humanish 0.83.2 → 0.84.1

package/docs/contracts/feedback.md

@@ -34,6 +34,12 @@ safe. A verified run bundle is not automatically public-promotable: feedback
 commands also require `humanish verify` to report
 `shareSafety.status: share_ready`.
 
+For an otherwise valid run whose only sharing restriction is raw screenshots,
+`humanish export --run RUN --format bundle --redact-screenshots --out ./shared-study`
+produces a separate, reverified workspace. Feedback commands use
+`--cwd ./shared-study --run RUN`; the source retains its original local-only grade
+and readable frames. Exported thumbnails do not replace local visual adjudication.
+
 ## Command Stages
 
 ```bash
@@ -150,6 +156,15 @@ Generating a public issue draft is blocked when:
 
 ## GitHub Issue Semantics
 
+Generated acceptance commands use the installed `humanish` CLI from the workspace
+containing the evidence. They require no repository package script or manifest.
+When regenerating feedback from a retained first-party candidate, exact legacy
+`pnpm humanish -- verify/watch` templates for the same run are projected to direct
+CLI commands. Recognition checks the existing candidate/stream identity and
+idempotency conventions; it is a compatibility rule, not provenance attestation.
+Custom candidates and instructions remain unchanged. Source bundles, candidates
+and receipts are never rewritten by this projection.
+
 GitHub issues filed from feedback should say `contributes to` unless the
 acceptance proof closes the full product claim. The public issue should include
 only redacted evidence pointers and reproduction instructions that a maintainer

package/docs/contracts/run-bundle.md

@@ -410,6 +410,53 @@ bundle is safe to promote into a public issue. Public promotion should branch on
 - `local_only`: keep the run local or generate a redacted replacement bundle;
 - `blocked`: fix the verification or public-safety failure first.
 
+The local-evidence check includes screenshots declared only by
+`streams[].actor.items[].screenshotRef` or `streams[].liveActor.items[].screenshotRef`,
+as well as every feedback candidate's evidence. Actor frame paths are relative
+to the run root; missing, malformed or nonlocal references fail verification.
+Screenshots use the existing bounded PNG decoder. Nonimage candidate evidence
+may be an empty regular file, consistent with feedback verification, but that
+permission cannot relax another consumer's nonempty-file requirement. The
+qualified zero-event terminal-log exception remains unchanged.
+
+An explicit `screenshotRef.redaction: none` on either final or live actor items
+contributes the existing `RAW_SCREENSHOTS` reason and keeps otherwise valid
+evidence `local_only`. Either an aggregate raw declaration or a raw frame wins
+over a blurred declaration. Missing or unknown per-frame metadata retains the
+existing permissive compatibility behavior; verification does not infer pixel
+privacy from that absence.
+
+## Redacted Derivative Workspace
+
+`humanish export --run RUN --format bundle --redact-screenshots --out DIRECTORY`
+creates a new workspace at `DIRECTORY/.humanish/runs/RUN/`. The source remains
+unchanged, including its latest pointer and statistics. The derivative retains the
+original run ID and measured outcomes; it is not a new attempt. Standard commands
+select it with `--cwd DIRECTORY --run RUN`.
+
+Its `derivation.json` uses schema `humanish.redacted-derivation.v1` and records:
+
+- `sourceRunId`, `createdAt` (export time), and `transformation` (`png-blur-at-export-v1`);
+- `sourceInventorySha256`: SHA256 of the JSON array of `[path, byteLength, sha256]`
+  rows, sorted by path using JavaScript string order;
+- `files[]`: source-relative `path`, `sourceSha256`, action (`copied`, `updated`,
+  `blurred`, or `omitted`), and `outputSha256` for retained files or a reason for
+  omission;
+- `generated[]`: paths and SHA256s of rebuilt Observer projections.
+
+The receipt describes the transformation; it does not attest that a participant's
+finding is true. Its own bytes are not included in its hash inventory. Feedback
+commands can subsequently generate new derivative-local artifacts.
+
+PNG files are re-encoded as blurred thumbnails, including unreferenced images.
