website-build-skill 0.1.11 → 0.1.13

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "website-build-skill",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "A skill pack that turns your AI into an expert website builder: current research, design, code, accessibility, speed, SEO and security, alone or as a team.",
   "author": {
     "name": "website-build-skill contributors"

package/CHANGELOG.md

@@ -1,11 +1,49 @@
 # Changelog
 
 All notable changes will be documented here.
-Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+Format: [Keep a Changelog](https://keepachangelog.com/en/2.0.0/).
 Version policy: [Semantic Versioning 2.0.0](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.13] - 2026-10-01
+
+### Added
+
+- README hero trailer: a short tour of what your AI learns, the 14 research domains and the 12 stages, ending on the install command.
+
+### Changed
+
+- Terminal demo moved to the installer guide and labeled as a recording from version 0.1.1.
+- GIFs excluded from the npm package; documentation uses absolute raw image URLs.
+- The package check requires the GIF exclusion after the docs entry.
+- The privacy and voice scan reads a GIF by path only, so compressed bytes cannot match as prose.
+
+## [0.1.12] - 2026-10-01
+
+### Added
+
+- Package funding metadata links to GitHub Sponsors, with a privacy exception for the exact URL and rejection coverage for other handles and paths.
+- README Uninstall and Read next sections, plus sibling repository links and descriptions in the generated `llms.txt` index.
+- Release completion checks cover the registry README, description, provenance attestations and funding metadata.
+
+### Changed
+
+- Release operations name 57 installed files plus a receipt, the GitHub release creation command and registry lag handling.
+- Private vulnerability reporting text describes the enabled private advisory route.
+- Reader-facing host labels use Gemini (via Antigravity CLI), and the README places the related repository set after the skills overview.
+- The changelog format reference links to Keep a Changelog 2.0.0.
+- SECURITY.md describes the released installer, its guards and the supported version window.
+- REPO_SETTINGS.md records the default GitHub preview card as the decision.
+- Release operations create the GitHub release after the registry checks, compare the README to the tagged copy, and add funding, bin and demo image checks.
+- The README places Uninstall after Common questions, and the privacy gate documentation lists every public-identifier exemption.
+- The Sponsors URL exemption tolerates trailing sentence punctuation.
+
+### Removed
+
+- The committed custom social preview image.
+- Stale release wording and the duplicate installer write description.
+
 ## [0.1.11] - 2026-09-30
 
 ### Changed
@@ -159,4 +197,7 @@ Version policy: [Semantic Versioning 2.0.0](https://semver.org/spec/v2.0.0.html)
 - Generated native workers for the seven-role team, gated on schema and permission tests.
 - Clean-client trials, behavioral evaluations and fresh-tarball trials on Linux and Windows.
 
+[Unreleased]: https://github.com/aunysillyme/website-build-skill/compare/v0.1.13...HEAD
+[0.1.13]: https://github.com/aunysillyme/website-build-skill/compare/v0.1.12...v0.1.13
+[0.1.12]: https://github.com/aunysillyme/website-build-skill/compare/v0.1.11...v0.1.12
 [0.1.11]: https://github.com/aunysillyme/website-build-skill/compare/v0.1.10...v0.1.11

