@nebulacomponents/citable 1.19.0 → 1.20.0

package/CHANGELOG.md

@@ -15,6 +15,24 @@ _No entries yet. See [`BOUNTY.md`](BOUNTY.md) to submit the first one._
 
 ## Unreleased
 
+## 1.20.0 — 2026-09-20
+
+### Added — Semantic completeness and explicit audit coverage
+
+- Replaced the hidden 50-page URL-audit ceiling with declared, bounded budgets
+  (`--max-pages`, default 500, hard ceiling 10,000; time budget default 1,800
+  seconds, hard ceiling 86,400 seconds).
+- Added reconciled coverage evidence and independent execution, coverage, and
+  determination statuses so truncation and partial failures cannot masquerade
+  as complete evidence.
+- Propagated coverage requirements through determinations, snapshot comparison,
+  remediation, connectors, reports, exports, CI output, and action plans.
+- Added sealed package verification, representation-specific evidence hashes,
+  and an adversarial 257-page end-to-end regression fixture.
+- Qualified user-facing language for incomplete, empty, legacy, and unverified
+  evidence rather than emitting unsupported clean, verified, resolved, or
+  site-wide claims.
+
 ## 1.19.0 — 2026-09-11
 
 ### Added — Deterministic Bounded Browser-Journey Evidence Acquisition (ADR-003)

package/README.md

@@ -34,6 +34,10 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
 - **Separate state reporting** for retrieval eligibility, source extraction and
   support suitability, and observed citation behavior. These are never merged
   into an "AI visibility score."
+- **Scope-qualified reporting**: empty, legacy, unverified, incomplete, and
+  indeterminate evidence cannot be rendered as a clean, complete, verified, or
+  site-wide conclusion. Reports name the evaluated population and preserve
+  limitations; absence of findings is not evidence of absence.
 - **Fail-closed governance**: claims can't become verified without evidence,
   expired evidence invalidates claims, schema is never fabricated, missing
   facts return `blocked` with `required_input`.
@@ -168,7 +172,7 @@ npx @nebulacomponents/citable help
 cd your-site/
 citable init                  # creates .citable/ (non-destructive)
 citable plan-audit --target ./dist --base-url https://example.com # read-only profile/capability plan
-citable audit --target ./dist --base-url https://example.com
+citable audit --target ./dist --base-url https://example.com --max-pages 500 --time-budget-seconds 1800
 citable action-plan <run-id> # ordered actions, blockers, review gates, verification
 citable observe passages --target ./dist --base-url https://example.com
 citable observe index --input search-console-export.json
@@ -225,6 +229,13 @@ citable test visual
 citable corpus benchmark
 ```
 
+URL audits are explicitly bounded. The default budget is 500 pages and 1,800
+seconds; `--max-pages` accepts 1–10,000 and `--time-budget-seconds` accepts
+1–86,400. Every run records requested, discovered, attempted, retrieved,
+evaluated, failed, indeterminate, excluded, and unvisited populations in
+`coverage.json`. A completed process can still have incomplete coverage, and
+reports never widen subset evidence into a site-wide claim.
+
 ## Repository map
 
 | Path | Purpose |

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.19.0
+version: 1.20.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -69,6 +69,15 @@ Every report must keep these top-level states separate:
 3. **Observed citation behavior** — only controlled, timestamped provider
    observations; absent observations are `not_evidenced`, never inferred.
 
+Presentation language must preserve those boundaries. An empty finding list,
+legacy package, unverified artifact, incomplete crawl, or indeterminate
+determination must not be described as `clean`, `complete`, `verified`,
+`resolved`, `100%`, or `site-wide`. State the evaluated population and the
+limitation instead (for example, "No findings were produced for the 217
+successfully evaluated resources; corpus-wide absence is not established").
+Positive local observations may remain supported, but they must not be widened
+to pages or resources that were not observed.
+
 Within retrieval, distinguish `allowed_by_policy`, `synthetic_fetch_succeeded`,
 `observed_in_production_logs`, `indexed`, and `returned_by_retrieval`. Within
 citation testing, distinguish mention, citation, material support, canonical
@@ -86,7 +95,7 @@ prefer running it over re-deriving its checks by hand:
 
