Prove proposal authoring through the shipped guide and source-bound runtime

README.md

@@ -509,12 +509,12 @@ boundary. `AuthoringPlan` remains the semantic input contract for existing consu
 deprecated semantic `compileAuthoringPlan()` adapt that contract; their returned `canonicalPlan`
 is a `GeneratedAuthoringPlan` that consumers review and write.
 
-For HTML authoring, a harness first calls `collectSourceEvidence()` (or `author()` analysis) and
-then sends `AuthorOptions.proposal`: an ordered native structure with the returned `sourceRef`s,
-editor fields/locks, and any explicit content decisions. Block Runner binds exact source content,
-assets, CSS coverage, and required warnings before returning the same canonical plan. Existing
-complete `AuthorOptions.plan` callers remain supported. Component foundation containment remains
-an explicit `author.styles.foundation: 'component'` caller policy.
+For HTML authoring, the primary path first calls `collectSourceEvidence()` and then sends
+`AuthorOptions.proposal`: an ordered native structure with the returned `sourceRef`s, editor
+fields/locks, and reviewed source decisions. Block Runner owns exact source hashes/content coverage,
+assets, native style adapters, CSS coverage, and mandatory warnings before returning the canonical
+plan. Inspection/validation need no consent; only the final canonical write identity does. Existing
+complete `AuthorOptions.plan` callers remain supported as an advanced compatibility route.
 The runnable [authoring lifecycle example](examples/authoring-plan.ts) uses the same shape as the
 CLI and skill examples from proposal through preview, confirmation identity, and generation.
 

benchmarks/authoring/fixtures.json

@@ -153,9 +153,19 @@
       "producer": "utility-generator",
       "sourceStyle": "utility-tailwind",
       "source": {
-        "path": "sources/utility/hero.html",
-        "sha256": "e2498a57e8306a15f5409d1245ca016aa4aa20399486bf14a1705419054fb9a4"
+        "path": "sources/utility/hero-handoff.html",
+        "sha256": "f2f5e7794f73fa4684bc5e897769f8ed8eab98e81730a0a8dde3a5e50ae8961d"
       },
+      "sourceDependencies": [
+        {
+          "path": "sources/utility/hero.css",
+          "sha256": "b748973dec35c2b80d7d432eb7b41049999481165084e78c17b98161ecad778e"
+        },
+        {
+          "path": "sources/utility/assets/aurora-dashboard.svg",
+          "sha256": "18ab15d443086fa3fc379734c0f0e86b891535ea222f6499e0b37170067e6cf9"
+        }
+      ],
       "prompt": "fixtures/hero-utility/prompt.md",
       "plan": "fixtures/hero-utility/expected-plan.json",
       "requiredDimensions": [

