done-done-axi 0.6.8 → 0.6.9

package/dist/design.js

@@ -11,7 +11,7 @@ export const KINDS = {
         defect: 'An avatar, profile picture, app icon or logo mark (a symbol or a face, not a word) is drawn more than 1.3 times wider than tall, or more than 1.3 times taller than wide; or a circle is drawn as an oval; or a photo shows people or objects flattened or stretched.',
         look: 'list each avatar, profile picture, app icon, logo mark and photo with its drawn width x height in pixels',
     },
-    'clipped-text': { defect: 'Some text is cut: letters cut off by an edge of the image or of their container, or a word or line that stops mid-way with no ellipsis.', look: 'name any label whose letters touch or cross an edge of the image or of its container' },
+    'clipped-text': { defect: 'Some text is cut: letters cut off by an edge of the image or their container, a word or line stopping mid-way with no ellipsis, a multi-line clamp cutting a visible line mid-height, or a single-line ellipsis leaving fewer than 3 complete words AND fewer than 20 visible characters before the dots. A single-line ellipsis with at least 3 complete words OR 20 visible characters before the dots is deliberate truncation, not clipped text; still flag any hard cut or mid-glyph cut.', look: 'name labels whose letters touch or cross an edge; for each single-line ellipsis count the complete words and visible characters before the dots, and exclude it only if at least 3 complete words OR 20 visible characters remain and no glyph is cut' },
     overlap: { defect: 'Two elements are drawn over each other: text over text, a control over content, or content under the status bar, clock or system bars.', look: 'name any two elements that touch or cover each other' },
     'off-screen': { defect: 'An element is cut by the left, right or top edge of the image, so part of it is missing. Content cut by the bottom edge of a scrolling list is not this.', look: 'name any element that touches or crosses the left, right or top edge' },
     'blank-strip': {

