Update EPD plugin to published dev22 native prerelease

.claude-plugin/marketplace.json

@@ -34,8 +34,8 @@
     {
       "name": "cortex-epd",
       "source": "./plugins/cortex-epd",
-      "description": "EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.21.candidate.41755813555.1.2. Stability and professional acceptance remain incomplete; not certification.",
-      "version": "0.1.2"
+      "description": "EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.22.candidate.41820743400.1.2. Stability and professional acceptance remain incomplete; not certification.",
+      "version": "0.1.3"
     }
   ]
 }

README.md

@@ -15,7 +15,7 @@ Prepare an openLCA study, work with product carbon-footprint cases, review EPD e
 | [hiq-editor](plugins/hiq-editor/README.md) | HiQ Editor toolkit: the native CLI release, its canonical UPR workflow skill and evidence-based authoring/review agents. |
 | [jimu-lca](plugins/jimu-lca/README.md) | Inspect JiMULCA product carbon-footprint cases and run authorized inventory, binding and calculation operations with the user's own member credential. |
 | [cortex-lca-expert](plugins/cortex-lca-expert/README.md) | Preview wrapper for cortex-lca-expert 0.1.0-dev.14: build, inspect and calculate openLCA models using the user's installed application and Cortex expert authorization. Wrapper version 0.1.0 is not a stable CLI release. |
-| [cortex-epd](plugins/cortex-epd/README.md) | EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.21.candidate.41755813555.1.2. Stability and professional acceptance remain incomplete; not certification. |
+| [cortex-epd](plugins/cortex-epd/README.md) | EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.22.candidate.41820743400.1.2. Stability and professional acceptance remain incomplete; not certification. |
 <!-- catalog:end -->
 
 openLCA still uses a `0.1.0` supply wrapper around its prerelease CLI. EPD now points directly to native incremental prerelease **0.1.0-dev.21.candidate.41755813555.1.2**, with no wrapper-version substitution. See [EPD release and Host compatibility](docs/EPD_RELEASE.md). Neither expert is a stable release or proof of completed professional acceptance.

docs/COMPATIBILITY.md

@@ -28,13 +28,13 @@ Checks distinguish package integrity from professional or business acceptance:
 | Native manifests | `claude plugin validate` checks the generated marketplace and the plugin manifests. It does not execute a model-driven workflow, install CLI dependencies or prove business correctness. Optional listing icons are not supplied. |
 | New expert archive integrity | Both macOS arm64 archives were downloaded and their entire SHA256 digests matched the catalog. Full bundles were extracted for isolated discovery checks. |
 | Actual openLCA CLI | The macOS binary's `version` reports `0.1.0-dev.14`; `--help` exits successfully. No openLCA database/service was opened or modified in these checks. |
-| Actual EPD CLI | The macOS binary's `version -f json` reports `0.1.0-dev.21.candidate.41755813555.1.2` / Bun1.4.4. The production provisioner was exercised with verified public archive bytes replayed locally; complete operation skill and references materialized, pinned SDK discovery and actual strict macOS codesign passed. No Docling installation, login, model call, review or report generation was performed. |
+| Actual EPD CLI | Dev22 public upgrade from dev21, offline doctor readiness, strict native macOS signature verification and original-case Markdown/HTML export are recorded by the publisher. This catalog update verifies the three downloaded archive hashes and release manifests, and materializes the exact release-owned skill; it does not rerun installation, model review or original-case exports. |
 | Download availability | Pinned expert archives have accessible CDN entries. The new EPD native release and installation instructions are publicly available; exact URLs/digests are pinned, not inferred from an old wrapper. |
 
 The macOS discovery checks used an isolated HOME and no business credentials. Windows/Linux archive entries do not imply a new Windows/Linux execution test in this repository update. The four existing CLI pins are unchanged; this update does not re-accept their business workflows.
 
 ## Prerelease limits
 
-openLCA uses a `0.1.0` supply wrapper around its prerelease executable. EPD now directly uses native **0.1.0-dev.21.candidate.41755813555.1.2**, selected by `format: expert-release`. This requires an updated Cortex Host; older wrapper-only Hosts are incompatible. Production Desktop routing and releases are unchanged. See [EPD release details](EPD_RELEASE.md).
+openLCA uses a `0.1.0` supply wrapper around its prerelease executable. EPD now directly uses native **0.1.0-dev.22.candidate.41820743400.1.2**, selected by `format: expert-release`. This requires an updated Cortex Host; older wrapper-only Hosts are incompatible. Production Desktop routing and releases are unchanged. See [EPD release details](EPD_RELEASE.md).
 
