@nebulacomponents/citable 1.18.2 → 1.20.0

package/CHANGELOG.md

@@ -15,6 +15,70 @@ _No entries yet. See [`BOUNTY.md`](BOUNTY.md) to submit the first one._
 
 ## Unreleased
 
+## 1.20.0 — 2026-09-20
+
+### Added — Semantic completeness and explicit audit coverage
+
+- Replaced the hidden 50-page URL-audit ceiling with declared, bounded budgets
+  (`--max-pages`, default 500, hard ceiling 10,000; time budget default 1,800
+  seconds, hard ceiling 86,400 seconds).
+- Added reconciled coverage evidence and independent execution, coverage, and
+  determination statuses so truncation and partial failures cannot masquerade
+  as complete evidence.
+- Propagated coverage requirements through determinations, snapshot comparison,
+  remediation, connectors, reports, exports, CI output, and action plans.
+- Added sealed package verification, representation-specific evidence hashes,
+  and an adversarial 257-page end-to-end regression fixture.
+- Qualified user-facing language for incomplete, empty, legacy, and unverified
+  evidence rather than emitting unsupported clean, verified, resolved, or
+  site-wide claims.
+
+## 1.19.0 — 2026-09-11
+
+### Added — Deterministic Bounded Browser-Journey Evidence Acquisition (ADR-003)
+
+- **Browser Network Activity Observation (`network-events.json` / `schemas/browser-network-events.schema.json`)**:
+  - Captured HTTP/HTTPS network transactions during journey execution via Playwright request/response/failure hooks.
+  - Implemented configurable host allowlist filtering (exact match and wildcard subdomains) to isolate target and partner traffic.
+  - Recorded request method, URL, status code, protocol, timings, body size, redirects, and failure errors.
+  - Deny-by-default payload capture: request and response bodies default to uncaptured (`request_body: false`, `response_body: false`); host allowlist alone never triggers body capture.
+  - Explicit status separation: headers, query params, and bodies record status (`not_requested`, `filtered`, `captured`, `truncated`, `unavailable`, `hash_only`, `redacted`).
+  - Added strict sanitization of allowlisted request/response headers, query parameters, and JSON payloads with bounded size limits (`max_body_bytes`, `max_field_size`).
+  - In-flight request tracking (`summary.in_flight_requests`) and optional bounded settling timeout (`network_policy.settling_timeout_ms`).
+  - Added deterministic transaction bounds (`max_events`) with explicit `truncated` flags and epistemic status (`ABSENT`, `TRUNCATED`, `UNOBSERVABLE`, `FAILED`).
+- **Browser State Observation (`state-observations.json` / `schemas/browser-state-observations.schema.json`)**:
+  - Captured multi-checkpoint state snapshots at journey stages (`initial`, `before_step`, `step`, `final`).
+  - Recorded final URL, allowlisted query parameters, referrer, and navigation type.
+  - Governed access to cookies, localStorage, and sessionStorage: dumps only explicitly named keys/cookies declared in policy, unconditionally blocking unlisted storage.
+  - HttpOnly cookie semantics: captures presence, length, and security flags (`http_only: true`, `secure: true`, `same_site`), while strictly suppressing raw plaintext values as `[POLICY_RESTRICTED_HTTPONLY]` in `allowlist_values` mode. Context-level failures are recorded in `unavailable_items`.
+  - Added safe global variable evaluation using strict AST identifier/bracket path validation (`[a-zA-Z0-9_$.[\]'"]+`) without `eval()` or arbitrary JavaScript execution. Throwing getters during evaluation fail closed to `unavailable_items` without asserting false absence.
+  - Extracted DOM query results (presence, text content, attributes) scoped strictly to allowlisted CSS selectors and attributes.
+- **Explicitly Configured Runtime Events (`runtime-events.json` / `schemas/browser-runtime-events.schema.json`)**:
+  - Generic listener for global array event queues (e.g. `window.dataLayer`, custom event queues) hooking queues via `Object.defineProperty(window, prop, ...)` to intercept queue reassignment (`window.dataLayer = []`) with polling fallback for unhooked mutations.
+  - Safe in-page and Node extraction protecting against hostile throwing getters (`[GETTER_ERROR]`).
+  - Detailed collector health reporting in `summary.collector_health` (`status`, `queue_replaced`, `push_replaced`, `polling_fallback_used`, `supported_contexts: ["top_level_main_frame"]`, `unsupported_contexts: ["cross_origin_iframes", "web_workers"]`).
+  - Window event listener for declared DOM events (`DOMContentLoaded`, `load`, custom events).
+  - Explicit event allowlists, field allowlists, sensitive key redaction, and SHA-256 field hashing.
+  - Bounded collection (`max_events`) with explicit truncation counters and `filtered_events` tracking.
+- **Monotonic Sequencing & Temporal Step Correlation**:
+  - `src/observations/browser/correlation.js`: Generates monotonically increasing event sequences and microsecond-precision offsets (`monotonic_offset_ms`) from journey start.
+  - Explicit phase classification: `during_step`, `between_steps`, and `post_journey`.
+  - Asynchronous transaction completion tagging (`ambiguous_async: true`): records `initiated_step_id` and `completed_step_id` when requests resolve across step boundaries or after journey completion.
+- **Mandatory Secret Sanitization & Residual Risk Disclosure (`src/observations/browser/sanitizer.js`)**:
+  - Unconditional redaction to `[REDACTED_SECRET]` for Authorization/Bearer headers, Cookie/Set-Cookie headers, basic auth credentials, passwords, session tokens, API keys, private keys, credit cards, and OAuth callback codes.
+  - Defense-in-depth regex redaction paired with structural minimization; documented residual risk for novel unstructured secrets in customer-allowlisted payload fields.
+  - Recursively applied across headers, query parameters, request/response bodies, state storage values, globals, and runtime event payloads.
+- **Strict ABSENT Epistemic Invariant**:
+  - Guarantees that absence (`ABSENT` / `exists: false`) is asserted only when target was in declared scope, collector was active full window, no truncation occurred, candidate was not filtered, and no collector errors occurred.
+- **Resilient Evidence Preservation**:
+  - In the event of a required journey step failure, captured partial network events, state observations, and runtime events are preserved and packaged into the failure evidence bundle alongside failure JSON and screenshots.
+- **Schema & Artifact Integration**:
+  - Evolved `schemas/browser-evidence-plan.schema.json` backward-compatibly with optional `network_policy`, `state_policy`, `runtime_event_policy`, and `action: "checkpoint"`.
+  - All artifacts validated strictly against compiled Ajv schemas via `validateAgainst`.
+  - Added summary objects (`network_summary`, `state_summary`, `runtime_events_summary`) and artifact references to the canonical observation envelope (`schemas/observation.schema.json`).
+
+
+
 ## 1.18.2 — 2026-09-10
 
