packet-tracer-skill 0.2.0 → 0.2.2

package/examples/README.md

@@ -2,7 +2,7 @@
 
 This repo keeps text-based example artifacts under `examples/` and treats them as a known working scenario set, not just a screenshot folder.
 
-For the `0.2.0` launch-prep surface, the canonical public set is:
+For the `0.2.1` public preview surface, the canonical public set is:
 
 - `complex_campus_master_edit_v4`
 - `home_iot_cli_edit_v1`
@@ -32,10 +32,10 @@ Current curated example:
   Visual snapshot of the same lab opened inside Cisco Packet Tracer.
 
 Additional curated examples:
-- `home_iot_cli_edit_v1.inventory.json`
-  Home gateway and IoT registration example focused on gateway-backed device onboarding.
-- `screenshots/home_iot_cli_edit_v1.png`
-  Topology snapshot for the Home IoT example.
+- `home_iot_cli_edit_v1.inventory.json`
+  Home gateway and IoT registration example focused on donor-backed, constrained gateway device onboarding.
+- `screenshots/home_iot_cli_edit_v1.png`
+  Topology snapshot for the Home IoT example.
 - `service_heavy_cli_edit_v1.inventory.json`
   Service-heavy server example focused on DNS, DHCP, FTP, email, syslog, AAA, and related service metadata.
 - `screenshots/service_heavy_cli_edit_v1.png`
@@ -62,11 +62,14 @@ Generated outputs:
 Gallery families:
 - `campus`
   VLAN, management, ACL, server services, and wireless edits.
-- `home_iot`
-  Home gateway, IoT things, and registration-focused examples.
+- `home_iot`
+  Home gateway, IoT things, registration, and constrained donor-backed wireless examples.
 - `service_heavy`
   Server-centric service labs with richer metadata.
 
-Launch-prep references:
-- `..\docs\hero-demo-plan.md`
-- `..\docs\release-notes-0.2.0.md`
+Launch references:
+- `..\docs\hero-demo-plan.md`
+- `..\docs\release-notes-0.2.1.md`
+- `..\docs\campus-donor-proof.md`
+- `..\docs\home-iot-donor-proof.md`
+- `..\docs\wan-security-donor-proof.md`

package/examples/gallery.md

@@ -2,7 +2,7 @@
 
 These examples are public, text-first proof artifacts derived from donor-backed workflows and aligned with the scenario fixture corpus.
 
-`0.2.0` canonical public set:
+`0.2.1` canonical public set:
 
 - `campus`
 - `home_iot`
@@ -12,6 +12,12 @@ Hero visual:
 
 - [complex campus screenshot](screenshots/complex_campus_master_edit_v4.png)
 
+Canonical donor proof:
+
+- [campus donor proof](../docs/campus-donor-proof.md)
+- [home IoT donor proof](../docs/home-iot-donor-proof.md)
+- [WAN/security donor proof](../docs/wan-security-donor-proof.md)
+
 | Title | Family | Capabilities | Image | Inventory |
 | --- | --- | --- | --- | --- |
 | Complex Campus | `campus` | management_vlan, telnet, acl, server_dns, server_email, server_aaa, wireless_mutation | [screenshot](screenshots/complex_campus_master_edit_v4.png) | [manifest](complex_campus_master_edit_v4.inventory.json) |
@@ -22,10 +28,10 @@ Hero visual:
 |  |  | `decision=known_working_example | donor_origin=donor-backed` |  |  |
 |  |  | `runtime=donor-backed example artifact` |  |  |
 | Home IoT | `home_iot` | iot, iot_registration, wireless_ap | [screenshot](screenshots/home_iot_cli_edit_v1.png) | [manifest](home_iot_cli_edit_v1.inventory.json) |
-|  |  | Home gateway and IoT device onboarding with gateway-backed registration state. |  |  |
-|  |  | `known_working_example | donor=donor-backed | capabilities=iot, iot_registration, wireless_ap` |  |  |
+|  |  | Home gateway and IoT device onboarding with donor-backed registration state and constrained wireless readiness. |  |  |
+|  |  | `known_working_example | donor=donor-backed | capabilities=iot, iot_registration, wireless_ap | mode=donor-backed constrained-generate` |  |  |
 |  |  | `home_iot_complex | known_working_example | family=home_iot` |  |  |
-|  |  | `iot=generate-ready, iot_registration=generate-ready, wireless_ap=generate-ready` |  |  |
+|  |  | `iot=generate-ready, iot_registration=donor-backed constrained-generate, wireless_ap=generate-ready` |  |  |
 |  |  | `decision=known_working_example | donor_origin=donor-backed` |  |  |
 |  |  | `runtime=donor-backed example artifact` |  |  |
 | Service Heavy | `service_heavy` | server_dns, server_dhcp, server_ftp, server_email, server_syslog, server_aaa | [screenshot](screenshots/service_heavy_cli_edit_v1.png) | [manifest](service_heavy_cli_edit_v1.inventory.json) |

