rig-create 1.0.0 → 1.0.2

package/src/scene.ts

@@ -9,6 +9,7 @@ import { collectReopens, liveSignoff } from './reopen.ts';
 import { humanReviewVerdicts, latestAccepted, readVersions } from './review.ts';
 import { SCENE_CHOICE_MISMATCH, SCENE_CHOICE_MISSING, sceneAuthor, validateAgentSceneAuthority } from './scene-authority.ts';
 import { reviewPackageHash } from './signoff-target.ts';
+import { samePublicationReviewPair } from './signoff-pair.ts';
 import type { Json, JsonObject } from './templates.ts';
 
 export { SCENE_CHOICE_MISMATCH, SCENE_CHOICE_MISSING, sceneAuthor };
@@ -197,7 +198,8 @@ function validateSceneAcceptance(project: JsonObject, rig: JsonObject): JsonObje
   const signature = collectSignoffs(project, []).find(value => value.stage === identity.stage && value.checkpoint === identity.checkpoint && value.record.at === identity.at)?.record;
   const match = /^versions\[(\d+)\]\.verdicts\[(\d+)\]$/.exec(String(acceptance.verdict));
   const verdict = match && Number(match[1]) === index ? humanReviewVerdicts(version.verdicts, 'rig-review').find(value => value.index === Number(match[2]) && value.record.verdict === 'accepted') : undefined;
-  if (!verdict || !Number.isFinite(Date.parse(String(verdict.record.at))) || Date.parse(String(verdict.record.at)) > Date.parse(String(identity.at))) sceneFail('SCENE_RIG_STALE', 'scene.rig.acceptance.verdict', 'the cited rig must have been human-accepted before this signoff');
+  if (!verdict || !Number.isFinite(Date.parse(String(verdict.record.at))) || Date.parse(String(verdict.record.at)) > Date.parse(String(identity.at))
+    && (!signature || !samePublicationReviewPair(project, signature, version, verdict.index))) sceneFail('SCENE_RIG_STALE', 'scene.rig.acceptance.verdict', 'the cited rig needs human acceptance before signing or a same-publication, same-version human accepted pair');
   const pkg = version.review_package;
   const target = { version: version.n!, verdict: acceptance.verdict!, review_package: { path: `versions[${index}].review_package`, sha256: isObject(pkg) ? reviewPackageHash(pkg) : '' } };
   if (!signature || !equal(signature.target, target) || !equal(acceptance.review_package, target.review_package)) sceneFail('SCENE_ACCEPTANCE_STALE', 'scene.rig.acceptance.review_package', 'restore the recorded acceptance target and its matching package sha256');

