docs: sync movi public truth and language contract (#30)

Author: xiaojiou176

DISTRIBUTION.md

@@ -15,29 +15,40 @@ shipped yet.
 | GitHub repository | Published | The canonical public source and collaboration surface is `xiaojiou176-open/movi-organizer`. |
 | GitHub Releases | Published | GitHub Releases is the canonical release trail for this repository. |
 | GitHub Pages | Published | GitHub Pages is the current public front door and discovery page. |
-| Submission manifest | Published in-repo | [`manifest.yaml`](./manifest.yaml) is the repo-owned summary of current published vs submission-ready-unlisted surfaces. |
+| ClawHub listing | Listed live, still suspicious | Movi is listed live on ClawHub, and the current page still shows `Moderation verdict: suspicious` plus `Detected: suspicious.vt_suspicious`. |
+| Submission manifest | Published in-repo | [`manifest.yaml`](./manifest.yaml) is the repo-owned summary of current listed-live, review-pending, not-submitted, and not-published surfaces. |
 
-## Current Ready But Not Registry-Published
+## Current Repo-Owned Ready Surfaces
 
 | Surface | Current status | What we can truthfully claim |
 | :-- | :-- | :-- |
 | Source install from this repository | Ready | The repository ships Python package metadata and console entrypoints such as `movi-organizer`, `movi-web-api`, and `movi-mcp`. |
 | Movi MCP v1 stdio server | Ready | The MCP surface is a local-first stdio integration that can be launched from this repository or an installed environment. |
-| Pure-MCP registry descriptor | Submission-ready-unlisted | Root [`server.json`](./server.json) names the canonical MCP surface without claiming a live registry publication. |
 | Codex / Claude Code setup docs | Ready | The repository ships setup pages for Codex and Claude Code, but those docs describe local wiring, not a separate public distribution channel. |
-| Skills / agent bundle shelf | Submission-ready-unlisted | The repository now ships repo-owned skill bundle examples and install/proof notes without claiming a live skills registry listing. |
-| OpenClaw / ClawHub bundle | Submission-ready-unlisted | The repository now ships an OpenClaw-facing bundle and proof note without claiming a live catalog entry. |
+| Skills / agent bundle shelf | Ready in-repo | The repository ships repo-owned skill bundle examples and install/proof notes, but a separate public skills marketplace listing is not claimed here. |
+| OpenClaw / ClawHub bundle | Ready in-repo | The repository ships an OpenClaw-facing bundle and proof note, while the public catalog truth stays anchored to the live ClawHub page and its current warning label. |
+
+## Current Docs-Safe External Lanes
+
+| Surface | Current status | What we can truthfully claim |
+| :-- | :-- | :-- |
+| ClawHub | listed_live | Movi is listed live on ClawHub; the current live page still shows `Moderation verdict: suspicious` and `Detected: suspicious.vt_suspicious`. |
+| OpenHands `extensions#161` | OPEN / REVIEW_REQUIRED / BLOCKED | Movi has been submitted to OpenHands via PR `#161`, but that lane is still blocked in review and is not the same thing as acceptance. |
+| Official MCP Registry | not_submitted | No official MCP Registry submission is claimed today. |
+| GHCR | not_published | No public GHCR package or container publication is claimed today. |
+| Package / Docker later lanes | no verified public receipt today | The repo may contain packaging guidance or operator notes, but this file does not claim a live public package or container receipt. |
 
 ## Surfaces We Do Not Currently Claim As Published
 
 | Surface | Current status | Truthful boundary |
 | :-- | :-- | :-- |
 | PyPI | Not published | This repository does not currently claim an official PyPI release surface. |
 | npm package | Not published | The root Node surface is a repo control surface, not a published npm package. |
-| MCP registry | Not published | `Movi MCP v1` is documented as a local-first stdio surface, not a registry-published listing. |
+| Official MCP Registry | not_submitted | `Movi MCP v1` is documented as a local-first stdio surface, not a submitted or published registry listing. |
 | Skills registry | Not published | A repo-owned skills bundle exists, but no live registry listing is claimed. |
 | Plugin marketplace | Not published | Agent/plugin bundle readiness exists, but no browser or plugin marketplace listing is claimed. |
 | Chrome Web Store | Not published | No official Chrome Web Store distribution claim is made here. |
+| GHCR | not_published | No public GHCR package or container publication claim is made here. |
 