 ### Fixed — Executive Reporting, Evidence Provenance, and Commercial Artifact Hardening

package/README.md

@@ -34,6 +34,10 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
 - **Separate state reporting** for retrieval eligibility, source extraction and
   support suitability, and observed citation behavior. These are never merged
   into an "AI visibility score."
+- **Scope-qualified reporting**: empty, legacy, unverified, incomplete, and
+  indeterminate evidence cannot be rendered as a clean, complete, verified, or
+  site-wide conclusion. Reports name the evaluated population and preserve
+  limitations; absence of findings is not evidence of absence.
 - **Fail-closed governance**: claims can't become verified without evidence,
   expired evidence invalidates claims, schema is never fabricated, missing
   facts return `blocked` with `required_input`.
@@ -168,7 +172,7 @@ npx @nebulacomponents/citable help
 cd your-site/
 citable init                  # creates .citable/ (non-destructive)
 citable plan-audit --target ./dist --base-url https://example.com # read-only profile/capability plan
-citable audit --target ./dist --base-url https://example.com
+citable audit --target ./dist --base-url https://example.com --max-pages 500 --time-budget-seconds 1800
 citable action-plan <run-id> # ordered actions, blockers, review gates, verification
 citable observe passages --target ./dist --base-url https://example.com
 citable observe index --input search-console-export.json
@@ -225,6 +229,13 @@ citable test visual
 citable corpus benchmark
 ```
 
+URL audits are explicitly bounded. The default budget is 500 pages and 1,800
+seconds; `--max-pages` accepts 1–10,000 and `--time-budget-seconds` accepts
+1–86,400. Every run records requested, discovered, attempted, retrieved,
+evaluated, failed, indeterminate, excluded, and unvisited populations in
+`coverage.json`. A completed process can still have incomplete coverage, and
+reports never widen subset evidence into a site-wide claim.
+
 ## Repository map
 
 | Path | Purpose |

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.18.2
+version: 1.20.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -69,6 +69,15 @@ Every report must keep these top-level states separate:
 3. **Observed citation behavior** — only controlled, timestamped provider
    observations; absent observations are `not_evidenced`, never inferred.
 
+Presentation language must preserve those boundaries. An empty finding list,
+legacy package, unverified artifact, incomplete crawl, or indeterminate
+determination must not be described as `clean`, `complete`, `verified`,
+`resolved`, `100%`, or `site-wide`. State the evaluated population and the
+limitation instead (for example, "No findings were produced for the 217
+successfully evaluated resources; corpus-wide absence is not established").
+Positive local observations may remain supported, but they must not be widened
+to pages or resources that were not observed.
+
 Within retrieval, distinguish `allowed_by_policy`, `synthetic_fetch_succeeded`,
 `observed_in_production_logs`, `indexed`, and `returned_by_retrieval`. Within
 citation testing, distinguish mention, citation, material support, canonical
@@ -86,7 +95,7 @@ prefer running it over re-deriving its checks by hand:
 
 ```
 citable init                        # initialize .citable/ (non-destructive)
-citable audit [scope] --target <dir|url> [--base-url <url>] [--ref-date YYYY-MM-DD]
+citable audit [scope] --target <dir|url> [--base-url <url>] [--max-pages <1..10000>] [--time-budget-seconds <1..86400>] [--ref-date YYYY-MM-DD]
 citable plan-audit --target <dir|url> [--base-url <url>]
 citable sweep technical --target <dir|url> # Technical SEO sweep + Core Web Vitals metrics
 citable inspect <page> --target <dir|url>