package/examples/index.json

@@ -46,7 +46,7 @@
       "name": "home_iot_cli_edit_v1",
       "title": "Home IoT",
       "scenario_family": "home_iot",
-      "summary": "Home gateway and IoT device onboarding with gateway-backed registration state.",
+      "summary": "Home gateway and IoT device onboarding with donor-backed registration state and constrained wireless readiness.",
       "capabilities": [
         "iot",
         "iot_registration",
@@ -59,11 +59,11 @@
       ],
       "acceptance_rank": 3,
       "acceptance_label": "known_working_example",
-      "acceptance_excerpt": "known_working_example | donor=donor-backed | capabilities=iot, iot_registration, wireless_ap",
+      "acceptance_excerpt": "known_working_example | donor=donor-backed | capabilities=iot, iot_registration, wireless_ap | mode=donor-backed constrained-generate",
       "donor_origin": "donor-backed",
       "fixture_name": "home_iot_complex",
       "matrix_excerpt": "home_iot_complex | known_working_example | family=home_iot",
-      "parity_excerpt": "iot=generate-ready, iot_registration=generate-ready, wireless_ap=generate-ready",
+      "parity_excerpt": "iot=generate-ready, iot_registration=donor-backed constrained-generate, wireless_ap=generate-ready",
       "decision_excerpt": "decision=known_working_example | donor_origin=donor-backed",
       "runtime_excerpt": "runtime=donor-backed example artifact",
       "inventory_json": "examples/home_iot_cli_edit_v1.inventory.json",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "packet-tracer-skill",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "private": false,
   "description": "Donor-backed Cisco Packet Tracer 9.x skill for natural-language planning, safe-open generation, editing, parity reporting, and runtime diagnostics across coding hosts.",
   "keywords": [
@@ -54,25 +54,53 @@
     "doctor": "node bin/packet-tracer-skill.js --doctor",
     "smoke:parity": "python scripts/generate_pkt.py --parity-report \"campus with VLAN DHCP ACL\""
   },
-  "files": [
-    "SKILL.md",
-    "LICENSE",
-    "LICENSES",
-    "README.md",
+  "files": [
+    "SKILL.md",
+    "LICENSE",
+    "LICENSES",
+    "README.md",
     "CONTRIBUTING.md",
     "CHANGELOG.md",
     "CITATION.cff",
     "SECURITY.md",
-    "CODE_OF_CONDUCT.md",
-    "requirements.txt",
-    "requirements-dev.txt",
-    "scripts",
-    "templates",
-    "references",
-    "examples",
-    "bin",
-    "docs"
-  ],
+    "CODE_OF_CONDUCT.md",
+    "requirements.txt",
+    "requirements-dev.txt",
+    "bin/packet-tracer-skill.js",
+    "scripts/*.py",
+    "scripts/*.ps1",
+    "scripts/vendor/README.md",
+    "scripts/vendor/twofish.py",
+    "templates",
+    "references/*.json",
+    "references/*.md",
+    "examples/README.md",
+    "examples/gallery.md",
+    "examples/index.json",
+    "examples/blueprint_minimal.json",
+    "examples/*.inventory.json",
+    "examples/screenshots/*.png",
+    "docs/curated-donor-registry.md",
+    "docs/campus-donor-proof.md",
+    "docs/home-iot-donor-proof.md",
+    "docs/wan-security-donor-proof.md",
+    "docs/wireless-advanced-proof.md",
+    "docs/packet-tracer-feature-gap-atlas.md",
+    "docs/discovery-keywords.md",
+    "docs/github-discussions-setup.md",
+    "docs/github-launch-ops-0.2.1.md",
+    "docs/github-launch-ops-0.2.2.md",
+    "docs/github-metadata.md",
+    "docs/hero-demo-plan.md",
+    "docs/launch-announcement-0.2.1.md",
+    "docs/launch-announcement-0.2.2.md",
+    "docs/post-launch-follow-up.md",
+    "docs/publish-preview-roadmap.md",
+    "docs/release-checklist.md",
+    "docs/release-notes-0.2.1.md",
+    "docs/release-notes-0.2.2.md",
+    "docs/runtime-truth.md"
+  ],
   "engines": {
     "node": ">=18"
   }

