Instrument : les gardes nommées, comme candidats — le plus petit lecteur qui prouve la thèse

Une exception de domaine est une règle qui a un nom, un throw, presque
toujours une épreuve, et souvent aucune déclaration. Si le réglage le
demande (gardes_nommees, adr), le journal rend les candidats qu'aucun
parcours ne cite, avec leur strate et ce qui les cite. Rien ne devient un
constat, aucun état ne change de sens, la section n'existe pas sans les
clés : additif, ignorable.

Ce qu'un dessin de trois lecteurs (Java annoté, SQL, réconciliation)
voulait démontrer, abattu par l'objecteur mandaté, ces quarante lignes
le démontrent : huit exceptions de domaine chez openathle, zéro déclarée.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

envelope/SPEC.md

@@ -1,4 +1,4 @@
-# Assertion Envelope — Specification v1.0
+# Assertion Envelope — Specification v1.2
 
 **Status**: stable. Declared v1.0 upon the first real federated exchange
 between two distinct jurisdictions — openathle → Prismagram, endorsed
@@ -84,12 +84,12 @@ fields (§7).
 | 5 | `statement` | string | REQUIRED. What is asserted, in one sentence or few |
 | 6 | `evidence` | list of `{kind, ref}` | REQUIRED, MAY be empty. A conflict without evidence asks to be believed; evidence names where the fact lives |
 | 7 | `provenance` | string | REQUIRED. One of §6. Transported verbatim (§2.2) |
-| 8 | `confidence` | number | REQUIRED. `0.0`–`1.0`. Transported verbatim. Interpretation policies — decay, half-life, thresholds — are consumer-local readings and MUST NOT modify the transported value |
+| 8 | `confidence` | number | REQUIRED. `0.0`–`1.0`. Transported verbatim. Interpretation policies — decay, half-life, thresholds — are consumer-local readings and MUST NOT modify the transported value. A consumer that *exposes* such a reading declares it (field 15, §4.1) |
 | 9 | `endorsement` | object or null | REQUIRED. `{by, at, rite}`; `rite` is one of `pr_approval`, `ui`, `batch`. `null` means: no human has endorsed this — which is a fact, not a defect |
 | 10 | `jurisdiction` | string | REQUIRED. MUST equal the prefix of `id`. Lowercase ASCII, no separators |
 | 11 | `at` | string | REQUIRED. RFC 3339 timestamp of the asserted state |
 | 12 | `lifecycle` | string | REQUIRED. One of `proposed`, `endorsed`, `superseded`, `rejected`, `under_revision` |
-| 13 | `relations` | object | REQUIRED, MAY be empty. Keys among `amends`, `supersedes`, `depends_on`, `satellite_of`; values are lists of prefixed ids |
+| 13 | `relations` | object | REQUIRED, MAY be empty. Keys among `amends`, `supersedes`, `depends_on`, `satellite_of`, `confirms` (v1.2); values are lists of prefixed ids |
 | 14 | `deadline` | string or null | REQUIRED. RFC 3339. When a falsifiable statement expires into a verdict |
 | 15 | `falsification` | string or null | REQUIRED. What observation would make this assertion false. A hypothesis without one is not a hypothesis |
 
@@ -97,6 +97,37 @@ fields (§7).
 assertion; `endorsement` records the proven event. The two are irreducible:
 a declared status is not an approval (ADR-070 §3.2).
 
+### 4.1 Declared readings (v1.1)
+
+| # | Field | Type | Rule |
+|---|---|---|---|
+| 15 | `confidence_reading` | object | OPTIONAL. Present only when the sender exposes a value it has itself derived from `confidence`. Keys: `policy` (string, the reading's name), `version` (string), `value` (number `0.0`–`1.0`), `as_of` (RFC 3339 timestamp). All four REQUIRED when the object is present |
+
+A decayed confidence is a reading, not a fact. Two auditors applying two decay
+functions to the same verbatim value, on two dates, would disagree without
+either being wrong — and neither could say why. This field makes the reading
+quotable: the verbatim value stays in field 8, the reading stands beside it,
+named, versioned and dated.
+
+It is OPTIONAL because a consumer that never exposes a derived value never owes
+one; it is not optional for those who do (§9).
+
+### 4.2 `confirms` — the measure names what it examined (v1.2)
+
+A `measure` assertion MAY carry `relations.confirms`: the prefixed ids of the
+assertions it examined. The direction is deliberate and it is the whole point:
+**the measure declares what it confirms; the confirmed assertion is never
+edited to point back.** Three reasons, each sufficient. The confirmed
+assertion already exists and is append-only. The instrument already knows what
+it measured — the link is inferred, never typed. And the author of a
+confirmation is the machine that measured, not the agent whose claim is being
+confirmed: a producer MUST NOT emit `confirms` on anything but a `measure` of
+provenance `measured`.
+
+A consumer MAY derive, from `confirms`, which assertions have been examined
+and when — and MAY treat an assertion that no measure has ever confirmed
+differently from one that has. That reading is consumer-local (§4.1).
+
 ## 5. Classes
 
