_review", "crawler_log", "crawler_probe", "regional_network", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image", "representation_drift"] },
     "state": { "type": "string", "enum": ["observed", "not_observed", "not_evidenced", "incomplete", "review_required", "failed"] },
     "collected_at": { "type": "string", "format": "date-time" },
     "collection_method": { "type": "string", "enum": ["live_api", "browser", "owner_import", "synthetic_fetch", "static_analysis", "human_review"] },

package/dist/universal/.claude/skills/citable/schemas/page.schema.json

@@ -27,6 +27,9 @@
         "evidence_references": { "type": "array", "items": { "type": "string" } },
         "content_owner": { "type": "string" },
         "factual_reviewer": { "type": "string" },
+        "author_entities": { "type": "array", "items": { "$ref": "citable://schemas/common.defs.json#/definitions/id" }, "uniqueItems": true },
+        "publisher_entity": { "$ref": "citable://schemas/common.defs.json#/definitions/id" },
+        "correction_path": { "type": "string", "minLength": 1 },
         "lifecycle_class": { "type": "string", "enum": ["foundational", "product_capability", "regulatory", "pricing", "market_statistics", "technical_implementation", "competitive_comparison", "security_claim", "evergreen", "news", "unclassified"] },
         "review_cadence": { "type": "string" },
         "next_review_date": { "$ref": "citable://schemas/common.defs.json#/definitions/isoDate" },

package/dist/universal/.claude/skills/citable/schemas/regional-network-import.schema.json

@@ -0,0 +1,55 @@
+{
+  "$id": "citable://schemas/regional-network-import.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Regional network probe import",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "provider", "collected_at", "collection_authority", "authenticity_status", "representativeness", "probes"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "provider": { "type": "string", "minLength": 1 },
+    "collected_at": { "type": "string", "format": "date-time" },
+    "collection_authority": { "type": "string", "enum": ["owner_export", "third_party_export"] },
+    "authenticity_status": { "type": "string", "enum": ["cryptographically_authenticated", "owner_attested", "transport_authenticated", "checksum_protected_only", "unverified"] },
+    "representativeness": { "type": "string", "enum": ["complete_export", "statistically_sampled", "controlled_experiment", "convenience_sample", "unknown"] },
+    "probes": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["probe_id", "target", "region", "network", "user_agent", "observed_at", "dns_addresses", "tls", "status", "latency_ms", "cache"],
+        "properties": {
+          "probe_id": { "type": "string", "pattern": "^PROBE-[A-Z0-9_-]+$" },
+          "target": { "type": "string", "format": "uri", "pattern": "^https://" },
+          "region": { "type": "string", "minLength": 1 },
+          "network": { "type": "string", "minLength": 1 },
+          "user_agent": { "type": "string", "minLength": 1 },
+          "observed_at": { "type": "string", "format": "date-time" },
+          "dns_addresses": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 2 }, "uniqueItems": true },
+          "tls": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["protocol", "authorized", "certificate_fingerprint"],
+            "properties": {
+              "protocol": { "type": "string", "minLength": 1 },
+              "authorized": { "type": "boolean" },
+              "certificate_fingerprint": { "type": "string", "minLength": 1 }
+            }
+          },
+          "status": { "type": "integer", "minimum": 100, "maximum": 599 },
+          "latency_ms": { "type": "number", "minimum": 0 },
+          "cache": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["status", "age_seconds"],
+            "properties": {
+              "status": { "type": "string", "enum": ["HIT", "MISS", "BYPASS", "STALE", "UNKNOWN"] },
+              "age_seconds": { "type": ["number", "null"], "minimum": 0 }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/dist/universal/.claude/skills/citable/schemas/source-identity-chain.schema.json

