Make packaged authoring references publicly usable

README.md

@@ -6,7 +6,7 @@ canonical Skills and bundled CLI are packaged once for Claude Code and Codex. UI
 app's own design and components. The public catalog and Drawing Board pins determine what an installed workspace
 actually receives.
 
-Source candidate `0.7.0` requires CLI `0.7.0`, Service API `0.6`, and Foundation Plan `0.22`. New remote work uses production
+Source candidate `0.7.1` requires CLI `0.7.0`, Service API `0.6`, and Foundation Plan `0.22`. New remote work uses production
 at `https://firstdraft.com`; staging is explicit with `firstdraft --staging ...` and a separate staging token.
 It preserves the planning workspace under `.firstdraft/design/` and defaults to current-folder local output.
 Use explicit `--github` for server

RELEASING.md

@@ -8,7 +8,7 @@ longer part of an ordinary release. Coordinate the service, CLI, and Skills thro
 
 [`release/compatibility.json`](release/compatibility.json) owns the candidate version, compatible CLI/API/Plan
 identities, and deterministic package SHA-256. The current source candidate is
-`@firstdraft.com/claude-code@0.7.0` with CLI `0.7.0`, API `>= 0.6.0`, `< 0.7.0`, and Plan `sketch/0.22`.
+`@firstdraft.com/claude-code@0.7.1` with CLI `0.7.0`, API `>= 0.6.0`, `< 0.7.0`, and Plan `sketch/0.22`.
 The [marketplace manifest](.claude-plugin/marketplace.json) independently selects a published plugin version;
 retain its selection until the intended new version is actually published. Source compatibility is not public
 catalog selection. Query npm when releasing rather than treating a dated distribution snapshot as current.

evidence/README.md

@@ -76,7 +76,7 @@ The source/public split observed at the start of this documentation change is ca
 
 | Record | Purpose |
 |---|---|
-| [`repository-history.md`](repository-history.md) | Exact cross-repository pins, old README evidence summaries, and eval notes |
+| [`repository-history.md`](repository-history.md) | Exact cross-repository pins, old README evidence summaries, eval notes, and [archived packaged-reference receipts](repository-history.md#packaged-reference-evidence-archived-on-2026-09-27) |
 | [`release-history.md`](release-history.md) | Completed 0.1.0/0.1.1 chronology and historical package-first command; archived 2026-08-13 |
 
 Historical narratives preserve facts that no longer belong in entry pages or the current runbook. When they conflict

evidence/repository-history.md

@@ -420,3 +420,64 @@ staging Publication, generated-application execution, representative user operat
 readiness. The 2026-08-04 report establishes one pinned fresh Claude Code operation of that local fixture, not a
 published or representative-user journey. The older dated observation separately records generated-app execution
 but does not widen those journey claims beyond the independent-scalar-Entity and public-index slice it exercised.
+
+## Packaged reference evidence archived on 2026-09-27
+
+The following receipts and source-composition pins previously appeared in the ordinary authoring path of
+`foundation-plan-022.md` at Skills `5e28b667ebeb76846ad4857e6d195ed01a5a8fa1` (plugin 0.7.0). They are retained
+here for maintainers, not as current support authority. Service repository links below require repository access;
+public authors do not need them to use the packaged Skill. Moving these summaries adds no execution evidence.
+The packaged reference continues to distinguish accepted syntax, supported meaning, generated source, and
+observed behavior, using the matching Analysis result and reviewed GapSet for the submitted Plan.
+
+**Implementation and observation evidence**
+
+- The Service's generated
+  [evidence index](https://github.com/firstdraft/firstdraft/blob/4a89f5e3ab027c9099c21ff4912b3eb4af5c93e0/docs/evidence/status.md)
+  distinguishes implemented, exercised, generated-output, hosted, and observed claims. The September 12
+  [Android qualification](https://github.com/firstdraft/firstdraft/blob/89a2d6866f9448f4e75b58cac26f61c52daaa0b0/docs/solutions/2026-09-12-generated-android-preview.md)
+  records GitHub APK delivery and local Android public navigation, forms, theme, and layout checks. Revyl loaded
+  Rails, but its available device's WebView was too old for a clean preview. These observations do not establish a
+  fresh student sign-in, native authentication, service deployment, or arbitrary application support.
+- The September 14
+  [generated UI qualification](https://github.com/firstdraft/firstdraft/blob/00e92e397dfbb5bc4dfda69f0d1cf48c5e7beff8/docs/solutions/2026-09-14-generated-ui-integration.md)
+  records compiled Oscar, Case, and Equipment foundations, browser checks, and bounded iPhone Revyl interactions.
+  Its receipts bind each check to exact inputs; they do not prove this plugin's agent behavior, a fresh student
+  journey, physical-device installation, or production deployment.
+- The [iPhone Revyl receipt](https://github.com/firstdraft/firstdraft/blob/89a2d6866f9448f4e75b58cac26f61c52daaa0b0/docs/solutions/2026-09-12-revyl-preview-release.md)
+  separately records an emitted iPhone index and live Rails refresh. It did not exercise native forms or Back in
+  Revyl. The [native target](https://github.com/firstdraft/firstdraft/blob/4a89f5e3ab027c9099c21ff4912b3eb4af5c93e0/docs/architecture/targets/rails/capabilities/native.md)
+  owns generated iPhone detail/form routing and its separate source, Simulator, and browser evidence. Android
+  runtime observations do not qualify iPhone runtime behavior.
+- The September 13
+  [Android usability report](https://github.com/firstdraft/firstdraft/blob/9ff77985c821501f0174aec5da6192871395cd6b/docs/solutions/2026-09-13-native-screen-usability.md)
+  records local Android Emulator interaction and browser checks; Android Studio UI steps were not executed. The
+  separate [iOS interaction report](https://github.com/firstdraft/firstdraft/blob/9ff77985c821501f0174aec5da6192871395cd6b/docs/solutions/2026-09-13-ios-interaction-polish.md)
+  records ordinary Compilation and local Simulator checks for More, forms, Cancel, text sizing, and landscape
+  keyboard behavior. These local observations do not repeat the earlier Revyl journey or qualify a fresh student.
+- The Android receipt also records the required-enum presence correction and its generated schema-check failure.
+  The [model renderer](https://github.com/firstdraft/firstdraft/blob/89a2d6866f9448f4e75b58cac26f61c52daaa0b0/lib/foundation_plan/rails_target/compiler/renderers/model.rb)
+  at that historical revision emitted `enum` with `validate: true`, `scopes: false`, `instance_methods: false`, and
+  separate presence validation. Current helper behavior follows the [packaged enum reference](../skills/create-full-stack-app/references/foundation-plan-022.md#enums).
+- A dated
+  [staging discovery smoke](https://github.com/firstdraft/skills/blob/e0212cad0a89a8b0e38678e371389085f6ddc254/evidence/2026-08-10-staging-movie-catalog-discovery-smoke.md)
+  records one older OAuth/App-backed private-repository Publication at its named identities. It is not deployment
+  evidence: Publication created a repository but did not deploy an application. The observation binds only that
+  invocation and is not current capability authority.
+- Older controlled smokes and the 2026-07-31 fresh-agent field report remain historical receipts in the source
+  repository's evidence archive. They must not be used to narrow or widen the current profile.
+
+**Native source composition at the archived reference**
+
+The reference selected Service `4a89f5e3ab027c9099c21ff4912b3eb4af5c93e0`, composing iOS Core
+`7365ba0bf7ea5e6c8e8223d24e54cf685b067950` and Android Core `6a07e79197f2acbcaab9d15eb4dc61aa9ca5c94e`.
+These are source pins, not device observations. Each generated application's `FOUNDATION_PROVENANCE.json`
+records its own composition.
+
+**Bounded Policy qualification**
+
+The
+[dated reviewed-realization qualification](https://github.com/firstdraft/firstdraft/blob/89a2d6866f9448f4e75b58cac26f61c52daaa0b0/docs/solutions/2026-08-28-reviewed-realization-local-qualification.md)
+records a Case Chat result with all 14 authored Policies and their admitted protected Web consumers and no Policy or
+dependent Scaffold gap. That reviewed application is one exact supported graph, not a general claim that arbitrary
+Policy expressions or protected consumers are realized.