 `invariant`, `step_realized`, `transition`, `traversal`, `stressor`,
@@ -132,6 +163,13 @@ a standard field is a contract change under §8.
   declared stable, nothing more. Consumers MUST treat `envelope: "0.1"`
   messages as v1.0 messages; the schema accepts both values. This equivalence
   is specific to this pair and will not be repeated across future MAJORs.
+- **v1.1 adds field 15 `confidence_reading`** (§4.1) and the consumer rule that
+  governs it (§9). Additive and ignorable: a v1.0 consumer that meets the field
+  preserves it and moves on, exactly as §8 requires of any unknown field. No
+  existing field, class, provenance or rule changed.
+- **v1.2 adds the relation kind `confirms`** (§4.2), carried by measures only.
+  Additive and ignorable: a consumer that does not know the kind preserves it
+  as any unknown key of `relations` and moves on.
 - At most **two published versions per year**. Deprecation is announced in
   this file at least one version before removal.
 - Consumers MUST accept any message whose `envelope` shares their MAJOR and
@@ -155,7 +193,10 @@ MUST NOT emit an endorsement it did not witness as a dated event; MUST NOT
 emit `measured` provenance for anything a machine did not measure.
 
 **Consumer** — MUST NOT mutate `id`, `provenance` or `confidence` of a
-received assertion; MUST NOT reject messages carrying unknown classes or
+received assertion; MUST, when it presents or relays a confidence value it has
+derived from the transported one, carry the verbatim value unchanged **and**
+declare the applied reading in `confidence_reading` (§4.1) — an undeclared
+derived value is not conformant, because nobody can reproduce it; MUST NOT reject messages carrying unknown classes or
 unknown fields (preserve, expose, move on); MUST record received assertions
 append-only; MAY annotate, reference and aggregate received assertions under
 its own identity, and MUST NOT present the result as the origin's.
@@ -163,6 +204,7 @@ its own identity, and MUST NOT present the result as the origin's.
 ## 10. What this contract does not do
 
 It does not say how assertions are stored, projected, displayed or decayed —
-those are jurisdiction-local. It does not transport source documents: sealing
+those are jurisdiction-local. It says only that a decay, once shown, names
+itself (§4.1): the contract governs what is claimed, never how it is computed. It does not transport source documents: sealing
 and encrypting source payloads is storage, not exchange. It does not decide
 who is right: it keeps both parties quotable, at their own risk.

envelope/conformance/producer/invalid/confirms-on-non-measure.json

@@ -0,0 +1,20 @@
+{
+  "reason": "confirms is the measure's word about what it examined; an agent claiming its own assertion is confirmed is self-attestation with a pointer (SPEC §4.2).",
+  "message": {
+    "envelope": "1.2",
+    "id": "temoin/EVI-999",
+    "class": "step_realized",
+    "subject": "x",
+    "statement": "y",
+    "evidence": [],
+    "provenance": "agent:claude-code",
+    "confidence": 0.4,
+    "endorsement": null,
+    "jurisdiction": "temoin",
+    "at": "2026-09-21T08:00:00Z",
+    "lifecycle": "proposed",
+    "relations": { "confirms": ["openathle/MES-INV-011-2"] },
+    "deadline": null,
+    "falsification": null
+  }
+}