package/src/signoff-pair.ts

@@ -0,0 +1,60 @@
+/** Review act order is immaterial only within one human-reviewed publication. */
+import { isDeepStrictEqual } from 'node:util';
+import { asArray, isObject, type Finding } from './check.ts';
+import { decodeReviewAct, isRecordDirectionSignoff, reviewActFindings, reviewActSignoff, SIGNOFF_TARGET_KINDS, signoffActVersion } from './review-act.ts';
+import type { JsonObject } from './templates.ts';
+
+export const SIGNOFF_PAIR_SINCE = '2026-11-13T00:00:00Z';
+
+/** Trust decoded immutable acts and their unique ledger mappings, never copied identity fields. */
+export function samePublicationReviewPair(project: JsonObject, signoff: JsonObject, version: JsonObject, verdictIndex: number): boolean {
+  if (reviewActFindings(project).length) return false;
+  try {
+    const receipts = asArray(project.review_acts).filter(isObject);
+    const signatures = receipts.filter(entry => entry.kind === 'signoff' && typeof entry.bytes === 'string'
+      && reviewActSignoff(decodeReviewAct(entry.bytes, 'signoff')).source === signoff.source);
+    const verdicts = receipts.filter(entry => entry.version === version.n && entry.verdict === verdictIndex);
+    if (signatures.length !== 1 || verdicts.length !== 1) return false;
+    const signed = decodeReviewAct(String(signatures[0]!.bytes), 'signoff');
+    // The validated compact record receipt binds the post, record hash and exact verdict;
+    // record-source acts deliberately have no model selector.
+    const signedVersion = isRecordDirectionSignoff(signed) ? Number(signatures[0]!.target_version) : signoffActVersion(signed);
+    const accepted = decodeReviewAct(String(verdicts[0]!.bytes));
+    const selector = accepted.source.selector;
+    const verdict = asArray(version.verdicts)[verdictIndex];
+    return isObject(verdict) && verdict.verdict === 'accepted'
+      && Object.entries(reviewActSignoff(signed)).every(([key, value]) => isDeepStrictEqual(signoff[key], value))
+      && signed.value.stage === signoff.stage && accepted.value.stage === signoff.stage
+      && signedVersion === version.n && selector !== null && 'version' in selector && selector.version === version.n
+      && selector.kind === SIGNOFF_TARGET_KINDS[String(signoff.stage)]
+      && signed.jobId === accepted.jobId && signed.publicationId === accepted.publicationId;
+  } catch { return false; }
+}
+
+/** A newly ingested verdict must not complete an invalid pair, including a historical signature. */
+export function ingestedVerdictPairFinding(project: JsonObject, version: number, verdict: number): Finding | undefined {
+  const index = asArray(project.versions).findIndex(raw => isObject(raw) && raw.n === version);
+  for (const [i, signoff] of asArray(project.signoffs).entries()) {
+    if (!isObject(signoff) || !isObject(signoff.target) || signoff.target.version !== version
+      || signoff.target.verdict !== `versions[${index}].verdicts[${verdict}]`) continue;
+    const finding = signoffPairFinding(project, signoff, `signoffs[${i}]`, true);
+    if (finding) return finding;
+  }
+}
+
+/** Check gates history by the signature's date; ingest always enforces the current contract. */
+export function signoffPairFinding(project: JsonObject, signoff: JsonObject, path: string, ingest = false): Finding | undefined {
+  if (!(String(signoff.stage) in SIGNOFF_TARGET_KINDS) || !isObject(signoff.target)) return;
+  const target = signoff.target;
+  const match = /^versions\[(\d+)\]\.verdicts\[(\d+)\]$/.exec(String(target.verdict));
+  const version = match ? asArray(project.versions)[Number(match[1])] : undefined;
+  if (!match || !isObject(version) || version.n !== target.version) return;
+  const verdictIndex = Number(match[2]);
+  const verdict = asArray(version.verdicts)[verdictIndex];
+  if (!isObject(verdict) || !(Date.parse(String(verdict.at)) > Date.parse(String(signoff.at)))
+    || samePublicationReviewPair(project, signoff, version, verdictIndex)) return;
+  const legacy = !ingest && Date.parse(String(signoff.at)) < Date.parse(SIGNOFF_PAIR_SINCE);
+  const at = `${path}.target.verdict`;
+  return { code: `SIGNOFF_PAIR_MISMATCH${legacy ? '_LEGACY' : ''}`, path: at,
+    message: `${at}: the verdict follows this signoff without a same-publication, same-version human accepted pair; accept the intended version and sign it again in Review, then ingest both acts` };
+}

package/src/signoff-target.ts

@@ -10,6 +10,7 @@ import { checkReviewPackages } from './review-package.ts';
 import { refuse } from './refusal.ts';
 import { SIGNOFF_TARGET_KINDS } from './review-act.ts';
 import { sorted } from './step-hash.ts';
+import { signoffPairFinding } from './signoff-pair.ts';
 import type { Json, JsonObject } from './templates.ts';
 