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.18.2
+1.20.0

package/dist/universal/.agents/skills/citable/manifest.json

@@ -1,11 +1,11 @@
 {
   "name": "citable",
-  "version": "1.18.2",
+  "version": "1.20.0",
   "managedBy": "citable-cli",
   "provider": "codex",
   "providerName": "OpenAI Codex",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.18.2",
+  "sourcePackage": "@nebulacomponents/citable@1.20.0",
   "variantPath": ".agents/skills/citable",
   "agentProfiles": {
     "status": "unsupported",
@@ -55,23 +55,28 @@
     "schemas/acceptance-corpus.schema.json": "sha256:b703be371ee33747d83814e448d18cd01f103f1832480a95df4331b86982165d",
     "schemas/acceptance-run-context.schema.json": "sha256:56d75c7bcd166c3578a71699df1aa5466327c23c1e06e33773f2493f5caa1a50",
     "schemas/acceptance-run-receipt.schema.json": "sha256:6c6e66767cf3b9adb42ace087f7e9a428312f41b7ecbaf533fc8d7ba5953da44",
-    "schemas/action-plan.schema.json": "sha256:e2ca871c92595a55ac56248cd87df67d94449ac39ac216e60751baaec5b74f1e",
+    "schemas/action-plan.schema.json": "sha256:56b298e47fef5238b7971fbd7a72220e900fb1494065d6f75871da4dd85816f1",
     "schemas/artifact-interchange.schema.json": "sha256:c6f628934c8a1b8ea2996e03c2c5abd46c2a0e74c680b0a43e44c2343dc9aa21",
     "schemas/assumption.schema.json": "sha256:31a0f44bbf1d207e013961ec4c39eea85c3ae9efde1485b5e26084562c816844",
+    "schemas/audit-coverage.schema.json": "sha256:8787a80e9917ab83438949cb1556bc6610bc6fb768a37df00a1504e6281f51f4",
     "schemas/bing-webmaster.schema.json": "sha256:8357c518a8cb4ccd1def2da38950fbba68270e2b1613ad522b50c568a3b8538f",
-    "schemas/browser-evidence-plan.schema.json": "sha256:81ef14f665b4a00f01afb747576faeb06025722e5c15a36eff3d17e59e978851",
+    "schemas/browser-evidence-plan.schema.json": "sha256:1df677fb08338b832d93af2aabec565ef8d621c820cbc77f847dc1c94a814256",
+    "schemas/browser-network-events.schema.json": "sha256:aa71380998df74cff929316d7c76332a74c16cd08504214cdb2b86d9d793fee5",
+    "schemas/browser-runtime-events.schema.json": "sha256:ff9b6e486ca5a72a6613a4e3e479cd11bcadff52c7481df125aa1670f404a7e4",
+    "schemas/browser-state-observations.schema.json": "sha256:7748b9ed7110834e19c1827bd125c0d0cdb50e2dd89a713da03cd643e9c72843",
     "schemas/canonical-index-import.schema.json": "sha256:ef633662cb30873242ca356443bc4835afe56bb020208e8f42fa47ac8047b66e",
     "schemas/claim.schema.json": "sha256:ce79ccbfa34ece9b7a309a6962522ea06a1f44c468b4c472b5c376554a788537",
     "schemas/cli-output-envelope.schema.json": "sha256:6964e8f2f43618bfd0d7a3f5344b37ebc26f04779796bb8ff4675b935b6208c3",
+    "schemas/collection-result.schema.json": "sha256:d844aa183300abf220030f6a000f297195a06c02f2cd3a4f15a399e317b8c5d8",