@@ -0,0 +1,83 @@
+{
+  "$id": "citable://schemas/source-identity-chain.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Page source identity chain",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "pages", "limitations"],
+  "properties": {
+    "version": { "const": 1 },
+    "pages": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["page_id", "url", "publisher", "authors", "content_owner", "factual_reviewer", "evidence_owners", "correction_path", "status", "missing_fields"],
+        "properties": {
+          "page_id": { "type": "string", "minLength": 1 },
+          "url": { "type": "string", "minLength": 1 },
+          "publisher": {
+            "oneOf": [
+              { "type": "null" },
+              { "$ref": "#/definitions/publisher" }
+            ]
+          },
+          "authors": { "type": "array", "items": { "$ref": "#/definitions/author" } },
+          "content_owner": { "type": ["string", "null"] },
+          "factual_reviewer": { "type": ["string", "null"] },
+          "evidence_owners": { "type": "array", "items": { "$ref": "#/definitions/evidenceOwner" } },
+          "correction_path": { "type": ["string", "null"] },
+          "status": { "type": "string", "enum": ["complete", "incomplete"] },
+          "missing_fields": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true }
+        }
+      }
+    },
+    "limitations": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+  },
+  "definitions": {
+    "publisher": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["entity_id", "name", "canonical_url", "status"],
+      "properties": {
+        "entity_id": { "type": "string", "minLength": 1 },
+        "name": { "type": "string", "minLength": 1 },
+        "canonical_url": { "type": ["string", "null"] },
+        "status": { "type": "string", "minLength": 1 }
+      }
+    },
+    "author": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["entity_id", "name", "canonical_url", "affiliations", "status"],
+      "properties": {
+        "entity_id": { "type": "string", "minLength": 1 },
+        "name": { "type": ["string", "null"] },
+        "canonical_url": { "type": ["string", "null"] },
+        "affiliations": { "type": "array", "items": { "$ref": "#/definitions/affiliation" } },
+        "status": { "type": "string", "minLength": 1 }
+      }
+    },
+    "affiliation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["entity_id", "relationship", "disclosure_status", "entity_name"],
+      "properties": {
+        "entity_id": { "type": "string", "minLength": 1 },
+        "relationship": { "type": "string", "minLength": 1 },
+        "disclosure_status": { "type": "string", "minLength": 1 },
+        "entity_name": { "type": ["string", "null"] }
+      }
+    },
+    "evidenceOwner": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["evidence_id", "owner", "verification_status"],
+      "properties": {
+        "evidence_id": { "type": "string", "minLength": 1 },
+        "owner": { "type": ["string", "null"] },
+        "verification_status": { "type": "string", "minLength": 1 }
+      }
+    }
+  }
+}

package/dist/universal/.claude/skills/citable/scripts/README.md

@@ -1,4 +1,6 @@
 # Citable skill scripts
 
 This directory is part of the installed Citable skill payload. The initial
-installer does not add provider hooks or sidecar configuration.
+installer adds only verified provider agent profiles declared by the bundle
+manifest. It does not add hooks, MCP configuration, telemetry, or unrelated
+agent settings.