 EPD is a published incremental prerelease. Original candidate `promotable:false` evidence is retained; stability, normative coverage, holdout and institution-approved template acceptance remain incomplete. Do not equate publication, installation, CLI exit zero or a report with professional acceptance or certification.

docs/EPD_RELEASE.md

@@ -2,31 +2,85 @@
 
 ## Versions and native layout
 
-- Plugin package: **0.1.2**.
-- Actual CLI: **0.1.0-dev.21.candidate.41755813555.1.2**, built with Bun1.4.4.
-- Platforms: macOS arm64, Linux x64, Windows x64. Intel Mac is unsupported.
-- Source: the publisher's immutable `experts/cortex-epd/vVERSION/PLATFORM/` archives and matching download/release manifests. [Installation guide](https://download.hiq.earth/experts/cortex-epd/install.md).
+- Plugin package: **0.1.3**.
+- Actual CLI: **0.1.0-dev.22.candidate.41820743400.1.2**, built with Bun 1.4.4.
+- Platforms: macOS arm64, Linux x64 and Windows x64. Intel Mac is unsupported.
+- [Publisher release](https://github.com/HiQ-AI/cortex/releases/tag/epd-v0.1.0-dev.22.candidate.41820743400.1.2).
+- [Immutable release receipt](https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.22.candidate.41820743400.1.2/release.json).
+- [Installation guide](https://download.hiq.earth/experts/cortex-epd/install.md).
 
-Unlike the retired catalog supply wrapper, this entry points directly to the original native release. `components.cli.version` is the executable's actual prerelease version. `format: expert-release` selects `release-manifest.json`, executable `cortex-epd` (`.exe` on Windows), and `assets/skills/epd-audit/SKILL.md`. No new wrapper or repacked binary is created.
+The catalog uses the executable's real prerelease version and the original native
+archives. `format: expert-release` selects `release-manifest.json`, executable
+`cortex-epd` (`.exe` on Windows), and
+`assets/skills/epd-audit/SKILL.md`. No wrapper or repacked binary is produced.
+Keep the complete release, including signing/build declarations, parser lock
+and domain sidecars. The host operating skill and schema command reference are
+copied exactly from the matching release; the internal professional-verifier
+skill is not exposed as an independent host skill.
 
-The full archive SHA256 is pinned in [the root catalog](../marketplace.json). Preserve the whole native release, including its signing/build declarations, parser lock and domain sidecars. The complete host operating skill and its references are materialized from the same release; the internal professional-verifier skill is not exposed as an independent host skill.
+| Platform | Archive SHA256 |
+| --- | --- |
+| darwin-arm64 | `f30fdd7a623c6c4604da2642274e841b958ea3e9c48f5a6560d1d3428e8c654f` |
+| linux-x64 | `fdbcfbe76e630260e156f7fba0a9b930e08880964a9f0ba00a382ca765ca18a5` |
+| win32-x64 | `1efe0ce7e85fbc6604bf75e8acca97070c904f5795562fb5f9418eff5fd875a1` |
 
-## Host compatibility
+These are archive hashes, not executable hashes. The root catalog pins the exact
+versioned URLs. Each platform's `download-manifest.json` records archive length,
+archive hash and the matching release-manifest hash.
 
-The new supply format requires a Cortex Host with explicit `expert-release` support: actual prerelease versions, immutable `/experts/NAME/vVERSION/` URLs and the native release-manifest layout. Older Hosts that only accept `/cli/` wrappers cannot consume this entry. Do not label the new executable as wrapper0.1.0 to evade their validation.
+## Report change
 
-This repository is not production Desktop's configured source, and this update does not switch it or publish Desktop. A compatible Host build and its own release/acceptance gates are prerequisites before adopting the updated Cortex catalog. Native Claude Code plugin installation remains instruction-only and does not provision the CLI; use the publisher's verified native installation process separately.
+Dev22 fixes mixed-scope finding groups: when a group contains both explicit
+product items and whole-case items, Markdown, HTML and DOCX product columns
+indicate that whole-case items are also present. Native full institution opinions
+and mapped opinions preserve that scope. Pure-product and pure-whole-case groups
+keep their existing presentation.
 
-## What changed
+The fix uses structured item product scope. It does not infer products from
+professional prose, change machine JSON, findings, severity, grouping keys,
+human decisions or metrics, or introduce a new schema. The release-owned
+`references/report.md` remains unchanged; `SKILL.md` and the generated command
+reference carry the new CLI version. No separate hand-edited schema copy is added.
 
-The publisher reports an updated Bun runtime/network-error classification, explicit rereading of frozen engagement/selected-check catalogs after compaction, bounded native compaction continuation, and DOCX report fidelity fixes. These are incremental fixes, not a claim that production network disconnects or all professional acceptance requirements are solved.
+## Evidence
 
-## Requirements and limitations
+This catalog update downloaded all three public archives and checked their exact
+length and SHA256 against the actual platform download manifests. It also checked
+the release-manifest hashes and copied the macOS archive's operating skill and
+references byte-for-byte. Other plugins and their pins are unchanged.
 