package/README.md

@@ -17,15 +17,12 @@ Run the npm installer in your project folder. It asks how you want to work, whic
 npx website-build-skill
 ```
 
+![A short tour of what your AI learns, the 14 research domains and the 12 stages, ending on the install command on the closing card](https://raw.githubusercontent.com/aunysillyme/website-build-skill/main/docs/trailer.gif)
+
 It copies the skill pack into your host's folder, checks the saved files and writes a receipt.
 Open your AI and ask it to read the installed `SKILL.md`.
-Use `--dry-run` to preview paths. To remove files the installer wrote that still match its receipt:
-
-```bash
-npx website-build-skill --uninstall --target codex --dir . --yes
-```
-
-Use the target and directory from your install. The [installer guide](docs/INSTALLER.md) covers all flags, receipts and exit codes.
+Use `--dry-run` to preview paths. The [installer guide](docs/INSTALLER.md) covers all flags, receipts and exit codes.
+To remove it later, see [Uninstall](#uninstall).
 
 For a headless install with no prompts, name SOLO or TEAM and your host:
 
@@ -49,8 +46,6 @@ Get them from [the public bundle folder](https://github.com/aunysillyme/website-
 or [the main archive](https://github.com/aunysillyme/website-build-skill/archive/refs/heads/main.zip).
 Ask your AI to name the files it read before starting.
 
-![Installer demo: preview the files, install the Codex skill and inspect the receipt](https://raw.githubusercontent.com/aunysillyme/website-build-skill/main/docs/demo.gif)
-
 ## What your AI learns
 
 | Area | What your AI learns | Files |
@@ -67,6 +62,16 @@ Ask your AI to name the files it read before starting.
 | Hosting and operations | It learns to promote an exact release artifact, verify live routes, plan rollback, and document monitoring, recovery and maintenance ownership. | [Deploy and operate](skills/website-build-skill/playbooks/deploy-and-operate.md), [ship and verify](skills/website-build-skill/prompts/11-ship-and-verify.md) |
 | Review and release | It learns to prepare a fixed candidate for review by a different model family, reproduce findings, verify fixes, and check release authority and evidence. | [Adversarial review](skills/website-build-skill/prompts/10-adversarial-pre-ship.md), [ship checklist](skills/website-build-skill/checklists/ship.md) |
 
+## Part of a set
+
+Three open-source tools that work on their own and fit together:
+
+| Repo | What it gives you |
+|---|---|
+| [agent-personalizer](https://github.com/aunysillyme/agent-personalizer) | One interview writes the profile and rules every AI you use reads, kept in sync from one source. |
+| [model-orchestrator](https://github.com/aunysillyme/model-orchestrator) | Model router for AI coding agents: installs routing rules, 8 subagents, hooks and a CLI runner so your AI picks model and effort per task and saves tokens. |
+| **website-build-skill** | A skill pack that teaches your AI current website-building expertise: research, design, code, accessibility, performance, search and security. |
+
 ## How your AI uses it on a site
 
 Every site follows the same twelve stages, so your AI researches before it designs and checks before it ships.
@@ -91,7 +96,7 @@ Every site follows the same twelve stages, so your AI researches before it desig
 | Choice | What happens | Works with |
 |---|---|---|
 | **1 · Teach my AI** (SOLO) | One AI learns the whole method and does every job itself. Nothing else to install. | Any AI: Claude, ChatGPT, Grok, Cursor, Copilot |
-| **2 · Give me the team** (TEAM) | Seven specialist agents, one per job. One command installs their files; you open each session yourself and carry the handoffs between them. Researcher goes first. | Claude Code, Codex, Hermes, Antigravity, Grok Bot |
+| **2 · Give me the team** (TEAM) | Seven specialist agents, one per job. One command installs their files; you open each session yourself and carry the handoffs between them. Researcher goes first. | Claude Code, Codex, Hermes, Gemini (via Antigravity CLI), Grok Bot |
 
 Not sure? Pick 1. Moving to 2 later keeps everything you have already done.
 
@@ -132,7 +137,7 @@ current status host by host.
 | [Claude Code](adapters/claude-code.md) | Install with `--target claude-code`; ask it to read `.claude/skills/website-build-skill/SKILL.md` | Method files; TEAM adds the full role bundles |
 | [Codex](adapters/codex.md) | Install with `--target codex`; ask it to read `.agents/skills/website-build-skill/SKILL.md` | Method files; TEAM adds the full role bundles |
 | [Hermes](adapters/hermes.md) | Install with `--target hermes`; follow the trust and loading steps | Shared method files; TEAM adds the full role bundles |
-| [Antigravity](adapters/antigravity.md) | Install with `--target antigravity`; read `.website-build-skill/SKILL.md` | Portable method files; TEAM adds the full role bundles |
+| [Gemini (via Antigravity CLI)](adapters/antigravity.md) | Install with `--target antigravity`; read `.website-build-skill/SKILL.md` | Portable method files; TEAM adds the full role bundles |
 | [Grok Bot](adapters/grok.md) | Attach the five bundles and follow the manual team setup | Complete role instructions and addressed handoffs |
 | [Claude Desktop](adapters/claude-desktop.md) | Attach the five bundles and paste the shared instructions | The SOLO method in your chat |
 | [ChatGPT](adapters/chatgpt-project.md) | Add the instructions and five bundles to a Project or [custom GPT](adapters/custom-gpt.md) | The SOLO method and saved state packets |
@@ -148,16 +153,6 @@ Notion is an export destination with an authoritative local working copy.
 For headless setup, `--output-dir` records the existing output root; otherwise Researcher asks before writing.
 Reopen that library for later pages and refresh claims against the date of the new request.
 
-## Part of a set
-
-Three open-source tools that work on their own and fit together:
-
-| Repo | What it gives you |
-|---|---|
-| [agent-personalizer](https://github.com/aunysillyme/agent-personalizer) | One interview writes the profile and rules every AI you use reads, kept in sync from one source. |
-| [model-orchestrator](https://github.com/aunysillyme/model-orchestrator) | Model router for AI coding agents: installs routing rules, 8 subagents, hooks and a CLI runner so your AI picks model and effort per task and saves tokens. |
-| **website-build-skill** | A skill pack that teaches your AI current website-building expertise: research, design, code, accessibility, performance, search and security. |
-
 ## Tips
 
 - **Brand:** supply approved assets and review screenshot-derived guesses before they become rules.
@@ -185,13 +180,31 @@ The [installer contract](docs/INSTALLER.md) defines preflight checks, exit codes
 
 **How do I teach Claude Code or Codex to build better websites?** Run `npx website-build-skill`, pick your host and let it copy the skill pack into your host's folder, then ask your AI to read the installed `SKILL.md`. It learns current practice in research, design, code, accessibility, performance, search and security before it touches your site.
 
-**Which AI tools does it work with?** Any AI that can read files works with the SOLO method, including Claude, ChatGPT, Grok, Cursor and Copilot. TEAM installs the seven workers' files for Claude Code, Codex, Hermes, Antigravity and Grok Bot in one command; you open each session yourself and carry the handoffs between them, with Researcher first; see [Choose your host](#choose-your-host) for each setup guide.
+**Which AI tools does it work with?** Any AI that can read files works with the SOLO method, including Claude, ChatGPT, Grok, Cursor and Copilot. TEAM installs the seven workers' files for Claude Code, Codex, Hermes, Gemini (via Antigravity CLI) and Grok Bot in one command; you open each session yourself and carry the handoffs between them, with Researcher first; see [Choose your host](#choose-your-host) for each setup guide.
 
 **What does my AI research before it builds?** It researches fourteen domains current to the day of your request, from design and accessibility to performance, security, stack and search, and saves a library with source URLs and access dates so later pages can refresh stale claims. See [What your AI learns](#what-your-ai-learns) for the full list.
 
 **Can one AI run it, or does it need a team?** Either. SOLO has one AI learn the whole method and do every job itself with nothing else to install; TEAM installs the seven workers' files in one command; you open each session yourself and carry the handoffs between them. Researcher goes first. Pick SOLO if you are not sure; moving to TEAM later keeps everything you have already done.
 
-**How do I remove it?** Run `npx website-build-skill --uninstall --target <your target> --dir . --yes`, using the target and directory from your install; it removes only the files the installer wrote that still match its receipt. See the [installer guide](docs/INSTALLER.md) for flags and exit codes.