package/references/curated-donor-registry.json

@@ -20,7 +20,9 @@
       "acceptance_fixtures": ["campus_core_complex"],
       "acceptance_notes": [
         "Known working campus example with public screenshot and inventory artifact.",
-        "Use when donor root contains the exported complex campus .pkt example."
+        "Use when donor root contains the exported complex campus .pkt example.",
+        "Local inventory smoke revalidated the matching campus donor artifact before the public donor proof note was added.",
+        "See docs/campus-donor-proof.md for the public proof note: inventory succeeds, but generalized campus prompt selection still fails on layout_reuse_too_weak."
       ],
       "provenance": "known-working-example:complex_campus_master_edit_v4"
     },
@@ -40,7 +42,8 @@
       "acceptance_fixtures": ["home_iot_complex"],
       "acceptance_notes": [
         "Known working home IoT example with gateway-backed registration state.",
-        "Use when donor root contains the exported Home IoT showcase lab."
+        "Use when donor root contains the exported Home IoT showcase lab.",
+        "See docs/home-iot-donor-proof.md for the public proof note: constrained donor-backed generate is valid, but broad smart-home synthesis is still intentionally out of scope."
       ],
       "provenance": "known-working-example:home_iot_cli_edit_v1"
     },

package/references/packettracer-feature-atlas.json

@@ -0,0 +1,133 @@
+{
+  "atlas_version": "1.0",
+  "target_packet_tracer_version": "9.0.0.0810",
+  "support_policy": "Truth-first: features start as inventory/report truth and only move to edit or generate when donor-backed acceptance evidence exists.",
+  "status_contract": ["not_mapped", "inventory_known", "report_supported", "edit_proven", "donor_backed_ready", "generate_ready"],
+  "feature_groups": [
+    {
+      "id": "ipv6_routing",
+      "label": "IPv6 And Routing",
+      "scenario_family": "ipv6_routing",
+      "wave": 2,
+      "features": [
+        {"id": "ipv6_slaac", "capability": "ipv6_slaac", "label": "IPv6 SLAAC", "sample_path_keywords": ["ipv6_slaac", "slaac"], "support_ceiling": "edit_proven"},
+        {"id": "dhcpv6_stateful", "capability": "dhcpv6_stateful", "label": "DHCPv6 stateful", "sample_path_keywords": ["stateful_dhcpv6"], "support_ceiling": "edit_proven"},
+        {"id": "dhcpv6_stateless", "capability": "dhcpv6_stateless", "label": "DHCPv6 stateless", "sample_path_keywords": ["stateless_dhcpv6"], "support_ceiling": "report_supported"},
+        {"id": "ipv6_prefix_delegation", "capability": "ipv6_prefix_delegation", "label": "IPv6 prefix delegation", "sample_path_keywords": ["prefix_delegation"], "support_ceiling": "report_supported"},
+        {"id": "ipv6_dns_aaaa", "capability": "ipv6_dns_aaaa", "label": "IPv6 DNS AAAA records", "sample_path_keywords": ["dns-a-and-aaaa", "aaaa"], "support_ceiling": "report_supported"},
+        {"id": "ipv6_tunneling", "capability": "ipv6_tunneling", "label": "IPv6 tunneling", "sample_path_keywords": ["ipv6ip tunneling", "ipv6ip_"], "support_ceiling": "report_supported"},
+        {"id": "isatap", "capability": "isatap", "label": "ISATAP", "sample_path_keywords": ["isatap"], "support_ceiling": "report_supported"},
+        {"id": "ospfv3", "capability": "ospfv3", "label": "OSPFv3", "sample_path_keywords": ["ospfv3", "ipv6_ospf"], "support_ceiling": "edit_proven"},