 export const SIGNOFF_TARGET_SINCE = '2026-11-06T00:00:00Z';
@@ -75,7 +76,11 @@ export function checkSignoffTarget(dir: string, project: JsonObject, signoff: Js
       if (!isDeepStrictEqual(target, expected)) throw Error(expected.outputs ? 'outputs changed since signing' : stage === 'rig-review' ? 'review_package changed since signing' : expected.direction ? 'direction changed since signing' : 'post config changed since signing');
     } catch (error) { reason = error instanceof Error ? error.message : String(error); }
   }
-  if (!reason) return;
+  if (!reason) {
+    const pair = signoffPairFinding(project, signoff, path);
+    if (pair) (pair.code.endsWith('_LEGACY') ? warnings : refusals).push(pair);
+    return;
+  }
   const legacy = Date.parse(String(signoff.at)) < Date.parse(SIGNOFF_TARGET_SINCE);
   const code = `SIGNOFF_TARGET_${missing ? 'MISSING' : 'STALE'}${legacy ? '_LEGACY' : ''}`;
   const at = `${path}.target`;
@@ -120,8 +125,6 @@ export function selectSignoffTarget(dir: string, project: JsonObject, stage: str
     if (mask) refuse(mask.code, mask.message);
     if (ctx.refusals.length || ctx.warnings.some(w => w.code === 'REVIEW_PACKAGE_MISSING')) fail('review package is missing or differs from its recorded binding');
   }
-  const errors: Finding[] = [];
-  checkSignoffTarget(dir, project, { stage, target, at: SIGNOFF_TARGET_SINCE }, `signoffs[${asArray(project.signoffs).length}]`, errors, []);
-  if (errors[0]) refuse(errors[0].code, errors[0].message);
+  // The writer validates the actual dated signature after attaching its immutable receipt.
   return target;
 }

package/src/signoff.ts

@@ -1,6 +1,7 @@
 import { latestPartsVerdictFinding, recordedPartsVerdict } from './parts-verdict-record.ts';
 import { selectAnswerHashes } from './signoff-answers.ts';
 import { selectSignoffTarget } from './signoff-target.ts';
+import { signoffPairFinding } from './signoff-pair.ts';
 import { assertDirectionApproval } from './direction.ts';
 import { assertCorrectionApproval } from './correction-writers.ts';
 import { createHash } from 'node:crypto';
@@ -157,6 +158,8 @@ function recordSignoff(stage: string, positional: string[], opts: Record<string,
       }
       const recorded = asArray(project.signoffs).filter(isObject).find(entry => entry.source === review.human.source);
       if (recorded === undefined) refuse('REVIEW_ACT_LEDGER_INVALID', 'project.json.review_acts: the signoff this act recorded is absent; restore its signoffs[] entry');
+      const pair = signoffPairFinding(project, recorded, `signoffs[${asArray(project.signoffs).indexOf(recorded)}]`, true);
+      if (pair) refuse(pair.code, pair.message);
       return { stdout: json ? JSON.stringify(recorded, null, 2) : `signoff: replayed ${stage} by ${by} at ${String(recorded.at)}; stage unchanged`, exit: 0 };
     }
     if (review.act.schema === 'rig-review/act@4' && review.act.source.projectHash !== jobHash(original!)) refuse('REVIEW_ACT_SOURCE_STALE', 'project.json: displayed signoff record differs; publish the current plan and ask again');
@@ -302,6 +305,8 @@ function recordSignoff(stage: string, positional: string[], opts: Record<string,
     const invalid = reviewActFindings(project)[0];
     if (invalid) refuse(invalid.code, invalid.message);
   }
+  const pair = signoffPairFinding(project, signoff, `signoffs[${project.signoffs.length - 1}]`, true);
+  if (pair) refuse(pair.code, pair.message);
   const reopens = collectReopens(project, []);
   const frontier = furthestStageSignoff(collectSignoffs(project, []).filter(s => liveSignoff(reopens, s.stage, s.at)));
   const ownLag = signoff.checkpoint === null && frontier?.index === project.signoffs.length - 1;

package/src/structure.ts

@@ -154,7 +154,7 @@ export function checkRiggingContext(dir: string, project: JsonObject, effectiveS
     const delta = structureDelta(snapshot, config);
     const path = `versions[v${String(version.n)}].provenance`;
     if (delta.length > 0 && !acceptsStructureDelta(project, historicalReview, Date.parse(String(version.at)))) {
-      errors.push({ code: 'STRUCTURE_DECISIONS_CONFLICT', path: `${path}.config`, message: `${path}.config: mesh/chest declaration overrides the person-approved structure; answer the rigging meshes guide, or renew parts-review` });
+      errors.push({ code: 'STRUCTURE_DECISIONS_CONFLICT', path: `${path}.config`, message: `${path}.config: mesh/chest declaration overrides the person-approved structure; answer the rigging meshes guide and sign off rigging-interview, then rebuild the rig after that sign-off; or renew parts-review and rebuild` });
       continue;
     }
     if ((delta.length > 0 || provenance.structure_delta !== undefined) && !isDeepStrictEqual(provenance.structure_delta, delta)) {

package/templates/agent-guide.md

@@ -1,20 +1,20 @@
 # Agent guide
 
-One painting in, one rig and its takes out. Start here.
+One painting; one rig and its takes.
 