+**How do I remove it?** Follow [Uninstall](#uninstall), using the target and directory from your install. It removes only files the installer wrote that still match its receipt. See the [installer guide](docs/INSTALLER.md) for flags and exit codes.
+
+## Uninstall
+
+```bash
+npx website-build-skill --uninstall --target codex --dir . --yes
+```
+
+Use the target and directory from your install; it removes only files the installer wrote that still match its receipt.
+
+## Read next
+
+- [Installer guide](docs/INSTALLER.md)
+- [Method](docs/METHOD.md)
+- [Compatibility](docs/COMPATIBILITY.md)
+- [Tips](docs/TIPS.md)
+- [Evaluation](docs/EVALUATION.md)
+- [Provenance](docs/PROVENANCE.md)
+- [Documentation index](docs/README.md)
 
 ## Contributing, credits and license
 

package/RELEASING.md

@@ -12,7 +12,7 @@ through npm trusted publishing, which exchanges a short-lived OIDC token issued
 ## Trigger
 
 Local: a maintainer changes canonical content or adapters and explicitly runs the commands below.
-Hosted checks: pull request, push to main or manual dispatch after repository creation.
+Hosted checks: pull request, push to main or manual dispatch.
 Release: pushing a `v*` tag runs the publish job, which republishes nothing and refuses a tag
 whose version disagrees with `package.json`. No scheduled publication exists, and no branch
 push publishes. Creating the GitHub release page stays manual.
@@ -29,7 +29,14 @@ When `package.json` description changes, update REPO_SETTINGS.md § Description
 6. Update `CHANGELOG.md`, then set the same version in `package.json`, both version fields of `package-lock.json`, `.claude-plugin/plugin.json` and the manifest's `packageVersion`; the check compares `package.json` with the plugin manifest and `packageVersion`, so bump the lock by hand in the same edit (it sat at 0.1.6 through 0.1.8).
 7. Commit, then push an immutable `v<version>` tag on that commit. Leave the tag where it is: npm provenance names that exact commit, so a later history rewrite would point the provenance at a commit that no longer exists.
 8. The workflow re-runs the gates, packs the tarball, installs it in a scratch project, runs the installed entry point, and only then publishes with `--provenance`.
-9. Wait for the registry, which lagged by roughly a minute on the sibling repository, then complete the verification loop below before recording the release as complete.
+9. Allow 40 to 90 seconds of registry lag, use `--prefer-online` for registry reads, then complete the verification loop below.
+10. After every registry check passes, write the notes file from the CHANGELOG section and create the GitHub release page:
+
+```sh
+awk -v v="<version>" '$0 ~ "^## \\[" v "\\]" {f=1; next} f && /^## \[/ {exit} f' CHANGELOG.md > release-notes.md
+gh release create v<version> --title "<version>" --notes-file release-notes.md
+rm release-notes.md
+```
 
 ## Dependencies
 
@@ -66,19 +73,34 @@ The installer writes only its destination, the output root probe it removes, and
 The check workflow has only `contents: read`. The release workflow's publish job adds exactly
 one permission, `id-token: write`, for the OIDC exchange, and the workflow validator refuses
 that permission at the top level, in any other job, and in any other workflow.
-The installer writes only inside the destination it was given, the output root probe it removes,
-and its receipt.
 
 ## The closed loop
 
 Local success requires exit 0 from both the read-only check and the test runner, with no unexpected skips.
-The privacy gate passes on the published tree. Its two public-identifier exemptions are narrow and
+The privacy gate passes on the published tree. Its public-identifier exemptions are narrow and
 documented in `docs/EVALUATION.md`; the tests run against the same policy, not a separate one.
 Inspect the full output and changed file list. A generated file existing is not enough; its bytes must match regeneration.
 Hosted success requires the exact source revision's run to pass on every runtime in the matrix.
-Release completion requires `npm view website-build-skill version` to name the tag, a fresh
-`npx website-build-skill@<version> --version` from a machine that has never held the package,
-and one real install into a scratch directory whose receipt digests match the bytes on disk.
+Release completion requires:
+
+- Version: `npm view website-build-skill version --prefer-online` names the tag.
+- Fresh entry point: `npx website-build-skill@<version> --version` runs from a machine that has never held the package.
+- Install: one real install into a scratch directory has receipt digests that match the bytes on disk.
+- README: `git fetch --tags && npm view website-build-skill readme --prefer-online | diff -q - <(git show v<version>:README.md)` exits 0, proving the registry README equals `README.md` at the release tag. The `<( )` form needs bash or zsh.
+- Description: `npm view website-build-skill description --prefer-online` equals the `description` field in `package.json`.
+- Provenance: `npm view website-build-skill@<version> dist.attestations --prefer-online` names `https://slsa.dev/provenance/v1`.
+- Funding: `npm view website-build-skill funding --prefer-online` prints `https://github.com/sponsors/aunysillyme`.
+- GitHub funding: this prints `true` and both funding links (the owner is read from the repository URL):
+
+  ```sh
+  owner="$(gh repo view https://github.com/aunysillyme/website-build-skill --json owner --jq .owner.login)"
+  gh api graphql -f owner="$owner" -f query='query($owner:String!){repository(owner:$owner,name:"website-build-skill"){hasSponsorshipsEnabled fundingLinks{platform url}}}'
+  ```
+
+- Bin: `npm view website-build-skill@<version> bin --json --prefer-online` equals `node -p "JSON.stringify(require('./package.json').bin)"`.
+- Demo image: `curl -sI -o /dev/null -w '%{http_code} %{content_type}\n' https://raw.githubusercontent.com/aunysillyme/website-build-skill/main/docs/demo.gif` prints `200 image/gif`.
+- Hero trailer: `curl -sI -o /dev/null -w '%{http_code} %{content_type}\n' https://raw.githubusercontent.com/aunysillyme/website-build-skill/main/docs/trailer.gif` prints `200 image/gif`. The README hero resolves only once `docs/trailer.gif` is on main, so push main and wait for it to be green before tagging.
+
 Host discovery and activation are still not proven by any of that.
 Record downloaded bytes, commands, versions, date, actual results and any gaps as sanitized evidence.
 Update the changelog only for a real release.
@@ -94,8 +116,8 @@ No separate watchdog is configured. The public repository owner is the failure r
 - Floating action or unexpected write permission: restore an upstream full SHA and read-only permissions, preserving only the reviewed publish-job OIDC exception.
 - Local tests fail: stop publication, reproduce, fix confirmed defects and rerun the affected harness.
 - Runtime or network unavailable: report BLOCKED with the failing command; do not substitute a pass.
-- Future publication partly succeeds: inspect registry and release state before any retry. Never assume an npm version can be overwritten or routinely deleted.
-- Future bad release: halt promotion, publish a corrected version after review, and use the registry's then-current deprecation mechanism. Preserve hashes and disclose affected versions. Do not silently replace bytes under a release claim.
+- Publication partly succeeds: inspect registry and release state before any retry. Never assume an npm version can be overwritten or routinely deleted.
+- A bad release ships: halt promotion, publish a corrected version after review, and use the registry's then-current deprecation mechanism. Preserve hashes and disclose affected versions. Do not silently replace bytes under a release claim.
 - Missing maintainer response: preserve the candidate and evidence, keep publication blocked and use the repository's documented escalation route.
 
 ## Run and verify by hand
@@ -121,7 +143,7 @@ cd "$trial" && npm init -y > /dev/null && npm install "$OLDPWD/$tarball"
 ./node_modules/.bin/website-build-skill --solo --target codex --dir . --yes
 ```
 