package/dist/dom.js

@@ -34,7 +34,8 @@ export const SQUASHED_TEXT = `() => {
 // The rest of the look measurement, run in the page by `done-done look` next to SQUASHED_TEXT. A part of an element only
 // shows inside every ancestor that clips it (overflow other than visible; html and body clip as the viewport, so they are
 // the edges, not containers). Text is clipped when part of it shows and part runs past a hidden or clip container on an
-// axis without text-overflow: ellipsis or a line clamp; an element is cut off when part of what shows lies past the
+// axis. A single-line ellipsis is deliberate only with a readable head (3 complete words OR 20 visible characters);
+// a line clamp may hide whole lines, not part of a visible line. An element is cut off when part of what shows lies past the
 // left, right or top edge of the viewport (the page is at its top, so nothing above it can be scrolled to). Something
 // entirely outside its container or the viewport is hidden on purpose (a closed drawer, a visually hidden label), not cut;
 // a cut element's children are not listed again.
@@ -46,6 +47,32 @@ export const LOOK = `() => {
   const own = (e) => [...e.childNodes].filter((n) => n.nodeType === 3 && n.data.trim()).map((n) => n.data).join(' ').replace(/\\s+/g, ' ').trim().slice(0, 40);
   const clips = (e) => { const out = []; for (let a = e; a && a !== document.body && a !== document.documentElement; a = a.parentElement) { const s = getComputedStyle(a); if (s.overflowX !== 'visible' || s.overflowY !== 'visible') { const r = a.getBoundingClientRect(); out.push({ a, s, l: r.left + a.clientLeft, t: r.top + a.clientTop, r: r.left + a.clientLeft + a.clientWidth, b: r.top + a.clientTop + a.clientHeight }); } } return out; };
   const shows = (b) => b.r - b.l > 1 && b.b - b.t > 1;
+  const readable = (c) => {
+    if (c.s.textOverflow !== 'ellipsis' || !['nowrap', 'pre'].includes(c.s.whiteSpace) || c.s.display === 'inline' || c.s.writingMode !== 'horizontal-tb') return false;
+    const ctx = document.createElement('canvas').getContext('2d');
+    ctx.font = c.s.fontStyle + ' ' + c.s.fontWeight + ' ' + c.s.fontSize + ' ' + c.s.fontFamily;
+    ctx.letterSpacing = c.s.letterSpacing === 'normal' ? '0px' : c.s.letterSpacing;
+    /* Reserve a pixel for browser glyph rounding at the ellipsis boundary. */
+    const dots = ctx.measureText('…').width + 1; const rtl = c.s.direction === 'rtl';
+    const left = c.l + parseFloat(c.s.paddingLeft) + (rtl ? dots : 0);
+    const right = c.r - parseFloat(c.s.paddingRight) - (rtl ? 0 : dots);
+    const walker = document.createTreeWalker(c.a, NodeFilter.SHOW_TEXT);
+    let head = ''; let next = ''; let top;
+    scan: for (let n = walker.nextNode(); n; n = walker.nextNode()) {
+      let offset = 0;
+      for (const ch of n.data) {
+        const g = document.createRange(); g.setStart(n, offset); offset += ch.length; g.setEnd(n, offset);
+        const q = g.getBoundingClientRect();
+        if (!q.width) continue;
+        if (top !== undefined && Math.abs(q.top - top) > 1) return false;
+        top = q.top;
+        if (q.left < left - 0.01 || q.right > right + 0.01) { next = ch; break scan; }
+        head += ch;
+      }
+    }
+    const complete = (next && !/\\s/.test(next) ? head.replace(/\\S+$/, '') : head).trim();
+    return [...head.trim()].length >= 20 || (complete ? complete.split(/\\s+/).length : 0) >= 3;
+  };
   for (const e of document.querySelectorAll('body *')) {
     const s = getComputedStyle(e); const rect = e.getBoundingClientRect();
     if (!e.getClientRects().length || s.visibility !== 'visible' || rect.width < 1 || rect.height < 1) continue;
@@ -57,13 +84,17 @@ export const LOOK = `() => {
     const edges = [box.l < -1 && 'left', box.r > vw + 1 && 'right', box.t < -1 && 'top'].filter(Boolean);
     if (edges.length && box.r > 0 && box.l < vw && box.b > 0 && box.t < vh && !parent) { cut.add(e); out.cut_off.push({ element: name(e), text, edges }); }
     if (!text) continue;
-    const t = { l: Infinity, t: Infinity, r: -Infinity, b: -Infinity };
-    for (const n of e.childNodes) if (n.nodeType === 3 && n.data.trim()) { const g = document.createRange(); g.selectNodeContents(n); for (const q of g.getClientRects()) if (q.width) { t.l = Math.min(t.l, q.left); t.t = Math.min(t.t, q.top); t.r = Math.max(t.r, q.right); t.b = Math.max(t.b, q.bottom); } }
+    const t = { l: Infinity, t: Infinity, r: -Infinity, b: -Infinity }; const lines = [];
+    for (const n of e.childNodes) if (n.nodeType === 3 && n.data.trim()) { const g = document.createRange(); g.selectNodeContents(n); for (const q of g.getClientRects()) if (q.width) { lines.push(q); t.l = Math.min(t.l, q.left); t.t = Math.min(t.t, q.top); t.r = Math.max(t.r, q.right); t.b = Math.max(t.b, q.bottom); } }
     if (t.l === Infinity || t.t >= vh || t.b <= 0) continue;
     for (const c of clips(e)) {
       if (c.r - c.l <= 1 || c.b - c.t <= 1 || !(t.r > c.l && t.l < c.r && t.b > c.t && t.t < c.b) || !['hidden', 'clip'].some((v) => v === c.s.overflowX || v === c.s.overflowY)) continue;
-      const x = ['hidden', 'clip'].includes(c.s.overflowX) && c.s.textOverflow !== 'ellipsis' && (t.l < c.l - 1 || t.r > c.r + 1);
-      const y = ['hidden', 'clip'].includes(c.s.overflowY) && c.s.webkitLineClamp === 'none' && (t.t < c.t - 1 || t.b > c.b + 1);
+      const overX = ['hidden', 'clip'].includes(c.s.overflowX) && (t.l < c.l - 1 || t.r > c.r + 1);
+      const x = overX && !readable(c);
+      const partial = lines.some((q) => (q.top < c.b - 1 && q.bottom > c.b + 1) || (q.top < c.t - 1 && q.bottom > c.t + 1));
+      const y = ['hidden', 'clip'].includes(c.s.overflowY) && (c.s.webkitLineClamp === 'none' || partial) && (t.t < c.t - 1 || t.b > c.b + 1);
+      /* Ancestors clip the painted ellipsis, not the invisible tail of its DOM Range. */
+      if (overX && !x) { t.l = Math.max(t.l, c.l); t.r = Math.min(t.r, c.r); }
       if (x || y) { out.clipped_text.push({ element: name(e), text, by: c.a === e ? 'its own box' : name(c.a) }); break; }
     }
   }

package/dist/judge.js

@@ -6,11 +6,11 @@ import { agentRun, askAgent, claudeAccount, notStartable } from './agents.js';
 import { home, KEY_ROUTES, parseDuration, tilde, UsageError } from './config.js';
 import { downscaleToPng } from './media.js';
 const MAX_SIDE = 1280; // long edge sent to the model, in pixels
-const MAX_CALLS = 10; // model requests per check; later captures are unsure
+const MAX_CALLS = 10; // independent capture calls per check; oversized isolated sets are refused
 const MAX_TEXT = 64 * 1024; // bytes of a text capture sent to the model; a longer one is unsure, never cut
 // The reading rules: the model names the element the outcome claims and quotes it before it decides, and a text capture
 // is read entry by entry. The floor is not here: the user sets it (judge.floor), and judge() applies it.
-export const VERSION = 13; // bump when QUESTION, the options, the cache key or the stored verdict change, so older cached verdicts are not reused
+export const VERSION = 15; // bump when QUESTION, the options, the cache key or the stored verdict change, so older cached verdicts are not reused
 const OPTIONS = {
     correct: 'The screenshot shows the screen and state the outcome describes.',
     wrong: 'The screenshot shows a different screen, an error, a crash, a dialog or overlay (such as a keyboard) hiding the content, or a state that contradicts the outcome. Choose it only when the quote you give shows that.',
@@ -208,7 +208,7 @@ export async function askJudge(cfg, be, choice, state, questions, images, shared
         // One answer defines the identities before coverage is validated or blank/repeated labels are collapsed.
         if (sharedParts)
             for (const answer of Object.values(answers))
-                Object.assign(answer, { parts: lists(answers[sharedParts]).parts });
+                Object.assign(answer, { parts: Array.isArray(sharedParts) ? sharedParts : lists(answers[sharedParts]).parts });
         return answers;
     };
     const malformed = (a) => Object.keys(questions).filter((k) => /^(malformed|no answer)/.test(a[k].reason ?? ''));
@@ -291,9 +291,8 @@ async function judgeBatch(cfg, choice, outcome, captures, records, dir) {
     const stamp = new Date().toISOString().replace(/[:.]/g, '-');
     const eligible = captures.filter(judgeable);
     const notJudged = captures.filter((c) => !judgeable(c)).map((c) => c.name);
-    const selected = eligible;
-    const suffix = [];
-    const rows = selected.map((c) => {
+    const isolated = eligible.some(screen);
+    const rows = eligible.map((c) => {
         const pair = c.before && judgeable(c.before) && screen(c.before) === screen(c) ? c.before : undefined;
         return { c, pair, row: { path: c.name, sha256: c.sha256, ...(pair && { before: pair.name }) } };
     });
@@ -301,7 +300,7 @@ async function judgeBatch(cfg, choice, outcome, captures, records, dir) {
     const key = createHash('sha256').update(JSON.stringify([VERSION, captures.map((c) => [c.name, c.sha256, c.before?.name, c.before?.sha256]), outcome, route, model, cfg.judge.floor])).digest('hex');
     const hit = readCache(dir, key);
     if (Array.isArray(hit?.judged) && hit.judged.length === rows.length && hit.judged.every((r) => ['pass', 'fail', 'unsure'].includes(r?.verdict) && typeof r.reason === 'string' && (r.parts === undefined || coverageOf(r))))
-        return { judged: [...hit.judged.map((r) => ({ ...r, cached: true })), ...suffix], notJudged, choice, missing: hit.missing ?? [] };
+        return { judged: hit.judged.map((r) => ({ ...r, cached: true })), notJudged, choice, missing: hit.missing ?? [] };
     const questions = {};
     const images = {};
     const state = { outcome };
@@ -310,7 +309,7 @@ async function judgeBatch(cfg, choice, outcome, captures, records, dir) {
         const input = screen(c) ? prepare(c) : c.bytes.length > MAX_TEXT ? `${c.name} text exceeds ${MAX_TEXT} bytes` : { text: c.bytes.toString('utf8') };
         const before = pair && (screen(pair) ? prepare(pair) : pair.bytes.length > MAX_TEXT ? `${pair.name} text exceeds ${MAX_TEXT} bytes` : { text: pair.bytes.toString('utf8') });
         if (typeof input === 'string' || typeof before === 'string')
-            throw new UsageError(`judge: ${c.name} cannot be sent to the judge: ${input}`, 'Capture it again as the error says, then re-run this command');
+            throw new UsageError(`judge: ${c.name} cannot be sent to the judge: ${typeof input === 'string' ? input : `its base capture ${pair.name}: ${before}`}`, 'Capture it again as the error says, then re-run this command');
         const base = 'text' in input ? before ? TEXT_PAIR : TEXT_QUESTION : before ? PAIR : QUESTION;
         const beforeId = pair && imageId(`before_${i}`, pair);
         const captureId = imageId(`capture_${i}`, c);
@@ -319,11 +318,28 @@ async function judgeBatch(cfg, choice, outcome, captures, records, dir) {
         if (beforeId && before && 'mime' in before)
             images[beforeId] = before;
         state[id] = { name: basename(c.name), ...(pair && { before_name: basename(pair.name) }), ...(before && 'text' in before && { before: before.text }), ...(typeof input === 'object' && 'text' in input && { capture: input.text }) };
-        questions[id] = { ...base, images: 'text' in input ? [] : beforeId && before && 'mime' in before ? [beforeId, captureId] : [captureId], instructions: `${base.instructions} ${PARTS} Use one shared parts list for this entire request: define it in capture_0.parts, in outcome order. Every capture's covers indexes that shared list, never a separately worded or reordered list.`, floor: cfg.judge.floor, ...(route === 'openai:key' ? {} : { answerFields: FIELDS }) };
+        questions[id] = { ...base, images: 'text' in input ? [] : beforeId && before && 'mime' in before ? [beforeId, captureId] : [captureId], instructions: `${base.instructions} ${PARTS}${isolated ? ' Define parts for the ENTIRE outcome, including every separately named capture, not only the part this image shows. This list will be shared with later isolated calls.' : ' Use one shared parts list for this entire request: define it in capture_0.parts, in outcome order. Every capture\'s covers indexes that shared list, never a separately worded or reordered list.'}`, floor: cfg.judge.floor, ...(route === 'openai:key' ? {} : { answerFields: FIELDS }) };
+    }
+    const answers = {};
+    if (isolated) {
+        // Images from different citations must never share a model context. A before/after pair stays together.
+        if (rows.length > MAX_CALLS)
+            throw new UsageError(`judge: one check sends at most ${MAX_CALLS} captures to the model, so cite fewer`, 'Split the claim into smaller checks');
+        let parts;
+        for (const [id, question] of Object.entries(questions)) {
+            const shape = parts ? { ...question, answerFields: ['covers'], instructions: `${question.instructions} The shared parts list is fixed in state.shared_parts. Return covers positions in that exact list; do not redefine it.` } : question;
+            const one = { [id]: shape };
+            const call = join(records, `judge-${stamp}-${Object.keys(answers).length + 1}`);
+            const be = await backend(cfg, choice, (request) => `${call}-${request}.agent.json`, one);
+            Object.assign(answers, await askJudge(cfg, be, choice, { outcome, [id]: state[id], ...(parts && { shared_parts: parts }) }, one, Object.fromEntries((shape.images ?? []).map((image) => [image, images[image]])), parts ?? ''));
+            parts ??= lists(answers[id]).parts;
+        }
+    }
+    else {
+        const call = join(records, `judge-${stamp}-1`);
+        const be = await backend(cfg, choice, (request) => `${call}-${request}.agent.json`, questions);
+        Object.assign(answers, await askJudge(cfg, be, choice, state, questions, images, 'capture_0'));
     }
-    const call = join(records, `judge-${stamp}-1`);
-    const be = await backend(cfg, choice, (request) => `${call}-${request}.agent.json`, questions);
-    const answers = await askJudge(cfg, be, choice, state, questions, images, 'capture_0');
     const judged = rows.map(({ row, c }, i) => {
         const a = answers[`capture_${i}`];
         const shape = questions[`capture_${i}`];
@@ -333,7 +349,7 @@ async function judgeBatch(cfg, choice, outcome, captures, records, dir) {
     });
     const missing = missingParts(judged);
     writeCache(dir, key, { judged, missing, route, model });
-    return { judged: [...judged, ...suffix], notJudged, choice, missing };
+    return { judged, notJudged, choice, missing };
 }
 async function judgeOn(cfg, choose, outcome, captures, records) {
     // Check the account even on a verdict cache hit: a broken configured picker must never produce a pass.

package/docs/reference.md

@@ -483,7 +483,7 @@ done-done check --from pr-body.md                               # always judged
 
 Under `verify`, a `fail` or `unsure` verdict does not end the run: it parks it at its [gate](#the-gate-and-respond).
 