     "schemas/common.defs.json": "sha256:ac66081df6b86f652e066ea868edecfcd36cdd1b1c81e55a1e3af880f671b727",
     "schemas/competitor.schema.json": "sha256:2f6fd7e4543846bde56ff4dc62bb41fa366889787b794a7cdb0bff1a3392e591",
-    "schemas/config.schema.json": "sha256:a87f3bb0087de09035b9f2dafea66e32e4fcc2e3e329abcd0fd8a5ec33318f2a",
+    "schemas/config.schema.json": "sha256:da40fe568844a6303d265f83058fce9f4a9a569cd72b271bc219361c71e8e8fa",
     "schemas/connection.schema.json": "sha256:abcedde8d62d0c0663d4f959e06132a617908058ed965078965445ef3b108310",
     "schemas/corpus-publication-receipt.schema.json": "sha256:a4d523fd1c1fa53762522891c06c06edb668cd15e1de3c7123d2b9948445ae32",
     "schemas/corroboration-import.schema.json": "sha256:927983d0590f1ec569e86195d2031be0cd212f9436ff98acca468cbae108d85e",
     "schemas/crawler-identity.schema.json": "sha256:e1e3e6da203a8bc49fba8f9bbde525368891db022d542fc615b677401825351d",
     "schemas/crawler.schema.json": "sha256:1a113dfb80bc6cde904c3ea648c82ea1d88fe50f2c1a0e7175d44abba28ac64e",
-    "schemas/cro-report.schema.json": "sha256:270cfe946d3dce007672c5fd5e052f07e3322c85a2bfcc0cd47f34ce569f2fb1",
+    "schemas/cro-report.schema.json": "sha256:96a9c2a7a08eafe07bc78c3f38edc82c714ed96d13024142ece338dbd1e018bf",
     "schemas/customer-outcome.schema.json": "sha256:c0cdfee31a692feadb31dc6be734d45ae178ee53f28349c2a9e7504bdfcf9e50",
     "schemas/decision.schema.json": "sha256:7c30f3ad83a6aa0b67ecc51ac6691e5e041b633d01bab17cee2b5218d926204e",
     "schemas/deployment-receipt.schema.json": "sha256:789455907e7f3039fd55ee5b2568e09871128f513f5ddfe1f3afac1a4dd6b2bd",
@@ -83,7 +88,7 @@
     "schemas/exception.schema.json": "sha256:c88985494ec66554330fdc5b65d033527d0005acf41f10798b1e831d171f8944",
     "schemas/experiment.schema.json": "sha256:4b5d16481448597b152269296b67b5776be6f03d8f9afba1833bcee10bf3c05b",
     "schemas/field-validation-metrics.schema.json": "sha256:bd5daeafc1593f1c4707d75180e1feb1e81d9345a57c1f269eadf13c36cb7012",
-    "schemas/finding.schema.json": "sha256:1775425b9b989dd4ffc0c607eb9d64e95cad2124f9058f83ef78b0b0030e209f",
+    "schemas/finding.schema.json": "sha256:06c0fc028288319828f124cea6791a7ad69a1bc3aa81c176604a83ca0f2da766",
     "schemas/fleet.schema.json": "sha256:3bf5772695ae4bb49a8c5fdbedee230ddb1d84aff6a3176eeb41527aca6ef2a5",
     "schemas/funnel.schema.json": "sha256:6c368f29296ac45f5d52bb3a2f95fa935a1f30f3d53aae846156e9aa4c8ec59c",
     "schemas/initiative.schema.json": "sha256:491f6cc022c7ac1f9ea9ac9ddfcd270cb49c390e2601fe1e73aa6192a9e7689a",
@@ -103,23 +108,24 @@
     "schemas/release-manifest.schema.json": "sha256:962be645e790b5f3dc6f6ea455e187492d727dcb91d00f91e4e25b40e2dbc360",
