@dunn.dev/reference v0.6.0 A minor. The published chrome changes under every site that imports it: the figure box, the light warning colour, and the web-starter template. The reference-check component reads the contracts from main by default. Every consumer ran against main and this release before the tag, and none turned red. The figure box hugs the figure. .cat-explainer is as wide as its drawing, with 8px of padding and clear: both, and the diagrams leaf states the 660 canvas the estate draws on. A diagram of one concept grows taller and stays one figure. A pair is for two mechanisms. The light warning colour reads as text. --warning in the light theme is #a0602f, which clears 4.5:1 on the surface colour. The dark theme is unchanged. The standards are contracts. Each standard's SKILL.md is a CONTRACT.md that says why each assertion exists, how to satisfy it, and which deviations it expects. The list of what a standard checks is generated from its check.sh, so the page and the check agree. Procedure moved to the skills that act on it. A contract says when it applies. design-system governs a repo that renders a web surface: an Astro config, a global.css or site.css, or an index.html. A bootc image repo reads N/A with no deviation to keep. container-publishing, package-publishing and image-cleanup declare applicability the same way, and a Rust crate is a publisher only when its pipeline publishes. Pipeline accepts the cairn and immutable catalogs. An include of gitlab.com/dunn.dev/cairn/pipeline or immutable/pipeline pinned to a bare major passes, and the @latest and @main bans cover both catalogs. Checks read live lines. A commented-out include does not satisfy a check, and a comment that mentions @latest does not fail one. container-publishing finds a Dockerfile as well as a Containerfile. A waiver names one rule. When a contract checks the same file twice, the second rule carries its own id: file-lacks:.gitlab-ci.yml:main for pipeline's @main ban, file-contains:.gitlab-ci.yml:release-create for package-publishing's release. A deviation that names the bare id waives the first rule only. The guard fails a check.sh that repeats a path without a distinct id. The contracts match the catalog. The pipeline component table lists what the catalog ships. Renovate config extends the estate preset. package-publishing carries a Rust composition, container-publishing names the bootc signing invariants and the job that enforces them, and the consumer example pins reference_ref to main. Installing the package locally needs no token, because the registry serves anonymous reads. The site checks its own routes. llms.txt routes by task, each route says when the task is done, and the page catalogue stays. Principles are one page with an anchor each, and the old leaf URLs redirect. The diagram specimens live on a gallery page. A route or relative link that resolves to nothing fails the build, and _lib.sh and the repository scripts are served beside the check.sh files that source them, so a fetched check.sh runs. Pages carry canonical and social preview tags, the mark specimens have accessible names, and text responses declare utf-8. web-starter builds. The template pins the TypeScript major @astrojs/check supports, and a pipeline job installs and builds it on every change. tokens/colors.json no longer ships. Its export went in v0.5.0 and nothing reads it.