packages/claude-plugin/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "firstdraft",
   "displayName": "First Draft",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Author a Foundation Plan and compile a bounded Rails, iPhone, and Android application",
   "author": {
     "name": "First Draft",

packages/claude-plugin/package.template.json

@@ -1,6 +1,6 @@
 {
   "name": "@firstdraft.com/claude-code",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "First Draft Foundation Plan authoring and UI development for Claude Code and Codex",
   "license": "MIT",
   "type": "module",

release/compatibility.json

@@ -1,10 +1,10 @@
 {
   "format": "firstdraft.release-compatibility/1",
   "component": "skills",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "plugin_source": {
     "package": "@firstdraft.com/claude-code",
-    "tarball_sha256": "7a445058a78abf401308a79a7cf4decb3a8462f483284b8bf74c5d11b0d265c7"
+    "tarball_sha256": "c8194aa4779b4889d04beb13d6d79ee71d45c13f783a5e7481c792dc3a4a77a5"
   },
   "requires": {
     "api_contract": [

skills/create-full-stack-app/SKILL.md

@@ -23,7 +23,7 @@ explicit handoff. Follow [writing notes](references/modeling-guide.md#retain-imp
 
 ## Current boundary
 
-Targets plugin 0.7.0, CLI 0.7.0, API 0.6, Plan 0.22; catalog selection is separate.
+Targets plugin 0.7.1, CLI 0.7.0, API 0.6, Plan 0.22; catalog selection is separate.
 
 - Bounded generation includes Web Accounts/Policies/Scaffolds, development data, and selected iPhone/Android
   clients. [Appearance](references/foundation-plan-022.md#application-and-clients) controls theme, native colors,

skills/create-full-stack-app/references/diagnostics-and-recovery.md

@@ -9,7 +9,7 @@ interleaved output fail closed. Branch on the object's stable `error` and struct
 human-readable `detail` or broad process exit status.
 
 The source candidate uses `@firstdraft.com/cli@0.7.0`. Its exact reviewed revision and runtime digest are owned by
-[the CLI contract configuration](https://github.com/firstdraft/skills/blob/claude-v0.7.0/script/cli-contract/config.mjs)
+[the CLI contract configuration](https://github.com/firstdraft/skills/blob/claude-v0.7.1/script/cli-contract/config.mjs)
 at this plugin's protected release tag. Check the command surface rather than assuming the version alone
 establishes compatibility. These source checks do not prove plugin/catalog publication, service authentication,
 staging compatibility, or a complete user journey.