benchmarks/authoring/hashes.json

@@ -3,26 +3,26 @@
   "generatedFrom": "repository content; regenerate before a release record if any listed input changes",
   "values": {
     "suiteHash": {
-      "value": "39fba6758e1a932eb36e6d50a239fb8ef2efd73433de80da87b2d365a988bb05",
+      "value": "8debeb3552997932370a5247feb37a80a860bc3be0ed13c2e3c99464513a705d",
       "inputs": "all corpus files except hashes.json and runs/, ordered by path; canonical JSON path/raw-byte-SHA-256 pairs"
     },
     "fixtureDefinitionHash": {
       "value": "32653d4026f867c074afa8972ae14abfd5243921030ad544cdbd299e8e8864d2",
       "inputs": "fixtures/** as canonical path/raw-byte-SHA-256 pairs"
     },
     "sourceSetHash": {
-      "value": "edf36ad64ceacfe70c35cf46fa0736909966e2b0a9b137b8c3955492238a8bf0",
+      "value": "4ec90e3c800054e580904eb4dd168ec11b5a58d37e79f4ad16f9b5a4ea9fd665",
       "inputs": "sources/** as canonical path/raw-byte-SHA-256 pairs"
     },
-    "fixtureIndexHash": "c560c31530b96f05ba42f5a29344e38cc0dd656b17c8db0b7219776431f4b671",
+    "fixtureIndexHash": "1b5e4eba63c1fa85568c40aa9591860a9af5d3b452b8ac0c97687e24d7e05693",
     "fixtureSchemaHash": "d5508b413d5b01421557b7cedb7bd19ce4e0c29566f0809df02e9fd410127a77",
     "contractHash": "c0e163ec94dc0b151a3623560531fa44fd9336c01137b9bc8ba33131088bcc0c",
     "candidateContractHash": "78da7e741e3290582c0828a6b1e06a3ee61190e79d5e9455841d310c18fdccc0",
     "provenanceGuideHash": "e207e0500de3a005b5df113baff578e26801c2aa5547f2cb8d914ea58e190bfa",
     "releaseMatrixHash": "29d0e8c0965de9ee106423744820f3e8980533696992b05d14141437c405abb6",
     "suiteManifestHash": "abe91aa331fd5b90db4df08fbc0b51ea83cfa1a4b3fff356a584bb6550989732",
-    "fixtureManifestHash": "2d3dac0f9f114c2901d6b5660a9d8115142f1f55d305eeea631b466ba6eb9dca",
-    "sourceDependencyHash": "d8e39545a4fc92817f916afbff48ad726c5d046d31ba4d794aa5bef01d15ad9e",
+    "fixtureManifestHash": "3f1a89cfcb21348f1b44c2e2140caf3d524a32e6a9bc26641027e228b37fea1f",
+    "sourceDependencyHash": "9b68b11cee485394d605aa0428cc9a21e28bad4df06f86b3aca3a5f8e4466bb6",
     "expectedPlanHash": "08b80782525056282b6c2dac70ae0350894fff4ed6058237e5e0e4d9a2cf0865",
     "receiptSchemaHash": "90b4cc60efabc87f3c60f7c28fae21e95ad35c030aa454c97c9e2b0941d373f5"
   },

benchmarks/authoring/sources/utility/hero-handoff.html

@@ -0,0 +1,18 @@
+<link rel="stylesheet" href="./hero.css" />
+<section class="relative isolate overflow-hidden bg-slate-950 text-white" aria-labelledby="hero-title">
+  <div class="mx-auto grid min-h-[680px] max-w-7xl grid-cols-1 items-center gap-12 px-6 py-20 sm:px-8 lg:grid-cols-2 lg:px-12">
+    <div class="max-w-2xl">
+      <p class="mb-5 text-sm font-semibold uppercase tracking-[0.18em] text-cyan-300">Block Runner 0.9</p>
+      <h1 id="hero-title" class="text-5xl font-semibold leading-[1.04] tracking-tight sm:text-6xl lg:text-7xl">Build a WordPress block your team can keep editing.</h1>
+      <p class="mt-6 max-w-xl text-lg leading-8 text-slate-300">Turn a finished interface into a registered block with clear controls, native markup, and a source trail reviewers can inspect.</p>
+      <div class="mt-9 flex flex-col gap-3 sm:flex-row" aria-label="Get started">
+        <a href="/download" class="inline-flex justify-center rounded-md bg-cyan-300 px-5 py-3 text-sm font-semibold text-slate-950 transition hover:bg-cyan-200 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-cyan-300">Download the testing release</a>
+        <a href="/docs/authoring" class="inline-flex justify-center rounded-md border border-white/25 px-5 py-3 text-sm font-semibold text-white transition hover:bg-white/10 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-white">Read the authoring guide</a>
+      </div>
+    </div>
+    <figure class="relative">
+      <img src="./assets/aurora-dashboard.svg" alt="Aurora dashboard with color tokens, release receipts, and a completed activation check" width="960" height="640" class="relative w-full rounded-xl border border-white/10 bg-slate-900 shadow-2xl shadow-black/40" />
+      <figcaption class="mt-3 text-sm text-slate-400">Native controls stay with the block, not in a screenshot.</figcaption>
+    </figure>
+  </div>
+</section>