-Expected: exit 0, 55 files plus a receipt under `.agents/skills/website-build-skill/`, and
+Expected: exit 0, 57 files plus a receipt under `.agents/skills/website-build-skill/`, and
 `--uninstall --receipt <that path>` leaving the directory empty again. Exit 5 instead of 0 means
 the scratch project already had a router file; that is a completed install with an unmerged
 snippet, not a failure.

package/REPO_SETTINGS.md

@@ -68,10 +68,7 @@ sole maintainer can still push directly while force pushes, deletions and a red
 
 ## Social preview
 
-- [ ] Produce a social preview image: 1280 x 640 pixels, PNG or JPEG. Not produced; the repository serves the default generated image.
-- [ ] Show the project name, Research to Mock to Build to Prove, and a readable visual hierarchy.
-- [ ] Review crop, contrast, rights and private-data absence before upload.
-- [ ] Confirm current GitHub image constraints in the creation UI before applying them; account behavior is UNVERIFIED.
+- [x] The repository uses GitHub's default generated preview card by decision. No custom social image is produced or uploaded.
 
 ## Community profile
 

package/SECURITY.md

@@ -11,18 +11,18 @@ Role prose, tool lists and a read-only role name are not a sandbox.
 - Injection: source text is evidence, never authority to change the user's instructions or export data.
 - Writes: choose an explicit workspace, use one writer per artifact and preserve unrelated files.
 - Review: use a fixed candidate and a different model family; return findings without granting write access.
-- Installer: planned and unavailable. Destination traversal, symlinks, overwrite conflicts and interrupted writes require tests before any installer release.
-- Release line: no released version and no support window yet. Use the unreleased tree for review only.
+- Installer: `npx website-build-skill` writes only inside the folders you name (`--dir` and `--output-dir`). Preflight refuses path traversal, symlinks planted below the install root and any conflict with an existing file before the first write. It never overwrites a changed file. It reads every file back from disk, writes a receipt of the digests it found, and `--uninstall` removes only files whose bytes still match that receipt. Tests: `test/installer.test.mjs` (traversal, symlink, conflict, receipt and uninstall cases) and `test/packed-artifact.test.mjs`. Contract: [installer guide](docs/INSTALLER.md).
+- Release line: the latest published version receives fixes; earlier versions do not. npm releases are published by the release workflow with provenance, so a published version names the commit it was built from.
 