+        {"id": "eigrp_ipv6", "capability": "eigrp_ipv6", "label": "EIGRP IPv6", "sample_path_keywords": ["ipv6_eigrp"], "support_ceiling": "edit_proven"},
+        {"id": "ripng", "capability": "ripng", "label": "RIPng", "sample_path_keywords": ["ipv6", "rip"], "support_ceiling": "edit_proven"},
+        {"id": "hsrp", "capability": "hsrp", "label": "HSRP", "sample_path_keywords": ["hsrp"], "support_ceiling": "edit_proven"}
+      ]
+    },
+    {
+      "id": "l2_security_monitoring",
+      "label": "L2 Security And Monitoring",
+      "scenario_family": "l2_security_monitoring",
+      "wave": 3,
+      "features": [
+        {"id": "dhcp_snooping", "capability": "dhcp_snooping", "label": "DHCP snooping", "sample_path_keywords": ["dhcp_snooping"], "support_ceiling": "edit_proven"},
+        {"id": "dai", "capability": "dai", "label": "Dynamic ARP Inspection", "sample_path_keywords": ["dai"], "support_ceiling": "edit_proven"},
+        {"id": "dot1x", "capability": "dot1x", "label": "802.1X / NAC", "sample_path_keywords": ["dot1x", "port-based nac"], "support_ceiling": "report_supported"},
+        {"id": "lldp", "capability": "lldp", "label": "LLDP", "sample_path_keywords": ["lldp"], "support_ceiling": "edit_proven"},
+        {"id": "rep", "capability": "rep", "label": "REP", "sample_path_keywords": ["rep_"], "support_ceiling": "edit_proven"},
+        {"id": "snmp", "capability": "snmp", "label": "SNMP", "sample_path_keywords": ["snmp"], "support_ceiling": "edit_proven"},
+        {"id": "netflow", "capability": "netflow", "label": "NetFlow", "sample_path_keywords": ["netflow"], "support_ceiling": "edit_proven"},
+        {"id": "span", "capability": "span", "label": "SPAN/RSPAN", "sample_path_keywords": ["span"], "support_ceiling": "edit_proven"},
+        {"id": "qos", "capability": "qos", "label": "QoS", "sample_path_keywords": ["qos"], "support_ceiling": "report_supported"},
+        {"id": "port_security", "capability": "port_security", "label": "Port security", "sample_path_keywords": ["port security", "port-security"], "support_ceiling": "edit_proven"}
+      ]
+    },
+    {
+      "id": "security_edge_deepening",
+      "label": "Security Edge Deepening",
+      "scenario_family": "wan_security_edge",
+      "wave": 3,
+      "features": [
+        {"id": "asa_acl_nat", "capability": "asa_acl_nat", "label": "ASA ACL/NAT", "sample_path_keywords": ["asa_acl_nat"], "support_ceiling": "report_supported"},
+        {"id": "asa_service_policy", "capability": "asa_service_policy", "label": "ASA service policy", "sample_path_keywords": ["asa_service_policy"], "support_ceiling": "report_supported"},
+        {"id": "clientless_vpn", "capability": "clientless_vpn", "label": "Clientless VPN", "sample_path_keywords": ["clientless_vpn"], "support_ceiling": "report_supported"},
+        {"id": "cbac", "capability": "cbac", "label": "CBAC", "sample_path_keywords": ["cbac"], "support_ceiling": "report_supported"},
+        {"id": "zfw", "capability": "zfw", "label": "Zone Based Firewall", "sample_path_keywords": ["zfw", "zone based firewall"], "support_ceiling": "report_supported"},
+        {"id": "sniffer", "capability": "sniffer", "label": "Sniffer", "sample_path_keywords": ["sniffer"], "support_ceiling": "report_supported"}
+      ]
+    },
+    {
+      "id": "wireless_advanced",
+      "label": "Advanced Wireless",