package/dist/universal/.cursor/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.13.0
+version: 1.14.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -87,6 +87,7 @@ prefer running it over re-deriving its checks by hand:
 ```
 citable init                        # initialize .citable/ (non-destructive)
 citable audit [scope] --target <dir|url> [--base-url <url>] [--ref-date YYYY-MM-DD]
+citable plan-audit --target <dir|url> [--base-url <url>]
 citable inspect <page> --target <dir|url>
 citable map-claims --target <dir|url> [--write]
 citable substantiate [--write]
@@ -94,8 +95,10 @@ citable schema --target <dir|url>
 citable validate [registries|claims|evidence|schema|links]
 citable compare-snapshots [runA runB]
 citable action-plan [run-id]          # ordered actions, blockers, semantic gates, verification
-citable observe <mode> [options]      # render/index/citation/log/passage/consensus/performance evidence
+citable observe <mode> [options]      # render/index/citation/log/probe/passage/consensus/performance evidence
 citable observe bing --dataset <search_performance|ai_performance> --input <csv|json>
+citable observe probes --target <url> [--region <label>]
+citable observe network --input <regional-network-import.json>
 citable observe render --target <url> [--interactions] [--resume-run <run-id>]
 citable observe render --input <browser-evidence-plan.json>
 citable observe performance --target <url> --lighthouse [--repeat 1..5]
@@ -134,8 +137,14 @@ citable artifacts import --input <directory>
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
 lifecycle corroboration`. Every audit writes an evidence package to
 `.citable/runs/<run-id>/` (manifest, findings.json, report.md, headers, robots,
-sitemaps, schema, link graph, checksums). A report without its evidence package
-is not a deliverable.
+sitemaps, raw JSON-LD, normalized entity graph, link graph, checksums). The
+entity graph preserves declared nodes, relations, unresolved references, parse
+failures, and literal visible-text support; it does not prove semantic
+correctness or search-engine recognition. The source identity-chain artifact
+joins declared publisher, author affiliations, content owner, factual reviewer,
+evidence owner, and correction path while preserving missing links. Registry
+linkage does not prove that disclosures are visible, current, or independent.
+A report without its evidence package is not a deliverable.
 
 ## Finding-to-action protocol
 

package/dist/universal/.cursor/skills/citable/VERSION

@@ -1 +1 @@
-1.13.0
+1.14.0

package/dist/universal/.cursor/skills/citable/agents/citable-auditor.md

@@ -0,0 +1,64 @@
+---
+name: citable-auditor
+description: Run a Citable audit or evidence collection when the user needs a plan, immutable or sealed run, observation, capability diagnosis, or evidence-bounded summary. Not for semantic approval, source remediation, content rewriting, or claims that an outcome is guaranteed.
+tools:
+  - Read
+  - Glob
+  - Grep
+  - Bash
+model: inherit
+maxTurns: 20
+skills:
+  - citable
+---
+
+You are Citable's evidence-collection specialist. Establish what the target
+makes observable, what the selected method could not collect, and where the
+resulting immutable evidence package lives.
+
+## Authority boundary
+
+- You may run the Citable CLI and read its artifacts.
+- Never edit the audited property, its source, its registries, or an existing
+  run package.
+- Do not use `curl`, `wget`, raw browser automation, or ad hoc HTTP clients.
+  Network collection must go through the applicable guarded Citable command.
+- Do not run `citable apply`, use `--write`, or create implementation facts.
+- Do not infer crawling, indexing, ranking, citation, recommendation,
+  inclusion, sentiment, or conversion outcomes.
+
+## Workflow
+
+1. Read repository instructions and identify the target and requested evidence
+   question.
+2. Run `citable doctor` when optional browser, API, OCR, or lab capability is
+   relevant. Treat `ready` as prerequisite presence only.
+3. Run `citable plan-audit --target <target>` when the appropriate scopes or
+   collectors are not already explicit. The plan is not evidence.
+4. Run `citable audit [scope] --target <target>` for deterministic and
+   heuristic site findings. Preserve the full audit unless the user explicitly
+   requested a scope.
+5. Run only the relevant `citable observe <mode>` commands for external or
+   rendered observations. Preserve provider, method, authority, authenticity,
+   collection, and representativeness boundaries.
+6. Read the run manifest, findings, summary, warnings, incomplete state, and
+   checksums before reporting.
+
+If prerequisites, authorization, source facts, or required inputs are absent,
+preserve `blocked`, `incomplete`, `not_established`, or `not_evidenced`.
+Never translate one of those states into zero, pass, absence, or failure of the
+external system.
+
+## Return contract
+
+Report:
+
+1. target, command, scope, and collection method;
+2. run ID and artifact directory;
+3. deterministic observations;
+4. evidence-backed semantic findings and probabilistic inferences, separately;
+5. skipped checks, collection failures, limitations, and residual unknowns;
+6. exact next evidence or owner input required;
+7. whether semantic review or a governed action plan is the next bounded step.
+
+A human-readable report without its run package is not a deliverable.

package/dist/universal/.cursor/skills/citable/agents/citable-semantic-reviewer.md

@@ -0,0 +1,66 @@
+---
+name: citable-semantic-reviewer
+description: Review semantic questions in an existing Citable run, finding, action, or artifact, including claim support, answer extractability, entity clarity, comparison fairness, and narrative accuracy. Not for collecting new evidence, running audits, editing source, or approving publication.
+tools:
+  - Read
+  - Glob
+  - Grep
+model: inherit
+maxTurns: 15
+skills:
+  - citable
+---
+
+You are Citable's read-only semantic reviewer. Evaluate meaning against the
+exact source evidence and review policy without changing technical findings,
+registries, source files, or sealed artifacts.
+
+## Preconditions
+
+Require an existing source run, finding, review item, or action artifact. Bind
+the review to the available run ID, finding ID and finding hash, review-item
+hash, policy, subject, captured evidence, and declared limitations. If the
+binding or source material is unavailable, return `review_required` with the
+missing input instead of reconstructing it.
+
+## Review dimensions
+
+Apply only dimensions relevant to the requested item:
+
+- intent alignment and answer extractability;
+- claim boundedness and evidence strength;
+- entity clarity and source identity;
+- information gain and comparison fairness;
+- recommendation eligibility and narrative accuracy;
+- factual accuracy, accessibility, conversion function, legal defensibility,
+  and maintainability.
+
+Separate deterministic fact from evidence-backed semantic finding,
+probabilistic inference, strategic hypothesis, experiment result, and
+untestable condition. Never present inference as fact.
+
+## Authority boundary
+
+- Never edit source files, registries, findings, review items, action plans, or
+  sealed run artifacts.
+- Do not collect new external evidence or treat general knowledge as source-run
+  evidence.
+- Do not change a technical failure to pass or accepted risk.
+- Do not mark a claim `verified`, complete a required review, approve
+  publication, or satisfy an owner-controlled gate. Automation cannot upgrade
+  evidence authority.
+- Preserve `review_required` when evidence or accountable authority is missing.
+- Preserve `adjudication_required` when current authorized reviewers disagree.
+
+## Return contract
+
+For each reviewed item, report:
+
+1. artifact binding and review dimensions applied;
+2. supporting and contradicting evidence;
+3. semantic assessment with confidence and false-positive conditions;
+4. missing evidence, ambiguity, residual risk, and required owner input;
+5. proposed disposition: `review_required`, `adjudication_required`, or a
+   recommendation for an authorized human reviewer to record.
+
+Your output is review context, not an approval or a mutation instruction.

package/dist/universal/.cursor/skills/citable/commands/action-findings.md

@@ -15,6 +15,11 @@ failure_behaviour: missing or invalid source run -> fail; review-required action
 3. Assign owners. Resolve each blocked action's exact required input. Missing
    facts, evidence, legal review, or semantic review are blockers, not drafting
    opportunities.
+   Treat `decision_owner` independently from implementation responsibility when
+   the generated plan names different roles. Empty `depends_on_action_ids`,
+   `leading_indicators`, or `monitoring_window` fields mean those relationships
+   are not established by the source evidence; do not fill them with generic
+   SEO assumptions.
 4. Capture a before state for each subject. Use the finding's evidence,
    preferred remediation, unsafe shortcuts, and detector lineage as the change
    boundary.
@@ -24,7 +29,10 @@ failure_behaviour: missing or invalid source run -> fail; review-required action
    writes use the loader/saver and retain history. Content claims remain equal
    to or narrower than their registered scope.
 7. Build and test the target repository. Run the generated verification
-   command, then compare the new audit to the source run.
+   command, evaluate the explicit `failure_condition`, then compare the new
+   audit to the source run. Monitor only the listed leading indicators over the
+   declared window; an empty list or null window does not authorize an inferred
+   outcome measure.
 8. Close only with evidence: resolved detector/subject pair, before/after run
    IDs, diff, reviewer, and residual risk. Mark blocked, accepted risk, and
    false positive explicitly; do not silently drop findings.