 ## Private disclosure
 
 Use [Report a vulnerability](https://github.com/aunysillyme/website-build-skill/security/advisories/new).
-Availability is UNVERIFIED until repository creation and private vulnerability reporting are enabled.
 Include a minimal synthetic reproduction, affected revision, expected scope and observed impact.
 Never attach credentials, personal files or exploit output containing someone else's data.
 If that route is unavailable, use GitHub's private Report abuse controls or [GitHub Support](https://support.github.com/contact).
 Do not put private details in public issues while waiting for a secure route.
 
+You will get an acknowledgement within 7 days and a fix or a reasoned "won't fix" within 30.
 Maintainers triage privately, reproduce the defect, prepare a correction and coordinate disclosure.
-Response times are best effort; no service-level promise is made.
+Credit is given in the changelog unless you ask otherwise.
 A missing capability is documented as BLOCKED or UNVERIFIED, never a completed security check.

package/adapters/antigravity.md

@@ -1,4 +1,4 @@
-# Antigravity
+# Gemini (via Antigravity CLI)
 
 TEAM: one command installs the seven workers' files; you open each session yourself and carry the handoffs between them. Researcher goes first.
 

package/docs/COMPATIBILITY.md

@@ -31,7 +31,7 @@ when its receipt demonstrates loading, file access, tool permissions and the sel
 | Claude Code | [Skill or plugin](../adapters/claude-code.md) | Discovery, invocation, assets and worker isolation | [Skills](https://code.claude.com/docs/en/skills) |
 | Codex | [Skill and explicit router](../adapters/codex.md) | Shared destination, role configuration and actual model family | [Skills](https://learn.chatgpt.com/docs/build-skills) |
 | Hermes | [Skill and separate sessions](../adapters/hermes.md) | Trust, alias semantics, routes and inherited permissions | [Skills](https://hermes-agent.nousresearch.com/docs/user-guide/features/skills) |
-| Antigravity | [Explicit core pointer](../adapters/antigravity.md) | Schema, paths, quoted off, routing and denied writes | [Subagents](https://antigravity.google/docs/subagents) |
+| Gemini (via Antigravity CLI) | [Explicit core pointer](../adapters/antigravity.md) | Schema, paths, quoted off, routing and denied writes | [Subagents](https://antigravity.google/docs/subagents) |
 | Grok Bot | [Private skill and six-Bot group](../adapters/grok.md#grok-bot), from the xAI docs read 2026-09-25 | `/` lists the saved skill, role files in `/workspace`, group routes; Reviewer outside Grok Bot | [Bots](https://docs.x.ai/grok-bot/bots) |
 | Claude Desktop | [Bundle attachments](../adapters/claude-desktop.md) | Account upload controls and loaded resources | [Skills](https://support.claude.com/en/articles/12512180-use-skills-in-claude) |
 | ChatGPT Project/custom GPT | [Instructions and bundles](../adapters/chatgpt-project.md) | File access, tool availability and state reattachment | [Projects](https://help.openai.com/en/articles/10169521-projects-in-chatgpt) |

package/docs/EVALUATION.md

@@ -51,13 +51,18 @@ A change to the ledger itself requires code-owner review. No content checker can
 
 The gate scans every public file, including hidden community metadata, fixtures and generated bundles.
 It rejects personal paths, private identifiers, personal names and email addresses without echoing their values.
-Production exceptions are exact license authorship and repository URL namespaces.
-The related public repository allowlist contains exactly `agent-personalizer` and
-`model-orchestrator`, for GitHub URLs, raw file URLs and npm GitHub shorthand.
-The privacy regression rejects a third repository, longer names and adjacent private text.
-The supported public product name and exact CODEOWNERS handle are narrow, resolved
-exceptions implemented by privacyIssues. Path-shaped uses remain rejected. These
-exceptions do not permit personal identifiers elsewhere.
+Every exemption is narrow, exact and implemented once in `privacyIssues` (`src/validate.mjs`).
+The privacy tests run against that same function.
+
+- License: the one exact copyright line in `LICENSE`.
+- CODEOWNERS: the one exact owner line in `.github/CODEOWNERS`.
+- Product name: the supported host's public product name, as a name. Path-shaped uses stay rejected.
+- Own repository: `https://github.com/aunysillyme/website-build-skill` and the matching `raw.githubusercontent.com` URL, plus the npm shorthand `github:aunysillyme/website-build-skill`.
+- Funding: exactly `https://github.com/sponsors/aunysillyme`. Sentence punctuation after it (`. , ; : ] > *`) is allowed. A different handle, a longer path, a query or a fragment fails.
+- Sibling repositories: exactly `https://github.com/aunysillyme/agent-personalizer` and `https://github.com/aunysillyme/model-orchestrator`, in GitHub URL, raw file URL and npm shorthand spellings. A third repository or a longer name fails.
+
+The tests reject a third repository, longer names, other Sponsors handles and adjacent private text.
+These exemptions do not permit personal identifiers anywhere else.
 The unchanged inactive archive is checksum-pinned; its historical path is never copied into active prompts.
 Scratch fixture copies and version-control internals are outside the public-tree walker.
 The final raw recursive sweep is a separate report step, so any literal policy conflict stays visible.

package/docs/INSTALLER.md

@@ -14,7 +14,7 @@ Copy the complete `skills/website-build-skill/` directory into a new, empty dest
 | Claude Code | `.claude/skills/website-build-skill/` | Read back the entrypoint and assets |
 | Codex | `.agents/skills/website-build-skill/` | Inspect discovery and invocation |
 | Hermes | `.agents/skills/website-build-skill/` | Check trust and shared discovery |
-| Antigravity | `.website-build-skill/` | Ask the session to read the entrypoint |
+| Gemini (via Antigravity CLI) | `.website-build-skill/` | Ask the session to read the entrypoint |
 | Generic agent | `.website-build-skill/` | Read the entrypoint and preserve existing routers |
 | Grok file-capable host | `.grok/skills/website-build-skill/` | Read back the entrypoint, or paste the bundles |
 
