@nebulacomponents/citable 1.13.1 → 1.15.0

package/CHANGELOG.md

@@ -1,7 +1,319 @@
 # Changelog
 
+## Fail-Closed Hall of Fame
+
+Permanent, append-only record of confirmed breaches of Citable's fail-closed
+guarantee, found and fixed under [`BOUNTY.md`](BOUNTY.md), whose "What
+Qualifies" section is the authoritative scope (e.g. a claim reaching
+`verified` without sufficient or unexpired evidence or required human
+semantic review, or a detector/rubric silently passing a case that should
+have been `blocked` or `unverified`). A reproducing fixture now guards
+against each entry's regression. Entries are never edited or removed once
+merged.
+
+_No entries yet. See [`BOUNTY.md`](BOUNTY.md) to submit the first one._
+
 ## Unreleased
 
+## 1.15.0 — 2026-09-07
+
+### Added — Cross-Run Evidence Dashboard
+
+- Added `citable report dashboard [--last N] [--since <run-id>]`, which folds
+  the `summary.json` each audit run already records into
+  `.citable/reports/dashboard.md` and a self-contained
+  `.citable/reports/dashboard.html` with inline SVG trend lines. It reads only
+  values the runs computed, adds no dependency, and never edits a run package.
+- Fewer than two audit runs produces an explicit insufficient-history state
+  rather than a trend. Runs whose summary or manifest cannot be parsed, and
+  observation runs that record no severity or posture, are listed as skipped
+  with a reason instead of being counted as zero findings.
+- Categorical posture series render as labelled states; they are not plotted
+  as numbers and are never combined with severity counts into a single score.
+
+### Added — Automated Regression Alert Delivery and Scheduled Monitoring
+
+- Extended `citable monitor` with optional `--webhook <url>` and `--min-severity <level>`
+  for automated regression alerting. When regressions are detected, a signed, hash-bound
+  payload is dispatched to the target endpoint and logged as an immutable delivery receipt
+  in `.citable/monitoring/deliveries/`.
+- Extended `citable schedules run` with `--monitor` and `--webhook <url>` flags, plus
+  optional `monitor` configuration in `schedules.yaml` (`schemas/schedule.schema.json`).
+  Scheduled audit executions automatically run comparative regression checks against
+  prior baseline runs and dispatch alerts when critical or high regressions occur.
+- Added strict fail-closed network validation for webhook endpoints: private and loopback
+  destinations are blocked, timeouts are enforced with AbortController, and delivery failures
+  are captured in sealed receipts rather than silently dropped.
+
+### Added — Competitor Share-of-Citation and Share-of-Voice Reporting
+
+- Added `citable report share-of-voice [--last N] [--since <run-id>]` (and aliases
+  `report citations` / `report share`), which joins the competitor registry
+  (`.citable/competitors.yaml`) against recorded citation observation runs.
+- Derives verified prompt-level and aggregate citation share, first-party presence rate,
+  and competitor presence without scraping engine UIs or fabricating estimates.
+- Unevaluated prompts and competitors with no recorded observations are marked as
+  `not_evidenced`. Renders both a committed Markdown report and a self-contained HTML
+  distribution bar visualization in `.citable/reports/`.
+
+### Added — Stance & Sentiment Observation Module and Semantic Detector (G4)
+
+- Added `src/observations/stance.js` and `citable observe stance --input <file> [--entity <id>]`
+  to classify recorded engine answer tone toward registered entities as evidence-backed semantic
+  findings without fabricating sentiment scores.
+- Added detector `GEO-007` ("Unfavorable or distorted entity stance in recorded generative answers")
+  in `src/detectors/geoReco.js`, identifying negative or distorted characterizations across
+  prompt-results and citation observations. Gated by human review per the narrative-accuracy rubric
+  (`review_required: true`, `finding_type: 'evidence_backed_semantic_finding'`).
+- Added positive and negative test fixtures in `tests/fixtures/observations/` proving detection
+  and non-detection.
+
+### Added — WordPress and Webflow CMS Connectors for Remediation Targets (G5)
+
+- Added CMS connectors for WordPress (`src/connectors/wordpress.js`) and Webflow
