@nextcommerce/campaigns-os 1.47.0 → 1.48.0

package/contracts/release-ledger.json

@@ -4166,6 +4166,471 @@
         }
       ],
       "entry_sha256": "cc03e502869034a55209958ac02cce0c2b637b12e3e678646c93cfc7aa3a4eeb"
+    },
+    {
+      "id": "RL-0199",
+      "sequence": 191,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.1",
+      "changelog_sha256": "f0ba2dff1852537f82cac078ccc8b74d78c433476ed72be8814ff3aa4271cc1f",
+      "agent_impact": "Start a new campaign folder with npm init -y: the documented one-line setup command now creates the folder's own package.json first, so npm cannot install page-kit and the toolkit into a parent project.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/local-setup.md",
+          "surface_entry": "docs/local-setup.md",
+          "summary": "Prefix the copy-paste setup command with npm init -y and say why: without a package.json npm installs into the nearest parent folder that has one or a node_modules."
+        }
+      ],
+      "entry_sha256": "d2b022241969d22dbe4e5865f24f34d1a7883e000b62218bbe3f82c0d958b24d"
+    },
+    {
+      "id": "RL-0204",
+      "sequence": 192,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.6",
+      "changelog_sha256": "ce5b04b70f31282319d2974ffaeb6352ecb96e89c136e72c7f6f8a32332afab4",
+      "agent_impact": "Help for start, prepare-build and build now lists --deploy-target, --preview-url and --production-url, which intake already accepted; a Start page or docs command using them matches --help.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "cli_surface",
+          "path": "src/cli.mjs",
+          "surface_entry": "start",
+          "summary": "List --deploy-target, --preview-url and --production-url on the start, prepare-build and build usage lines; intake already writes them to the Build Packet deploy block."
+        }
+      ],
+      "entry_sha256": "bbf5c759e5518a3025a0e5f6db6b732e8960721ce45bb4be3821cb58096319e8"
+    },
+    {
+      "id": "RL-0200",
+      "sequence": 193,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.7",
+      "changelog_sha256": "b97164cb0efb6b87ee04d95e28679d731173b0998b2f92ddf308e333127ff8e3",
+      "agent_impact": "doctor no longer emits content_residue.anti_pattern or content_residue.urgency_unattested: do not wait for, or act on, a review of the merchant's proof and urgency copy. Reproduce the source design's own reviews, labels, popups, stock counters and countdowns as designed. Bundled skills carry revision 1.47.0+skills.2: an agent that loaded 1.47.0+skills.1 should start a fresh session.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/campaign-build-brief.md",
+          "surface_entry": "docs/campaign-build-brief.md",
+          "summary": "Replace the content-claims section: the merchant's own proof and urgency content is not reviewed and is reproduced as designed; list the content checks that remain."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Use the current 1.47.0+skills.2 bundle in executable examples."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance the bundled skill revision to 1.47.0+skills.2 and each skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Say to reproduce the source design's own proof and urgency elements as designed; publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Say that proof and urgency copy the source supplies is not residue and is not recorded as an issue; publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.2 bundle revision."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/checks.mjs",
+          "surface_entry": "doctor",
+          "summary": "Stop emitting content_residue.anti_pattern and content_residue.urgency_unattested; the merchant's proof and urgency copy is no longer scanned."
+        }
+      ],
+      "entry_sha256": "396746eab5577268a1eef6e76fa3cffeb989da503c7bb898bf3c80d56d31164b"
+    },
+    {
+      "id": "RL-0201",
+      "sequence": 194,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.8",
+      "changelog_sha256": "5dca52cee13425480a82fc46b88aead96c6eb8a293519d11a502a247455538aa",
+      "agent_impact": "A skipped pricing.checkout_price_visible row whose actual names an empty cart and no package selection is expected on a checkout filled from the landing page; do not remove forcePackageId links or add a selector to make it pass. Page-binding evidence on starter-template pages now reads dynamic_unresolved instead of script_unavailable_or_limit.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Say when pricing.checkout_price_visible is skipped (empty cart, no package selection on the checkout) and name the Campaign Cart loader paths the page-binding reader skips, including dist/loader.js."
+        }
+      ],
+      "entry_sha256": "4352e041bcffb1cc329abba198d11523a45b94d37572831a1679c20618d2e78c"
+    },
+    {
+      "id": "RL-0202",
+      "sequence": 195,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.9",
+      "changelog_sha256": "5d93e171ffd6b8ffeb1ffc8973cc9b23d1e38042c8223ed5f1c5d650f5fe2ffc",
+      "agent_impact": "When resuming a campaign, run readback and next before reading artifacts by hand. Read typed-card proof from the committed sidecar's browser-test-order:<path> assertions; its test_orders array is always empty. readback now prints warn and manual_review rows as such. Bundled skills carry revision 1.47.0+skills.3: an agent that loaded an earlier 1.47.0 revision should start a fresh session.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "documentation",
+          "path": "agents/claude/CLAUDE.md",
+          "surface_entry": "agents/claude/CLAUDE.md",
+          "summary": "Tell a resuming session to run readback and next first, and that the committed QA sidecar's browser-test-order assertions are the typed-card proof."
+        },
+        {
+          "class": "documentation",
+          "path": "agents/codex/AGENTS.md",
+          "surface_entry": "agents/codex/AGENTS.md",
+          "summary": "Tell a resuming session to run readback and next first, and that the committed QA sidecar's browser-test-order assertions are the typed-card proof."
+        },
+        {
+          "class": "documentation",
+          "path": "agents/copilot/copilot-instructions.md",
+          "surface_entry": "agents/copilot/copilot-instructions.md",
+          "summary": "Tell a resuming session to run readback and next first, and that the committed QA sidecar's browser-test-order assertions are the typed-card proof."
+        },
+        {
+          "class": "documentation",
+          "path": "agents/cursor/campaigns-os.mdc",
+          "surface_entry": "agents/cursor/campaigns-os.mdc",
+          "summary": "Tell a resuming session to run readback and next first, and that the committed QA sidecar's browser-test-order assertions are the typed-card proof."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Use the current 1.47.0+skills.3 bundle in executable examples."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance the bundled skill revision to 1.47.0+skills.3 and each skill version two patches."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Say the committed QA sidecar always empties test_orders and URL fields, and that its browser-test-order assertions carry the typed-card proof; publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.47.0+skills.3 bundle revision."
+        }
+      ],
+      "entry_sha256": "4780bf77ca1a5ec8bc8728318237eeeff1e88c81a31fcaece6e1a6b4fc6b6d7b"
+    },
+    {
+      "id": "RL-0203",
+      "sequence": 196,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.10",
+      "changelog_sha256": "b4bbba3f0ec3aacfe704b5f4690b867ea62d50aa9e41eb911c997bec20872d89",
+      "agent_impact": "A browser-test-order row that says order create rejected: HTTP 400: Duplicate order detected … (duplicate_order …) means the platform refused a repeat order from the same test customer: re-run with a different --test-email-prefix or wait, and do not change the address or the funnel to get past it.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Explain the platform's duplicate-order refusal for a reused test customer, how QA names it, and the remedy."
+        }
+      ],
+      "entry_sha256": "22e451d62b473dab8907cfd897028f5add642614c10476fc2138b81657ac23d9"
+    },
+    {
+      "id": "RL-0206",
+      "sequence": 197,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.11",
+      "changelog_sha256": "f7a8e2aa340f1dbffcaffe18db69556b5fb1b42a1834fa2749231b99497431ac",
+      "agent_impact": "Pin global_config.sdk_version to the SDK doctor names for the selected template family when the spec has none. To record a standalone page whole, use --wrapper-policy preserve_document_wrappers. A source_hash drift warning is cleared only by re-running intake with --force, not by editing the manifest; make post-build revisions under src/<route>/.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/build-packet.md",
+          "surface_entry": "docs/build-packet.md",
+          "summary": "Say the source_hash drift warning compares the packet's recorded hash, that intake with --force refreshes it, and where post-build revisions belong."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/checks.mjs",
+          "surface_entry": "doctor",
+          "summary": "Name the selected family's verified SDK in page_kit.sdk_version.spec_missing, and name the packet hash and intake refresh in source_html.pages.source_hash."
+        }
+      ],
+      "entry_sha256": "9eafe4976eaef63b7b684dcfed146deb010a92482da4f4e83cf04c1322b87073"
+    },
+    {
+      "id": "RL-0205",
+      "sequence": 198,
+      "date": "2026-10-01",
+      "kind": "release",
+      "surface_version": null,
+      "changelog_section": "1.47.0+agent.12",
+      "changelog_sha256": "2569d0ed5531ce2fbc5732e64038f4e6fd793eecdf136455c61f21f00331b164",
+      "agent_impact": "On a local-serve packet served from loopback, a gate with status carried_forward is missing evidence that does not block: follow next past polish to deploy and QA, and expect warn rows and at best ready_with_exceptions. Do not waive or hand-author polish evidence to get there. Hosted and production packets keep the strict gates. polish.hidden_eager_media.no_capturable_routes replaces capture_malformed for an all-template-stock packet.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/qa-and-test-orders.md",
+          "surface_entry": "docs/qa-and-test-orders.md",
+          "summary": "Document the local preview policy: which checks are carried forward, how doctor, next and QA report them, and what stays strict."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/inspect.mjs",
+          "surface_entry": "doctor",
+          "summary": "Apply the local preview policy to the polish gate and page-load checkpoint and report carried-forward gates as warnings."
+        },
+        {
+          "class": "cli_surface",
+          "path": "src/doctor/next-step.mjs",
+          "surface_entry": "next",
+          "summary": "Move past the polish stage when its gate is carried forward on the local preview."
+        }
+      ],
+      "entry_sha256": "d29250e168a1a4270672d9426c1fda0670bd29eccefe7fe70c9a1a0f445c0bfe"
+    },
+    {
+      "id": "RL-0207",
+      "sequence": 199,
+      "date": "2026-10-02",
+      "kind": "release",
+      "surface_version": "1.48.0",
+      "changelog_section": "1.48.0",
+      "changelog_sha256": "4ec8df27478899217d11f925983fc17e558aa7c91e0ed9d13c88fb0a26315c39",
+      "agent_impact": "Surface 1.48.0. Ships the same-surface changes 1.47.0+agent.1 through +agent.13 (setup command starts with npm init -y, intake usage lines list the deploy flags, local-preview evidence carried forward as warnings, QA and readback fixes, starter catalog pinned to 37a8d94). The bundled SDK support policy's latest_known_release returns to 0.4.38; freshness results are unchanged because the catalog's verification records name 0.4.40. Bundled skills carry revision 1.48.0+skills.1 with unchanged text: an agent that loaded 1.47.0+skills.3 should start a fresh session. Install the 1.48.0 package with the documented local setup command.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "compatibility_policy",
+          "path": "compatibility.json",
+          "surface_entry": null,
+          "summary": "Name the package version (1.48.0)."
+        },
+        {
+          "class": "compatibility_policy",
+          "path": "contracts/supported-surface.json",
+          "surface_entry": "contracts/supported-surface.json",
+          "summary": "Advance the supported surface to 1.48.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/local-setup.md",
+          "surface_entry": "docs/local-setup.md",
+          "summary": "Pin the local setup install command to the 1.48.0 package."
+        },
+        {
+          "class": "documentation",
+          "path": "docs/orientation-contract-reference.md",
+          "surface_entry": "docs/orientation-contract-reference.md",
+          "summary": "Regenerate the orientation reference for surface 1.48.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/runtime-readiness.md",
+          "surface_entry": "docs/runtime-readiness.md",
+          "summary": "Regenerate the runtime readiness reference for surface 1.48.0."
+        },
+        {
+          "class": "named_surface",
+          "path": "docs/skills-revision.md",
+          "surface_entry": "docs/skills-revision.md",
+          "summary": "Use the current 1.48.0+skills.1 bundle in executable examples."
+        },
+        {
+          "class": "generated_runtime",
+          "path": "package-lock.json",
+          "surface_entry": null,
+          "summary": "Update release metadata for 1.48.0."
+        },
+        {
+          "class": "package_export",
+          "path": "package.json",
+          "surface_entry": null,
+          "summary": "Release 1.48.0."
+        },
+        {
+          "class": "skill",
+          "path": "skills.json",
+          "surface_entry": "skills.json",
+          "summary": "Advance the bundled skill revision to 1.48.0+skills.1 and each skill version one patch."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-lifecycle-orientation/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-readback-classification/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/campaign-run-evidence/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/contribution-intake/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-build/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os-setup/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-os/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-polish/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        },
+        {
+          "class": "skill",
+          "path": "skills/next-campaigns-qa/SKILL.md",
+          "surface_entry": null,
+          "summary": "Publish the 1.48.0+skills.1 bundle revision."
+        }
+      ],
+      "entry_sha256": "abc8749936f439d33b92b3bfdc1c954d0b38df24e5a80a2e3862123494b47f07"
     }
   ]
 }

package/contracts/supported-surface.json

@@ -1,6 +1,6 @@
 {
   "_note": "The downstream contract manifest. Everything listed here is SUPPORTED SURFACE: consumers (campaigns-agent, campaign-builder, the private ops repo, page-kit campaign repos) may depend on it, and changing it is a deliberate act — hashed entries require a surface_version bump in the same change (check-supported-surface.mjs --base, mirroring the skills.json bump gate), named entries must keep existing at their path, cli_commands must keep resolving in the CLI dispatch, package_exports must stay exported, and every entry must ship in the npm pack (files[] coverage). Anything NOT listed here — src/** internals, scripts/** checkers, examples/**, prompts/**, contracts/** other than this file and the entries named[] below (the orientation contract, the release ledger, and the consumer-facing orientation fixtures) — is implementation: consumers may read it for context but must not build on it, and it can change without notice. Rationale and the compatibility promise: docs/supported-surface.md.",
-  "surface_version": "1.47.0",
+  "surface_version": "1.48.0",
   "package_exports": [
     "./commercial-journey",
     "./commercial-parity",

package/contracts/template-brand-contract.shared-commerce.v0.json

@@ -55,7 +55,7 @@
       },
       "asset_pin": {
         "repo": "NextCommerceCo/campaign-cart-starter-templates",
-        "sha": "3793b1de3b77cc31dffe9176f47e8e99ea6134aa",
+        "sha": "37a8d945db4c360739ded98348814cfd632da94f",
         "path": "src/<family>/assets/<asset>",
         "note": "asset_sha256 is the sha256 of each shipped starter asset at this commit (the commerce-surface-catalog _synced_from_sha pin; the bytes are identical across every family). A served asset whose bytes hash to the shipped value is the untouched starter asset and counts as residue even though its markup names no method; different bytes mean it was edited in place. check-template-doctrine verifies these hashes against the pinned checkout."
       },

package/docs/build-packet.md

@@ -1453,7 +1453,7 @@ Each `manifest.pages[]` entry MAY carry a `source_hash` field — the sha256 hex
 Behavior:
 
 - Optional on the producer side. Producers that don't emit `source_hash` (pre-Slice-6 manifests, template-stock, hand-authored) keep working; doctor's drift check is silent without a hash to compare.
-- Warning severity only. A drift never blocks a build — the operator decides whether to re-run the producer to refresh the manifest or accept the local edits.
+- Warning severity only. A drift never blocks a build. The hash doctor compares is the one intake recorded in the packet, so editing the manifest alone does not clear the warning: re-running `start` or `prepare-build` with `--force` records the current file, and also clears recorded stage evidence. A revision made after build belongs in the page-kit source under `src/<route>/`; the source HTML stays the design provenance.
 - The warning names the file path and includes both hashes (truncated to 12 chars) so the operator can confirm which file diverged without re-running the producer.
 
 ### Reference AI-generated producer

package/docs/campaign-build-brief.md

@@ -62,34 +62,31 @@ Doctor warns when generated guided drafts still need answers, a brief allows pay
 
 Existing template residue, theme, pricing, and built-output checks continue to run. The brief gives those checks business intent instead of replacing them.
 
-## Content Claims Are Reviewed, Not Enforced
-
-The doctor scans built output for content residue and raises some of it as
-warnings: every content anti-pattern under the warning code
-`content_residue.anti_pattern` (the finding ids include `invented_counts`
-for invented counts and ratings, `verified_buyer_chrome` for "Verified
-Buyer" and similar review chrome, `byline_persona`, `borrowed_authority`,
-`press_marquee`, and `science_theater`; all of them are warning-only), and
-promo copy claiming a discount above the CampaignSpec maximum (`template_contract.discount_claim_residue`, or
-`template_contract.discount_claim_unverified` when the spec sets no maximum).
-
-These stay warnings on purpose, and nothing downstream reads them. There is no
-blocker, no `blocked_stages` entry, no QA assertion, and no test-order gate
-keyed on any of them. A build carrying all of them can pass doctor, pass QA,
-and deploy.
-
-The toolkit flags the copy; it does not adjudicate it. **Responsibility for
-every claim on the page — proof counts, review chrome, discount percentages,
-and the rest — sits with the operator and the client, not with Campaigns OS.**
-Use the brief to record which claims are approved and which language is
-forbidden (see the high-impact questions above), and treat a content warning as
-a prompt to check the brief, not as a gate that will stop the build if you
-ignore it.
-
-The hard content checks are separate and do block: the needs-merchant-input
-marker (`content_residue.needs_merchant_input`) and countdown chrome rendered
-without verified offer urgency on a brief-backed build
-(`content_residue.unverified_urgency`).
+## The Merchant's Own Claims Are Not Reviewed
+
+Proof and urgency content the merchant supplies is the merchant's
+responsibility, not Campaigns OS's: reviews and testimonials, ratings and
+counts, "Verified Purchase" labels, recent-purchase popups, stock counters,
+countdowns, guarantees and press mentions. The doctor does not scan for it and
+QA does not assert on it. When the prepared source design carries these
+elements, the build reproduces them as designed. The starter templates ship
+without some of them; that is not a reason to drop the source's.
+
+What the doctor does scan built output for is template residue: the starter
+templates' own demo strings and bracket-style stubs
+(`content_residue.demo_residue`, a warning). It also warns on promo copy
+claiming a discount above the CampaignSpec maximum
+(`template_contract.discount_claim_residue`, or
+`template_contract.discount_claim_unverified` when the spec sets no maximum),
+because that copy disagrees with the campaign's own pricing. Nothing downstream
+blocks on either.
+
+Two content checks do block: the needs-merchant-input marker
+(`content_residue.needs_merchant_input`), and, on a brief-backed build only,
+starter countdown chrome the brief payload does not verify
+(`content_residue.unverified_urgency`). Use the brief to record which claims
+are approved and which language is forbidden (see the high-impact questions
+above).
 
 ## QA Policy Scope
 

package/docs/local-setup.md

@@ -1,11 +1,16 @@
 # Local campaign setup
 
-For a new campaign, choose its working folder and run this from that folder:
+For a new campaign, create an empty working folder and run this from it:
 
 ```sh
-npm install --save-exact next-campaign-page-kit@0.2.0 && npm install --save-dev --save-exact @nextcommerce/campaigns-os@1.47.0 && npx --no-install campaigns-os tooling setup --target . --platform claude
+npm init -y && npm install --save-exact next-campaign-page-kit@0.2.0 && npm install --save-dev --save-exact @nextcommerce/campaigns-os@1.48.0 && npx --no-install campaigns-os tooling setup --target . --platform claude
 ```
 
+`npm init -y` gives the folder its own `package.json`. Without one, npm
+installs into the nearest parent folder that has a `package.json` or
+`node_modules`, so a campaign folder created inside another project would add
+page-kit and the toolkit to that project instead.
+
 Review the release source/provenance before installation as described in
 `AGENTS.md`. npm installs the dependencies first; `--no-install` then runs only
 the project's installed CLI. Page-kit stays a runtime dependency and the

package/docs/orientation-contract-reference.md

@@ -26,7 +26,7 @@ Ledger schema id: `campaigns-os-release-ledger/v1`
 Change policy version: `1.0.0`  
 Reason-code vocabulary version: `1.0.0`  
 Limits version: `1.0.0`  
-Supported surface at generation time: `1.47.0`
+Supported surface at generation time: `1.48.0`
 
 ## Forward compatibility