+      "scenario_family": "wireless_advanced",
+      "wave": 4,
+      "features": [
+        {"id": "wlc", "capability": "wlc", "label": "Wireless LAN Controller", "sample_path_keywords": ["wlc"], "support_ceiling": "report_supported"},
+        {"id": "wpa_enterprise", "capability": "wpa_enterprise", "label": "WPA Enterprise / RADIUS", "sample_path_keywords": ["wpa_radius", "wpa2_enterprise"], "support_ceiling": "edit_proven"},
+        {"id": "wep", "capability": "wep", "label": "WEP wireless mode", "sample_path_keywords": ["wep"], "support_ceiling": "edit_proven"},
+        {"id": "guest_wifi", "capability": "guest_wifi", "label": "Guest Wi-Fi", "sample_path_keywords": ["guest"], "support_ceiling": "report_supported"},
+        {"id": "beamforming", "capability": "beamforming", "label": "Beamforming", "sample_path_keywords": ["beamforming"], "support_ceiling": "report_supported"},
+        {"id": "meraki", "capability": "meraki", "label": "Meraki security appliance/wireless", "sample_path_keywords": ["meraki"], "support_ceiling": "report_supported"},
+        {"id": "cellular_5g", "capability": "cellular_5g", "label": "5G / cellular", "sample_path_keywords": ["5g", "cellular", "cell tower"], "support_ceiling": "report_supported"},
+        {"id": "bluetooth", "capability": "bluetooth", "label": "Bluetooth", "sample_path_keywords": ["bluetooth"], "support_ceiling": "report_supported"}
+      ]
+    },
+    {
+      "id": "automation_controller",
+      "label": "Automation And Programming",
+      "scenario_family": "automation_controller",
+      "wave": 5,
+      "features": [
+        {"id": "network_controller", "capability": "network_controller", "label": "Network Controller", "sample_path_keywords": ["network controller", "netcon"], "support_ceiling": "report_supported"},
+        {"id": "python_programming", "capability": "python_programming", "label": "Python programming", "sample_path_keywords": ["python", "programming_with_python"], "support_ceiling": "report_supported"},
+        {"id": "javascript_programming", "capability": "javascript_programming", "label": "JavaScript programming", "sample_path_keywords": ["javascript"], "support_ceiling": "report_supported"},
+        {"id": "blockly_programming", "capability": "blockly_programming", "label": "Blockly programming", "sample_path_keywords": ["blockly"], "support_ceiling": "report_supported"},
+        {"id": "tcp_udp_app", "capability": "tcp_udp_app", "label": "TCP/UDP test apps", "sample_path_keywords": ["tcp_test_app", "udp_test_app"], "support_ceiling": "report_supported"},
+        {"id": "vm_iox", "capability": "vm_iox", "label": "VM / IOx", "sample_path_keywords": ["iox", "uploading_and_running_vm"], "support_ceiling": "report_supported"}
+      ]
+    },
+    {
+      "id": "voice_collaboration",
+      "label": "Voice And Collaboration",
+      "scenario_family": "voice_collaboration",
+      "wave": 5,
+      "features": [
+        {"id": "voip", "capability": "voip", "label": "VoIP", "sample_path_keywords": ["voip"], "support_ceiling": "report_supported"},
+        {"id": "ip_phone", "capability": "ip_phone", "label": "IP phones", "sample_path_keywords": ["phone"], "support_ceiling": "report_supported"},
+        {"id": "call_manager", "capability": "call_manager", "label": "Call Manager / telephony service", "sample_path_keywords": ["call", "voip"], "support_ceiling": "report_supported"},