@@ -32,6 +32,10 @@ npx website-build-skill --solo --target codex --dir . --scope project --yes
 npx website-build-skill --team --target antigravity --dir . --scope project --yes
 ```
 
+This recorded install is from version 0.1.1 and lists 55 files; current installs write 57 files.
+
+![Installer demo: preview the files, install the Codex skill and inspect the receipt](https://raw.githubusercontent.com/aunysillyme/website-build-skill/main/docs/demo.gif)
+
 For unreleased changes, use `npx github:aunysillyme/website-build-skill` with the same flags.
 Append `#<reviewed-commit-sha>` to the repository reference for a reproducible install.
 
@@ -66,7 +70,7 @@ passing assignments to later workers. Record seven setup acknowledgements and us
 different-family Reviewer. Enforce read-only review through host controls or a read-only packet.
 The Hermes alias copies bundles into the explicitly selected directory inside the skill folder.
 Session references and permissions require your own checks in the chosen host.
-See [Antigravity](../adapters/antigravity.md), [Hermes](../adapters/hermes.md) and [team ownership](../adapters/team.yaml).
+See [Gemini (via Antigravity CLI)](../adapters/antigravity.md), [Hermes](../adapters/hermes.md) and [team ownership](../adapters/team.yaml).
 
 ## Verify the installation
 

package/docs/evaluation/host-gate.md

@@ -37,7 +37,7 @@ records browser version and account controls available during that trial.
 | Claude Code | [Adapter](../../adapters/claude-code.md) | SOLO and separately TEAM |
 | Codex | [Adapter](../../adapters/codex.md) | SOLO and separately TEAM |
 | Hermes | [Adapter](../../adapters/hermes.md), including explicit alias and trust checks | SOLO and separately TEAM |
-| Antigravity | [Adapter](../../adapters/antigravity.md) | SOLO and separately TEAM |
+| Gemini (via Antigravity CLI) | [Adapter](../../adapters/antigravity.md) | SOLO and separately TEAM |
 | Grok Bot | [Adapter](../../adapters/grok.md), including attachment and manual relay controls | SOLO and separately TEAM |
 | Claude Desktop | [Adapter](../../adapters/claude-desktop.md), including skill ZIP upload where exposed | SOLO; record any separate-session TEAM trial separately |
 | ChatGPT Project | [Adapter](../../adapters/chatgpt-project.md) | SOLO; record any separate-session TEAM trial separately |

package/docs/evidence/content-review.json

@@ -25,9 +25,9 @@
       "review": "0.1.5 (#15): status line narrowed to the two SOLO loading receipts; other hosts, TEAM, account tools and independent review stay UNVERIFIED. Claude editorial review. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.11: the three accuracy lines moved unchanged from CLAUDE.md; the method and contributor instructions stay in one source. Implementation-agent editorial review; independent review remains pending."
     },
     "CHANGELOG.md": {
-      "sha256": "afda14617fc56a389f48cc8e6d8dc73c068cee9c1505cfc9719f9556b8ca6f4a",
+      "sha256": "d7fb89d0b607d0d987f22b25e367b46837359d1c7671bfa533858f399c36c34d",
       "disposition": "instructions-and-qualified-status-only",
-      "review": "0.1.2: the installer prompt block became a two-row choice table and one save-location sentence; reviewed by Claude against install-choice.txt and SKILL.md, same facts. Reviewed the added 0.1.1 framing note against the presentation copy changes; publication is a separate release action. Implementation-agent editorial review; independent review remains pending. Reviewed the copied-install checker ladder fix against the canonical instructions and regression test. Live host retrial remains pending release. Reviewed for the ROUND 1 audit: added Fixed/Added/Changed lines for the restored positive-and-accurate adapter, SKILL.md, designer.md, grok.md and validate.mjs fixes. Claude (builder, non-author fixer) editorial review; independent review remains pending. 0.1.3: reviewed the #13 description check and #14 Hermes path documentation entries against the implementation and regression tests; publication remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. 0.1.4: reviewed the added coding-research description and fourteen-domain wording against the canonical prompts and checklists; package release remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. Reviewed the #15 Fixed line for the symlinked-parent receipt path against src/install.mjs and installer tests 7e-7g, and the #15 Added line against the two receipts. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. 0.1.5 release heading moved the Unreleased lines under [0.1.5] - 2026-09-24 unchanged. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.7: Grok Bot setup and one-description entries reviewed against the diff. Claude editorial review. 0.1.8: reviewed the Added lines against the committed BM05, CQ06, B08, prompt 04 and PROVENANCE.md diff; every named tell, default and credit matches the checklist text. Claude editorial review; the change itself had an independent codex audit (CLEAN). 0.1.9: reviewed the Fixed line against the src/bundle.mjs describe() diff, the regenerated llms.txt lines 19 and 21 and test/llms-labels.test.mjs. Claude editorial review; the change had an independent codex audit (CLEAN). 0.1.10: reviewed the Added and Changed lines against scripts/build.mjs --rehash, its tests and the CONTRIBUTING/RELEASING diff; the claims match (code-reviewer audit CLEAN). 0.1.11: reviewed the entry against the instruction import and accuracy-note move; the compare link joins v0.1.10 and v0.1.11. Implementation-agent editorial review; publication remains a separate maintainer action."
+      "review": "0.1.2: the installer prompt block became a two-row choice table and one save-location sentence; reviewed by Claude against install-choice.txt and SKILL.md, same facts. Reviewed the added 0.1.1 framing note against the presentation copy changes; publication is a separate release action. Implementation-agent editorial review; independent review remains pending. Reviewed the copied-install checker ladder fix against the canonical instructions and regression test. Live host retrial remains pending release. Reviewed for the ROUND 1 audit: added Fixed/Added/Changed lines for the restored positive-and-accurate adapter, SKILL.md, designer.md, grok.md and validate.mjs fixes. Claude (builder, non-author fixer) editorial review; independent review remains pending. 0.1.3: reviewed the #13 description check and #14 Hermes path documentation entries against the implementation and regression tests; publication remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. 0.1.4: reviewed the added coding-research description and fourteen-domain wording against the canonical prompts and checklists; package release remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. Reviewed the #15 Fixed line for the symlinked-parent receipt path against src/install.mjs and installer tests 7e-7g, and the #15 Added line against the two receipts. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. 0.1.5 release heading moved the Unreleased lines under [0.1.5] - 2026-09-24 unchanged. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.7: Grok Bot setup and one-description entries reviewed against the diff. Claude editorial review. 0.1.8: reviewed the Added lines against the committed BM05, CQ06, B08, prompt 04 and PROVENANCE.md diff; every named tell, default and credit matches the checklist text. Claude editorial review; the change itself had an independent codex audit (CLEAN). 0.1.9: reviewed the Fixed line against the src/bundle.mjs describe() diff, the regenerated llms.txt lines 19 and 21 and test/llms-labels.test.mjs. Claude editorial review; the change had an independent codex audit (CLEAN). 0.1.10: reviewed the Added and Changed lines against scripts/build.mjs --rehash, its tests and the CONTRIBUTING/RELEASING diff; the claims match (code-reviewer audit CLEAN). 0.1.11: reviewed the entry against the instruction import and accuracy-note move; the compare link joins v0.1.10 and v0.1.11. Implementation-agent editorial review; publication remains a separate maintainer action. 0.1.12: reviewed Keep a Changelog 2.0.0 reference, empty Unreleased section, 0.1.12 Added/Changed/Removed entries and compare link against the supplied repository canon audit. Implementation-agent editorial review; independent review remains pending. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending. 0.1.13 hero trailer: reviewed against the approved v2a render. 0.1.13 audit round 1 fixes, non-author: alt text, trailer check and tag-order note, and the package-check and GIF-scan gate lines reviewed against src/validate.mjs and test/content.test.mjs. Claude editorial review."
     },
     "CLAUDE.md": {
       "sha256": "09976587703de7dff40a2fd5074d655f31072c33ea76ffd4ecc58fad87e1ea7c",
@@ -48,9 +48,9 @@
       "disposition": "instructions-and-qualified-status-only"
     },
     "README.md": {
-      "sha256": "713fed5b1f18af9327498cc76904dab34c149306381fb2241ccd0f8d872b7b7b",
+      "sha256": "4a9fe7f0ec6cfefa79d6449eff1cb94354364acb81355ef42ee71f6bdc40ce42",
       "disposition": "status-claims-bound-to-receipts",
-      "review": "0.1.2: the installer prompt block became a two-row choice table and one save-location sentence; reviewed by Claude against install-choice.txt and SKILL.md, same facts. Reviewed the requested skill-pack framing and each learning-table sentence against its linked canonical instructions; preserved the twelve stages, starter, setup card and sibling links. Demo URL awaits the separately recorded artifact. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. 0.1.4: reviewed the added coding-research description and fourteen-domain wording against the canonical prompts and checklists; package release remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. ROUND 1 (2026-09-24): added the receipts' one-run and operator-configuration limitations to the promoted wording, per the code-reviewer finding. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 2026-09-28: the \"Part of a set\" model-orchestrator row now carries that package's 1.0.0 description, verified identical to `npm view model-orchestrator description`; no claim about this package changed. Claude editorial review.",