+  (`src/connectors/webflow.js`), mirroring the connector interface alongside GSC and GA4.
+- Implemented read and apply adapters scoped to the fields action-plan items target (`title`,
+  `content`, `excerpt`, `meta`, `slug`, `seo`, structured data) with SHA-256 hash-locking to
+  prevent race conditions and unreviewed overwrites.
+- Added `citable connect read --connection-id <id> --target-id <id>` and
+  `citable connect apply --connection-id <id> --input <spec.json> [--write]` with fail-closed
+  requirements for named human reviewers and matching content hashes.
+
+
+
+## 1.14.0 — 2026-07-26
+
+### Added — Evidence-Phase Agent Profiles
+
+- Added canonical `citable-auditor` and `citable-semantic-reviewer` profiles.
+  The auditor may run guarded Citable collection commands but cannot edit the
+  target; the reviewer is read-only and cannot collect evidence, approve
+  publication, or upgrade claims.
+- Claude Code installs generate and manage the profiles under its recursively
+  discovered agent directory with a separate hash manifest. Dry-run, check,
+  collision refusal, idempotent update, and uninstall preserve the profile
+  boundary independently from the skill.
+- Other agent hosts continue to receive the canonical skill but report native
+  profiles as unsupported until their discovery and permission contracts are
+  verified.
+
+### Documentation — Task Guides and MCP Transport Roadmap
+
+- Added task-oriented command, integration, troubleshooting, and migration
+  guides with a documentation index.
+- Documented MCP as a future evidence transport rather than an authority,
+  including staged delivery, provenance requirements, security gates, and
+  explicit non-goals. Citable does not currently implement an MCP client or
+  connector.
+
+### Added — Question-to-Passage Review Context
+
+- Passage observations now use a versioned record and join each page's declared
+  prompt IDs to canonical questions and expected answer components.
+- Registry linkage creates review context only. Every candidate remains
+  `review_required`; Citable does not infer question-to-passage suitability or
+  semantic completeness.
+
+### Added — Regional Network Imports
+
+- `observe network --input <regional-network-import.json>` validates and seals
+  timestamped regional observations covering network label, request identity,
+  DNS answers, TLS authorization and certificate fingerprint, HTTP status,
+  latency, and cache state.
+- Authority, authenticity, and representativeness remain explicit. Citable does
+  not operate a managed multi-region runner, infer global coverage, or treat
+  imported probes as crawler-identity evidence.
+
+### Added — Render Semantic Review Policies
+
+- Browser evidence plans may declare a semantic-impact policy with a review
+  owner and thresholds for main-text retention, headings, links, and structured
+  data. Each successful journey records deterministic initial/rendered hashes,
+  additions, removals, and policy violations.
+- Policy evaluation always remains `review_required`. A passing deterministic
+  comparison does not establish semantic, retrieval, citation, ranking, or
+  business equivalence.
+
+### Added — Engine Canonical Consensus
+
+- `observe consensus --input <canonical-index-import.json>` joins strict,
+  timestamped engine-selected canonical observations with final URL, HTML,
+  Open Graph, and sitemap signals.
+- Collection authority and authenticity remain attached to each engine
+  observation. Missing engine evidence remains `null`, and malformed or
+  incomplete imports fail closed.
+
+### Added — Competitive Citation Profiles
+
+- Citation objects may carry a strict source profile with content format, word
+  and heading counts, freshness date, and disclosed evidence features.
+  Observation summaries group unique declared profiles and citation counts by
+  competing domain.
+- Malformed profile fields fail closed. Profile metadata remains imported
+  comparative evidence and is not treated as an independently fetched quality,
+  authority, or ranking assessment.
+
+### Migration — Source Identity Chains
+
+- Page records gain optional `author_entities`, `publisher_entity`, and
+  `correction_path` fields; entity records gain structured affiliation