+        {"id": "linksys_voice", "capability": "linksys_voice", "label": "Linksys voice", "sample_path_keywords": ["voip linksys"], "support_ceiling": "report_supported"}
+      ]
+    },
+    {
+      "id": "industrial_iot",
+      "label": "Industrial IoT And Real Apps",
+      "scenario_family": "industrial_iot",
+      "wave": 5,
+      "features": [
+        {"id": "mqtt", "capability": "mqtt", "label": "MQTT", "sample_path_keywords": ["mqtt"], "support_ceiling": "report_supported"},
+        {"id": "real_http", "capability": "real_http", "label": "Real HTTP", "sample_path_keywords": ["real http", "real-http"], "support_ceiling": "report_supported"},
+        {"id": "real_websocket", "capability": "real_websocket", "label": "Real WebSocket", "sample_path_keywords": ["real websocket", "real-websocket"], "support_ceiling": "report_supported"},
+        {"id": "visual_scripting", "capability": "visual_scripting", "label": "Visual scripting", "sample_path_keywords": ["visual-scripting", "visual scripting"], "support_ceiling": "report_supported"},
+        {"id": "ptp", "capability": "ptp", "label": "PTP", "sample_path_keywords": ["ptp"], "support_ceiling": "report_supported"},
+        {"id": "profinet", "capability": "profinet", "label": "Profinet", "sample_path_keywords": ["profinet"], "support_ceiling": "report_supported"},
+        {"id": "l2nat", "capability": "l2nat", "label": "L2NAT", "sample_path_keywords": ["l2nat"], "support_ceiling": "report_supported"},
+        {"id": "cyberobserver", "capability": "cyberobserver", "label": "CyberObserver", "sample_path_keywords": ["cyberobserver"], "support_ceiling": "report_supported"},
+        {"id": "industrial_firewall", "capability": "industrial_firewall", "label": "Industrial firewall", "sample_path_keywords": ["isa3000", "industrial cybersecurity"], "support_ceiling": "report_supported"}
+      ]
+    },
+    {
+      "id": "physical_media_device_gaps",
+      "label": "Physical Media And Device Gaps",
+      "scenario_family": "physical_media_device",
+      "wave": 5,
+      "features": [
+        {"id": "coaxial", "capability": "coaxial", "label": "Coaxial splitter/media", "sample_path_keywords": ["coaxial"], "support_ceiling": "report_supported"},
+        {"id": "cable_dsl", "capability": "cable_dsl", "label": "Cable/DSL modem", "sample_path_keywords": ["cable", "dsl"], "support_ceiling": "report_supported"},
+        {"id": "central_office", "capability": "central_office", "label": "Central office", "sample_path_keywords": ["centraloffice", "central office"], "support_ceiling": "report_supported"},
+        {"id": "cell_tower", "capability": "cell_tower", "label": "Cell tower", "sample_path_keywords": ["cell tower"], "support_ceiling": "report_supported"},
+        {"id": "power_distribution", "capability": "power_distribution", "label": "Power distribution", "sample_path_keywords": ["power distribution"], "support_ceiling": "report_supported"},
+        {"id": "hot_swappable", "capability": "hot_swappable", "label": "Hot-swappable modules", "sample_path_keywords": ["hotswappable", "hot swappable"], "support_ceiling": "report_supported"},
+        {"id": "ios_license", "capability": "ios_license", "label": "IOS/license workflows", "sample_path_keywords": ["ios_15", "license"], "support_ceiling": "report_supported"}
+      ]
+    }
+  ]
+}