envelope/conformance/producer/invalid/reading-without-version.json

@@ -0,0 +1,21 @@
+{
+  "reason": "A declared reading without its version is unreproducible: two auditors on two dates could not tell whether they read alike. All four keys are required when the object is present (SPEC §4.1).",
+  "message": {
+    "envelope": "1.1",
+    "id": "temoin/EVI-999",
+    "class": "measure",
+    "subject": "x",
+    "statement": "y",
+    "evidence": [],
+    "provenance": "measured",
+    "confidence": 1.0,
+    "endorsement": null,
+    "jurisdiction": "temoin",
+    "at": "2026-09-19T08:00:00Z",
+    "lifecycle": "proposed",
+    "relations": {},
+    "deadline": null,
+    "falsification": null,
+    "confidence_reading": { "policy": "half-life-by-class", "value": 0.87, "as_of": "2026-09-19T08:00:00Z" }
+  }
+}

envelope/conformance/producer/valid/declared-reading.json

@@ -0,0 +1,23 @@
+{
+  "envelope": "1.1",
+  "id": "temoin/EVI-129",
+  "class": "measure",
+  "subject": "INV-011",
+  "statement": "Detected mishoused on 8 September, reinforced on 10 — the loop closed.",
+  "evidence": [{ "kind": "coupe", "ref": "openathle/MES-INV-011-2" }],
+  "provenance": "measured",
+  "confidence": 1.0,
+  "endorsement": null,
+  "jurisdiction": "temoin",
+  "at": "2026-09-10T12:12:20.466Z",
+  "lifecycle": "proposed",
+  "relations": {},
+  "deadline": null,
+  "falsification": null,
+  "confidence_reading": {
+    "policy": "half-life-by-class",
+    "version": "1",
+    "value": 0.87,
+    "as_of": "2026-09-19T08:00:00Z"
+  }
+}

envelope/conformance/producer/valid/measure-confirms.json

@@ -0,0 +1,17 @@
+{
+  "envelope": "1.2",
+  "id": "openathle/MES-INV-011-2",
+  "class": "measure",
+  "subject": "INV-011",
+  "statement": "INV-011 : vérifié à son étage (domaine) et au-dessus — défense en profondeur.",
+  "evidence": [{ "kind": "epreuve:domaine", "ref": "quarkus-backoffice/src/test/java/org/openathle/LicenceConfig/Domain/ValueObject/RegistryClubRefTest.java:1" }],
+  "provenance": "measured",
+  "confidence": 1.0,
+  "endorsement": null,
+  "jurisdiction": "openathle",
+  "at": "2026-09-10T12:12:20.466Z",
+  "lifecycle": "proposed",
+  "relations": { "confirms": ["openathle/INV-011"] },
+  "deadline": null,
+  "falsification": null
+}

envelope/conformance/run.mjs

@@ -34,6 +34,11 @@ function crossFieldErrors(msg) {
     if (prefix !== msg.jurisdiction)
       errs.push(`jurisdiction "${msg.jurisdiction}" must equal the prefix of id ("${prefix}")`);
   }
+  // §4.2 (v1.2) : la mesure nomme ce qu'elle a examiné — et elle seule.
+  if (Array.isArray(msg?.relations?.confirms) && msg.relations.confirms.length > 0) {
+    if (msg.class !== 'measure' || msg.provenance !== 'measured')
+      errs.push(`relations.confirms is carried by a measure of provenance measured only (got class "${msg.class}", provenance "${msg.provenance}")`);
+  }
   return errs;
 }
 