     "schemas/release-state.schema.json": "sha256:9920f68e538915d0d07044f313a9e410775a38ce9bb46a55d9ebe02970784803",
     "schemas/remediation-spec.schema.json": "sha256:6fe8cb773702862ba6d261198bb5cc2dca3eca0a2310a60ebddd04377654df8d",
-    "schemas/remediation-verification.schema.json": "sha256:b4e4f3ce8d72ef64cdb879a86b6afe9220e2d9e4d13ed3486348cc8ee38e1319",
+    "schemas/remediation-verification.schema.json": "sha256:b56560b4f6fd82b9d3db4ad4f7fd0a0e4b289bfebf2e5a02e7c6727d5ba97291",
     "schemas/review-item.schema.json": "sha256:df532a70385d5031bbc18654f3ccb436dc6e8d402ccf987e58f8f7e3ad2fb3f1",
     "schemas/review-policy.schema.json": "sha256:b2d176b1886f78c384b25532a0c3eb18548dfbd17f362a305e622bab562a1d04",
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/risk.schema.json": "sha256:ea3ca47a8457d98ea65df78e07ba6c20479906e8a3df07a6fa4be5644828fc49",
-    "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
+    "schemas/run.schema.json": "sha256:d46e9d0154a4a8acddbc3b4dec69e9202c6a4848b94210ca5ba32ede0d447023",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
     "schemas/scenario.schema.json": "sha256:3f5bc2032d08f973600db068f475176a0e4706b33be42f99c778fe755a0ff38b",
     "schemas/schedule.schema.json": "sha256:645df065bf33577a960c0bf8bb97e141e9326840303569468dae8a553d468482",
-    "schemas/search-report.schema.json": "sha256:0ae2dad77cf3c6f2abac22a8180d66bde8ebd044ed6324a56329cd12a3c898f2",
+    "schemas/search-report.schema.json": "sha256:d6e837580fdd53365e74d3d8b5101cd5a7d54b72f438155293aac399f676b176",
     "schemas/source-identity-chain.schema.json": "sha256:a65d9c12eaed1bd6b637c66a2f9362c17287fdfcb454d8676fb611d2d28aa019",
     "schemas/sow.schema.json": "sha256:3a3fd6048a747a9bc0cfaea98920376b043616a33c953a9eb8b74d0ae32dded0",
+    "schemas/summary.schema.json": "sha256:0c9eb076fe992f351c3963728ba247a003648d8fe637b7cdd3016ba5842199c6",
     "schemas/variance.schema.json": "sha256:68389f64f0a3be13ff8951e8eefba9a5c31d0738325cb47e37c1a8435bea48f0",
     "scripts/README.md": "sha256:9eee4e8beb4579a183bd714c9dd24b83abd020753eada5caeffae004739d60b5",
-    "SKILL.md": "sha256:a2c2ce3aced71fc2a66f2e46b4a9fcc10b65819dcef58176b2cefe674d6a941b",
+    "SKILL.md": "sha256:77d5647c556f0ba398bcb855c7307b004020a9fec0d9ef3b8e143173ccbfb756",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:0a1b17e91d514c0c9e88520e6091e2d52a6faf8296892cad7355ff0723a42914"
+    "VERSION": "sha256:26ac7beccb7951efb69255974ffc70a13bb2e68ae84dcb5456c3fb46294bdba8"
   },
-  "treeHash": "sha256:2d4210d9dd26b7952f53964402abf06c8ae12ae43cb8ac5c568f070ab44b0001"
+  "treeHash": "sha256:d2abaf43458900a402f054172a8c35811b99cab2272c7503d72ea01b7ed1285b"
 }

package/dist/universal/.agents/skills/citable/schemas/action-plan.schema.json

@@ -4,11 +4,23 @@
   "title": "Finding action plan",
   "type": "object",
   "additionalProperties": false,
-  "required": ["source_run_id", "source_findings_hash", "generated_at", "summary", "actions"],
+  "required": ["source_run_id", "source_findings_hash", "generated_at", "summary", "actions", "source_coverage"],
   "properties": {
     "source_run_id": { "type": "string", "minLength": 1 },
     "source_findings_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
     "generated_at": { "type": "string" },
+    "source_coverage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["coverage_status", "determination_status", "evidence_scope", "limitations"],
+      "properties": {
+        "coverage_status": { "type": "string", "enum": ["complete", "truncated", "indeterminate", "not_applicable"] },
+        "determination_status": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] },
+        "artifact": { "type": ["string", "null"] },
+        "evidence_scope": { "$ref": "#/definitions/evidenceScope" },
+        "limitations": { "type": "array", "items": { "type": "string" } }
+      }
+    },
     "summary": {
       "type": "object",
       "additionalProperties": false,
@@ -40,6 +52,10 @@
           "owner": { "type": ["string", "null"] },
           "decision_owner": { "type": ["string", "null"] },
           "status": { "type": "string", "enum": ["ready", "blocked"] },
+          "coverage_status": { "type": "string", "enum": ["complete", "truncated", "indeterminate", "not_applicable"] },
+          "determination_status": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] },
+          "evidence_scope": { "$ref": "#/definitions/evidenceScope" },
+          "limitations": { "type": "array", "items": { "type": "string" } },
           "required_input": { "type": "array", "items": { "type": "string" } },
           "semantic_gates": { "type": "array", "items": { "type": "string" } },
           "unsafe_shortcuts": { "type": "array", "items": { "type": "string" } },
@@ -64,5 +80,26 @@
         }
       }
     }
+  },
+  "definitions": {
+    "evidenceScope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requirement", "satisfaction", "coverage_ref", "resource_ids"],
+      "properties": {
+        "requirement": { "type": "string", "minLength": 1 },
+        "satisfaction": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] },
+        "coverage_ref": { "type": ["string", "null"] },
+        "resource_ids": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "population": { "type": "string", "enum": ["evaluated_subset", "none_observed"] },
+        "evaluated": { "type": ["integer", "null"], "minimum": 0 },
+        "eligible": { "type": ["integer", "null"], "minimum": 0 },
+        "excluded": { "type": ["integer", "null"], "minimum": 0 },
+        "failed": { "type": ["integer", "null"], "minimum": 0 },
+        "indeterminate": { "type": ["integer", "null"], "minimum": 0 },
+        "unvisited": { "type": ["integer", "null"], "minimum": 0 },
+        "denominator": { "type": ["integer", "null"], "minimum": 0 }
+      }
+    }
   }
 }