 ## Current Reading Rule
 
@@ -46,9 +57,10 @@ Use the surfaces above in this order:
 1. GitHub repository for the public source of truth
 2. GitHub Releases for release history
 3. GitHub Pages for the current public landing route
-4. `manifest.yaml` for the repo-owned submission summary
-5. `server.json` for the canonical pure-MCP descriptor
-6. `examples/skills/README.md` and `examples/openclaw/README.md` for unlisted bundle surfaces
+4. ClawHub for the live external listing truth, including its current moderation label
+5. `manifest.yaml` for the repo-owned listed-live vs pending-lane summary
+6. `server.json` for the canonical pure-MCP descriptor
+7. `examples/skills/README.md` and `examples/openclaw/README.md` for repo-owned bundle surfaces
 
 If you need to answer a stricter question such as "is the current head verified
 as a published release," do not infer that from a tag alone. Use the release

INTEGRATIONS.md

@@ -36,19 +36,23 @@ class, some are side entrances, and some are only comparison points.
 | OpenHands | A real API and MCP substrate exists, but no dedicated first-party setup page or branded workflow is shipped. | Do not present it as a primary or secondary front-door integration. |
 | OpenCode | Same honest boundary as OpenHands. | Do not present it as a primary or secondary front-door integration. |
 
-## Submission-Ready Unlisted Fit
+## Docs-Safe External Lanes
 
-| Surface | Why it is submission-ready-unlisted |
-| :-- | :-- |
-| OpenClaw / ClawHub | The repository now ships a dedicated integration note, starter bundle, and sample configs, but still refuses to claim a live listing. |
-| Skills registry or plugin marketplaces | The repository now ships a repo-owned agent/plugin bundle, but still refuses to claim a live registry or browser marketplace listing. |
+| Surface | Current lane truth | Boundary |
+| :-- | :-- | :-- |
+| ClawHub | listed_live; the current page still shows `Moderation verdict: suspicious` and `Detected: suspicious.vt_suspicious`. | Treat the live ClawHub page as a listing with a warning label, not as a clean approval receipt. |
+| OpenClaw bundle | repo-owned supporting surface | Keep OpenClaw in the host-facing bundle/supporting lane, not in the live-listing lane. |
+| OpenHands `extensions#161` | OPEN / REVIEW_REQUIRED / BLOCKED | This is a real external review lane, but it is not the same thing as a primary Movi integration story or an accepted host surface. |
+| Official MCP Registry | not_submitted | The current MCP story is local-first stdio MCP, not an official registry listing. |
+| Skills registry or plugin marketplaces | no verified public receipt today | The repository ships repo-owned agent/plugin bundles, but this file does not claim a live registry or browser marketplace listing. |
 
 ## Not Claimed As Live
 
 | Surface | Why it is still not claimed as live |
 | :-- | :-- |
-| MCP registry listings | The current story is local-first stdio MCP, not registry publication. |
+| Official MCP Registry listings | The current story is local-first stdio MCP, not registry publication. |
 | Browser extension marketplaces | The new bundle is agent/plugin-ready, not a Chrome Web Store or browser-extension listing. |
+| GHCR or public container package lanes | Packaging guidance may exist elsewhere, but no public container publication is claimed here. |
 
 ## Safety Boundary
 

README.md

@@ -55,6 +55,15 @@ If you are asking, "is this a real product surface or just a careful README," th
 
 If you want the full outsider-facing proof map, open [Public Proof](docs/public_proof.md). If you want the shortest hands-on route, stay on this page and run [Safe First Look](#safe-first-look).
 
+## Public Language Contract
+
+For external readers, Movi keeps one simple language rule:
+
+- **English-first public truth surfaces**: this root `README.md`, [`DISTRIBUTION.md`](./DISTRIBUTION.md), [`INTEGRATIONS.md`](./INTEGRATIONS.md), [`manifest.yaml`](./manifest.yaml), and any later root truth surface only after it is explicitly synced to the same wording standard.
+- **Bilingual or locale-switchable product surfaces**: the WebUI keeps English as the default locale and can switch to `zh-CN` for operator comfort, walkthroughs, and day-to-day use.
+- **Why this split exists**: public listings, review threads, and release receipts need one stable English contract so outside readers do not have to compare two drifting versions of the same claim, while the product itself can still meet operators where they are.
+- **Honesty rule**: translations may improve usability, but they must not silently outrun or override the English canonical public truth.
+
 ## Product Surface Baseline
 
 - **Movi**: the main product brand.
@@ -79,7 +88,14 @@ Current honest ecosystem fit:
 - **Primary fit**: Codex and Claude Code, because `Movi MCP v1` already ships as a local-first stdio surface with review-safe tools
 - **Secondary ecosystem fit**: Cursor and other local MCP-capable clients, because the transport and tool surface already match their integration model
 - **Comparison-only fit**: OpenHands and OpenCode, because the repo has a real MCP and API substrate they can consume, but no dedicated first-party setup surface or branded workflow yet
-- **Submission-ready-unlisted fit**: OpenClaw and ClawHub, because the repo now ships a dedicated bundle, install/proof notes, and agent-facing starter surfaces without claiming a live listing
+
+## Public Distribution Snapshot
+
+- **ClawHub**: listed live, but the current page still shows `Moderation verdict: suspicious` and `Detected: suspicious.vt_suspicious`.
+- **OpenHands**: submitted through `OpenHands/extensions#161`; current GitHub state is `OPEN / REVIEW_REQUIRED / BLOCKED`.
+- **Official MCP Registry**: `not_submitted`.
+- **GHCR**: `not_published`.
+- **Package and Docker later lanes**: no verified public receipt today.
 
 ## 10-Second Tour
 

docs/mcp.md

@@ -67,8 +67,8 @@ If you want the shortest ecosystem answer:
 
 - **Primary current fit**: Codex and Claude Code, because both can use the current stdio-first local MCP surface directly
 - **Secondary ecosystem fit**: Cursor and other local MCP-capable clients, because the transport and tool surface already match their integration model
-- **Comparison-only fit**: OpenHands and OpenCode, because the repo has a real MCP and API substrate they could consume, but it does not yet ship a dedicated first-party setup page or branded workflow for them
-- **Submission-ready-unlisted fit**: OpenClaw and ClawHub, because the current repo now ships a dedicated bundle and install/proof notes while still refusing to claim a live listing
+- **Comparison-only fit**: OpenHands and OpenCode, because the repo has a real MCP and API substrate they could consume, but the current OpenHands lane is still `extensions#161` review-pending and the repo does not yet ship a dedicated first-party setup page or branded workflow for them
+- **Host-bundle fit**: OpenClaw and ClawHub, because the current repo now ships a dedicated bundle and install/proof notes, while the ClawHub lane is already listed live and still carries the current `suspicious.vt_suspicious` warning instead of a clean approval receipt
 
 Client-specific entry pages:
 

examples/openclaw/README.md

@@ -1,6 +1,6 @@
 # Movi For OpenClaw / ClawHub
 
-Status: `submission-ready-unlisted`
+Status: `ClawHub listed_live (current page still shows suspicious.vt_suspicious); no official OpenClaw catalog approval claimed`
 
 This page is the OpenClaw-facing integration note for Movi.
 
@@ -9,8 +9,9 @@ The canonical public root for Movi still lives at `../../README.md` plus
 repo storefront.
 
 In plain language: the repo now ships a truthful bundle you can hand to an
-OpenClaw-style host, but it still refuses to pretend that a live OpenClaw or
-ClawHub listing already exists.
+OpenClaw-style host, and the current ClawHub listing is already live, but the
+page still shows the `suspicious.vt_suspicious` warning instead of a clean
+approval receipt.
 
 ## What Exists Today
 
@@ -21,6 +22,6 @@ ClawHub listing already exists.
 
 ## What This Does Not Claim
 
-- a live ClawHub entry
+- a clean ClawHub approval beyond the current suspicious moderation warning
 - an official OpenClaw catalog approval
 - a browser-extension marketplace listing

examples/skills/README.md

@@ -1,6 +1,6 @@
 # Movi Review-First Bundle Public Skill
 
-Status: `submission-ready-unlisted`
+Status: `ClawHub listed_live (current page still shows suspicious.vt_suspicious); OpenHands/extensions#161 review pending`
 
 This folder is the current public, self-contained skill packet for Movi.
 
@@ -54,12 +54,16 @@ the packet itself:
 ## Current state
 
 - the repo-owned packet is ready for review-first host-native evaluation
-- the OpenHands/extensions lane remains future-facing, not a current live claim
-- the packet does not claim a live OpenHands, OpenClaw, or ClawHub listing
+- the current ClawHub lane is listed live, but the page still shows `Moderation verdict: suspicious` and `Detected: suspicious.vt_suspicious`
+- the current OpenHands/extensions lane is `#161` and remains `OPEN / REVIEW_REQUIRED / BLOCKED`
+- the Official MCP Registry lane remains `not_submitted`
+- the packet does not claim a live OpenHands acceptance or an official OpenClaw catalog approval
 
 ## What this packet must not claim
 
-- no live OpenHands listing without fresh PR/read-back
+- no accepted OpenHands listing without fresh PR/read-back
+- no clean ClawHub approval beyond the current suspicious moderation warning
+- no official MCP Registry submission
 - no browser-extension marketplace listing
 - no hosted Movi SaaS or hidden execute shortcut
 
@@ -73,4 +77,4 @@ useful during review:
 - `openclaw.mcp.json`
 - `install-and-proof.md`
 
-They are helper artifacts, not evidence that a live listing already exists.
+They are helper artifacts, not evidence of clean approval across every host lane.

examples/skills/SKILL.md

@@ -68,7 +68,7 @@ analysis artifact. Do not call `manifest.patch_row`, `manifest.batch_patch`, or
 ## Boundaries
 
 - Movi stays a local-first review-first MCP workflow, not a hosted SaaS
-- this packet does not claim a live OpenHands or ClawHub listing
+- this packet does not claim an accepted OpenHands listing beyond review thread `#161`, and it does not treat the current ClawHub listing as a clean approval while the page still shows `suspicious.vt_suspicious`
 - this packet does not bypass `review-first -> dry-run -> execute`
 
 ## Local references

examples/skills/manifest.yaml

@@ -1,21 +1,30 @@
 version: 1
 id: movi-agent-bundle
 display_name: Movi Review-First Bundle
-status: submission-ready-unlisted
+status: listed_live
 canonical_repo: xiaojiou176-open/movi-organizer
 entrypoint: SKILL.md
 package_shape: skill-folder
 registry_targets:
   clawhub:
-    status: submission-ready-unlisted
+    status: listed_live
     package_shape: skill-folder
     channel_role: host-native skill registry
-    submit_via: later owner/operator publication after fresh verification
+    moderation_verdict: suspicious
+    detected_label: suspicious.vt_suspicious
+    read_back: current ClawHub page is listed live, but still carries the suspicious moderation warning
   openhands-extensions:
-    status: folder-ready-not-submitted
+    status: review_pending
     package_shape: skill-folder
     channel_role: host-native extensions registry
-    submit_via: submit this folder as skills/movi-review-first-bundle/ after Wave 2 verification
+    submission_thread: OpenHands/extensions#161
+    read_back: current GitHub thread is OPEN / REVIEW_REQUIRED / BLOCKED
+  official-mcp-registry:
+    status: not_submitted
+    channel_role: official MCP registry
+  ghcr:
+    status: not_published
+    channel_role: container/package registry
 bundle_surfaces:
   - SKILL.md
   - README.md
@@ -31,8 +40,9 @@ bundle_surfaces:
   - openclaw.mcp.json
   - install-and-proof.md
 claims_not_made:
-  - no live OpenHands listing is claimed
+  - no accepted OpenHands listing is claimed beyond the current review thread
   - no live OpenClaw listing is claimed
-  - no live ClawHub listing is claimed
+  - no clean ClawHub approval is claimed beyond the current suspicious moderation warning
+  - no official MCP Registry submission is claimed
   - no browser-extension marketplace listing is claimed
   - no hosted Movi SaaS claim is made

manifest.yaml

@@ -1,20 +1,32 @@
 version: 1
 id: movi-organizer
 technical_name: Movi
-status: submission-ready-unlisted
+status: listed_live
 canonical_repo: xiaojiou176-open/movi-organizer
 homepage: https://xiaojiou176-open.github.io/movi-organizer/
 current_release: v4.0.5
 published_surfaces:
   - github-repo
   - github-pages-front-door
   - github-releases
+  - clawhub-listed-live
 submission_ready_surfaces:
   - pure-mcp-registry-descriptor
   - codex-mcp-bundle
   - claude-code-mcp-bundle
   - openclaw-public-ready-bundle
   - agent-skill-bundle
+external_review_lanes:
+  - surface: clawhub
+    status: listed_live
+    moderation_verdict: suspicious
+    detected_label: suspicious.vt_suspicious
+  - surface: openhands-extensions-161
+    status: OPEN / REVIEW_REQUIRED / BLOCKED
+  - surface: official-mcp-registry
+    status: not_submitted
+  - surface: ghcr
+    status: not_published
 truth_routes:
   storefront: README.md
   distribution: DISTRIBUTION.md
@@ -28,11 +40,13 @@ truth_routes:
   skills_packet: examples/skills/README.md
   openclaw_bundle: examples/openclaw/README.md
 claims_not_made:
-  - no live OpenClaw listing is claimed
-  - no live ClawHub listing is claimed
+  - no clean ClawHub approval is claimed beyond the current suspicious warning state
+  - no live OpenHands acceptance is claimed
   - no live official MCP registry publication is claimed
   - no browser extension marketplace listing is claimed
+  - no public GHCR package or container publication is claimed
   - no hosted SaaS is claimed
 operator_only_follow_through:
-  - publish any live registry or catalog entry
-  - rerun fresh verification after publication before changing public copy
+  - resolve or advance any platform-owned review thread such as OpenHands `#161`
+  - publish any later registry or catalog entry not already listed live
+  - rerun fresh verification after platform state changes before changing public copy