+Known actor screenshot declarations describe export-time blur while retaining the
+original redaction notes. Observer is rebuilt; old feedback outputs, local process
+status and the operational sandbox journal are omitted and inventoried. A derivative
+does not inherit resource cleanup authority. Unsupported images, binary formats,
+inline image payloads, invalid evidence and references to omitted files are refused.
+The original and derivative are independently verified. Text still requires human
+review before sharing; screenshot blur does not certify natural-language privacy.
+
 ## Contract Fixture Proof
 
 The core fixture proves:

package/docs/contracts/schemas.md

@@ -3,7 +3,7 @@
 Date: 2026-06-02 (current-state note updated 2026-07-14)
 
 Status: reference map for the major contracts shipped through source version
-`0.83.2`; it is not an exhaustive inventory of command/result envelopes. Exported types,
+`0.84.1`; it is not an exhaustive inventory of command/result envelopes. Exported types,
 schema constants, parsers, and validators in `src/` are authoritative. Rows
 marked "reserved" name layering intent only — no code emits or validates them
 yet. Do not emit a reserved schema.

package/docs/goals/current.md

@@ -1,6 +1,6 @@
 # Current Goals
 
-Status date: 2026-09-07 (rev 21)
+Status date: 2026-09-07 (rev 22)
 
 This page is the current public-safe operating goal for `humanish`. Keep it
 short enough to reread before a coding session and concrete enough that future
@@ -29,11 +29,17 @@ study completed, reproduced, and produced a real accessibility finding via a
 keyboard-first participant
 ([docs/goals/email-gated-signup/receipts/](email-gated-signup/receipts/)).
 
-## Current Program Truth (source `0.83.2`)
+## Current Program Truth (source `0.84.1`)
 
 The package source and repository implementation in this tree agree on these
 points:
 
+**Portable feedback acceptance commands, 2026-09-07 (#720).** Generated proof commands use the installed CLI from the evidence workspace, including standalone exports without a package manifest. Redrafting recognized first-party candidates projects exact legacy command templates without rewriting source candidates or receipts. Custom instructions remain unchanged. See the [0.84.1 release note](../release/0.84.1-portable-feedback.md).
+
+**Readable evidence and shareable feedback, 2026-09-07 (#136).** `export --format bundle --redact-screenshots` creates a separate verified workspace while retaining the readable original. Four real operator-run recordings preserved all measured findings and costs through export and ordinary feedback commands; all 31 frames played in both bundle and HTML views. Static Observer grades now reflect their actual verification result. See the [retained workflow receipt](computer-use-actor/receipts/redacted-evidence-workflow-2026-09-07.md). External maintainer use and acceptance remain unproven.
+
+**Declared evidence verification (#715).** Ordinary verification checks final/partial actor frame references and feedback candidate files. Explicit raw frame declarations keep partial traces `local_only`; valid zero-event terminal logs remain supported. Missing or unknown per-frame redaction metadata retains existing compatibility behavior, and unreferenced files are outside this check.
+
 **Narrow desktop and shared-study correction, 2026-09-07.** A minimum-width Chrome window can remain outside a 500px desktop after move/resize. A state-checked fullscreen fallback now proves physical containment before participant entry. Concurrent shared-world actors share the declared model-study budget, and a host ending before lobby handoff retains its actual failure rather than being reported as a timeout. See [bounded desktop receipt](computer-use-actor/receipts/narrow-desktop-containment-2026-09-07.md). This does not establish physical mobile fidelity or external adoption.
 
 **Mobile input correction, 2026-09-05 (#676).** The historical 4/4 TodoMVC phone-lane rename

package/docs/principles/invariants-and-defaults.md

@@ -23,8 +23,8 @@ certify (see the conformance suite).
    scan additionally blocks them from commit; downstream projects do not get that scan — their
    protection is the init-scaffolded `.gitignore` plus their own review. To share a bundle
    as-is, set `policies.redactScreenshots: true` (blurs
-   at capture); a redact-on-export step for already-captured raw bundles is planned, not yet
-   shipped. (See "the capture-vs-publish rule" below — blurring frames at *capture* was a
+   at capture), or use `humanish export --format bundle --redact-screenshots` to create a
+   separately verified copy while preserving readable local evidence. (See "the capture-vs-publish rule" below — blurring frames at *capture* was a
    default mistaken for this invariant.)
    - Scope note: the literal scrub of KNOWN provisioned values runs on harness log-tails,
      errors, AND model-authored narration (reasoning/message) before it persists; secret-SHAPED
@@ -85,7 +85,7 @@ silently drifting from one is not.
 | Per-lane worlds | Isolation, attribution, reproducibility | `subject.topology: shared-world` — N seats against ONE provisioned, mutable plane for scenarios that ARE about interaction between roles (#164). `execution.concurrency: 1` (an explicit choice) = SEQUENTIAL turns (one sandbox); higher = CONCURRENT — and since #350 an omitted concurrency fills to the seat count, so every declared seat runs live at once by default (one getHost-exposed subject sandbox + N actor sandboxes driving it at once, synthetic-subject only). The bundle declares the weaker `attributionClass: shared-world` + a verify-enforced `attributionLimits` ceiling (the concurrent set drops `sequential-only` and adds `best-effort-causal-attribution` etc.), so the looser per-role attribution is honest, not hidden. |
 | External key placement | Smallest blast radius: when the keyed process (e.g. a computer-use provider loop) runs outside the sandbox, its key never enters | In-sandbox placement when the keyed process runs inside (an agent harness under test); declared per actor type, with a spend budget |
 | Loopback entry URLs | Public-safety: never drive third-party sites unbidden | `policies.allowPublicTargets` for an owner-declared deployment/preview (a Vercel preview of your own app). Multi-lane public/preview fan-out needs explicit `actors[0].lanes[].target` for every lane, so the adapter-owned topology is declared rather than inferred. Provisioned clone subjects always serve in-sandbox on loopback |
-| Full-fidelity screenshots, local | The common case is watching a sim of your OWN app locally; blur destroys the deliverable. Raw frames live in gitignored `.humanish/` (this repo's CI adds a binary-asset commit scan; downstream projects rely on the scaffolded `.gitignore` and their own review) | `policies.redactScreenshots: true` blurs at capture for share-as-is bundles (a redact-on-export step for raw bundles is planned) |
+| Full-fidelity screenshots, local | The common case is watching a sim of your OWN app locally; blur destroys the deliverable. Raw frames live in gitignored `.humanish/` (this repo's CI adds a binary-asset commit scan; downstream projects rely on the scaffolded `.gitignore` and their own review) | `policies.redactScreenshots: true` blurs at capture; `export --format bundle --redact-screenshots` produces a separate verified copy of a completed run |
 | Synthetic, seeded state | Pinned provenance; no real user data in evidence paths | Declared external state, recorded as UNPINNED in provenance |
 | Single lane | Cost + evidence simplicity | Declared fan-out where the backend supports it — `actors[0].count: N` (homogeneous), explicit `actors[0].lanes[]` (differentiated persona/device/instruction), or compact `actors[0].roster[]` groups that normalize into lanes on the computer-use E2B route (per-lane worlds, cap 16; `execution.concurrency` bounds concurrent paid lanes) |
 | Stock `desktop` template | The stock E2B desktop image is right for most subjects; absent `execution.desktop.template` keeps `Sandbox.create(opts)` byte-stable | `execution.desktop.template` names a custom E2B desktop image (any name/id, no allowlist) for a subject needing baked-in runtimes the stock image lacks (e.g. node/bun/a local Postgres) — threaded to `Sandbox.create(template, opts)` on every desktop-creating route and recorded in the bundle as `desktopTemplate` (public-safe) |
@@ -140,8 +140,9 @@ threat. The corrected principle:
 Consequences:
 
 - Screenshots are retained **raw and full-fidelity** by default, in gitignored `.humanish/`.
-  `policies.redactScreenshots: true` blurs at capture for a share-as-is bundle; a
-  redact-on-export step for already-captured raw bundles is planned (not yet shipped). The
+  `policies.redactScreenshots: true` blurs at capture for a share-as-is bundle;
+  `humanish export --format bundle --redact-screenshots` blurs a separately verified
+  copy of a completed raw bundle without changing the original. The
   frame sent to the provider is always raw regardless — the model must see the screen to act.
 - The loopback wall and the synthetic-data stance were the same error: enforcing at
   capture/runtime (rejecting a public target outright; banning realistic local input) what

package/docs/ramp/README.md

@@ -2,7 +2,7 @@
 
 Status: public-safe contributor and agent ramp.
 
-Package/source version in this tree: `0.83.2` (2026-09-06). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
+Package/source version in this tree: `0.84.1` (2026-09-07). The Observer is phone-usable as a stated requirement (observer/AGENTS.md); interactive primitives start from Base UI. The Observer renderer is the observer/ workspace artifact only; the legacy string-concat renderer was deleted at cutover (#426), and rollback is a version pin to 0.42.0. The containment boundary introduced in
 `0.15.1` remains in force: managed run and output paths bind to validated
 physical filesystem identities, and stored provider IDs are evidence, not
 cleanup authority. The bundled OSS meta-lab is dry-run only until

package/docs/release/0.84.0-redacted-evidence.md

@@ -0,0 +1,42 @@
+# Humanish 0.84.0: share evidence while keeping readable originals
+
+`humanish export --format bundle --redact-screenshots` creates a separate
+workspace containing a redacted copy of a completed run. The original screenshots
+remain readable for local adjudication. The copied run keeps the same ID,
+participants, findings, task results, subject pins, settings and cost records.
+
+```bash
+humanish export --run RUN --format bundle --redact-screenshots --out shared-study
+humanish verify --cwd shared-study --run RUN
+humanish feedback draft --cwd shared-study --run RUN
+humanish feedback issue --cwd shared-study --run RUN --repo OWNER/REPO
+```
+
+The exporter verifies frozen source bytes, transforms every PNG, rebuilds the
+Observer and verifies the resulting workspace before publishing it. Its receipt
+records copied, changed and omitted files. Unsupported image or binary formats,
+unsafe paths, unfinished runs, changing source files and existing destinations
+are refused. Operational journals do not give the derivative a resource lease
+or create another study attempt.
+
+The existing full-frame blur makes screenshots unsuitable for detailed visual
+adjudication. Keep the original, and review text and findings before sharing.
+
+Ordinary `verify` also checks declared actor and partial-trace screenshots and
+feedback candidate evidence. Missing, unsafe or invalid referenced files fail.
+Explicitly raw frames retain `local_only`, including partial traces and a raw
+frame under a conflicting blurred declaration. Empty nonimage feedback files
+remain valid when no other consumer requires content. Missing or unknown
+per-frame redaction metadata keeps existing compatibility behavior; this is
+not a pixel audit or certification of absent metadata.
+
+Static Observer renders now display their actual verification grade. HTML
+attachments retain screenshot playback and grid thumbnails; generic artifact
+links retain their containment restrictions.
+
+The [workflow receipt](../goals/computer-use-actor/receipts/redacted-evidence-workflow-2026-09-07.md)
+records four real sessions, 67 unchanged original files and 31 transformed frames.
+All four moved workspaces passed published 0.83.2 verification and feedback
+commands with the originals unavailable. Browser inspection covered bundle and
+HTML playback at desktop and mobile sizes. This was an operator rehearsal using
+a known TodoMVC repair; external maintainer adoption remains unproven.

package/docs/release/0.84.1-portable-feedback.md

@@ -0,0 +1,20 @@
+# Humanish 0.84.1: feedback commands work in exported workspaces
+
+Feedback acceptance commands now call the installed `humanish` CLI directly.
+They work from a standalone exported evidence workspace without a package
+manifest or repository script:
+
+```bash
+humanish verify --run RUN --json
+humanish watch --run RUN --no-open
+```
+
+Run them from the directory containing `.humanish/`, with the CLI on `PATH`.
+The watch command serves the Observer until stopped. These commands do not
+download a different package version.
+
+Redrafting feedback from recognized first-party candidates also updates exact
+legacy command templates. Custom acceptance instructions and all original
+candidate evidence and receipts remain unchanged. Unusual run IDs are quoted
+for shell use. The [feedback contract](../contracts/feedback.md) describes the
+compatibility boundary.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.83.2",
+  "version": "0.84.1",
   "description": "Open-source-safe CLI for persona simulation, observer review, and public-safe feedback drafts.",
   "author": "Daniel G Wilson <daniel@danielgwilson.com>",
   "keywords": [