+      "review": "0.1.2: the installer prompt block became a two-row choice table and one save-location sentence; reviewed by Claude against install-choice.txt and SKILL.md, same facts. Reviewed the requested skill-pack framing and each learning-table sentence against its linked canonical instructions; preserved the twelve stages, starter, setup card and sibling links. Demo URL awaits the separately recorded artifact. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. 0.1.4: reviewed the added coding-research description and fourteen-domain wording against the canonical prompts and checklists; package release remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. ROUND 1 (2026-09-24): added the receipts' one-run and operator-configuration limitations to the promoted wording, per the code-reviewer finding. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 2026-09-28: the \"Part of a set\" model-orchestrator row now carries that package's 1.0.0 description, verified identical to `npm view model-orchestrator description`; no claim about this package changed. Claude editorial review. 0.1.12: reviewed Gemini host label, unchanged sibling section relocation, receipt-based Uninstall section and FAQ link, and the seven-link Read next index against the supplied repository canon audit. Implementation-agent editorial review; independent review remains pending. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending. 0.1.13 hero trailer: reviewed against the approved v2a render. 0.1.13 audit round 1 fixes, non-author: alt text, trailer check and tag-order note, and the package-check and GIF-scan gate lines reviewed against src/validate.mjs and test/content.test.mjs. Claude editorial review.",
       "claims": [
         {
           "text": "Native loading is tested",
@@ -67,18 +67,19 @@
       ]
     },
     "RELEASING.md": {
-      "sha256": "bf1e8205d309d906b225b6bc76a5fb09012f6068ddaf0e64cc8fe406f726c6e4",
+      "sha256": "0d0227d18f93758650614afa43a213af78574623c63825150732281b000812c5",
       "disposition": "instructions-and-qualified-status-only",
-      "review": "0.1.3: reviewed the same-commit description update and explicit GitHub command against the task specification; no live repository setting was changed in this offline implementation pass. Implementation-agent editorial review; independent review remains pending. The command uses the exact repository URL to preserve the existing privacy allowance for public repository references. 0.1.9: step 6 now names both package-lock.json version fields, matching vault 05_how_we_build_repos 6.2; the lock had stayed at 0.1.6 through 0.1.8. Claude editorial review against scripts/check.mjs version comparison. Reviewed step 2 and the Writes section against scripts/build.mjs --rehash; plain build still writes only bundles and llms.txt. Claude editorial review; code audited separately by another model family."
+      "review": "0.1.3: reviewed the same-commit description update and explicit GitHub command against the task specification; no live repository setting was changed in this offline implementation pass. Implementation-agent editorial review; independent review remains pending. The command uses the exact repository URL to preserve the existing privacy allowance for public repository references. 0.1.9: step 6 now names both package-lock.json version fields, matching vault 05_how_we_build_repos 6.2; the lock had stayed at 0.1.6 through 0.1.8. Claude editorial review against scripts/check.mjs version comparison. Reviewed step 2 and the Writes section against scripts/build.mjs --rehash; plain build still writes only bundles and llms.txt. Claude editorial review; code audited separately by another model family. 0.1.12: reviewed 57-file install count supplied by the maintainer audit, present-tense failure modes, one installer write statement, GitHub release step, registry lag and README/description/provenance/funding completion checks against the supplied repository canon audit. Implementation-agent editorial review; independent review remains pending. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending.. 0.1.13 audit round 1 fixes, non-author: alt text, trailer check and tag-order note, and the package-check and GIF-scan gate lines reviewed against src/validate.mjs and test/content.test.mjs. Claude editorial review."
     },
     "REPO_SETTINGS.md": {
-      "sha256": "4460fa8f5379df2991fc11eb55ba7ae6319ca66acc5a2f8702b3b64b6847d967",
+      "sha256": "ccace33e8ec71e10616729888406098136a1b60ee626da8a68856a50af0b3e97",
       "disposition": "instructions-and-qualified-status-only",
-      "review": "Topic list changed to match the skill-pack framing and package.json keywords (20 topics). Reviewed by Claude against the check TOPICS rule. 0.1.3: matched the Description text to package.json and added the requested 2026-09-23 read-back row from the maintainer task bundle; GitHub and npm were not independently queried in this offline implementation pass. Implementation-agent editorial review; independent review remains pending. 0.1.7: description line replaced with the unified 155-character string also set in package.json and plugin.json. Claude editorial review."
+      "review": "Topic list changed to match the skill-pack framing and package.json keywords (20 topics). Reviewed by Claude against the check TOPICS rule. 0.1.3: matched the Description text to package.json and added the requested 2026-09-23 read-back row from the maintainer task bundle; GitHub and npm were not independently queried in this offline implementation pass. Implementation-agent editorial review; independent review remains pending. 0.1.7: description line replaced with the unified 155-character string also set in package.json and plugin.json. Claude editorial review. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending."
     },
     "SECURITY.md": {
-      "sha256": "9e0a9064cd020c23ae82f4c734ceab24bb9e4297073227a49ecc41414e33f8b7",
-      "disposition": "instructions-and-qualified-status-only"
+      "sha256": "87c5e2f67cb494495d9690034128a759c07ef445e4eb201f82fa0177481d6d63",
+      "disposition": "instructions-and-qualified-status-only",
+      "review": "0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending."
     },
     "adapters/agents-md.md": {
       "sha256": "c00b15550493055d21c44cccc213a9315514649f45df0ac42b3370d470b661af",
@@ -86,9 +87,9 @@
       "review": "Reviewed setup instructions, tool fallback gates and compatibility links against the previous adapter; research status and safety requirements preserved. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending."
     },
     "adapters/antigravity.md": {
-      "sha256": "3cef0375be38e6c587c9175463f2e94424244f66e423555cf8819a6ca266269e",
+      "sha256": "c2e6c5000af64d35a583252c23a71f4ce1b85b43f243e980558e5d12c3809f01",
       "disposition": "instructions-and-qualified-status-only",
-      "review": "Reviewed setup instructions, tool fallback gates and compatibility links against the previous adapter; research status and safety requirements preserved. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending."
+      "review": "Reviewed setup instructions, tool fallback gates and compatibility links against the previous adapter; research status and safety requirements preserved. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.12: reviewed Gemini host heading with target flag, paths and activation status preserved against the supplied repository canon audit. Implementation-agent editorial review; independent review remains pending."
     },
     "adapters/chatgpt-project.md": {
       "sha256": "e8faa8762cd4501f3400d81cd90bca91d09b43e51ad74d8b03a7e1a0a6cdfa30",
@@ -149,7 +150,7 @@
       "review": "Reviewed setup instructions, tool fallback gates and compatibility links against the previous adapter; research status and safety requirements preserved. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending."
     },
     "docs/COMPATIBILITY.md": {
-      "sha256": "4f51a66171eb84590e7e919e2ffd23010e475fec9b48ce6b52ad73b918df15a9",
+      "sha256": "c9724982b8fd941357aebeeb1174c8d978a6808457f12dd4c976593b88c4936b",
       "disposition": "status-claims-bound-to-receipts",
       "claims": [
         {
@@ -165,10 +166,10 @@
           "evidence": "docs/evidence/host-trial-grok-build-2026-09-24.json"
         }
       ],
-      "review": "Reviewed documented setup routes and required trial evidence; retained the existing revision-bound hosted-check claim and receipt. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. ROUND 1 (2026-09-24): added the receipts' one-run and operator-configuration limitations to the promoted wording, per the code-reviewer finding. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.7: Grok Bot row stays under documented setups (no receipt), now pointing at the new Grok Bot section and naming what to verify. Claude editorial review."
+      "review": "Reviewed documented setup routes and required trial evidence; retained the existing revision-bound hosted-check claim and receipt. Implementation-agent editorial review; independent review remains pending. Reviewed for the ROUND 1 audit: restored the positive, once-stated native-loading status fact for adapters, README and compatibility docs, without implying native loading is proven. Claude (builder, non-author fixer) editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. ROUND 1 (2026-09-24): added the receipts' one-run and operator-configuration limitations to the promoted wording, per the code-reviewer finding. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.7: Grok Bot row stays under documented setups (no receipt), now pointing at the new Grok Bot section and naming what to verify. Claude editorial review. 0.1.12: reviewed Gemini host label with adapter paths and activation status preserved against the supplied repository canon audit. Implementation-agent editorial review; independent review remains pending."
     },
     "docs/EVALUATION.md": {
-      "sha256": "cb34b13e24b906496d0f05ef20187695bd51defe75b25abb7df8d5ad2935c32d",
+      "sha256": "fab5e3b0fbff0febbf8384ca99e29f96a5c8fbf455bea67398c4da5dff5ad8ec",
       "disposition": "evidence-backed",
       "claims": [
         {
@@ -176,12 +177,12 @@
           "evidence": "docs/evidence/audit-baseline.json"
         }
       ],
-      "review": "Reviewed the exact two-sibling allowlist against production privacy rules and rejection regressions. Implementation-agent editorial review; independent review remains pending."
+      "review": "Reviewed the exact two-sibling allowlist against production privacy rules and rejection regressions. Implementation-agent editorial review; independent review remains pending. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending."
     },
     "docs/INSTALLER.md": {
-      "sha256": "4a6c7c35729d0031a9c26bc7610ad6b0de9ae1ff7cc7da4c3a7fcf05d96e3e1f",
+      "sha256": "a0113352fbe0e1ecc43c0bd13d18b8ac7c78e0fb2a6aac610cf987c6195ae9f5",
       "disposition": "instructions-and-qualified-status-only",
-      "review": "Reviewed npm commands and loading instructions against the CLI contract and existing installer tests; flags and exit policy preserved. Implementation-agent editorial review; independent review remains pending. 0.1.3: reviewed the installed skill folder resolution root, exit 3 and Path escapes destination root message against src/install.mjs and the installer regression. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending."
+      "review": "Reviewed npm commands and loading instructions against the CLI contract and existing installer tests; flags and exit policy preserved. Implementation-agent editorial review; independent review remains pending. 0.1.3: reviewed the installed skill folder resolution root, exit 3 and Path escapes destination root message against src/install.mjs and the installer regression. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending. 0.1.13 hero trailer: reviewed against the approved v2a render"
     },
     "docs/METHOD.md": {
       "sha256": "3b45db282de20f327c903e86f6d7da9440b5913907dfb75cadedf5e6b7210f95",
@@ -329,8 +330,8 @@
     },
     "docs/evaluation/host-gate.md": {
       "disposition": "instructions-and-qualified-status-only",
-      "sha256": "9b3655277a8ed181310247e2536888b221547590537715393d88ea0cc4c7af3f",
-      "review": "Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending."
+      "sha256": "71e20110a1b1cb0e50a0797d0940ec9e4bf3232022d7fe3769a43ec011b5f39f",
+      "review": "Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. 0.1.12 canon audit round 1: reviewed against canon audit round 1. Claude (non-author fixer) editorial review; independent review remains pending."
     }
   }
 }

package/llms.txt

@@ -13,6 +13,11 @@ Generated from skills/website-build-skill/manifest.json. Repository: https://git
 
 TEAM: one command installs the seven workers' files; you open each session yourself and carry the handoffs between them. Researcher goes first.
 
+## Part of a set
+
+- [agent-personalizer](https://github.com/aunysillyme/agent-personalizer): One interview writes the profile and rules every AI you use reads, kept in sync from one source.
+- [model-orchestrator](https://github.com/aunysillyme/model-orchestrator): Model router for AI coding agents: installs routing rules, 8 subagents, hooks and a CLI runner so your AI picks model and effort per task and saves tokens.
+
 ## Active sources
 
 - [SKILL.md](skills/website-build-skill/SKILL.md): Website Build Skill

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "website-build-skill",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "A skill pack that turns your AI into an expert website builder: current research, design, code, accessibility, speed, SEO and security, alone or as a team.",
   "type": "module",
   "license": "MIT",
@@ -47,6 +47,7 @@
     "skills/",
     "adapters/",
     "docs/",
+    "!docs/*.gif",
     "README.md",
     "LICENSE",
     "CHANGELOG.md",
@@ -64,5 +65,6 @@
   "homepage": "https://github.com/aunysillyme/website-build-skill",
   "bugs": {
     "url": "https://github.com/aunysillyme/website-build-skill/issues"
-  }
+  },
+  "funding": "https://github.com/sponsors/aunysillyme"
 }

package/skills/website-build-skill/manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "packageVersion": "0.1.11",
+  "packageVersion": "0.1.13",
   "skillName": "website-build-skill",
   "pathBase": "All asset paths resolve from this manifest directory; runtime paths resolve in the authorized user project.",
   "assets": [

package/src/bundle.mjs

@@ -144,6 +144,9 @@ export function generated(root) {
   index += '- [Compatibility](docs/COMPATIBILITY.md): host setup routes and the evidence for each\n';
   index += '- [Documentation](docs/README.md): method, tips, provenance and evaluation\n\n';
   index += "TEAM: one command installs the seven workers' files; you open each session yourself and carry the handoffs between them. Researcher goes first.\n\n";
+  index += '## Part of a set\n\n';
+  index += '- [agent-personalizer](https://github.com/aunysillyme/agent-personalizer): One interview writes the profile and rules every AI you use reads, kept in sync from one source.\n';
+  index += '- [model-orchestrator](https://github.com/aunysillyme/model-orchestrator): Model router for AI coding agents: installs routing rules, 8 subagents, hooks and a CLI runner so your AI picks model and effort per task and saves tokens.\n\n';
   index += '## Active sources\n\n';
   for (const asset of m.assets.filter(a => a.active)) index += `- [${asset.path}](${CORE}/${asset.path}): ${describe(root, asset)}\n`;
   index += '\n## Bundles\n\n';

package/src/validate.mjs

@@ -5,6 +5,7 @@ import { CORE, ARCHIVE, ARCHIVE_SHA, digest, files, read, manifest, generated, o
 const roles = ['researcher', 'coordinator', 'designer', 'graphics', 'builder', 'optimizer', 'reviewer'];
 const headings = ['IDENTITY', 'WHAT YOU OWN', 'BOUNDARIES', 'WHAT YOU NEED TO KNOW BEFORE YOU START', 'WHAT YOU MUST LEARN', 'WHAT YOU MUST RESEARCH', 'YOUR TOOLS', 'YOUR INPUTS', 'YOUR OUTPUTS', 'YOUR GATE', 'YOUR HANDOFF', 'HOW YOU FAIL'];
 const owner = ['au', 'ny', 'sillyme'].join('');
+const funding = ['https://github.com', 'sponsors', owner].join('/');
 const personal = ['au', 'ny'].join('');
 const product = ['Claude', 'Code'].join(' ');
 const forbidden = [personal, product, ['Vau','lts'].join(''), ['A','UN-'].join(''), ['linear','.app'].join(''), ['/','Users','/'].join(''), ['@','gmail'].join(''), ['site','builder','skill'].join('-')];
@@ -31,6 +32,13 @@ export function privacyIssues(name, text, options = {}) {
     const productPath = new RegExp(`(?:~|\\$HOME|%USERPROFILE%|[A-Za-z]:)?[\\\\/]${product}(?=[\\\\/ ]|$)`, 'i');
     if (productPath.test(normalised)) { issues.push(`PRIVACY:${name}:${i + 1}`); continue; }
     line = line.replaceAll(product, 'PUBLIC_PRODUCT');
+    // Only the exact public funding URL is exempt; other Sponsors URLs fail closed.
+    // Sentence punctuation after the exact URL (. , ; : ] > *) is trimmed before the compare.
+    line = line.replace(/https:\/\/github\.com\/sponsors\/[^\s)"'`]+/g, url => {
+      if (url.replace(/[.,;:\]>*]+$/, '') === funding) return 'PUBLIC_FUNDING';
+      issues.push(`PRIVACY:${name}:${i + 1}`);
+      return url;
+    });
     // Only exact repository URL namespaces, never the whole line around a URL. npm's
     // `github:owner/repo` shorthand is the same repository reference in the form a package
     // manager takes, so it is exempt in exactly that spelling and no other.
@@ -235,7 +243,9 @@ export function check(root, options = {}) {
   } catch { published = false; }
   const protect = (name, fn) => { try { fn(); } catch (e) { issues.push(`${name}:${e.message}`); } };
   for (const name of names) {
-    const text = read(root, name);
+    // A GIF is compressed bytes, not prose: a text scan matches random byte runs (an em dash
+    // sequence, an at-sign). Its path is still checked; only the content scan is skipped.
+    const text = /\.gif$/i.test(name) ? '' : read(root, name);
     issues.push(...privacyIssues(name, text, options));
     if (name.endsWith('.md') || name === 'llms.txt') issues.push(...linkIssues(root, name, text));
     if (name.endsWith('.md')) issues.push(...installClaimIssues(name, text, published));
@@ -325,12 +335,17 @@ export function check(root, options = {}) {
     if (binEntry !== 'bin/website-build-skill.mjs') issues.push('PACKAGE_HONESTY:bin must name the real entry point');
     else if (/UNAVAILABLE/.test(read(root, binEntry))) issues.push('PACKAGE_HONESTY:bin is still the unavailable sentinel');
     // A published tarball that omits any of these installs nothing on a stranger's machine.
-    // A negation can empty one of them while the entry it negates is still listed, so the
-    // list is compared on its effective entries, and `src` and `src/` are the same entry.
+    // A negation can empty one of them while the entry it negates is still listed. Only
+    // the GIF exclusion is allowed: documentation serves those images by raw URL.
+    // `src` and `src/` are the same entry.
     const published = (p.files ?? []).map(entry => String(entry).replace(/\/+$/, ''));
-    if (published.some(entry => entry.startsWith('!'))) issues.push('PACKAGE_FILES:a negated entry can empty a published path');
+    if (published.some(entry => entry.startsWith('!') && entry !== '!docs/*.gif')) issues.push('PACKAGE_FILES:a negated entry can empty a published path');
     for (const needed of ['bin', 'src', 'skills', 'docs', 'README.md', 'LICENSE'])
       if (!published.includes(needed)) issues.push(`PACKAGE_FILES:${needed} is not published`);
+    // npm applies the list in order, so an exclusion placed before the entry it trims
+    // removes nothing and both GIFs still ship.
+    if (published.includes('!docs/*.gif') && published.indexOf('!docs/*.gif') < published.indexOf('docs'))
+      issues.push('PACKAGE_FILES:!docs/*.gif must come after the docs entry or it excludes nothing');
     const floor = p.engines?.node?.match(/(\d+)/)?.[1];
     const checks = JSON.parse(read(root, '.github/workflows/check.yml')).jobs?.checks;
     const matrix = checks?.strategy?.matrix?.node;