-Prepare the locked Docling2.140.0-1 runtime separately after verifying the download length/hash. Reviews require the intended CLI device login, `epd-audit` entitlement, a confirmed engagement and explicit model-cost authorization. Installation and offline inspection do not authorize a review. An approved external template may be needed for DOCX reporting.
+The publisher records a public dev21-to-dev22 upgrade, actual version/Bun output,
+`doctor --offline` ready state, strict native macOS signature verification and
+Markdown/HTML re-export of the existing case. Original machine JSON and older
+reports were preserved; no new review or model run was made. See the
+[publisher's evidence](https://github.com/HiQ-AI/cortex/issues/2615#issuecomment-6630049195)
+and release notes. This consumer update reuses that evidence rather than repeating
+the original case or installation lifecycle.
 
-macOS release bytes carry the publisher's Developer ID/notarization declaration. Windows is explicitly **unsigned / Authenticode NotSigned** and can show SmartScreen; do not disable OS protections. Linux signing is not applicable.
+## Host compatibility and requirements
 
-This is a **published incremental prerelease**, not stable or full professional/product acceptance. Cumulative same-candidate repeat-run stability, complete normative coverage, clean holdout and institution-approved templates remain incomplete. A real-case run exhausted native network retries and remained blocked without a final report. The original immutable candidate's `promotable:false` evidence is retained; public incremental distribution does not rewrite it as acceptance.
+Cortex Hosts need explicit `expert-release` support for actual prerelease versions,
+immutable `/experts/NAME/vVERSION/` URLs and native release manifests. Older
+wrapper-only Hosts cannot consume this entry. This repository update does not
+switch production Desktop's catalog or publish Desktop. Native Claude Code plugin
+installation supplies instructions, not the CLI or credentials.
 
-Reports and successful CLI exits are not certificates or signed opinions. No paid end-to-end review is repeated for this catalog update. The supply check exercises installation/extraction, actual version, release-owned skill materialization and native discovery only.
+Prepare locked Docling 2.140.0-1 separately. Reviews require the intended CLI
+device login, `epd-audit` entitlement, a confirmed engagement, authorized materials
+and explicit model-cost approval. Installation or report export does not authorize
+a new review. CLI upgrades do not automatically replace host skill copies.
+
+## Remaining limits
+
+This is a published incremental prerelease, not stable or full professional
+acceptance. Cumulative stability, complete normative coverage, clean holdout and
+institution-approved templates remain unaccepted. The publisher's DOCX evidence
+includes targeted tests and existing-result projection, not public execution
+against an institution-authorized template. Original failures and candidate
+`promotable:false` evidence remain intact.
+
+macOS uses Developer ID/notarization. Windows is explicitly unsigned /
+Authenticode NotSigned and may show SmartScreen; do not disable protections.
+Linux signing is not applicable. Reports and successful CLI exits are not
+certificates or signed opinions. No model review or original material was rerun
+for this catalog update.

docs/INSTALLATION.md

@@ -37,7 +37,7 @@ For manual preparation:
 
 Publisher entry points are available for [Editor](https://download.hiq.earth/cli/hiq-editor/install.md), [Nora](https://download.hiq.earth/cli/cortex-org-wiki/install.sh) and [JiMU](https://download.hiq.earth/cli/jimu-lca/install.sh). Inspect the instructions and platform/version before running an installer. A script link is not a recommendation to pipe an uninspected response into a shell. For both expert previews, use the pinned archives; do not infer a current installer URL from the CLI name.
 
-EPD public [installation instructions](https://download.hiq.earth/experts/cortex-epd/install.md) and versioned manifests are now available for **0.1.0-dev.21.candidate.41755813555.1.2**. The Cortex entry requires explicit `expert-release` Host support; an older wrapper-only Host cannot consume it. See [the release boundary](EPD_RELEASE.md).
+EPD public [installation instructions](https://download.hiq.earth/experts/cortex-epd/install.md) and versioned manifests are now available for **0.1.0-dev.22.candidate.41820743400.1.2**. The Cortex entry requires explicit `expert-release` Host support; an older wrapper-only Host cannot consume it. See [the release boundary](EPD_RELEASE.md).
 
 ## 3. Confirm version and access
 

marketplace.json

@@ -279,9 +279,9 @@
       "id": "cortex-epd",
       "type": "plugin",
       "name": "EPD 审核（增量预发行）",
-      "description": "使用已公开的增量预发行 CLI 0.1.0-dev.21.candidate.41755813555.1.2 开展授权的 EPD 证据审查与报告解读；稳定性和专业验收仍未完成，不等于认证。",
-      "description_en": "EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.21.candidate.41755813555.1.2. Stability and professional acceptance remain incomplete; not certification.",
-      "version": "0.1.2",
+      "description": "使用已公开的增量预发行 CLI 0.1.0-dev.22.candidate.41820743400.1.2 开展授权的 EPD 证据审查与报告解读；稳定性和专业验收仍未完成，不等于认证。",
+      "description_en": "EPD evidence review and report interpretation with published incremental prerelease CLI 0.1.0-dev.22.candidate.41820743400.1.2. Stability and professional acceptance remain incomplete; not certification.",
+      "version": "0.1.3",
       "author": "HiQ",
       "category": "lca",
       "tags": [
@@ -290,8 +290,8 @@
         "preview"
       ],
       "path": "plugins/cortex-epd",
-      "requirements": "完整原生增量预发行 0.1.0-dev.21.candidate.41755813555.1.2；需要支持 expert-release 格式的新 Host。Docling 2.140.0-1 另行准备，审核需要 CLI 登录、epd-audit 权益、明确委托和模型费用授权。Windows 未签名，可能触发 SmartScreen；Intel Mac 不支持。",
-      "requirements_en": "Complete native incremental prerelease 0.1.0-dev.21.candidate.41755813555.1.2; requires a Host supporting expert-release format. Prepare locked Docling 2.140.0-1 separately. Reviews require CLI login, epd-audit entitlement, delegation and model-cost authorization. Windows is unsigned and may show SmartScreen; Intel Mac unsupported.",
+      "requirements": "完整原生增量预发行 0.1.0-dev.22.candidate.41820743400.1.2；需要支持 expert-release 格式的新 Host。Docling 2.140.0-1 另行准备，审核需要 CLI 登录、epd-audit 权益、明确委托和模型费用授权。Windows 未签名，可能触发 SmartScreen；Intel Mac 不支持。",
+      "requirements_en": "Complete native incremental prerelease 0.1.0-dev.22.candidate.41820743400.1.2; requires a Host supporting expert-release format. Prepare locked Docling 2.140.0-1 separately. Reviews require CLI login, epd-audit entitlement, delegation and model-cost authorization. Windows is unsigned and may show SmartScreen; Intel Mac unsupported.",
       "components": {
         "skills": [
           {
@@ -315,21 +315,21 @@
         ],
         "cli": {
           "name": "cortex-epd",
-          "version": "0.1.0-dev.21.candidate.41755813555.1.2",
+          "version": "0.1.0-dev.22.candidate.41820743400.1.2",
           "format": "expert-release",
           "executable": "cortex-epd",
           "releases": {
             "darwin-arm64": {
-              "url": "https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.21.candidate.41755813555.1.2/darwin-arm64/cortex-epd-0.1.0-dev.21.candidate.41755813555.1.2-darwin-arm64.tar.gz",
-              "sha256": "0737a979990e7b6e7bc660e303053dc7a26918cc01bd6c50399170c81dc959ec"
+              "url": "https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.22.candidate.41820743400.1.2/darwin-arm64/cortex-epd-0.1.0-dev.22.candidate.41820743400.1.2-darwin-arm64.tar.gz",
+              "sha256": "f30fdd7a623c6c4604da2642274e841b958ea3e9c48f5a6560d1d3428e8c654f"
             },
             "linux-x64": {
-              "url": "https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.21.candidate.41755813555.1.2/linux-x64/cortex-epd-0.1.0-dev.21.candidate.41755813555.1.2-linux-x64.tar.gz",
-              "sha256": "86d49f31cdf4db79ce7dcee1ecdd001ebc1514580cc9327b72906d873fb83efa"
+              "url": "https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.22.candidate.41820743400.1.2/linux-x64/cortex-epd-0.1.0-dev.22.candidate.41820743400.1.2-linux-x64.tar.gz",
+              "sha256": "fdbcfbe76e630260e156f7fba0a9b930e08880964a9f0ba00a382ca765ca18a5"
             },
             "win32-x64": {
-              "url": "https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.21.candidate.41755813555.1.2/win32-x64/cortex-epd-0.1.0-dev.21.candidate.41755813555.1.2-win32-x64.tar.gz",
-              "sha256": "a420527151e89e37af10de3ca38eb4ab29f219e779d68c7821cdbc129a81cfb7"
+              "url": "https://download.hiq.earth/experts/cortex-epd/v0.1.0-dev.22.candidate.41820743400.1.2/win32-x64/cortex-epd-0.1.0-dev.22.candidate.41820743400.1.2-win32-x64.tar.gz",
+              "sha256": "1efe0ce7e85fbc6604bf75e8acca97070c904f5795562fb5f9418eff5fd875a1"
             }
           },
           "skillPaths": {