-The result gains a `judge` block with the route, the model, the independence, the author and, for each judged file, its verdict, a short reason and whether it came from the cache, and, when the outcome names several parts, the parts it lists and the positions of the ones it shows (`parts`, `covers`). For the `claude-code` route, a missing `claude` binary or an `agent_path_override.claude` that is not an executable file, or a Node older than 22.18 is a config error (exit 2) whose `help` line is the command to fix it. A `claude` that is not signed in (checked only when a call fails) is exit 2 too, with `claude auth login` as the `help` line, the same sign-in you use in your shell. done-done does not check which plan that sign-in is on, so `claude` uses whatever sign-in your environment gives it. The kit cannot tell a bad `judge.model` from a used-up plan, so the error names both. For `openai:key`, an unset `OPENAI_API_KEY` is a config error (exit 2) too, and a refused key or a bad `judge.model` is an error with the HTTP status, naming both. The judge's confidence is the model's own estimate, not a calibrated score. `judge.floor` (global config, a number from 0 to 1, default `0.7`) is the least probability the judge's pick may carry and still count: a pick below it is `unsure` with `not confident enough (confidence <n> below floor <f>)`, and never a pass. It governs every judge: check and receipt relevance, maintain triage, and the design check. An outcome that names several parts (widths, themes or frames, such as "at 390 and 1440 wide") needs each one shown by a passing capture. Each image attachment's identifier includes its cited basename beside the actual bytes, and each question's state retains the cited capture's basename in `name` (and `before_name` for a base pair), never its owner or repository directory. The instructions tell the judge to compare a named still or an explicitly extracted recording frame against that file's own claim part, not another screen's part. Recordings themselves are probed, not frame-extracted or sent to the relevance judge. Renamed citations are new judge inputs, even with identical bytes. In the single request, `capture_0.parts` defines one shared list in outcome order; every capture's `covers` indexes that list. Other answers cannot redefine identities by relabelling or reordering their own `parts`: labels are display text, never matched across calls. A shared position no passing capture shows makes the check inconclusive, naming that part. The lists are the judge kit's answer fields (`answerFields` on the question), so they arrive on the answer the kit resolves; the `openai:key` route is asked for no such field, so it still requires no part (even for a multi-part claim). A missing shared list, missing `covers`, or a position outside the shared list is asked once more, then is an error (exit 2). A request that cannot fit all captures stops with its real cause and no result; it is not split into independent lists or accepted as partial proof. Version-10 and earlier verdict caches are invalidated: unnamed inputs, old full-set missing-part results and independent per-capture labels are never reinterpreted as named shared identities. Other routes already ignore legacy per-capture cache entries when judging a multi-capture set. Drive the five-part regression and its missing-part, cache and request-refusal controls with `done-done run shared-parts`; it uses deterministic provider adapters, not a hosted model. Each request asks the judge to name the element the outcome claims and quote what it sees before it decides, and a text capture (JSON, a log) is read entry by entry, every width and frame, before the judge answers; the reason shown is the model's one-sentence person reason, else its rationale; each judged file also shows the model's rationale, the quote it read, under `seen` when the model gave one. The floor is part of the verdict cache key, so a changed floor asks the judge again.
+The result gains a `judge` block with the route, the model, the independence, the author and, for each judged file, its verdict, a short reason and whether it came from the cache, and, when the outcome names several parts, the parts it lists and the positions of the ones it shows (`parts`, `covers`). For the `claude-code` route, a missing `claude` binary or an `agent_path_override.claude` that is not an executable file, or a Node older than 22.18 is a config error (exit 2) whose `help` line is the command to fix it. A `claude` that is not signed in (checked only when a call fails) is exit 2 too, with `claude auth login` as the `help` line, the same sign-in you use in your shell. done-done does not check which plan that sign-in is on, so `claude` uses whatever sign-in your environment gives it. The kit cannot tell a bad `judge.model` from a used-up plan, so the error names both. For `openai:key`, an unset `OPENAI_API_KEY` is a config error (exit 2) too, and a refused key or a bad `judge.model` is an error with the HTTP status, naming both. The judge's confidence is the model's own estimate, not a calibrated score. `judge.floor` (global config, a number from 0 to 1, default `0.7`) is the least probability the judge's pick may carry and still count: a pick below it is `unsure` with `not confident enough (confidence <n> below floor <f>)`, and never a pass. It governs every judge: check and receipt relevance, maintain triage, and the design check. An outcome that names several parts (widths, themes or frames, such as "at 390 and 1440 wide") needs each one shown by a passing capture. Each image attachment's identifier includes its cited basename beside the actual bytes, and each question's state retains the cited capture's basename in `name` (and `before_name` for a base pair), never its owner or repository directory. The instructions tell the judge to compare a named still or an explicitly extracted recording frame against that file's own claim part, not another screen's part. Recordings themselves are probed, not frame-extracted or sent to the relevance judge. Renamed citations are new judge inputs, even with identical bytes. When any citation is an image, each capture is judged in a fresh request containing only its own image (or its own before/after pair), never another citation's image or text. The first call defines `parts` for the entire outcome; later calls receive that fixed list and return `covers` positions in it. Text-only sets still use one batch request where `capture_0.parts` defines the shared list. Every capture's `covers` indexes that list. Other answers cannot redefine identities by relabelling or reordering their own `parts`: labels are display text, never matched across calls. Single-capture checks still cost one request, and an unchanged full set reuses the cache. A shared position no passing capture shows makes the check inconclusive, naming that part. The lists are the judge kit's answer fields (`answerFields` on the question), so they arrive on the answer the kit resolves; the `openai:key` route is asked for no such field, so it still requires no part (even for a multi-part claim). A missing shared list, missing `covers`, or a position outside the shared list is asked once more, then is an error (exit 2). A text batch that cannot fit its captures stops with its real cause and no result. An isolated set needing more than 10 capture requests is refused before calling the model; split it into smaller claims. A failed isolated request stops the whole check with its real cause and no result, never partial proof. Version-13 and earlier verdict caches are invalidated, including shared-context image verdicts: old results and independent per-capture labels are never reinterpreted as isolated named shared identities. Other routes already ignore legacy per-capture cache entries when judging a multi-capture set. Drive the five-part regression and its missing-part, cache and request-refusal controls with `done-done run shared-parts`; it uses deterministic provider adapters, not a hosted model. Each request asks the judge to name the element the outcome claims and quote what it sees before it decides, and a text capture (JSON, a log) is read entry by entry, every width and frame, before the judge answers; the reason shown is the model's one-sentence person reason, else its rationale; each judged file also shows the model's rationale, the quote it read, under `seen` when the model gave one. The floor is part of the verdict cache key, so a changed floor asks the judge again.
 
 **Remaining limitation:** names bind attachments and cached verdicts, but do not isolate the model's view of a batch. In an adversarial control with two filenames swapped, the configured judge still substituted the other attached image and falsely passed. This change does not guarantee image-to-claim pairing accuracy; image isolation requires a separate follow-up.
 

package/docs/releasing.md

@@ -1,7 +1,5 @@
-# 0.6.8 patch release
+# 0.6.9 patch release
 
-For `--citation-base` behavior and usage, see [Check a claim](reference.md#check-a-claim).
+This release treats readable one-line ellipses as deliberate when at least 3 words or 20 characters remain visible, and checks each cited image on its own so swapped images cannot support a false claim.
 
-This release adds opt-in pooled accounts for judge calls, documents how to add and improve journeys, fixes journey generator handling of punctuation-only flags and baseline paths, and pairs judge images with cited filenames correctly.
-
-Do not publish an unmerged candidate. The existing `release` workflow on main tests and publishes an unpublished package version using npm trusted publishing. After merge, confirm `npm view done-done-axi@0.6.8 version dist.integrity` and smoke-test a clean `npx` install with `done-done --version`. Do not run `npm publish` manually unless the workflow fails and the release is blocked; if so, stop and report.
+Do not publish an unmerged candidate. The existing `release` workflow on main tests and publishes an unpublished package version using npm trusted publishing. After merge, confirm `npm view done-done-axi@0.6.9 version dist.integrity` and smoke-test a clean `npx` install with `done-done --version`. Do not run `npm publish` manually unless the workflow fails and the release is blocked; if so, stop and report.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "done-done-axi",
-  "version": "0.6.8",
+  "version": "0.6.9",
   "license": "Apache-2.0",
   "description": "Proof that the real product works before a task is called done: commit-bound evidence runs and evidence checks.",
   "type": "module",