 ## Start here
 
-1. Read `project.json` first. Only its decisions count. Copy chat decisions
-   verbatim, with speaker and time.
+1. Read `project.json`. Human acts go through Review; ingest exports. Never type human answers/signatures.
 2. Run `rig-create next` to derive the next moves and whose they are.
 3. Resume per {{RESUME_LINK}}.
 
-Update stale pins with `rig-create packages upgrade --by <operator>`; see PROJECT.md.
+{{REOPEN_EXCEPTION}}
 
-Declare the project's painting with `init --painting <file> --origin <words>`
-or `input add <path> --painting --origin <words>`. `project.json.painting` binds
-one input and survives restart; only it checks siblings for duplicate artwork.
-Older records may omit it.
+Stale pins: `rig-create packages upgrade --by <operator>`.
+
+Declare the painting: `init --painting <file> --origin <words>` or
+`input add <path> --painting --origin <words>`. `project.json.painting` binds
+one input, survives restart and checks sibling artwork; optional on older records.
 
 ## The order, and what you may not do
 
@@ -22,19 +22,16 @@ Older records may omit it.
 `rigging-interview` → `rigging` → `rig-review` (the rig, still frame) → `post-interview` → `post` →
 `direction-review` → `accepted`. Any stage can become `paused`.
 
-- Only a person's `signoffs[]` advances `stage` or passes a plan checkpoint.
-  You may draft, propose, build and measure in any stage; production rigging
-  waits for `rigging-interview` ({{STAGES_LINK}}).
-- Never derive answers from the image. Offer a pick per ask, with one reasoned
+- Only human `signoffs[]` advance `stage` or pass plan checkpoints.
+  Draft, propose, build and measure in any stage; production rigging waits for `rigging-interview` ({{STAGES_LINK}}).
+- Never infer answers from images. Offer a pick per ask: one reasoned
   recommendation, Other and auto. Retain the shown set; never preselect.
-- Record "auto" as delegated, with your decision on the item. It is never a
-  blank for you to fill later.
+- Record "auto" as delegated with your decision on the item; never leave it blank.
 - {{INTERVIEW_CHECK}}
 
 ## The user's four steps
 
-1. **Parts and meshes**. Ask framing/source. Review a labelled draft's parts and
-   mesh/chest structure. `parts-review` records its Review API response.
+1. **Parts and meshes**. Ask framing/source; review a labelled draft's parts and mesh/chest structure. `parts-review` records its Review API response.
    The latest receipt must approve the draft for `structure-snapshot --draft <id> --out <f>`
    and `signoff parts-review --draft <id> --structure-file <f>`; record component triage with `diff-classes --diff-report <p> --by agent` ({{DRAFTS_LINK}}).
 2. **Rigging interview**. Ask fresh bones, deformation, physics and motion
@@ -47,21 +44,25 @@ Older records may omit it.
 
 Ask: `job open --reviewer <id> --role owner --question <id>` or `--plan`;
 ingest `--from-review <actId>`, then advance.
+Keep the host up across bound writes; after a stop, `job open` with reviewer/role,
+then `job reconcile` before writing.
 
-Use `advance <stage>`, `step-status <id>`; see `rig-create --help`.
+Use `advance <stage>` and `step-status <id>` (`rig-create --help`).
 `advance parts-review` needs `--parts-check <report> --parts <assembled dir>`,
 refusing {{PARTS_CHECK_LINK}}.
 In `parts`, record an `intake-report` preflight and offer its choice, both advisory:
 {{INTAKE_LINK}}.
 
-Drafts stay under `derived/drafts/<id>/`, never versions/handoff. Old records
-warn: preserve history and dates; adopt choices explicitly.
+Keep drafts in `derived/drafts/<id>/`, outside versions/handoff.
+Preserve history/dates; adopt choices explicitly.
 
 ## Before you ask, plan or show
 
 - **Prior words.** In adopted projects, show them verbatim as a tailored option
   with source/date; require a pick. Legacy derivation: {{DERIVED_LINK}}.
 - **Projection.** Ask and record it per {{PROJECTION_LINK}}.
+- **Camera options.** Offer fixed view or camera-box moves only. Head turn,
+  depth and plate parallax are unavailable: direction has no depth/turn fields.
 - **Upscale first** a painting smaller than the rig needs (SOURCE.md, step 2 below).
 - **The crux is a bar.** Before rigging, name every risk band, count background
   or doubled pixels over every frame and both physics/breath extremes, and
@@ -70,9 +71,8 @@ warn: preserve history and dates; adopt choices explicitly.
   installed `--help`. A reading with no command is a STOP before sign-off.
   Loop bars: INTERVIEW.md, "Bars have reading commands".
 - **Appearance needs a person**, not a step bar: {{APPEARANCE_LINK}}.
-- **Nothing unnamed.** Add no motion, chain or physics the user did not name. A
-  reference ("move like X") is read for what it shows; anything more is a
-  question, not a default.
+- **Nothing unnamed.** Add no unnamed motion, chain or physics. Read references
+  for what they show; ask about anything more.
 - **Re-run first, cut last**, never a polygon in code or config: the ladder in
   SOURCE.md, step 2 below.
 - **A full-screen scene is a CG build.** For `rig_type` `fullscreen.*`, each
@@ -83,12 +83,10 @@ warn: preserve history and dates; adopt choices explicitly.
   eyelids) holds none of that part's pixels, or the animation shows its copy.
 - **Pairs.** Measure left/right symmetry against the painting before calling a
   pair uneven ({{GATES_LINK}}).
-- **Look before the user does**, at native resolution and every boundary the
-  crux names: a whole-figure |composite − painting| map, every component listed
-  by box and part with a status (in the painting / fixed / left, why). Use the
-  true stack of part images, not a render flattened on white; crop on white and
-  on mid-grey, as white hides light fringes. Eye boxes a
-  reviewer chose are not the check: a seam outside them got through.
+- **Look before the user does**, at native resolution and every crux boundary:
+  a whole-figure |composite − painting| map, each component by box/part and
+  status (in the painting / fixed / left, why). Use the true part stack; crop on
+  white and mid-grey to show light fringes. Check beyond reviewer-chosen boxes.
 
 ## Where things go
 
@@ -98,11 +96,11 @@ Each folder's lifetime and git status: {{LIFETIME_LINK}}.
 
 {{READ_FIRST}}
 
-Read installed docs here at `package.json`'s pins to match tools, not memory.
-Run refusal `(see … guide …)` commands before changes.
+Use installed docs at `package.json`'s pins, not memory.
+Run refusal `(see … guide …)` commands first.
 
 {{PACKAGE_DOCS}}
 
-Project organisation: rig-c/create docs (not installed).
+Project docs (not installed):
 
 {{CREATE_DOCS}}

package/templates/example-chain/AGENTS.md

@@ -1,20 +1,20 @@
 # Agent guide
 
-One painting in, one rig and its takes out. Start here.
+One painting; one rig and its takes.
 
 ## Start here
 
-1. Read `project.json` first. Only its decisions count. Copy chat decisions
-   verbatim, with speaker and time.
+1. Read `project.json`. Human acts go through Review; ingest exports. Never type human answers/signatures.
 2. Run `rig-create next` to derive the next moves and whose they are.
-3. Resume per [PROJECT.md § How an agent resumes a project](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#how-an-agent-resumes-a-project).
+3. Resume per [Resume](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#how-an-agent-resumes-a-project).
 
-Update stale pins with `rig-create packages upgrade --by <operator>`; see PROJECT.md.
+Until create#493, agents may type `reopen` only from Review host raw export `act@4`: save nonempty `value.words` byte-for-byte to a verbatim file; `--source` names `actId`. Empty/missing words: STOP. Never supply words. `job fetch-act` rejects act@4.
 
-Declare the project's painting with `init --painting <file> --origin <words>`
-or `input add <path> --painting --origin <words>`. `project.json.painting` binds
-one input and survives restart; only it checks siblings for duplicate artwork.
-Older records may omit it.
+Stale pins: `rig-create packages upgrade --by <operator>`.
+
+Declare the painting: `init --painting <file> --origin <words>` or
+`input add <path> --painting --origin <words>`. `project.json.painting` binds
+one input, survives restart and checks sibling artwork; optional on older records.
 
 ## The order, and what you may not do
 
@@ -22,21 +22,18 @@ Older records may omit it.
 `rigging-interview` → `rigging` → `rig-review` (the rig, still frame) → `post-interview` → `post` →
 `direction-review` → `accepted`. Any stage can become `paused`.
 
-- Only a person's `signoffs[]` advances `stage` or passes a plan checkpoint.
-  You may draft, propose, build and measure in any stage; production rigging
-  waits for `rigging-interview` ([PROJECT.md § Stages](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#stages)).
-- Never derive answers from the image. Offer a pick per ask, with one reasoned
+- Only human `signoffs[]` advance `stage` or pass plan checkpoints.
+  Draft, propose, build and measure in any stage; production rigging waits for `rigging-interview` ([Stages](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#stages)).
+- Never infer answers from images. Offer a pick per ask: one reasoned
   recommendation, Other and auto. Retain the shown set; never preselect.
-- Record "auto" as delegated, with your decision on the item. It is never a
-  blank for you to fill later.
-- Before asking the user to sign the interview, run `rig-create interview --check`: it names every `null` answer.
+- Record "auto" as delegated with your decision on the item; never leave it blank.
+- Run `rig-create interview --check` before interview sign-off: it names every `null` answer.
 
 ## The user's four steps
 
-1. **Parts and meshes**. Ask framing/source. Review a labelled draft's parts and
-   mesh/chest structure. `parts-review` records its Review API response.
+1. **Parts and meshes**. Ask framing/source; review a labelled draft's parts and mesh/chest structure. `parts-review` records its Review API response.
    The latest receipt must approve the draft for `structure-snapshot --draft <id> --out <f>`
-   and `signoff parts-review --draft <id> --structure-file <f>`; record component triage with `diff-classes --diff-report <p> --by agent` ([PROJECT.md § Labelled draft rigs](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#labelled-draft-rigs-and-structure-decisions)).
+   and `signoff parts-review --draft <id> --structure-file <f>`; record component triage with `diff-classes --diff-report <p> --by agent` ([Draft rigs](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#labelled-draft-rigs-and-structure-decisions)).
 2. **Rigging interview**. Ask fresh bones, deformation, physics and motion
    against approved parts/structure; use interview-options/answer/decision.
 3. **Rig and animation**. Keep rig feedback.
@@ -47,21 +44,25 @@ Older records may omit it.
 
 Ask: `job open --reviewer <id> --role owner --question <id>` or `--plan`;
 ingest `--from-review <actId>`, then advance.
+Keep the host up across bound writes; after a stop, `job open` with reviewer/role,
+then `job reconcile` before writing.
 
-Use `advance <stage>`, `step-status <id>`; see `rig-create --help`.
+Use `advance <stage>` and `step-status <id>` (`rig-create --help`).
 `advance parts-review` needs `--parts-check <report> --parts <assembled dir>`,
 refusing [`PARTS_CHECK_MISSING`, `PARTS_CHECK_UNREAD`, `PARTS_CHECK_INVALID`, `PARTS_CHECK_CHANGED`, `PARTS_CHECK_FAILED`, `PARTS_CHECK_STALE`](https://github.com/rig-c/create/blob/main/docs/CHECKS.md#parts-stage-check-at-the-parts--parts-review-move).
 In `parts`, record an `intake-report` preflight and offer its choice, both advisory:
 [PROJECT.md § Advisory intake reports](https://github.com/rig-c/create/blob/main/docs/PROJECT.md#advisory-intake-reports).
 