package/dist/universal/.agents/skills/citable/schemas/audit-coverage.schema.json

@@ -0,0 +1,118 @@
+{
+  "$id": "citable://schemas/audit-coverage.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Audit coverage",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "normalization_version",
+    "requested_scope",
+    "discovery",
+    "populations",
+    "resources",
+    "stop_reason",
+    "coverage_status",
+    "reconciliation",
+    "limitations"
+  ],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "normalization_version": { "type": "string", "minLength": 1 },
+    "requested_scope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["start_url", "origin", "max_pages", "time_budget_seconds"],
+      "properties": {
+        "start_url": { "type": "string", "format": "uri" },
+        "origin": { "type": "string", "format": "uri" },
+        "max_pages": { "type": "integer", "minimum": 1, "maximum": 10000 },
+        "time_budget_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 }
+      }
+    },
+    "discovery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "methods", "limitations"],
+      "properties": {
+        "status": { "type": "string", "enum": ["complete", "truncated", "indeterminate"] },
+        "methods": { "type": "array", "items": { "type": "string" } },
+        "limitations": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "populations": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "discovered",
+        "eligible",
+        "excluded",
+        "attempted",
+        "retrieved",
+        "valid_resource",
+        "evaluated",
+        "valid_but_unevaluated",
+        "failed",
+        "indeterminate",
+        "unvisited"
+      ],
+      "properties": {
+        "discovered": { "$ref": "#/definitions/populationCount" },
+        "eligible": { "$ref": "#/definitions/populationCount" },
+        "excluded": { "$ref": "#/definitions/populationCount" },
+        "attempted": { "$ref": "#/definitions/populationCount" },
+        "retrieved": { "$ref": "#/definitions/populationCount" },
+        "valid_resource": { "$ref": "#/definitions/populationCount" },
+        "evaluated": { "$ref": "#/definitions/populationCount" },
+        "valid_but_unevaluated": { "$ref": "#/definitions/populationCount" },
+        "failed": { "$ref": "#/definitions/populationCount" },
+        "indeterminate": { "$ref": "#/definitions/populationCount" },
+        "unvisited": { "$ref": "#/definitions/populationCount" }
+      }
+    },
+    "resources": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "resource_id": { "type": ["string", "null"] },
+          "requested_url": { "type": ["string", "null"] },
+          "effective_url": { "type": ["string", "null"] },
+          "canonical_url": { "type": ["string", "null"] },
+          "response_body_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "rendered_dom_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "extracted_text_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "structured_data_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "evidence_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "artifact_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+        }
+      }
+    },
+    "stop_reason": {
+      "type": "string",
+      "enum": [
+        "frontier_exhausted",
+        "page_budget_exhausted",
+        "time_budget_exhausted",
+        "fatal_collection_failure"
+      ]
+    },
+    "coverage_status": {
+      "type": "string",
+      "enum": ["complete", "truncated", "indeterminate", "not_applicable"]
+    },
+    "reconciliation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["valid", "errors"],
+      "properties": {
+        "valid": { "type": "boolean" },
+        "errors": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "limitations": { "type": "array", "items": { "type": "string" } }
+  },
+  "definitions": {
+    "populationCount": { "type": "integer", "minimum": 0 }
+  }
+}