envelope/schema/assertion.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://prismagram.com/published-language/envelope/1.0/assertion.schema.json",
-  "title": "Assertion Envelope v0.1",
-  "description": "Producer contract for envelope v0.1 messages (SPEC.md §4). One cross-field rule cannot be expressed here and is enforced by the conformance runner: `jurisdiction` MUST equal the prefix of `id`.",
+  "title": "Assertion Envelope v1.2",
+  "description": "Producer contract for envelope v1.1 messages (SPEC.md §4). One cross-field rule cannot be expressed here and is enforced by the conformance runner: `jurisdiction` MUST equal the prefix of `id`.",
   "type": "object",
   "required": [
     "envelope",
@@ -25,9 +25,11 @@
     "envelope": {
       "enum": [
         "0.1",
-        "1.0"
+        "1.0",
+        "1.1",
+        "1.2"
       ],
-      "description": "Version of the contract. v1.0 is substantively identical to v0.1 (SPEC §8): both values validate. A message that does not declare its version is not versioned (A1 §3)."
+      "description": "Version of the contract. v1.0 is substantively identical to v0.1 (SPEC §8): both values validate. v1.1 adds the optional declared reading (§4.1); v1.2 adds the relation kind `confirms` (§4.2). A message that does not declare its version is not versioned (A1 §3)."
     },
     "id": {
       "type": "string",
@@ -153,6 +155,10 @@
         },
         "satellite_of": {
           "$ref": "#/$defs/idList"
+        },
+        "confirms": {
+          "$ref": "#/$defs/idList",
+          "description": "v1.2, §4.2. Carried by a `measure` of provenance `measured` only: the ids it examined. The measure points at what it confirms; the confirmed assertion is never edited to point back."
         }
       },
       "additionalProperties": false
@@ -178,6 +184,40 @@
           "minLength": 1
         }
       ]
+    },
+    "confidence_reading": {
+      "type": "object",
+      "description": "OPTIONAL (SPEC §4.1, v1.1). Present only when the sender exposes a value it derived from `confidence`. A derived value shown without this object is not conformant: nobody could reproduce it.",
+      "required": [
+        "policy",
+        "version",
+        "value",
+        "as_of"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "policy": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Name of the reading applied — not the value it produced."
+        },
+        "version": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Version of that reading. Two auditors on two dates must be able to tell whether they read alike."
+        },
+        "value": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1,
+          "description": "The derived value. The verbatim one stays in `confidence`, untouched."
+        },
+        "as_of": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the reading was taken. A decay without a date is not reproducible."
+        }
+      }
     }
   },
   "patternProperties": {

instrument/README.md

@@ -46,6 +46,22 @@ jamais. La grossièreté se dit dans le réglage (en commentaire) : un rang
 absent de la correspondance est un rang que la juridiction ne sait pas
 instrumenter, pas un rang qui va de soi.
 
+## Les gardes nommées — des candidats, jamais des constats (optionnel)
+
+Une exception de domaine est une règle qui a un nom, un `throw`, presque
+toujours une épreuve — et souvent aucune déclaration. Si le réglage porte
+`gardes_nommees` (motifs de fichiers) et `adr` (où chercher les citations),
+le journal d'exécution rend `gardes_nommees: { total, sans_declaration,
+candidats }` — seuls ceux qu'aucun parcours ne cite sont listés, avec leur
+strate et ce qui les cite (ADR, épreuve). L'instrument **mesure une existence,
+il ne déclare rien** : déclarer un candidat (un invariant dans le parcours qui
+le porte) ou décider que non reste à la juridiction. Rien ne devient un
+constat, aucun état ne change de sens ; sans les clés, la section n'existe pas.
+
+Pourquoi si peu : c'est le plus petit instrument qui prouve que le code tient
+des règles que nul n'a déclarées. Mesuré chez openathle le jour de son
+écriture — huit exceptions de domaine, zéro citée par un parcours.
+
 ## Ce qu'il écrit — chez la juridiction, jamais ailleurs
 
 - **`sortie`** : les constats, en **ajout seul**, et **seulement quand l'état

instrument/run.mjs

@@ -177,6 +177,42 @@ function scanCitations(repo, files, ids) {
   return hits;
 }
 
+/**
+ * Les GARDES NOMMÉES — le plus petit instrument qui prouve que le code tient
+ * des règles que nul n'a déclarées. Une exception de domaine a un nom, un
+ * `throw`, presque toujours une épreuve — et souvent aucune déclaration.
+ * L'instrument la rend comme CANDIDAT, jamais comme constat : il mesure une
+ * existence, il ne déclare rien, il ne renomme aucun état. Déclarer ou non
+ * reste à la juridiction (P4 : l'humain écrit ce que la règle signifie).
+ * Absente du réglage (`gardes_nommees`), la section n'existe pas — rien ne
+ * change pour qui ne l'a pas demandée.
+ */
+function namedGuards(repo, cfg, files) {
+  if (!Array.isArray(cfg.gardes_nommees) || cfg.gardes_nommees.length === 0) return null;
+  const res = cfg.gardes_nommees.map(globToRegExp);
+  const read = (p) => readFileSync(join(repo, p), 'utf8');
+  const mdUnder = (dir) =>
+    typeof dir === 'string' && existsSync(join(repo, dir)) ? walk(repo, join(repo, dir), []).filter((p) => p.endsWith('.md')) : [];
+  const parcoursText = mdUnder(cfg.parcours).map(read).join('\n');
+  const adrText = mdUnder(cfg.adr).map(read).join('\n');
+  const tests = files.filter((f) => f.isTest).map((f) => read(f.path));
+  const out = [];
+  for (const f of files) {
+    if (f.isTest || !res.some((re) => re.test(f.path))) continue;
+    const nom = f.path.split('/').pop().replace(/\.[^.]+$/, '');
+    const re = new RegExp(`\\b${escapeRe(nom)}\\b`);
+    out.push({
+      nom,
+      chemin: f.path,
+      strate: f.stratum,
+      dans_parcours: re.test(parcoursText),
+      dans_adr: re.test(adrText),
+      eprouve: tests.some((x) => re.test(x)),
+    });
+  }
+  return out.sort((a, b) => a.nom.localeCompare(b.nom));
+}
+
 function judge(hits, cfg) {
   const order = cfg.strates.map((s) => s.nom);
   const strata = [...new Set(hits.filter((h) => h.isTest).map((h) => h.stratum))]
@@ -297,7 +333,8 @@ function main() {
     if (last.get(inv.id) === key) continue;
     fresh.push(constatItem(cfg, inv, verdict, hits.get(inv.id), (counts.get(inv.id) ?? 0) + 1, meta));
   }
-  emit(args, cfg, { journeys, invariants: invariants.size, tally, fresh, meta, sortiePath });
+  const gardes = namedGuards(args.repo, cfg, files);
+  emit(args, cfg, { journeys, invariants: invariants.size, tally, fresh, meta, sortiePath, gardes });
 }
 
 function emit(args, cfg, r) {
@@ -313,6 +350,19 @@ function emit(args, cfg, r) {
       : {}),
     etats: r.tally,
     constats_nouveaux: r.fresh.length,
+    // Les candidats vont au journal, réécrit à chaque course : ce n'est pas un
+    // constat (rien n'est mesuré sur un invariant), c'est un inventaire du jour.
+    // Seuls ceux qu'aucun parcours ne cite sont listés — lisibilité (P9) ; le
+    // total dit combien de gardes nommées le code porte.
+    ...(r.gardes === null
+      ? {}
+      : {
+          gardes_nommees: {
+            total: r.gardes.length,
+            sans_declaration: r.gardes.filter((g) => !g.dans_parcours).length,
+            candidats: r.gardes.filter((g) => !g.dans_parcours),
+          },
+        }),
     reglage_empreinte: r.meta.reglageHash,
   };
   if (args.dryRun) {
@@ -331,6 +381,10 @@ function emit(args, cfg, r) {
   console.log(`  ${r.invariants} invariant(s) déclaré(s) par ${r.journeys} parcours`);
   console.log(`  à son étage : ${r.tally.domicilie} · renforcé : ${r.tally.renforce} · hors de son étage : ${r.tally.mal_domicilie} · jamais éprouvé : ${r.tally.aucun_locus}`);
   console.log(`  constat(s) nouveau(x) : ${r.fresh.length}${args.dryRun ? '' : ` → ${cfg.sortie}`}`);
+  if (r.gardes !== null) {
+    const sans = r.gardes.filter((g) => !g.dans_parcours);
+    console.log(`  gardes nommées : ${r.gardes.length}, dont ${sans.length} qu'aucun parcours ne déclare${sans.length ? ' — ' + sans.map((g) => g.nom).join(', ') : ''}`);
+  }
 }
 
 main();

instrument/selftest.mjs

@@ -47,6 +47,21 @@ try {
   assert((byInv(first, 'INV-001')?.rangs_constates ?? []).join(',') === '4,3', 'INV-001 carries the third-party ranks its tuning declares, in stratum order');
   assert(byInv(first, 'INV-003')?.rangs_constates === undefined, 'INV-003 (no locus) carries no ranks — nothing observed maps to nothing');
   assert(JSON.stringify(journal().correspondance_rangs) === JSON.stringify({ domaine: 4, application: 3, interface: 1 }), 'journal publishes the full rank correspondence for consumers joining old findings');
+  // Named guards — candidates, never findings: a domain exception nobody declared.
+  const g = journal().gardes_nommees;
+  assert(g && g.total === 1 && g.sans_declaration === 1, 'the fixture has one named domain guard, and no journey declares it');
+  assert(g.candidats[0].nom === 'RuleViolatedException' && g.candidats[0].strate === 'domaine', 'the candidate carries its name and its stratum');
+  assert(g.candidats[0].dans_parcours === false && g.candidats[0].dans_adr === true && g.candidats[0].eprouve === false, 'the candidate says where it is cited — ADR yes, journey no, test no');
+  assert(!('candidats' in journal()) , 'candidates live under gardes_nommees, not at the journal root');
+  // Backward compatibility: a tuning without the key gets no section at all.
+  // On its OWN copy of the fixture: a second run on `repo` would rewrite the
+  // journal and falsify the assertions that follow (caught by the self-test
+  // itself on 2026-09-21 — a guard that shares state with what it guards).
+  const repo2 = mkdtempSync(join(tmpdir(), 'instrument-selftest-compat-'));
+  cpSync(join(here, 'selftest/fixture'), repo2, { recursive: true });
+  execFileSync(process.execPath, [join(here, 'run.mjs'), '--config', 'reglage-sans-gardes.yaml', '--repo', repo2], { encoding: 'utf8', stdio: 'pipe' });
+  const journal2 = parseYaml(readFileSync(join(repo2, 'docs/parcours/_mesures/derniere-execution.yaml'), 'utf8'));
+  assert(!('gardes_nommees' in journal2), 'a tuning that does not ask for named guards changes nothing');
   assert(byInv(first, 'INV-002')?.etat === 'mal_domicilie', 'INV-002 mal_domicilie — proven only away from home');
   assert(byInv(first, 'INV-003')?.etat === 'aucun_locus', 'INV-003 aucun_locus — named by no test');
   assert(journal().constats_nouveaux === 3 && journal().invariants === 3, 'journal counts the run');

instrument/selftest/fixture/docs/adr/ADR-001-essai.md

@@ -0,0 +1,3 @@
+# ADR-001 — essai
+
+Le domaine lève `RuleViolatedException` quand la règle est violée.

instrument/selftest/fixture/reglage-sans-gardes.yaml

@@ -0,0 +1,19 @@
+# Réglage de la juridiction d'essai — la forme que toute juridiction fournit.
+juridiction: essai
+cadence_heures: 24
+parcours: docs/parcours
+strates:
+  - nom: domaine
+    due: true
+    rang: 4
+    chemins: ["src/main/java/**/Domain/**", "src/test/java/**/Domain/**"]
+  - nom: application
+    rang: 3
+    chemins: ["src/main/java/**/Application/**", "src/test/java/**/Application/**"]
+  - nom: interface
+    rang: 1
+    chemins: ["app/src/**"]
+epreuves: ["src/test/**", "app/src/**/*.essai.*"]
+sortie: docs/parcours/_mesures/coupe.yaml
+journal_execution: docs/parcours/_mesures/derniere-execution.yaml
+

instrument/selftest/fixture/reglage.yaml

@@ -16,3 +16,7 @@ strates:
 epreuves: ["src/test/**", "app/src/**/*.essai.*"]
 sortie: docs/parcours/_mesures/coupe.yaml
 journal_execution: docs/parcours/_mesures/derniere-execution.yaml
+
+gardes_nommees:
+  - "src/main/java/**/Domain/**/*Exception.java"
+adr: docs/adr

instrument/selftest/fixture/src/main/java/x/Domain/RuleViolatedException.java

@@ -0,0 +1,6 @@
+package x.Domain;
+
+/** A named domain guard: a rule with a name and a throw — declared nowhere. */
+public class RuleViolatedException extends RuntimeException {
+  public RuleViolatedException(String why) { super(why); }
+}

package.json

@@ -1,9 +1,9 @@
 {
   "name": "published-language",
-  "version": "0.1.0",
+  "version": "1.2.0",
   "private": true,
   "type": "module",
-  "description": "Contrat d'échange inter-juridictions : grammaire source (grammar/) et enveloppe d'assertion (envelope/), sous un seul numéro de version (ADR-061/A1.2 §2.6, décision 6). Privé jusqu'à l'extraction publique décrite dans OPENING.md.",
+  "description": "Contrat d'échange inter-juridictions : grammaire source (grammar/) et enveloppe d'assertion (envelope/), sous un seul numéro de version (ADR-061/A1.2 §2.6, décision 6). Public, développé ici par pull request endossée (temoin/DEC-014).",
   "license": "Apache-2.0",
   "scripts": {
     "conformance": "node envelope/conformance/run.mjs",