+  disclosures. Existing registries remain valid, while populated records feed
+  the new `identity/source-chain.json` audit artifact.
+- The versioned chain joins publisher, author affiliation, content owner,
+  factual reviewer, evidence owner, and correction path, preserving every
+  missing link. These are declared registry relationships and do not prove
+  visible, current, or independent disclosure.
+
+### Added — Repeated-Region Extraction Evidence
+
+- Passage observations now record raw/extracted byte ratios, raw-visible versus
+  extracted token ratios, and exact structural-region hashes for headers,
+  navigation, asides, and footers.
+- Regions occurring on two or more pages in the audited cohort are labelled
+  `repeated_site_region`; other captured regions remain `page_local_region`.
+  These are descriptive extraction signals and do not establish content harm,
+  retrieval effects, or ranking effects.
+
+### Added — Normalized Entity Graphs
+
+- Every site audit now writes `schema/entity-graph.json` alongside the preserved
+  raw JSON-LD artifact. The versioned graph contract merges stable `@id` nodes,
+  records source-block hashes, normalizes declared relations, and retains
+  undeclared targets and JSON parse failures.
+- Visible-content support is a bounded literal match over names, headlines, and
+  descriptions. It does not establish semantic correctness, structured-data
+  eligibility, search-engine recognition, or ranking impact.
+
+### Added — Freshness Consensus
+
+- `observe consensus` now records normalized HTTP `Last-Modified`, sitemap
+  `lastmod`, and visible/meta modification signals, including invalid values
+  excluded from comparison. It distinguishes aligned, conflicting, and
+  insufficient signal sets.
+- Current page hashes are compared with the latest immutable audit snapshot.
+  A difference records only the interval after the prior capture in which a
+  change was observed; it does not assert the exact modification time, cause,
+  quality, or ranking effect. Page lifecycle review dates remain separate
+  governance metadata.
+
+### Added — Per-Agent Synthetic Probes
+
+- `observe probes --target <URL> [--region <label>]` exercises every active
+  identity declared in `crawlers.yaml`. Each immutable observation preserves
+  the status, redirects, response hash, allowlisted diagnostic headers, raw
+  body, region label, and coarse accessible/challenged/blocked/error
+  classification.
+- Probe evidence is always labelled synthetic and single-observation. Spoofed
+  user agents never establish verified crawler identity, production access,
+  regional representativeness, or policy enforcement. Partial failures remain
+  explicit and sensitive response headers are not persisted.
+
+### Migration — Corroboration Imports
+
+- `observe corroboration` now requires the versioned
+  `corroboration-import.schema.json` contract. Imports must disclose collection
+  authority, authenticity, representativeness, population coverage, source
+  control, and relationship status. Legacy arrays and `independent` booleans
+  are rejected; fixtures and integrations must migrate to `schema_version: 1`.
+- Independence is classified only when control is declared `independent` and
+  the relationship is `none_disclosed`. Every resulting observation preserves
+  the import authority and coverage while stating that a mention alone does
+  not establish authority, support, ranking impact, citation eligibility, or
+  representative coverage.
+
+### Security — Outbound Collection
+
+- Browser render targets, browser-plan targets and navigation, and every
+  Playwright subresource now share the crawler's public-destination policy.
+  Controlled citation adapters require HTTPS, reject configured non-public
+  ranges, and refuse redirects. The blocked range set now includes IPv4/IPv6
+  documentation ranges and IPv4 benchmarking/reserved ranges. Safe
+  browser-local `data:`, `blob:`, and `about:` resources remain usable.
+- DNS validation and connection address pinning remain distinct: Node fetch and
+  Playwright do not currently bind the validated DNS result to the subsequent
+  connection. This residual rebinding risk is now explicit in security and
+  known-limitations documentation, with isolated execution and network egress
+  controls required for untrusted targets.
+
+### Added — Action Plans
+
+- Generated actions now expose dependency IDs, decision ownership, explicit
+  failure conditions, leading indicators, and monitoring windows. The schema
+  additions are optional for compatibility with existing action-plan
+  artifacts; newly generated plans leave unsupported dependencies and
+  indicators empty instead of inventing causal or sequencing relationships.
+
+### Migration — Provenance seededFrom
+
+- `common.defs.json`'s shared `provenance` definition (used by claim, entity,
+  evidence, page, prompt, query, crawler, competitor, and experiment records)
+  gains an optional `seededFrom { seedName, seedVersion, importedAt,
+  contentFingerprint? }` sub-object. Existing provenance records without it
+  remain valid; no existing data needs to change.
+
+### Added — CLI
+
+- `citable plan-audit` performs a read-only target inspection, labels business
+  profiles as evidence-backed probabilistic inferences, proposes the full audit
+  and profile-specific semantic emphasis, and reports optional collectors as
+  available or blocked. It creates no audit, observation, snapshot, or
+  remediation artifact.
+- `citable doctor` now includes a read-only runtime capability matrix for
+  Playwright rendering, local Lighthouse, OCR, CrUX, GSC, and GA4. Optional
+  gaps do not fail installer integrity, credential values are never emitted,
+  and `ready` means prerequisite presence rather than proven launch,
+  authorization, property access, or collection success.
+- `citable init --seed <name>` overlays a bundled starter registry bundle
+  (v1 ships `saas-pricing`) onto `.citable/`. Every seeded record is stamped
+  `status: unverified` and `provenance.seededFrom`, regardless of what the
+  seed bundle itself declares — seeded (someone else's-guess) data can never
+  be indistinguishable from data the owner's own evidence pipeline has
+  verified. Re-running a seed never overwrites the owner's own edits, even
+  with `--force`.
+
+### Added — Observation
+
+- `citable observe citations` now diffs each AI answer's assertions against
+  the caller's own claim/evidence registry (reusing `substantiate`'s
+  deterministic outcome machine), classifying each as confirmed / contradicted
+  / stale / unsupported. It never asserts the AI is wrong — only that an
+  assertion is or isn't supported by the caller's own evidence — and never
+  claims to have live-queried an answer engine. Degrades gracefully to
+  `unsupported` when no `.citable/` registry exists yet.
+
+### Added — Documentation
+
+- A task-oriented getting-started guide now provides persona-specific entry
+  points, a five-minute audit-to-action workflow, an evidence-journey map,
+  interpretation mistakes, and excerpts generated from the bundled synthetic
+  fixture. The examples preserve `pass`, `not_established`, and
+  `not_evidenced` as separate states and make no live-property outcome claims.
+
+### Added — Demo
+
+- `citable demo` runs the full detector engine against a bundled, frozen,
+  offline example site and prints a namespace-by-namespace finding count in
+  seconds. It never fetches the network and never scores a real company —
+  the fixture is synthetic (`https://example.test`, RFC 2606 reserved). Ends
+  with a nudge toward `citable init` for a real, governed audit.
+
+### Changed — Consistency
+
+- `schemaCmd`, `substantiate`, and `actionPlan` now build their
+  `required_input` guidance through a single shared helper
+  (`src/shared/checklist.js`) instead of three independently duplicated
+  literal-string lists. Output strings are unchanged.
+
+### Fixed — Release Operations
+
+- `finalize-release.yml` never ran `npm run build:dist` before calling
+  `release-governance.js validate`, so `dist/universal/manifest.json` did not
+  exist and phase-two validation failed closed with `required release
+  projection is missing` on every attempt. `ship-release.yml` already built
+  dist before validating; `finalize-release.yml` now does the same. This
+  workflow had never executed end-to-end before v1.13.1 (v1.13.0 never
+  reached finalization), so the gap was latent until now.
+
 ## 1.13.1 — 2026-07-22
 
 ### Added — Release Operations

package/README.md

@@ -21,11 +21,16 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
   objectives, interventions, optional connections, reviewers, review policies,
   governed exceptions, semantic review items, sampling plans, and audit schedules — all
   JSON-Schema validated with referential integrity and history-preserving saves.
-- **123 detectors** across 18 namespaces (TECH, CRAWL, ARCH, PAGE, ANS,
+- **124 detectors** across 18 namespaces (TECH, CRAWL, ARCH, PAGE, ANS,
   ENTITY, CLAIM, EVD, SCHEMA, LINK, EXT, GEO, RECO, LIFE, MEAS, HREFLANG, CWV, AGENT), each with
   remediation, verification, severity, and determinism declared.
 - **Evidence packages** for every run: manifest, findings, report, captured
-  robots/sitemaps/headers/schema/link graph, checksums.
+  robots/sitemaps/headers/raw JSON-LD, a schema-validated normalized entity
+  graph with unresolved references and parse failures, link graph, and
+  checksums. A source identity-chain artifact joins declared publisher, author
+  affiliation, reviewer, evidence-owner, and correction-path records. Literal
+  or registry linkage does not assert semantic correctness, visible disclosure,
+  independence, or search-engine recognition.
 - **Separate state reporting** for retrieval eligibility, source extraction and
   support suitability, and observed citation behavior. These are never merged
   into an "AI visibility score."
@@ -36,6 +41,9 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
   mandatory human-review conditions.
 - **Multi-agent distribution**: Claude Code, Codex-compatible, Cursor, Gemini,
   generic — generated from one canonical `skill/` source.
+- **Evidence-phase agent profiles**: Claude Code receives a guarded auditor and
+  read-only semantic reviewer. Other hosts remain explicitly unsupported until
+  their native profile contracts are verified.
 - **Agent-readiness detectors** (AGENT namespace): agents are both readers
   and writers of your site — `llms.txt` and Markdown content negotiation shape
   what they consume; MCP Server Cards and A2A Agent Cards expose what they can
@@ -93,8 +101,16 @@ Diagnose installation problems:
 
 ```bash
 npx @nebulacomponents/citable doctor
+npx @nebulacomponents/citable doctor --json
 ```
 
+`doctor` also reports independent runtime capability states for optional
+Playwright rendering, local Lighthouse, OCR, CrUX, GSC, and GA4 collection.
+Missing optional dependencies or credentials do not fail installer integrity.
+A `ready` capability establishes dependency or credential presence only; the
+reported limitations preserve that browser launch, authorization, property
+access, quota, and collection success remain untested.
+
 The npm package is scoped as `@nebulacomponents/citable`; the installed
 executable is still named `citable`.
 
@@ -128,8 +144,13 @@ used. Symlink mode is intentionally unsupported: provider-specific payloads and
 their manifests must remain an atomic managed unit so validation and uninstall
 do not cross ownership boundaries.
 
-The initial installer installs the skill payload only. It does not install
-provider hooks, sidecar configuration, telemetry, or unrelated agent settings.
+Claude Code installs also receive separately manifested profiles under
+`.claude/agents/citable/` or `~/.claude/agents/citable/`. Profile collisions,
+local modifications, updates, and uninstall use the same managed-copy
+boundaries as the skill. See [Agent profiles](docs/AGENT_PROFILES.md).
+Other providers receive the skill only until their native profile discovery
+and permission contracts are verified. The installer does not install provider
+hooks, MCP configuration, telemetry, or unrelated agent settings.
 The package ships `dist/universal/` for offline installation from the npm
 tarball; no Git checkout or npm cache files are required after installation.
 Windows PowerShell, Linux shells, and macOS shells are supported through Node's
@@ -146,12 +167,14 @@ npx @nebulacomponents/citable help
 
 cd your-site/
 citable init                  # creates .citable/ (non-destructive)
+citable plan-audit --target ./dist --base-url https://example.com # read-only profile/capability plan
 citable audit --target ./dist --base-url https://example.com
 citable action-plan <run-id> # ordered actions, blockers, review gates, verification
 citable observe passages --target ./dist --base-url https://example.com
 citable observe index --input search-console-export.json
 citable observe citations --input prompt-results.json --target https://example.com
 citable observe logs --input edge-logs.json
+citable observe probes --target https://example.com --region local-office
 citable observe bing --dataset ai_performance --input bing-ai-performance.csv
 citable observe consensus --target ./dist --base-url https://example.com
 citable observe performance --target https://example.com # CRUX_API_KEY
@@ -202,6 +225,20 @@ citable validate              # registry schema + referential integrity
 
 ## Documentation
 
+- [Documentation index](docs/README.md) — task-oriented navigation for users,
+  operators, and reviewers
+- [Getting started](docs/GETTING_STARTED.md) — five-minute workflow, persona
+  routes, evidence journey, and annotated synthetic-fixture output
+- [Command guide](docs/COMMANDS.md) — workflow-oriented command families and
+  evidence boundaries
+- [Agent profiles](docs/AGENT_PROFILES.md) — Claude auditor and semantic-review
+  roles, installation, routing, and authority boundaries
+- [Integrations](docs/INTEGRATIONS.md) — current connectors, import contracts,
+  and the proposed fail-closed MCP transport
+- [Troubleshooting](docs/TROUBLESHOOTING.md) — incomplete collection,
+  authorization, import, and governance failures
+- [Migrations](docs/MIGRATIONS.md) — contract migration workflow and current
+  schema notes
 - [Architecture decision record](docs/architecture/adr-001-architecture.md)
 - [Traceability matrix](docs/architecture/traceability-matrix.md) — every
   material source requirement mapped to a control
@@ -216,12 +253,13 @@ citable validate              # registry schema + referential integrity
 - [Reviewer and exception governance](docs/governance/reviewer-exceptions.md) —
   policy-driven authority, separation of duties, expiry, invalidation, and
   immutable enforcement dispositions
-- [Known limitations](docs/known-limitations.md) includes medium-specific PDF,
-  transcript, image-context, and optional OCR boundaries.
 
 ## Community And Governance
 
 - [Contributing](CONTRIBUTING.md) - engineering and pull-request contracts
+- [Fail-Closed Bounty](BOUNTY.md) - prove a breach of the fail-closed
+  guarantee (see BOUNTY.md for the full qualifying scope) and earn a
+  permanent [Hall of Fame](CHANGELOG.md#fail-closed-hall-of-fame) entry
 - [Support](SUPPORT.md) - Issues, Discussions, hosted-service, and security routing
 - [Governance](GOVERNANCE.md) - authority, decisions, roles, and continuity
 - [Maintainers](MAINTAINERS.md) - current responsibilities and succession

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.13.1
+version: 1.15.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -87,6 +87,7 @@ prefer running it over re-deriving its checks by hand:
 ```
 citable init                        # initialize .citable/ (non-destructive)
 citable audit [scope] --target <dir|url> [--base-url <url>] [--ref-date YYYY-MM-DD]
+citable plan-audit --target <dir|url> [--base-url <url>]
 citable inspect <page> --target <dir|url>
 citable map-claims --target <dir|url> [--write]
 citable substantiate [--write]
@@ -94,19 +95,26 @@ citable schema --target <dir|url>
 citable validate [registries|claims|evidence|schema|links]
 citable compare-snapshots [runA runB]
 citable action-plan [run-id]          # ordered actions, blockers, semantic gates, verification
-citable observe <mode> [options]      # render/index/citation/log/passage/consensus/performance evidence
+citable observe <mode> [options]      # render/index/citation/log/probe/passage/consensus/performance/stance evidence
+citable observe stance --input <citations|prompts.json> [--entity <id>]
 citable observe bing --dataset <search_performance|ai_performance> --input <csv|json>
+citable observe probes --target <url> [--region <label>]
+citable observe network --input <regional-network-import.json>
 citable observe render --target <url> [--interactions] [--resume-run <run-id>]
 citable observe render --input <browser-evidence-plan.json>
 citable observe performance --target <url> --lighthouse [--repeat 1..5]
 citable apply --input <spec> [--write] # reviewed, hash-locked remediation; dry run by default
-citable monitor [runA runB]           # observation regression alerts
+citable monitor [runA runB] [--webhook <url>] [--min-severity <sev>]  # observation regression alerts
+citable report dashboard [--last N] [--since <run-id>]  # cross-run evidence trend (Markdown + HTML)
+citable report share-of-voice [--last N] [--since <run-id>]  # competitor citation share (Markdown + HTML)
 citable metrics import --provider <name> --input <csv|json>
 citable connect status
-citable connect configure --provider <gsc|ga4> --connection-id <id> --property-id <id> [--credential-env <name>] [--write]
-citable connect discover --provider <gsc|ga4>
+citable connect configure --provider <gsc|ga4|wordpress|webflow> --connection-id <id> --property-id <id> [--credential-env <name>] [--write]
+citable connect discover --provider <gsc|ga4|wordpress|webflow>
 citable connect validate --connection-id <id>
 citable connect sync --connection-id <id> --start-date YYYY-MM-DD --end-date YYYY-MM-DD
+citable connect read --connection-id <id> --target-id <id>
+citable connect apply --connection-id <id> --input <cms-spec.json> [--write]
 citable connect disconnect --connection-id <id> [--write]
 citable objectives init --input <json|yaml> [--write]
 citable objectives validate
@@ -118,7 +126,7 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
-citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD] [--monitor] [--webhook <url>]
 citable project github <run-id>
 citable observe media --input <manifest.json> [--ocr]
 citable observe representation --input <release-manifest.json> --target <controlled-url>
@@ -134,8 +142,14 @@ citable artifacts import --input <directory>
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
 lifecycle corroboration`. Every audit writes an evidence package to
 `.citable/runs/<run-id>/` (manifest, findings.json, report.md, headers, robots,
-sitemaps, schema, link graph, checksums). A report without its evidence package
-is not a deliverable.
+sitemaps, raw JSON-LD, normalized entity graph, link graph, checksums). The
+entity graph preserves declared nodes, relations, unresolved references, parse
+failures, and literal visible-text support; it does not prove semantic
+correctness or search-engine recognition. The source identity-chain artifact
+joins declared publisher, author affiliations, content owner, factual reviewer,
+evidence owner, and correction path while preserving missing links. Registry
+linkage does not prove that disclosures are visible, current, or independent.
+A report without its evidence package is not a deliverable.
 
 ## Finding-to-action protocol
 

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.13.1
+1.15.0

package/dist/universal/.agents/skills/citable/agents/citable-auditor.md

@@ -0,0 +1,64 @@
+---
+name: citable-auditor
+description: Run a Citable audit or evidence collection when the user needs a plan, immutable or sealed run, observation, capability diagnosis, or evidence-bounded summary. Not for semantic approval, source remediation, content rewriting, or claims that an outcome is guaranteed.
+tools:
+  - Read
+  - Glob
+  - Grep
+  - Bash
+model: inherit
+maxTurns: 20
+skills:
+  - citable
+---
+
+You are Citable's evidence-collection specialist. Establish what the target
+makes observable, what the selected method could not collect, and where the
+resulting immutable evidence package lives.
+
+## Authority boundary
+
+- You may run the Citable CLI and read its artifacts.
+- Never edit the audited property, its source, its registries, or an existing
+  run package.
+- Do not use `curl`, `wget`, raw browser automation, or ad hoc HTTP clients.
+  Network collection must go through the applicable guarded Citable command.
+- Do not run `citable apply`, use `--write`, or create implementation facts.
+- Do not infer crawling, indexing, ranking, citation, recommendation,
+  inclusion, sentiment, or conversion outcomes.
+
+## Workflow
+
+1. Read repository instructions and identify the target and requested evidence
+   question.
+2. Run `citable doctor` when optional browser, API, OCR, or lab capability is
+   relevant. Treat `ready` as prerequisite presence only.
+3. Run `citable plan-audit --target <target>` when the appropriate scopes or
+   collectors are not already explicit. The plan is not evidence.
+4. Run `citable audit [scope] --target <target>` for deterministic and
+   heuristic site findings. Preserve the full audit unless the user explicitly
+   requested a scope.
+5. Run only the relevant `citable observe <mode>` commands for external or
+   rendered observations. Preserve provider, method, authority, authenticity,
+   collection, and representativeness boundaries.
+6. Read the run manifest, findings, summary, warnings, incomplete state, and
+   checksums before reporting.
+
+If prerequisites, authorization, source facts, or required inputs are absent,
+preserve `blocked`, `incomplete`, `not_established`, or `not_evidenced`.
+Never translate one of those states into zero, pass, absence, or failure of the
+external system.
+
+## Return contract
+
+Report:
+
+1. target, command, scope, and collection method;
+2. run ID and artifact directory;
+3. deterministic observations;
+4. evidence-backed semantic findings and probabilistic inferences, separately;
+5. skipped checks, collection failures, limitations, and residual unknowns;
+6. exact next evidence or owner input required;
+7. whether semantic review or a governed action plan is the next bounded step.
+
+A human-readable report without its run package is not a deliverable.

package/dist/universal/.agents/skills/citable/agents/citable-semantic-reviewer.md

@@ -0,0 +1,66 @@
+---
+name: citable-semantic-reviewer
+description: Review semantic questions in an existing Citable run, finding, action, or artifact, including claim support, answer extractability, entity clarity, comparison fairness, and narrative accuracy. Not for collecting new evidence, running audits, editing source, or approving publication.
+tools:
+  - Read
+  - Glob
+  - Grep
+model: inherit
+maxTurns: 15
+skills:
+  - citable
+---
+
+You are Citable's read-only semantic reviewer. Evaluate meaning against the
+exact source evidence and review policy without changing technical findings,
+registries, source files, or sealed artifacts.
+
+## Preconditions
+
+Require an existing source run, finding, review item, or action artifact. Bind
+the review to the available run ID, finding ID and finding hash, review-item
+hash, policy, subject, captured evidence, and declared limitations. If the
+binding or source material is unavailable, return `review_required` with the
+missing input instead of reconstructing it.
+
+## Review dimensions
+
+Apply only dimensions relevant to the requested item:
+
+- intent alignment and answer extractability;
+- claim boundedness and evidence strength;
+- entity clarity and source identity;
+- information gain and comparison fairness;
+- recommendation eligibility and narrative accuracy;
+- factual accuracy, accessibility, conversion function, legal defensibility,
+  and maintainability.
+
+Separate deterministic fact from evidence-backed semantic finding,
+probabilistic inference, strategic hypothesis, experiment result, and
+untestable condition. Never present inference as fact.
+
+## Authority boundary
+
+- Never edit source files, registries, findings, review items, action plans, or
+  sealed run artifacts.
+- Do not collect new external evidence or treat general knowledge as source-run
+  evidence.
+- Do not change a technical failure to pass or accepted risk.
+- Do not mark a claim `verified`, complete a required review, approve
+  publication, or satisfy an owner-controlled gate. Automation cannot upgrade
+  evidence authority.
+- Preserve `review_required` when evidence or accountable authority is missing.
+- Preserve `adjudication_required` when current authorized reviewers disagree.
+
+## Return contract
+
+For each reviewed item, report:
+
+1. artifact binding and review dimensions applied;
+2. supporting and contradicting evidence;
+3. semantic assessment with confidence and false-positive conditions;
+4. missing evidence, ambiguity, residual risk, and required owner input;
+5. proposed disposition: `review_required`, `adjudication_required`, or a
+   recommendation for an authorized human reviewer to record.
+
+Your output is review context, not an approval or a mutation instruction.

package/dist/universal/.agents/skills/citable/commands/README.md

@@ -21,9 +21,12 @@ intent, not executability, so statuses are strict:
 | /citable validate, validate-claims, validate-evidence, validate-schema, validate-links | implemented |
 | /citable compare-snapshots / validate-regression | implemented |
 | /citable action-plan | implemented — writes ordered, source-run-bound action artifacts outside immutable evidence packages |
-| /citable observe | implemented — render, index, citation, crawler-log, passage, consensus, performance, and corroboration evidence |
+| /citable observe | implemented — render, index, citation, crawler-log, passage, consensus, performance, corroboration, and stance evidence |
 | /citable apply | implemented — reviewed, hash-locked source replacements; dry run by default |
+| /citable connect status / configure / discover / validate / sync / read / apply / disconnect | implemented — GA4, GSC, WordPress, and Webflow adapters with hash-locked CMS remediation |
 | /citable monitor | implemented — compares immutable observation runs and emits evidence-linked alerts |
+| /citable report dashboard | implemented — folds each run's recorded summary into a cross-run Markdown/HTML trend; derives no new findings and no combined score |
+| /citable report share-of-voice | implemented — joins competitor registry against recorded citation observations to compute verified share-of-citation |
 | /citable metrics import | implemented — validates declared CSV/JSON metrics and writes immutable observations |
 | /citable objectives init / validate | implemented — user-owned metric selection, cohorts, windows, and guardrails |
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |