@nebulacomponents/citable 1.9.0 → 1.11.0

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 ## Unreleased
 
+## 1.11.0 — 2026-07-19
+
+### Added
+
+- Bounded media evidence collection for local PDF text/metadata with page
+  anchors, transcript cues with provenance, and image alt/caption context.
+- Explicit optional OCR behavior and media-to-claim linkage validation through
+  `citable observe media --input <manifest> [--ocr]`.
+- Medium-specific limitations that prevent extraction from being represented as
+  claim support, reading-order validation, transcription accuracy, or semantic equivalence.
+
+## 1.10.0 — 2026-07-19
+
+### Added
+
+- Version-pinned audit schedules that invoke the canonical audit path and keep
+  external trigger limitations explicit.
+- Hash-bound, non-authoritative GitHub annotation projections from immutable runs.
+- Differential comparability dimensions for resource, evidence artifact,
+  detector, configuration, observation method, tool, and external-system changes.
+
 ## 1.9.0 — 2026-07-19
 
 ### Added

package/README.md

@@ -19,7 +19,7 @@ generator, not a Lighthouse wrapper, not an "AI visibility score".
 - **Persistent registries** (`.citable/`): queries, prompts, entities, claims,
   evidence, pages, crawler policies, competitors, experiments, metrics,
   objectives, interventions, optional connections, reviewers, review policies,
-  governed exceptions, semantic review items, and sampling plans — all
+  governed exceptions, semantic review items, sampling plans, and audit schedules — all
   JSON-Schema validated with referential integrity and history-preserving saves.
 - **123 detectors** across 18 namespaces (TECH, CRAWL, ARCH, PAGE, ANS,
   ENTITY, CLAIM, EVD, SCHEMA, LINK, EXT, GEO, RECO, LIFE, MEAS, HREFLANG, CWV, AGENT), each with
@@ -171,6 +171,9 @@ citable reviews prioritize --write
 citable reviews plan --input sampling-plan.json --write
 citable reviews sample <sampling-plan-id> --write
 citable reviews evaluate
+citable schedules run <schedule-id> --ref-date 2026-07-19
+citable project github <run-id>
+citable observe media --input media-manifest.json # add --ocr explicitly when required
 citable substantiate          # claim/evidence assessment (dry run)
 citable validate              # registry schema + referential integrity
 ```
@@ -181,7 +184,7 @@ citable validate              # registry schema + referential integrity
 | --- | --- |
 | `skill/` | Canonical agent skill: SKILL.md, command contracts, rubrics, anti-patterns, policies, templates |
 | `src/` | CLI, commands, registries, detectors, crawler/extractor, evidence, reporting |
-| `schemas/` | JSON Schemas: 18 registries plus findings, runs, observations, remediation, config, and prompt results |
+| `schemas/` | JSON Schemas: 19 registries plus findings, runs, observations, remediation, config, and prompt results |
 | `tests/` | Unit + integration suites; positive/negative fixtures |
 | `docs/` | ADR, traceability matrix, known limitations |
 | `dist/` | Generated distribution packages (run `npm run build:dist`) |
@@ -202,6 +205,8 @@ citable validate              # registry schema + referential integrity
 - [Reviewer and exception governance](docs/governance/reviewer-exceptions.md) —
   policy-driven authority, separation of duties, expiry, invalidation, and
   immutable enforcement dispositions
+- [Known limitations](docs/known-limitations.md) includes medium-specific PDF,
+  transcript, image-context, and optional OCR boundaries.
 
 ## Requirements
 

package/dist/universal/.agents/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.11.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,9 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +177,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.agents/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.11.0

package/dist/universal/.agents/skills/citable/commands/README.md

@@ -29,6 +29,8 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
+| /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.agents/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.agents/skills/citable/commands/media-evidence.md

@@ -0,0 +1,17 @@
+# Media evidence collection
+
+Use `citable observe media --input <manifest.json>` for bounded local-media
+evidence. The manifest declares source URL, owning page, permission status, and
+linked claim IDs for each PDF, transcript, or image-context source.
+
+PDF collection extracts native text, basic metadata, and stable page anchors.
+It does not establish reading order, table structure, footnote linkage,
+signatures, revisions, scan accuracy, accessibility, or claim support.
+Transcript collection preserves cues but does not verify speakers, timing,
+accuracy, or source-media parity. Image collection records alt text, captions,
+and nearby figure text without inferring visual entailment.
+
+OCR is off by default. `--ocr` explicitly requests the optional `tesseract.js`
+path; an unavailable engine or image produces incomplete evidence, never guessed
+text. Every media-to-claim relationship is declarative and still requires
+human-authoritative semantic review.

package/dist/universal/.agents/skills/citable/manifest.json

@@ -1,21 +1,23 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "managedBy": "citable-cli",
   "provider": "codex",
   "providerName": "OpenAI Codex",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.11.0",
   "variantPath": ".agents/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
+    "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:36a0462ce9867dd46922185060341110f9c4b71582b96ec3f90ff1ff341f59ea",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -53,9 +55,10 @@
     "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
+    "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:bea8eb7ea74442a1be745aa40ff22d25dcd89a82fb0205dfc6c597da40831f64",
+    "schemas/observation.schema.json": "sha256:eebb7deb445b9de8c2ffa603fce441f9a857ce290602d8828915fb630b566693",
     "schemas/page.schema.json": "sha256:627613c35f461177fa946df08edf66fbf6f6bbdfc57eef812572b3af796d5e07",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -67,10 +70,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:d07fdc4d4cbc11b5c530bd97bf3e4d13d9c212cc3c67cf9798042f776f68609c",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:74ee4d121463989183f9a9b848577eb2434f3f5d095de2a4b197bf29ffa2399b"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:26c75b5cf68676c665ecf6a1e8d4ec5c6e77abdef8825c1c3ad8a099147168b8"
 }

package/dist/universal/.agents/skills/citable/schemas/media-manifest.schema.json

@@ -0,0 +1,2 @@
+{
+  "$id":"citable://schemas/media-manifest.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Media evidence import manifest","type":"object","additionalProperties":false,"required":["version","items"],"properties":{"version":{"const":1},"items":{"type":"array","minItems":1,"items":{"type":"object","additionalProperties":false,"required":["media_id","type","path","source_url","page_url","claim_ids","permission_status"],"properties":{"media_id":{"type":"string","pattern":"^MEDIA-[A-Z0-9][A-Z0-9_-]*$"},"type":{"type":"string","enum":["pdf","transcript","image"]},"path":{"type":"string","minLength":1},"source_url":{"type":["string","null"]},"page_url":{"type":["string","null"]},"claim_ids":{"type":"array","uniqueItems":true,"items":{"type":"string"}},"permission_status":{"type":"string","enum":["owner_authorized","licensed","public_unknown","internal"]},"image_src":{"type":"string"},"language":{"type":"string"},"published_at":{"type":"string","format":"date-time"}}}}}}

package/dist/universal/.agents/skills/citable/schemas/observation.schema.json

@@ -7,7 +7,7 @@
   "required": ["observation_id", "kind", "state", "collected_at", "collection_method", "confidence", "source", "evidence_hash", "data"],
   "properties": {
     "observation_id": { "type": "string", "minLength": 1 },
-    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric"] },
+    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image"] },
     "state": { "type": "string", "enum": ["observed", "not_observed", "not_evidenced", "incomplete", "review_required", "failed"] },
     "collected_at": { "type": "string", "format": "date-time" },
     "collection_method": { "type": "string", "enum": ["live_api", "browser", "owner_import", "synthetic_fetch", "static_analysis", "human_review"] },

package/dist/universal/.agents/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.claude/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.11.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,9 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +177,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.claude/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.11.0

package/dist/universal/.claude/skills/citable/commands/README.md

@@ -29,6 +29,8 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
+| /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.claude/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.claude/skills/citable/commands/media-evidence.md

@@ -0,0 +1,17 @@
+# Media evidence collection
+
+Use `citable observe media --input <manifest.json>` for bounded local-media
+evidence. The manifest declares source URL, owning page, permission status, and
+linked claim IDs for each PDF, transcript, or image-context source.
+
+PDF collection extracts native text, basic metadata, and stable page anchors.
+It does not establish reading order, table structure, footnote linkage,
+signatures, revisions, scan accuracy, accessibility, or claim support.
+Transcript collection preserves cues but does not verify speakers, timing,
+accuracy, or source-media parity. Image collection records alt text, captions,
+and nearby figure text without inferring visual entailment.
+
+OCR is off by default. `--ocr` explicitly requests the optional `tesseract.js`
+path; an unavailable engine or image produces incomplete evidence, never guessed
+text. Every media-to-claim relationship is declarative and still requires
+human-authoritative semantic review.

package/dist/universal/.claude/skills/citable/manifest.json

@@ -1,21 +1,23 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "managedBy": "citable-cli",
   "provider": "claude",
   "providerName": "Claude Code",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.11.0",
   "variantPath": ".claude/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
+    "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:36a0462ce9867dd46922185060341110f9c4b71582b96ec3f90ff1ff341f59ea",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -53,9 +55,10 @@
     "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
+    "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:bea8eb7ea74442a1be745aa40ff22d25dcd89a82fb0205dfc6c597da40831f64",
+    "schemas/observation.schema.json": "sha256:eebb7deb445b9de8c2ffa603fce441f9a857ce290602d8828915fb630b566693",
     "schemas/page.schema.json": "sha256:627613c35f461177fa946df08edf66fbf6f6bbdfc57eef812572b3af796d5e07",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -67,10 +70,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:d07fdc4d4cbc11b5c530bd97bf3e4d13d9c212cc3c67cf9798042f776f68609c",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:74ee4d121463989183f9a9b848577eb2434f3f5d095de2a4b197bf29ffa2399b"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:26c75b5cf68676c665ecf6a1e8d4ec5c6e77abdef8825c1c3ad8a099147168b8"
 }

package/dist/universal/.claude/skills/citable/schemas/media-manifest.schema.json

@@ -0,0 +1,2 @@
+{
+  "$id":"citable://schemas/media-manifest.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Media evidence import manifest","type":"object","additionalProperties":false,"required":["version","items"],"properties":{"version":{"const":1},"items":{"type":"array","minItems":1,"items":{"type":"object","additionalProperties":false,"required":["media_id","type","path","source_url","page_url","claim_ids","permission_status"],"properties":{"media_id":{"type":"string","pattern":"^MEDIA-[A-Z0-9][A-Z0-9_-]*$"},"type":{"type":"string","enum":["pdf","transcript","image"]},"path":{"type":"string","minLength":1},"source_url":{"type":["string","null"]},"page_url":{"type":["string","null"]},"claim_ids":{"type":"array","uniqueItems":true,"items":{"type":"string"}},"permission_status":{"type":"string","enum":["owner_authorized","licensed","public_unknown","internal"]},"image_src":{"type":"string"},"language":{"type":"string"},"published_at":{"type":"string","format":"date-time"}}}}}}

package/dist/universal/.claude/skills/citable/schemas/observation.schema.json

@@ -7,7 +7,7 @@
   "required": ["observation_id", "kind", "state", "collected_at", "collection_method", "confidence", "source", "evidence_hash", "data"],
   "properties": {
     "observation_id": { "type": "string", "minLength": 1 },
-    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric"] },
+    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image"] },
     "state": { "type": "string", "enum": ["observed", "not_observed", "not_evidenced", "incomplete", "review_required", "failed"] },
     "collected_at": { "type": "string", "format": "date-time" },
     "collection_method": { "type": "string", "enum": ["live_api", "browser", "owner_import", "synthetic_fetch", "static_analysis", "human_review"] },

package/dist/universal/.claude/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.cursor/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.11.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,9 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +177,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.cursor/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.11.0

package/dist/universal/.cursor/skills/citable/commands/README.md

@@ -29,6 +29,8 @@ intent, not executability, so statuses are strict:
 | /citable evaluate | implemented — independent baseline/evaluation comparisons with inconclusive handling |
 | /citable governance validate / evaluate | implemented — validates reviewer and exception authority and emits immutable dispositions without changing failed findings |
 | /citable reviews queue / prioritize / plan / sample / evaluate | implemented — materiality queues, reproducible sampling, stale-decision checks, and independent disagreement adjudication |
+| /citable schedules run / project github | implemented — canonical scheduled audits and hash-bound non-authoritative GitHub projections |
+| /citable observe media | implemented — bounded PDF, transcript, image-context, optional OCR, and declared claim-link evidence |
 | /citable ingest, map-site, map-queries, map-prompts, map-entities, map-evidence | specified (ingest.md) |
 | /citable optimize-page | specified (optimize-page.md) — requires source-to-render mapping, claim-preserving rewrites, build execution, rollback; none of that is proven yet |
 | /citable create-page, answer-block, architect, interlink, consolidate, metadata | specified (page-work.md) |

package/dist/universal/.cursor/skills/citable/commands/delivery.md

@@ -0,0 +1,18 @@
+# Scheduling, projections, and differential delivery
+
+`citable schedules run <schedule-id>` executes the same canonical audit function
+used by direct CLI calls. Schedules are version-pinned and fail closed when
+paused, missing, invalid, or bound to another Citable version. The external
+cron service remains responsible for triggering the command; a declared cron
+does not prove execution. Schedule metadata is stored outside the finalized
+audit package and binds back to its manifest checksum.
+
+`citable project github <run-id>` creates GitHub annotation JSON as a
+non-authoritative projection. It records hashes of the source manifest and
+findings and never edits the run. Dashboards and check annotations must link to
+these artifacts rather than maintain separate finding state.
+
+`compare-snapshots` reports observed comparability dimensions: resource input,
+evidence artifact, detector set, configuration, observation method, tool
+version, and possible external-system change. These dimensions identify why
+runs may not be directly comparable; they do not establish causal attribution.

package/dist/universal/.cursor/skills/citable/commands/media-evidence.md

@@ -0,0 +1,17 @@
+# Media evidence collection
+
+Use `citable observe media --input <manifest.json>` for bounded local-media
+evidence. The manifest declares source URL, owning page, permission status, and
+linked claim IDs for each PDF, transcript, or image-context source.
+
+PDF collection extracts native text, basic metadata, and stable page anchors.
+It does not establish reading order, table structure, footnote linkage,
+signatures, revisions, scan accuracy, accessibility, or claim support.
+Transcript collection preserves cues but does not verify speakers, timing,
+accuracy, or source-media parity. Image collection records alt text, captions,
+and nearby figure text without inferring visual entailment.
+
+OCR is off by default. `--ocr` explicitly requests the optional `tesseract.js`
+path; an unavailable engine or image produces incomplete evidence, never guessed
+text. Every media-to-claim relationship is declarative and still requires
+human-authoritative semantic review.

package/dist/universal/.cursor/skills/citable/manifest.json

@@ -1,21 +1,23 @@
 {
   "name": "citable",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "managedBy": "citable-cli",
   "provider": "cursor",
   "providerName": "Cursor",
   "scope": "bundle",
-  "sourcePackage": "@nebulacomponents/citable@1.9.0",
+  "sourcePackage": "@nebulacomponents/citable@1.11.0",
   "variantPath": ".cursor/skills/citable",
   "files": {
     "commands/action-findings.md": "sha256:510361461f24fcd4a550e0a8d960c383aefe23f9a65a54a3ffc44abd4c1293e7",
+    "commands/delivery.md": "sha256:3b29250f9e9f84442812e320a70d5d2784b4286e91af3866f99cb6062a85a10f",
     "commands/governance.md": "sha256:1fd6272f18b00237fc6e602ac126ae812747937b2bb575068a0d617137eea2b0",
     "commands/ingest.md": "sha256:cf35659aecd9d0e160909003efdbe056864fc5d824c71b4ef0ee801ce07ff598",
     "commands/measurement.md": "sha256:9cade6dfec23338e18aa67ede3335ac9e2888dc577a7d4d8e3ceac948bce403f",
+    "commands/media-evidence.md": "sha256:f2218feabe3360a2c9d569a5fa9b70d4b33a83a270d657151635e6f404fb34e0",
     "commands/observe-and-act.md": "sha256:02a93bbbfddc3d8e11cb921ddccd19b0666133c4bdb4f4a280bcb131bed37e8c",
     "commands/optimize-page.md": "sha256:35866f3d7cdeef0376ea7a7d7036085a9b9cf95bbb300ecf4bd77610ebd74d85",
     "commands/page-work.md": "sha256:965a66e59bdf7b0da482d26fade53b3d265885ece5d463fe83b0789ebefaef3e",
-    "commands/README.md": "sha256:3bf43b11d303ae9d37df1e3ed0e115b0a5e87f0f5bb0fda6e0465fb3f2907ea6",
+    "commands/README.md": "sha256:36a0462ce9867dd46922185060341110f9c4b71582b96ec3f90ff1ff341f59ea",
     "commands/reviews.md": "sha256:902904aaa405fe5724cf0662c7a5a36eab9a4fe0eb81cbd95ffa2fff946e0ac8",
     "commands/validate-render.md": "sha256:a8e1d04d40b84d57c35039250d98c6a7302cd44a148a8c3b9d9cfb92678c4347",
     "policies/crawler-policy-template.md": "sha256:15c88a4eeb21f53f71e5250dd3eb2d2791a814b304eaefce8bb30e2bdf2e2e59",
@@ -53,9 +55,10 @@
     "schemas/experiment.schema.json": "sha256:3cebebc5745a9eb359261408b0a0421b8370d2c94f8244ce939827cd9da41cb6",
     "schemas/finding.schema.json": "sha256:85907cd04cd8d2fe24a1e618e0df7160f6d56aa1818db501f345aebce5eb5edb",
     "schemas/intervention.schema.json": "sha256:fcf28e117b207e64ffc96088aa70a95370841a2a9fa43ecb1c82b34c2058a818",
+    "schemas/media-manifest.schema.json": "sha256:3f37301aab9e913fa7febb15c720ed6384b106f12cef8d26cdd12d93fd85b41f",
     "schemas/metric.schema.json": "sha256:2ada648e7274a8d78cc9d6e7ed616f91faa79cf9ed07613e2c1fc53b247aac8d",
     "schemas/objective.schema.json": "sha256:94404dc95d04a6641ea7b9654317d0222793251ad44d3dfd2875738622a36025",
-    "schemas/observation.schema.json": "sha256:bea8eb7ea74442a1be745aa40ff22d25dcd89a82fb0205dfc6c597da40831f64",
+    "schemas/observation.schema.json": "sha256:eebb7deb445b9de8c2ffa603fce441f9a857ce290602d8828915fb630b566693",
     "schemas/page.schema.json": "sha256:627613c35f461177fa946df08edf66fbf6f6bbdfc57eef812572b3af796d5e07",
     "schemas/project.schema.json": "sha256:ea48fdb6480f7047ba4594bd5908bc1f79c1ad6b9a2c204df900959b5f203dc6",
     "schemas/prompt-result.schema.json": "sha256:b55be47d7d58d7b1dd8c3b1e849e24e55216212c592cde7eb836953379b85737",
@@ -67,10 +70,11 @@
     "schemas/reviewer.schema.json": "sha256:3716697b752575a1277f2c2b318b1f2565de02bf9dce2a0c165567ab5330d18b",
     "schemas/run.schema.json": "sha256:46c3178620f3a358d936d535aeadb83454b9b35b551e53e6615cc9862063dacb",
     "schemas/sampling-plan.schema.json": "sha256:005f70f149baaacd7de698548d556d3e401c630978748271b0e14a74726dd413",
+    "schemas/schedule.schema.json": "sha256:0f02174ab0fc7bbbce9759fd358b18ed97cc683c76933fd3001cf053c499b157",
     "scripts/README.md": "sha256:1c3e952950ef353849621b07c5f615bf7cd20cc5654da4635492a7bd6384e747",
-    "SKILL.md": "sha256:f05761b460e8b9a7cf903efbacf077d860f506e93b76a7cebfc3bd91dbf02a83",
+    "SKILL.md": "sha256:d07fdc4d4cbc11b5c530bd97bf3e4d13d9c212cc3c67cf9798042f776f68609c",
     "templates/finding-review.md": "sha256:b270a83d3f015150aac80249ae9314979c0befea39ff92ec455f9a5aaa73404c",
-    "VERSION": "sha256:30f4611383aa30a15753789f40effde81332f2f8714e6d3b2940bf0fc4592377"
+    "VERSION": "sha256:74ee4d121463989183f9a9b848577eb2434f3f5d095de2a4b197bf29ffa2399b"
   },
-  "treeHash": "sha256:b4df089f5eafb1d8844a737f7016bc5f4f7041d1aabf7d65a83f6cee457fae35"
+  "treeHash": "sha256:26c75b5cf68676c665ecf6a1e8d4ec5c6e77abdef8825c1c3ad8a099147168b8"
 }

package/dist/universal/.cursor/skills/citable/schemas/media-manifest.schema.json

@@ -0,0 +1,2 @@
+{
+  "$id":"citable://schemas/media-manifest.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Media evidence import manifest","type":"object","additionalProperties":false,"required":["version","items"],"properties":{"version":{"const":1},"items":{"type":"array","minItems":1,"items":{"type":"object","additionalProperties":false,"required":["media_id","type","path","source_url","page_url","claim_ids","permission_status"],"properties":{"media_id":{"type":"string","pattern":"^MEDIA-[A-Z0-9][A-Z0-9_-]*$"},"type":{"type":"string","enum":["pdf","transcript","image"]},"path":{"type":"string","minLength":1},"source_url":{"type":["string","null"]},"page_url":{"type":["string","null"]},"claim_ids":{"type":"array","uniqueItems":true,"items":{"type":"string"}},"permission_status":{"type":"string","enum":["owner_authorized","licensed","public_unknown","internal"]},"image_src":{"type":"string"},"language":{"type":"string"},"published_at":{"type":"string","format":"date-time"}}}}}}

package/dist/universal/.cursor/skills/citable/schemas/observation.schema.json

@@ -7,7 +7,7 @@
   "required": ["observation_id", "kind", "state", "collected_at", "collection_method", "confidence", "source", "evidence_hash", "data"],
   "properties": {
     "observation_id": { "type": "string", "minLength": 1 },
-    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric"] },
+    "kind": { "type": "string", "enum": ["render", "index", "citation", "citation_review", "crawler_log", "bing_webmaster", "passage", "canonical_freshness", "performance", "corroboration", "metric", "media_pdf", "media_transcript", "media_image"] },
     "state": { "type": "string", "enum": ["observed", "not_observed", "not_evidenced", "incomplete", "review_required", "failed"] },
     "collected_at": { "type": "string", "format": "date-time" },
     "collection_method": { "type": "string", "enum": ["live_api", "browser", "owner_import", "synthetic_fetch", "static_analysis", "human_review"] },

package/dist/universal/.cursor/skills/citable/schemas/schedule.schema.json

@@ -0,0 +1,4 @@
+{
+  "$id":"citable://schemas/schedule.schema.json","$schema":"http://json-schema.org/draft-07/schema#","title":"Audit schedule registry","type":"object","additionalProperties":false,"required":["version","kind","updated","entries"],
+  "properties":{"version":{"const":1},"kind":{"const":"schedules"},"updated":{"type":"string","format":"date-time"},"entries":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["schedule_id","name","status","cron","owner","expected_tool_version","audit","retention_days","limitations"],"properties":{"schedule_id":{"type":"string","pattern":"^SCHEDULE-[A-Z0-9][A-Z0-9_-]*$"},"name":{"type":"string","minLength":1},"status":{"type":"string","enum":["active","paused","retired"]},"cron":{"type":"string","minLength":5},"owner":{"type":"string","minLength":1},"expected_tool_version":{"type":"string","pattern":"^\\d+\\.\\d+\\.\\d+$"},"audit":{"type":"object","additionalProperties":false,"required":["target","scope"],"properties":{"target":{"type":"string","minLength":1},"scope":{"type":["string","null"]},"base_url":{"type":["string","null"]}}},"retention_days":{"type":"integer","minimum":1},"limitations":{"type":"array","minItems":1,"items":{"type":"string"}}}}}}
+}

package/dist/universal/.gemini/skills/citable/SKILL.md

@@ -7,7 +7,7 @@ description: >
   generative engine optimization, structured data governance, claim substantiation,
   crawler policy, entity consistency, content discoverability, or wants a site audited
   for how search and AI systems will retrieve, understand, cite, or recommend it.
-version: 1.9.0
+version: 1.11.0
 ---
 
 # Citable — evidence and change control for search and AI citation readiness
@@ -115,6 +115,9 @@ citable reviews prioritize [--write]
 citable reviews plan --input <json|yaml> [--write]
 citable reviews sample <sampling-plan-id> [--write]
 citable reviews evaluate
+citable schedules run <schedule-id> [--ref-date YYYY-MM-DD]
+citable project github <run-id>
+citable observe media --input <manifest.json> [--ocr]
 ```
 
 Audit scopes: `technical seo aeo geo architecture entity claims evidence schema
@@ -174,7 +177,8 @@ mandatory.
 `.citable/` holds YAML registries for queries, prompts, entities, claims,
   evidence, pages, crawlers, competitors, experiments, metrics, objectives,
   interventions, optional connection state, reviewers, review policies, and
-  governed exceptions, semantic review items, and sampling plans, all schema-validated
+  governed exceptions, semantic review items, sampling plans, and audit schedules,
+  all schema-validated
 (`schemas/*.schema.json`) with referential integrity checks. Rules:
 
 - Never overwrite registry content without history — use the loader/saver in

package/dist/universal/.gemini/skills/citable/VERSION

@@ -1 +1 @@
-1.9.0
+1.11.0