-Drafts stay under `derived/drafts/<id>/`, never versions/handoff. Old records
-warn: preserve history and dates; adopt choices explicitly.
+Keep drafts in `derived/drafts/<id>/`, outside versions/handoff.
+Preserve history/dates; adopt choices explicitly.
 
 ## Before you ask, plan or show
 
 - **Prior words.** In adopted projects, show them verbatim as a tailored option
   with source/date; require a pick. Legacy derivation: [INTERVIEW.md § Derived answers](https://github.com/rig-c/create/blob/main/docs/INTERVIEW.md#derived-answers).
 - **Projection.** Ask and record it per [CHECKS.md § Projection and ground](https://github.com/rig-c/create/blob/main/docs/CHECKS.md#projection-and-ground).
+- **Camera options.** Offer fixed view or camera-box moves only. Head turn,
+  depth and plate parallax are unavailable: direction has no depth/turn fields.
 - **Upscale first** a painting smaller than the rig needs (SOURCE.md, step 2 below).
 - **The crux is a bar.** Before rigging, name every risk band, count background
   or doubled pixels over every frame and both physics/breath extremes, and
@@ -70,9 +71,8 @@ warn: preserve history and dates; adopt choices explicitly.
   installed `--help`. A reading with no command is a STOP before sign-off.
   Loop bars: INTERVIEW.md, "Bars have reading commands".
 - **Appearance needs a person**, not a step bar: [CHECKS.md § Appearance bar wording](https://github.com/rig-c/create/blob/main/docs/CHECKS.md#appearance-bar-wording).
-- **Nothing unnamed.** Add no motion, chain or physics the user did not name. A
-  reference ("move like X") is read for what it shows; anything more is a
-  question, not a default.
+- **Nothing unnamed.** Add no unnamed motion, chain or physics. Read references
+  for what they show; ask about anything more.
 - **Re-run first, cut last**, never a polygon in code or config: the ladder in
   SOURCE.md, step 2 below.
 - **A full-screen scene is a CG build.** For `rig_type` `fullscreen.*`, each
@@ -83,12 +83,10 @@ warn: preserve history and dates; adopt choices explicitly.
   eyelids) holds none of that part's pixels, or the animation shows its copy.
 - **Pairs.** Measure left/right symmetry against the painting before calling a
   pair uneven ([CRAFT.md G8](https://github.com/rig-c/create/blob/main/docs/CRAFT.md#for-the-gates-not-the-interview)).
-- **Look before the user does**, at native resolution and every boundary the
-  crux names: a whole-figure |composite − painting| map, every component listed
-  by box and part with a status (in the painting / fixed / left, why). Use the
-  true stack of part images, not a render flattened on white; crop on white and
-  on mid-grey, as white hides light fringes. Eye boxes a
-  reviewer chose are not the check: a seam outside them got through.
+- **Look before the user does**, at native resolution and every crux boundary:
+  a whole-figure |composite − painting| map, each component by box/part and
+  status (in the painting / fixed / left, why). Use the true part stack; crop on
+  white and mid-grey to show light fringes. Check beyond reviewer-chosen boxes.
 
 ## Where things go
 
@@ -96,13 +94,13 @@ Each folder's lifetime and git status: [PROJECT.md § Data is split by lifetime]
 
