docs(g52): make implemented CommandF CLI discoverable

Closed
TH
7d ago
+101-10

Purpose

Address the existing product reachability gap without inventing new runtime features: the current README still describes only CF-01 even though the CLI implements inspect, context, diff, impact, classify, check, gate, terminology, oracle, source-map, and github-annotations.

Scope and validation

  • Only README.md changes; no Rust code, workflow, Cargo file, rule, or AF-02 authority path is touched.
  • Commands and flags are transcribed from live crates/commandf-cli/src/main.rs, impact.rs, gate.rs, oracle.rs at canonical main f82565cca917d119e1c774b2c470e2ac20e0d6dd.
  • New onboarding includes a complete pkg → diff → classify → impact → check path, with clearly labeled non-existent placeholders for example package versions.
  • Clearly distinguishes currently implemented commands from unimplemented review, Studio, receipts, multi-consumer contracts, D1, signed releases, and universal FHIR support.
  • Notes the observed Windows path-length issue and avoids asserting cross-platform qualification.
  • Explains that digest matching is not publisher authenticity, that there is no repository license currently, and that patient data is not permitted in repository tests.

Governance

V2 remains execution authority. This is a docs-only product-onboarding change independent of the V3.2 candidate PR #187 and the governance planning PR #188. It does not activate G52's future implementation contracts by itself, and it does not grant any founder exception.

Review the command examples against the code, await green exact-head required checks and genuine reviewer approval, and merge with a normal merge commit only.

Summary by cubic

Rewrites the README to document all implemented Rust CLI commands instead of only the original CF-01 slice, making the CLI discoverable and usable. Adds a complete package acquisition-to-check workflow, a command map with limitations, and explicit notes on what isn't shipped yet.

  • Only README.md changes; no Rust code or governance files touched.
  • All commands and flags are transcribed from live source at main.
  • Example package versions are clearly labeled as placeholders.
  • Adds security caveats: digest verification isn't publisher authenticity, no root LICENSE file, and no patient data in tests.