@nebulacomponents/citable 1.9.0 → 1.10.0

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+## 1.10.0 — 2026-07-19
+
+### Added
+
+- Version-pinned audit schedules that invoke the canonical audit path and keep
+  external trigger limitations explicit.
+- Hash-bound, non-authoritative GitHub annotation projections from immutable runs.
+- Differential comparability dimensions for resource, evidence artifact,
+  detector, configuration, observation method, tool, and external-system changes.
+
 ## 1.9.0 — 2026-07-19
 
 ### Added

package/README.md

@@ -19,7 +19,7 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
 - **Persistent registries** (`.citable/`): queries, prompts, entities, claims,
   evidence, pages, crawler policies, competitors, experiments, metrics,
   objectives, interventions, optional connections, reviewers, review policies,
-  governed exceptions, semantic review items, and sampling plans — all
+  governed exceptions, semantic review items, sampling plans, and audit schedules — all
   JSON-Schema validated with referential integrity and history-preserving saves.
 - **123 detectors** across 18 namespaces (TECH, CRAWL, ARCH, PAGE, ANS,
   ENTITY, CLAIM, EVD, SCHEMA, LINK, EXT, GEO, RECO, LIFE, MEAS, HREFLANG, CWV, AGENT), each with
@@ -171,6 +171,8 @@ citable reviews prioritize --write
 citable reviews plan --input sampling-plan.json --write
 citable reviews sample <sampling-plan-id> --write
 citable reviews evaluate
+citable schedules run <schedule-id> --ref-date 2026-07-19
+citable project github <run-id>
 citable substantiate          # claim/evidence assessment (dry run)
 citable validate              # registry schema + referential integrity
 ```
@@ -181,7 +183,7 @@ citable validate              # registry schema + referential integrity
 | --- | --- |
 | `skill/` | Canonical agent skill: SKILL.md, command contracts, rubrics, anti-patterns, policies, templates |
 | `src/` | CLI, commands, registries, detectors, crawler/extractor, evidence, reporting |
-| `schemas/` | JSON Schemas: 18 registries plus findings, runs, observations, remediation, config, and prompt results |
+| `schemas/` | JSON Schemas: 19 registries plus findings, runs, observations, remediation, config, and prompt results |
 | `tests/` | Unit + integration suites; positive/negative fixtures |
 | `docs/` | ADR, traceability matrix, known limitations |
 | `dist/` | Generated distribution packages (run `npm run build:dist`) |

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.10.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,8 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +176,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

package/dist/universal/.agents/skills/citable/commands/README.md

@@ -29,6 +29,7 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.agents/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.agents/skills/citable/manifest.json

@@ -1,21 +1,22 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "managedBy": "citable-cli",
   "provider": "codex",
   "providerName": "OpenAI Codex",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.10.0",
   "variantPath": ".agents/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -67,10 +68,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
 }

package/dist/universal/.agents/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.claude/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.10.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,8 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +176,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.claude/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

package/dist/universal/.claude/skills/citable/commands/README.md

@@ -29,6 +29,7 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.claude/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.claude/skills/citable/manifest.json

@@ -1,21 +1,22 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "managedBy": "citable-cli",
   "provider": "claude",
   "providerName": "Claude Code",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.10.0",
   "variantPath": ".claude/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -67,10 +68,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
 }

package/dist/universal/.claude/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.cursor/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.10.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,8 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +176,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.cursor/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

package/dist/universal/.cursor/skills/citable/commands/README.md

@@ -29,6 +29,7 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.cursor/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.cursor/skills/citable/manifest.json

@@ -1,21 +1,22 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "managedBy": "citable-cli",
   "provider": "cursor",
   "providerName": "Cursor",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.10.0",
   "variantPath": ".cursor/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -67,10 +68,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
 }

package/dist/universal/.cursor/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.gemini/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.10.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,8 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +176,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.gemini/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

package/dist/universal/.gemini/skills/citable/commands/README.md

@@ -29,6 +29,7 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.gemini/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.gemini/skills/citable/manifest.json

@@ -1,21 +1,22 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "managedBy": "citable-cli",
   "provider": "gemini",
   "providerName": "Gemini CLI",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.10.0",
   "variantPath": ".gemini/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -67,10 +68,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
 }

package/dist/universal/.gemini/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.github/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.10.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,8 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +176,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.github/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

package/dist/universal/.github/skills/citable/commands/README.md

@@ -29,6 +29,7 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.github/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.github/skills/citable/manifest.json

@@ -1,21 +1,22 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "managedBy": "citable-cli",
   "provider": "github",
   "providerName": "GitHub Copilot",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.10.0",
   "variantPath": ".github/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:0d1831883c99925d3eccef7ae551f88f9789b12cf9598ab4026f50c776697a5a",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -67,10 +68,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:95336d8e690b54f72de14020a35d87d41fcaa1080a6242d821ff3df4efdf0ab6",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:4f5ba6a3e380bf810cc968b58d30a8d7163eafe9e2fb1ad19bdc6d9d64a1e549"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:81a5e1f3bf7560060b3f950c18804d5481b1230ab9e0b81d3ce16d0b97e43893"
 }