 ## What to read, and why
 
-1. **Before the interview**: INTERVIEW.md, and CRAFT.md for the default at each
-   waypoint (both linked below); parts AUTHORING §3, *`config.json`, field by
-   field*; [CHECKS.md](https://github.com/rig-c/create/blob/main/docs/CHECKS.md) before a sign-off.
-2. **Before `seethrough` and `assemble`**: SOURCE.md, the order of the split and
-   the cut: [re-running a bad split](https://github.com/rig-c/create/blob/main/docs/SOURCE.md#re-run-first),
-   [where a cut is allowed](https://github.com/rig-c/create/blob/main/docs/SOURCE.md#where-a-cut-is-allowed);
-   then parts AUTHORING *See-through head-run source reading*, *Source before
+1. **Before the interview**: INTERVIEW.md; CRAFT.md (waypoint defaults);
+   parts AUTHORING §3, *`config.json`, field by field*;
+   [CHECKS.md](https://github.com/rig-c/create/blob/main/docs/CHECKS.md) before a sign-off.
+2. **Before `seethrough` and `assemble`**: SOURCE.md, split/cut order:
+   [bad-split reruns](https://github.com/rig-c/create/blob/main/docs/SOURCE.md#re-run-first),
+   [allowed cuts](https://github.com/rig-c/create/blob/main/docs/SOURCE.md#where-a-cut-is-allowed);
+   parts AUTHORING *See-through head-run source reading*, *Source before
    scissors* and *Limbs: cut at their joints*.
 3. **Before rigging**: [CRAFT.md § For the gates](https://github.com/rig-c/create/blob/main/docs/CRAFT.md#for-the-gates-not-the-interview)
    (G1–G9); core RIGGING and MOTION; parts AUTHORING §7, the bars `check` enforces.
@@ -110,23 +108,23 @@ Each folder's lifetime and git status: [PROJECT.md § Data is split by lifetime]
    the [per-frame seam count](https://github.com/rig-c/create/blob/main/docs/LESSONS.md#count-the-seam-bar-over-every-frame),
    [what to show first](https://github.com/rig-c/create/blob/main/docs/LESSONS.md#what-to-show-the-user-first).
 
-Read installed docs here at `package.json`'s pins to match tools, not memory.
-Run refusal `(see … guide …)` commands before changes.
+Use installed docs at `package.json`'s pins, not memory.
+Run refusal `(see … guide …)` commands first.
 
 - [@rig-c/parts README.md](node_modules/@rig-c/parts/README.md): painting-to-rig pipeline and command order.
 - [@rig-c/parts docs/AUTHORING.md](node_modules/@rig-c/parts/docs/AUTHORING.md): config fields, interview waypoints and refusal remedies.
 - [@rig-c/parts docs/PAINTING.md](node_modules/@rig-c/parts/docs/PAINTING.md): what makes a painting riggable, and the check to run on it before See-through.
-- [@rig-c/parts docs/DEPTH.md](node_modules/@rig-c/parts/docs/DEPTH.md): when the plan has a head turn driven by depth.
+- [@rig-c/parts docs/DEPTH.md](node_modules/@rig-c/parts/docs/DEPTH.md): depth reference; unavailable in current direction.
 - [@rig-c/parts docs/STABILITY.md](node_modules/@rig-c/parts/docs/STABILITY.md): stable commands, fields and outputs.
 - [@rig-c/parts docs/MIGRATION.md](node_modules/@rig-c/parts/docs/MIGRATION.md): only when the pinned version is bumped.
 - [@rig-c/core README.md](node_modules/@rig-c/core/README.md): rigc scope, commands and documentation.
 - [@rig-c/core docs/AUTHORING.md](node_modules/@rig-c/core/docs/AUTHORING.md): rig/motion formats, build loop and failure remedies.
 - [@rig-c/core docs/RIGGING.md](node_modules/@rig-c/core/docs/RIGGING.md): bones and pivots at the bones waypoint.
 - [@rig-c/core docs/MOTION.md](node_modules/@rig-c/core/docs/MOTION.md): key-pose motions at the motion waypoint.
-- [@rig-c/core docs/FACE.md](node_modules/@rig-c/core/docs/FACE.md): blink, gaze and head-turn plans.
+- [@rig-c/core docs/FACE.md](node_modules/@rig-c/core/docs/FACE.md): blink and gaze in the accepted rig.
 - [@rig-c/core docs/INGEST.md](node_modules/@rig-c/core/docs/INGEST.md): only when you were handed a skeleton this project did not author.
 
-Project organisation: rig-c/create docs (not installed).
+Project docs (not installed):
 
 - [docs/PROJECT.md](https://github.com/rig-c/create/blob/main/docs/PROJECT.md): the folder, stages and sign-offs, the plan, versions, and `project.json` field by field.
 - [docs/INTERVIEW.md](https://github.com/rig-c/create/blob/main/docs/INTERVIEW.md): how to ask, and the shape every answer, delegation and piece of feedback takes.