 ```
 citable init                        # initialize .citable/ (non-destructive)
-citable audit [scope] --target <dir|url> [--base-url <url>] [--ref-date YYYY-MM-DD]
+citable audit [scope] --target <dir|url> [--base-url <url>] [--max-pages <1..10000>] [--time-budget-seconds <1..86400>] [--ref-date YYYY-MM-DD]
 citable plan-audit --target <dir|url> [--base-url <url>]
 citable sweep technical --target <dir|url> # Technical SEO sweep + Core Web Vitals metrics
 citable inspect <page> --target <dir|url>

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.19.0
+1.20.0

package/dist/universal/.agents/skills/citable/manifest.json

@@ -1,11 +1,11 @@
 {
   "name": "citable",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "managedBy": "citable-cli",
   "provider": "codex",
   "providerName": "OpenAI Codex",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.19.0",
+  "sourcePackage": "@nebulacomponents/citable@1.20.0",
   "variantPath": ".agents/skills/citable",
   "agentProfiles": {
     "status": "unsupported",
@@ -55,9 +55,10 @@
     "schemas/acceptance-corpus.schema.json": "sha256:b703be371ee33747d83814e448d18cd01f103f1832480a95df4331b86982165d",
     "schemas/acceptance-run-context.schema.json": "sha256:56d75c7bcd166c3578a71699df1aa5466327c23c1e06e33773f2493f5caa1a50",
     "schemas/acceptance-run-receipt.schema.json": "sha256:6c6e66767cf3b9adb42ace087f7e9a428312f41b7ecbaf533fc8d7ba5953da44",
-    "schemas/action-plan.schema.json": "sha256:e2ca871c92595a55ac56248cd87df67d94449ac39ac216e60751baaec5b74f1e",
+    "schemas/action-plan.schema.json": "sha256:56b298e47fef5238b7971fbd7a72220e900fb1494065d6f75871da4dd85816f1",
     "schemas/artifact-interchange.schema.json": "sha256:c6f628934c8a1b8ea2996e03c2c5abd46c2a0e74c680b0a43e44c2343dc9aa21",
     "schemas/assumption.schema.json": "sha256:31a0f44bbf1d207e013961ec4c39eea85c3ae9efde1485b5e26084562c816844",
+    "schemas/audit-coverage.schema.json": "sha256:8787a80e9917ab83438949cb1556bc6610bc6fb768a37df00a1504e6281f51f4",
     "schemas/bing-webmaster.schema.json": "sha256:8357c518a8cb4ccd1def2da38950fbba68270e2b1613ad522b50c568a3b8538f",
     "schemas/browser-evidence-plan.schema.json": "sha256:1df677fb08338b832d93af2aabec565ef8d621c820cbc77f847dc1c94a814256",
     "schemas/browser-network-events.schema.json": "sha256:aa71380998df74cff929316d7c76332a74c16cd08504214cdb2b86d9d793fee5",
@@ -66,15 +67,16 @@
     "schemas/canonical-index-import.schema.json": "sha256:ef633662cb30873242ca356443bc4835afe56bb020208e8f42fa47ac8047b66e",
     "schemas/claim.schema.json": "sha256:ce79ccbfa34ece9b7a309a6962522ea06a1f44c468b4c472b5c376554a788537",
     "schemas/cli-output-envelope.schema.json": "sha256:6964e8f2f43618bfd0d7a3f5344b37ebc26f04779796bb8ff4675b935b6208c3",
+    "schemas/collection-result.schema.json": "sha256:d844aa183300abf220030f6a000f297195a06c02f2cd3a4f15a399e317b8c5d8",
     "schemas/common.defs.json": "sha256:ac66081df6b86f652e066ea868edecfcd36cdd1b1c81e55a1e3af880f671b727",
     "schemas/competitor.schema.json": "sha256:2f6fd7e4543846bde56ff4dc62bb41fa366889787b794a7cdb0bff1a3392e591",
-    "schemas/config.schema.json": "sha256:a87f3bb0087de09035b9f2dafea66e32e4fcc2e3e329abcd0fd8a5ec33318f2a",
+    "schemas/config.schema.json": "sha256:da40fe568844a6303d265f83058fce9f4a9a569cd72b271bc219361c71e8e8fa",
     "schemas/connection.schema.json": "sha256:abcedde8d62d0c0663d4f959e06132a617908058ed965078965445ef3b108310",
     "schemas/corpus-publication-receipt.schema.json": "sha256:a4d523fd1c1fa53762522891c06c06edb668cd15e1de3c7123d2b9948445ae32",
     "schemas/corroboration-import.schema.json": "sha256:927983d0590f1ec569e86195d2031be0cd212f9436ff98acca468cbae108d85e",
     "schemas/crawler-identity.schema.json": "sha256:e1e3e6da203a8bc49fba8f9bbde525368891db022d542fc615b677401825351d",
     "schemas/crawler.schema.json": "sha256:1a113dfb80bc6cde904c3ea648c82ea1d88fe50f2c1a0e7175d44abba28ac64e",
-    "schemas/cro-report.schema.json": "sha256:270cfe946d3dce007672c5fd5e052f07e3322c85a2bfcc0cd47f34ce569f2fb1",
+    "schemas/cro-report.schema.json": "sha256:96a9c2a7a08eafe07bc78c3f38edc82c714ed96d13024142ece338dbd1e018bf",
     "schemas/customer-outcome.schema.json": "sha256:c0cdfee31a692feadb31dc6be734d45ae178ee53f28349c2a9e7504bdfcf9e50",
     "schemas/decision.schema.json": "sha256:7c30f3ad83a6aa0b67ecc51ac6691e5e041b633d01bab17cee2b5218d926204e",
     "schemas/deployment-receipt.schema.json": "sha256:789455907e7f3039fd55ee5b2568e09871128f513f5ddfe1f3afac1a4dd6b2bd",
@@ -86,7 +88,7 @@
     "schemas/exception.schema.json": "sha256:c88985494ec66554330fdc5b65d033527d0005acf41f10798b1e831d171f8944",
     "schemas/experiment.schema.json": "sha256:4b5d16481448597b152269296b67b5776be6f03d8f9afba1833bcee10bf3c05b",
     "schemas/field-validation-metrics.schema.json": "sha256:bd5daeafc1593f1c4707d75180e1feb1e81d9345a57c1f269eadf13c36cb7012",
-    "schemas/finding.schema.json": "sha256:1775425b9b989dd4ffc0c607eb9d64e95cad2124f9058f83ef78b0b0030e209f",
+    "schemas/finding.schema.json": "sha256:06c0fc028288319828f124cea6791a7ad69a1bc3aa81c176604a83ca0f2da766",
     "schemas/fleet.schema.json": "sha256:3bf5772695ae4bb49a8c5fdbedee230ddb1d84aff6a3176eeb41527aca6ef2a5",
     "schemas/funnel.schema.json": "sha256:6c368f29296ac45f5d52bb3a2f95fa935a1f30f3d53aae846156e9aa4c8ec59c",
     "schemas/initiative.schema.json": "sha256:491f6cc022c7ac1f9ea9ac9ddfcd270cb49c390e2601fe1e73aa6192a9e7689a",
@@ -106,23 +108,24 @@
     "schemas/release-manifest.schema.json": "sha256:962be645e790b5f3dc6f6ea455e187492d727dcb91d00f91e4e25b40e2dbc360",
     "schemas/release-state.schema.json": "sha256:9920f68e538915d0d07044f313a9e410775a38ce9bb46a55d9ebe02970784803",
     "schemas/remediation-spec.schema.json": "sha256:6fe8cb773702862ba6d261198bb5cc2dca3eca0a2310a60ebddd04377654df8d",
-    "schemas/remediation-verification.schema.json": "sha256:b4e4f3ce8d72ef64cdb879a86b6afe9220e2d9e4d13ed3486348cc8ee38e1319",
+    "schemas/remediation-verification.schema.json": "sha256:b56560b4f6fd82b9d3db4ad4f7fd0a0e4b289bfebf2e5a02e7c6727d5ba97291",
     "schemas/review-item.schema.json": "sha256:df532a70385d5031bbc18654f3ccb436dc6e8d402ccf987e58f8f7e3ad2fb3f1",
     "schemas/review-policy.schema.json": "sha256:b2d176b1886f78c384b25532a0c3eb18548dfbd17f362a305e622bab562a1d04",
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/risk.schema.json": "sha256:ea3ca47a8457d98ea65df78e07ba6c20479906e8a3df07a6fa4be5644828fc49",
-    "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
+    "schemas/run.schema.json": "sha256:d46e9d0154a4a8acddbc3b4dec69e9202c6a4848b94210ca5ba32ede0d447023",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
     "schemas/scenario.schema.json": "sha256:3f5bc2032d08f973600db068f475176a0e4706b33be42f99c778fe755a0ff38b",
     "schemas/schedule.schema.json": "sha256:645df065bf33577a960c0bf8bb97e141e9326840303569468dae8a553d468482",
-    "schemas/search-report.schema.json": "sha256:0ae2dad77cf3c6f2abac22a8180d66bde8ebd044ed6324a56329cd12a3c898f2",
+    "schemas/search-report.schema.json": "sha256:d6e837580fdd53365e74d3d8b5101cd5a7d54b72f438155293aac399f676b176",
     "schemas/source-identity-chain.schema.json": "sha256:a65d9c12eaed1bd6b637c66a2f9362c17287fdfcb454d8676fb611d2d28aa019",
     "schemas/sow.schema.json": "sha256:3a3fd6048a747a9bc0cfaea98920376b043616a33c953a9eb8b74d0ae32dded0",
+    "schemas/summary.schema.json": "sha256:0c9eb076fe992f351c3963728ba247a003648d8fe637b7cdd3016ba5842199c6",
     "schemas/variance.schema.json": "sha256:68389f64f0a3be13ff8951e8eefba9a5c31d0738325cb47e37c1a8435bea48f0",
     "scripts/README.md": "sha256:9eee4e8beb4579a183bd714c9dd24b83abd020753eada5caeffae004739d60b5",
-    "SKILL.md": "sha256:70629652ec22ece59e4ddef9198ce9e77f9d4da74eab14a4ccdf99d67c393ab1",
+    "SKILL.md": "sha256:77d5647c556f0ba398bcb855c7307b004020a9fec0d9ef3b8e143173ccbfb756",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:c55c898de5079ee498d5f051b29815688154292df4d72ab91f1edb5497ac4e6e"
+    "VERSION": "sha256:26ac7beccb7951efb69255974ffc70a13bb2e68ae84dcb5456c3fb46294bdba8"
   },
-  "treeHash": "sha256:0343fe90b5b631f5405e5c6390355f4fc6f926d0cf9e49946f3bed921b29ff2e"
+  "treeHash": "sha256:d2abaf43458900a402f054172a8c35811b99cab2272c7503d72ea01b7ed1285b"
 }

package/dist/universal/.agents/skills/citable/schemas/action-plan.schema.json

@@ -4,11 +4,23 @@
   "title": "Finding action plan",
   "type": "object",
   "additionalProperties": false,
-  "required": ["source_run_id", "source_findings_hash", "generated_at", "summary", "actions"],
+  "required": ["source_run_id", "source_findings_hash", "generated_at", "summary", "actions", "source_coverage"],
   "properties": {
     "source_run_id": { "type": "string", "minLength": 1 },
     "source_findings_hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
     "generated_at": { "type": "string" },
+    "source_coverage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["coverage_status", "determination_status", "evidence_scope", "limitations"],
+      "properties": {
+        "coverage_status": { "type": "string", "enum": ["complete", "truncated", "indeterminate", "not_applicable"] },
+        "determination_status": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] },
+        "artifact": { "type": ["string", "null"] },
+        "evidence_scope": { "$ref": "#/definitions/evidenceScope" },
+        "limitations": { "type": "array", "items": { "type": "string" } }
+      }
+    },
     "summary": {
       "type": "object",
       "additionalProperties": false,
@@ -40,6 +52,10 @@
           "owner": { "type": ["string", "null"] },
           "decision_owner": { "type": ["string", "null"] },
           "status": { "type": "string", "enum": ["ready", "blocked"] },
+          "coverage_status": { "type": "string", "enum": ["complete", "truncated", "indeterminate", "not_applicable"] },
+          "determination_status": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] },
+          "evidence_scope": { "$ref": "#/definitions/evidenceScope" },
+          "limitations": { "type": "array", "items": { "type": "string" } },
           "required_input": { "type": "array", "items": { "type": "string" } },
           "semantic_gates": { "type": "array", "items": { "type": "string" } },
           "unsafe_shortcuts": { "type": "array", "items": { "type": "string" } },
@@ -64,5 +80,26 @@
         }
       }
     }
+  },
+  "definitions": {
+    "evidenceScope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requirement", "satisfaction", "coverage_ref", "resource_ids"],
+      "properties": {
+        "requirement": { "type": "string", "minLength": 1 },
+        "satisfaction": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] },
+        "coverage_ref": { "type": ["string", "null"] },
+        "resource_ids": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "population": { "type": "string", "enum": ["evaluated_subset", "none_observed"] },
+        "evaluated": { "type": ["integer", "null"], "minimum": 0 },
+        "eligible": { "type": ["integer", "null"], "minimum": 0 },
+        "excluded": { "type": ["integer", "null"], "minimum": 0 },
+        "failed": { "type": ["integer", "null"], "minimum": 0 },
+        "indeterminate": { "type": ["integer", "null"], "minimum": 0 },
+        "unvisited": { "type": ["integer", "null"], "minimum": 0 },
+        "denominator": { "type": ["integer", "null"], "minimum": 0 }
+      }
+    }
   }
 }

package/dist/universal/.agents/skills/citable/schemas/audit-coverage.schema.json

@@ -0,0 +1,118 @@
+{
+  "$id": "citable://schemas/audit-coverage.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Audit coverage",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "normalization_version",
+    "requested_scope",
+    "discovery",
+    "populations",
+    "resources",
+    "stop_reason",
+    "coverage_status",
+    "reconciliation",
+    "limitations"
+  ],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "normalization_version": { "type": "string", "minLength": 1 },
+    "requested_scope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["start_url", "origin", "max_pages", "time_budget_seconds"],
+      "properties": {
+        "start_url": { "type": "string", "format": "uri" },
+        "origin": { "type": "string", "format": "uri" },
+        "max_pages": { "type": "integer", "minimum": 1, "maximum": 10000 },
+        "time_budget_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 }
+      }
+    },
+    "discovery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "methods", "limitations"],
+      "properties": {
+        "status": { "type": "string", "enum": ["complete", "truncated", "indeterminate"] },
+        "methods": { "type": "array", "items": { "type": "string" } },
+        "limitations": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "populations": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "discovered",
+        "eligible",
+        "excluded",
+        "attempted",
+        "retrieved",
+        "valid_resource",
+        "evaluated",
+        "valid_but_unevaluated",
+        "failed",
+        "indeterminate",
+        "unvisited"
+      ],
+      "properties": {
+        "discovered": { "$ref": "#/definitions/populationCount" },
+        "eligible": { "$ref": "#/definitions/populationCount" },
+        "excluded": { "$ref": "#/definitions/populationCount" },
+        "attempted": { "$ref": "#/definitions/populationCount" },
+        "retrieved": { "$ref": "#/definitions/populationCount" },
+        "valid_resource": { "$ref": "#/definitions/populationCount" },
+        "evaluated": { "$ref": "#/definitions/populationCount" },
+        "valid_but_unevaluated": { "$ref": "#/definitions/populationCount" },
+        "failed": { "$ref": "#/definitions/populationCount" },
+        "indeterminate": { "$ref": "#/definitions/populationCount" },
+        "unvisited": { "$ref": "#/definitions/populationCount" }
+      }
+    },
+    "resources": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "resource_id": { "type": ["string", "null"] },
+          "requested_url": { "type": ["string", "null"] },
+          "effective_url": { "type": ["string", "null"] },
+          "canonical_url": { "type": ["string", "null"] },
+          "response_body_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "rendered_dom_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "extracted_text_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "structured_data_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "evidence_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" },
+          "artifact_hash": { "type": ["string", "null"], "pattern": "^[a-f0-9]{64}$" }
+        }
+      }
+    },
+    "stop_reason": {
+      "type": "string",
+      "enum": [
+        "frontier_exhausted",
+        "page_budget_exhausted",
+        "time_budget_exhausted",
+        "fatal_collection_failure"
+      ]
+    },
+    "coverage_status": {
+      "type": "string",
+      "enum": ["complete", "truncated", "indeterminate", "not_applicable"]
+    },
+    "reconciliation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["valid", "errors"],
+      "properties": {
+        "valid": { "type": "boolean" },
+        "errors": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "limitations": { "type": "array", "items": { "type": "string" } }
+  },
+  "definitions": {
+    "populationCount": { "type": "integer", "minimum": 0 }
+  }
+}

package/dist/universal/.agents/skills/citable/schemas/collection-result.schema.json

@@ -0,0 +1,35 @@
+{
+  "$id": "citable://schemas/collection-result.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Collection result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "items",
+    "pagination_state",
+    "provider_reported_total",
+    "retrieved_total",
+    "coverage_status",
+    "continuation_state",
+    "limitations",
+    "errors"
+  ],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "items": {
+      "type": "array",
+      "items": {}
+    },
+    "pagination_state": { "type": "object" },
+    "provider_reported_total": { "type": ["integer", "null"], "minimum": 0 },
+    "retrieved_total": { "type": "integer", "minimum": 0 },
+    "coverage_status": {
+      "type": "string",
+      "enum": ["complete", "truncated", "indeterminate", "provider_bounded"]
+    },
+    "continuation_state": { "type": ["object", "null"] },
+    "limitations": { "type": "array", "items": { "type": "string" } },
+    "errors": { "type": "array", "items": { "type": "string" } }
+  }
+}

package/dist/universal/.agents/skills/citable/schemas/config.schema.json

@@ -30,6 +30,8 @@
       "type": "object",
       "properties": {
         "index_target_default": { "type": "boolean" },
+        "max_pages": { "type": "integer", "minimum": 1, "maximum": 10000 },
+        "time_budget_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 },
         "max_crawl_depth": { "type": "integer", "minimum": 1 },
         "thin_content_words": { "type": "integer", "minimum": 1 },
         "fetch_external": { "type": "boolean" },

package/dist/universal/.agents/skills/citable/schemas/cro-report.schema.json

@@ -103,7 +103,14 @@
         "source_identifier": { "type": ["string", "null"] },
         "source_findings_count": { "type": "integer", "minimum": 0 },
         "integrity_hash": { "type": ["string", "null"] },
-        "synthetic_evidence": { "type": "boolean" }
+        "synthetic_evidence": { "type": "boolean" },
+        "package_verified": { "type": "boolean" },
+        "integrity_mode": { "type": "string" },
+        "legacy": { "type": "boolean" },
+        "coverage_status": { "type": "string" },
+        "determination_status": { "type": "string" },
+        "evaluated": { "type": ["integer", "null"], "minimum": 0 },
+        "eligible": { "type": ["integer", "null"], "minimum": 0 }
       },
       "additionalProperties": false
     }

package/dist/universal/.agents/skills/citable/schemas/finding.schema.json

@@ -17,12 +17,19 @@
     "status"
   ],
   "properties": {
+    "schema_version": {
+      "type": "integer",
+      "enum": [1, 2]
+    },
     "finding_id": {
       "$ref": "citable://schemas/common.defs.json#/definitions/id"
     },
     "detector_id": {
       "$ref": "citable://schemas/common.defs.json#/definitions/id"
     },
+    "detector_name": {
+      "type": "string"
+    },
     "run_id": {
       "type": "string"
     },
@@ -84,6 +91,15 @@
         },
         "rendered_selector": {
           "type": "string"
+        },
+        "resource_id": {
+          "type": "string"
+        },
+        "url_identity": {
+          "type": "object"
+        },
+        "evidence_identity": {
+          "$ref": "#/definitions/evidenceIdentity"
         }
       }
     },
@@ -106,7 +122,10 @@
           }
         },
         "captured_value": {},
-        "expected_value": {}
+        "expected_value": {},
+        "evidence_identity": {
+          "$ref": "#/definitions/evidenceIdentity"
+        }
       }
     },
     "classification": {
@@ -326,6 +345,42 @@
         }
       }
     },
+    "evidence_scope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "requirement",
+        "satisfaction",
+        "resource_ids",
+        "coverage_ref"
+      ],
+      "properties": {
+        "requirement": {
+          "type": "string",
+          "minLength": 1
+        },
+        "satisfaction": {
+          "type": "string",
+          "enum": [
+            "supported",
+            "qualified",
+            "indeterminate",
+            "not_applicable"
+          ]
+        },
+        "resource_ids": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string"
+          }
+        },
+        "coverage_ref": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
     "status": {
       "type": "object",
       "required": [
@@ -358,7 +413,55 @@
       }
     }
   },
+  "allOf": [
+    {
+      "if": {
+        "required": ["schema_version"],
+        "properties": {
+          "schema_version": {
+            "const": 2
+          }
+        }
+      },
+      "then": {
+        "required": ["evidence_scope"],
+        "propertyNames": {
+          "enum": [
+            "schema_version",
+            "finding_id",
+            "detector_id",
+            "detector_name",
+            "run_id",
+            "timestamp",
+            "discipline",
+            "subject",
+            "observation",
+            "classification",
+            "reasoning",
+            "remediation",
+            "verification",
+            "provenance",
+            "evidence_scope",
+            "status"
+          ]
+        }
+      }
+    }
+  ],
   "definitions": {
+    "evidenceIdentity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["hash_schema_version", "representation", "hash"],
+      "properties": {
+        "hash_schema_version": { "type": "string", "minLength": 1 },
+        "representation": {
+          "type": "string",
+          "enum": ["response_body", "rendered_dom", "extracted_text", "structured_data", "evidence", "artifact"]
+        },
+        "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+      }
+    },
     "impactLevel": {
       "type": "string",
       "enum": [
@@ -370,4 +473,4 @@
       ]
     }
   }
-}
+}

package/dist/universal/.agents/skills/citable/schemas/remediation-verification.schema.json

@@ -12,7 +12,7 @@
   "properties": {
     "verification_id": { "type": "string", "pattern": "^VR-[0-9]{14,20}-[a-z0-9]{2,8}$" },
     "timestamp": { "type": "string" },
-    "status": { "type": "string", "enum": ["verified", "not_resolved", "blocked", "patch_refused"] },
+    "status": { "type": "string", "enum": ["verified", "not_resolved", "not_reobserved", "not_comparable", "indeterminate", "blocked", "patch_refused"] },
     "tool_version": { "type": "string" },
     "repository_commit": { "type": ["string", "null"] },
     "source_run_id": { "type": ["string", "null"], "minLength": 1 },
@@ -30,6 +30,7 @@
       "required": ["resolved"],
       "properties": {
         "resolved": { "type": "boolean" },
+        "comparison_state": { "type": "string", "enum": ["persisted", "resolved", "new", "changed", "not_comparable", "not_reobserved", "indeterminate"] },
         "before_finding_ids": { "type": "array", "items": { "type": "string" } },
         "after_finding_ids": { "type": "array", "items": { "type": "string" } },
         "new_regressions": {
@@ -51,6 +52,16 @@
         }
       }
     },
+    "comparison": {
+      "type": "object",
+      "required": ["state", "reason", "coverage_status"],
+      "properties": {
+        "state": { "type": "string", "enum": ["resolved", "not_reobserved", "not_comparable", "indeterminate"] },
+        "reason": { "type": "string" },
+        "coverage_status": { "type": "string" },
+        "resource": { "type": ["string", "null"] }
+      }
+    },
     "patch": {
       "type": ["object", "null"],
       "properties": {

package/dist/universal/.agents/skills/citable/schemas/run.schema.json

@@ -5,6 +5,7 @@
   "type": "object",
   "required": ["run_id", "command", "tool_version", "skill_version", "timestamp", "target", "status"],
   "properties": {
+    "schema_version": { "type": "integer", "enum": [1, 2] },
     "run_id": { "type": "string" },
     "command": { "type": "string" },
     "argv": { "type": "array", "items": { "type": "string" } },
@@ -31,6 +32,18 @@
     "incomplete_checks": { "type": "array", "items": { "type": "string" } },
     "errors": { "type": "array", "items": { "type": "string" } },
     "warnings": { "type": "array", "items": { "type": "string" } },
-    "status": { "type": "string", "enum": ["completed", "completed_with_warnings", "incomplete", "failed"] }
-  }
+    "status": { "type": "string", "enum": ["completed", "completed_with_warnings", "incomplete", "failed"] },
+    "execution_status": { "type": "string", "enum": ["completed", "completed_with_warnings", "failed"] },
+    "coverage_status": { "type": "string", "enum": ["complete", "truncated", "indeterminate", "not_applicable"] },
+    "determination_status": { "type": "string", "enum": ["supported", "qualified", "indeterminate", "not_applicable"] }
+  },
+  "allOf": [
+    {
+      "if": {
+        "required": ["schema_version"],
+        "properties": { "schema_version": { "const": 2 } }
+      },
+      "then": { "required": ["execution_status", "coverage_status", "determination_status"] }
+    }
+  ]
 }