package/references/scenario-fixture-corpus.json

@@ -6,6 +6,7 @@
       "scenario_family": "campus",
       "preferred_donor_archetypes": ["campus/core"],
       "critical_capabilities": ["router_on_a_stick", "trunk", "management_vlan", "telnet", "acl", "nat"],
+      "prompt_aliases": ["campus with VLAN DHCP ACL"],
       "minimum_expectations": {
         "requires_family_match": true,
         "requires_nonempty_summary": true,

package/scripts/build_examples_index.py

@@ -19,12 +19,12 @@ TITLE_BY_FAMILY = {
     "wan_security_edge": "WAN Security Edge",
 }
 
-SUMMARY_BY_FAMILY = {
-    "campus": "Management VLAN, Telnet, ACL, DNS, email, AAA, and multi-SSID wireless campus edit.",
-    "home_iot": "Home gateway and IoT device onboarding with gateway-backed registration state.",
-    "service_heavy": "Service-rich server lab with DNS, DHCP, FTP, email, syslog, AAA, and detailed service metadata.",
-    "wan_security_edge": "WAN/security-edge lab with multilayer, tunnel, VPN, and edge-policy coverage metadata.",
-}
+SUMMARY_BY_FAMILY = {
+    "campus": "Management VLAN, Telnet, ACL, DNS, email, AAA, and multi-SSID wireless campus edit.",
+    "home_iot": "Home gateway and IoT device onboarding with donor-backed registration state and constrained wireless readiness.",
+    "service_heavy": "Service-rich server lab with DNS, DHCP, FTP, email, syslog, AAA, and detailed service metadata.",
+    "wan_security_edge": "WAN/security-edge lab with multilayer, tunnel, VPN, and edge-policy coverage metadata.",
+}
 
 CAPABILITIES_BY_FAMILY = {
     "campus": [
@@ -202,12 +202,17 @@ def _build_entry(manifest_path: Path) -> dict[str, object]:
     preview = _write_preview(manifest_path)
     screenshot = screenshots[0] if screenshots else None
     detail_images = screenshots[1:] if len(screenshots) > 1 else []
-    primary_capabilities = CAPABILITIES_BY_FAMILY.get(family, [])
-    acceptance_excerpt = f"{acceptance_label} | donor={donor_origin} | capabilities={', '.join(primary_capabilities[:3])}"
-    fixture_name = FIXTURE_BY_FAMILY.get(family)
-    matrix_excerpt = f"{fixture_name or 'ad-hoc'} | {acceptance_label} | family={family}"
-    parity_excerpt = ", ".join(f"{cap}=generate-ready" for cap in primary_capabilities[:3]) if primary_capabilities else "no parity excerpt"
-    decision_excerpt = f"decision={acceptance_label} | donor_origin={donor_origin}"
+    primary_capabilities = CAPABILITIES_BY_FAMILY.get(family, [])
+    acceptance_excerpt = f"{acceptance_label} | donor={donor_origin} | capabilities={', '.join(primary_capabilities[:3])}"
+    if family == "home_iot":
+        acceptance_excerpt += " | mode=donor-backed constrained-generate"
+    fixture_name = FIXTURE_BY_FAMILY.get(family)
+    matrix_excerpt = f"{fixture_name or 'ad-hoc'} | {acceptance_label} | family={family}"
+    if family == "home_iot":
+        parity_excerpt = "iot=generate-ready, iot_registration=donor-backed constrained-generate, wireless_ap=generate-ready"
+    else:
+        parity_excerpt = ", ".join(f"{cap}=generate-ready" for cap in primary_capabilities[:3]) if primary_capabilities else "no parity excerpt"
+    decision_excerpt = f"decision={acceptance_label} | donor_origin={donor_origin}"
     runtime_excerpt = "runtime=donor-backed example artifact"
     return {
         "name": name,
@@ -250,7 +255,7 @@ def build_examples_gallery_markdown(payload: dict[str, object]) -> str:
         "",
         "These examples are public, text-first proof artifacts derived from donor-backed workflows and aligned with the scenario fixture corpus.",
         "",
-        "`0.2.0` canonical public set:",
+        "`0.2.1` canonical public set:",
         "",
         "- `campus`",
         "- `home_iot`",
@@ -258,9 +263,15 @@ def build_examples_gallery_markdown(payload: dict[str, object]) -> str:
         "",
         "Hero visual:",
         "",
-        "- [complex campus screenshot](screenshots/complex_campus_master_edit_v4.png)",
-        "",
-        "| Title | Family | Capabilities | Image | Inventory |",
+        "- [complex campus screenshot](screenshots/complex_campus_master_edit_v4.png)",
+        "",
+        "Canonical donor proof:",
+        "",
+        "- [campus donor proof](../docs/campus-donor-proof.md)",
+        "- [home IoT donor proof](../docs/home-iot-donor-proof.md)",
+        "- [WAN/security donor proof](../docs/wan-security-donor-proof.md)",
+        "",
+        "| Title | Family | Capabilities | Image | Inventory |",
         "| --- | --- | --- | --- | --- |",
     ]
     for entry in payload["curated_examples"]: