Extend the source catalog across more departments

plugins/corporate-strategy/skills/chief-strategy-officer/SKILL.md

@@ -82,6 +82,13 @@ Strategy functions drift into producing analysis nobody acts on. The defense is
 work names the decision it serves and the date that decision is needed. Analysis with no decision
 attached is a hobby.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Confuse a plan with a strategy. A sequence of initiatives is not a choice about where to compete.

plugins/corporate-strategy/skills/chief-strategy-officer/references/sources.md

@@ -0,0 +1,25 @@
+# Sources — `corporate-strategy:chief-strategy-officer`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## Hart-Scott-Rodino premerger notification program
+
+US Federal Trade Commission · US · public domain (US government) — quote freely
+
+<https://www.ftc.gov/enforcement/premerger-notification-program>
+
+**Authoritative for:** Whether a transaction must be reported before closing, at what size, and how long the parties must then wait. A threshold question with one right answer — and the thresholds are revised annually, so resolve them here rather than from memory.
+
+## Merger Guidelines
+
+US Department of Justice and Federal Trade Commission · US · public domain (US government) — quote freely
+
+<https://www.ftc.gov/reports/merger-guidelines-2023>
+
+**Authoritative for:** Whether an acquisition is likely to be challenged — the concentration thresholds, how the agencies define a market, and the theories of harm they actually apply. The closest thing to a decision procedure for whether you can buy someone.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/corporate-strategy/skills/market-entry/SKILL.md

@@ -71,6 +71,13 @@ was producing better returns on.
 
 Review against the criteria on the date, not when someone finally raises it.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Size a market from a published figure without building it up from countable units.

plugins/corporate-strategy/skills/market-entry/references/sources.md

@@ -0,0 +1,17 @@
+# Sources — `corporate-strategy:market-entry`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## Country Commercial Guides
+
+US Department of Commerce, International Trade Administration · global · public domain (US government) — quote freely
+
+<https://www.trade.gov/country-commercial-guides>
+
+**Authoritative for:** The factual regulatory picture for entering a named foreign market — licensing, customs, standards, distribution and investment restrictions. It settles the factual questions in a market entry, not the strategic ones.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/corporate-strategy/skills/mergers-and-acquisitions/references/sources.md

@@ -14,6 +14,22 @@ Machine-readable: <https://www.sec.gov/search-filings/edgar-application-programm
 
 **Authoritative for:** What public companies actually reported, in their own filings — the primary source for a competitor's economics, a comparable's margin structure, or how a peer disclosed an accounting policy.
 
+## Hart-Scott-Rodino premerger notification program
+
+US Federal Trade Commission · US · public domain (US government) — quote freely
+
+<https://www.ftc.gov/enforcement/premerger-notification-program>
+
+**Authoritative for:** Whether a transaction must be reported before closing, at what size, and how long the parties must then wait. A threshold question with one right answer — and the thresholds are revised annually, so resolve them here rather than from memory.
+
+## Merger Guidelines
+
+US Department of Justice and Federal Trade Commission · US · public domain (US government) — quote freely
+
+<https://www.ftc.gov/reports/merger-guidelines-2023>
+
+**Authoritative for:** Whether an acquisition is likely to be challenged — the concentration thresholds, how the agencies define a market, and the theories of harm they actually apply. The closest thing to a decision procedure for whether you can buy someone.
+
 ---
 
 Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/corporate-strategy/skills/portfolio-strategy/SKILL.md

@@ -54,6 +54,13 @@ allocation you already had.
 
 Force a ranking. Tiers are how everything stays funded.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Fund a line because it is large. Fund it on marginal return.

plugins/corporate-strategy/skills/portfolio-strategy/references/sources.md

@@ -0,0 +1,25 @@
+# Sources — `corporate-strategy:portfolio-strategy`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## Merger Guidelines
+
+US Department of Justice and Federal Trade Commission · US · public domain (US government) — quote freely
+
+<https://www.ftc.gov/reports/merger-guidelines-2023>
+
+**Authoritative for:** Whether an acquisition is likely to be challenged — the concentration thresholds, how the agencies define a market, and the theories of harm they actually apply. The closest thing to a decision procedure for whether you can buy someone.
+
+## The Green Book: appraisal and evaluation in central government
+
+HM Treasury · UK · free to use with attribution — credit the publisher
+
+<https://www.gov.uk/government/publications/the-green-book-appraisal-and-evaluation-in-central-governent>
+
+**Authoritative for:** Whether a claimed benefit may be counted at all — what separates a benefit from a transfer, how optimism bias is corrected for, and what a business case must contain. The best free treatment of benefits discipline anywhere, and openly licensed.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/customer-experience/skills/customer-onboarding-and-implementation/SKILL.md

@@ -62,6 +62,13 @@ An implementation that ends when the project ends leaves the account with nobody
 context — what was configured and why, what was deferred, what is fragile, who the people are —
 and confirm the receiving side has it rather than assuming.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Start an implementation without written go-live criteria both sides agreed.

plugins/customer-experience/skills/customer-onboarding-and-implementation/references/sources.md

@@ -0,0 +1,17 @@
+# Sources — `customer-experience:customer-onboarding-and-implementation`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## 15 U.S.C. 7001 — Electronic Signatures in Global and National Commerce Act
+
+US Congress, via the Office of the Law Revision Counsel · US · public domain (US government) — quote freely
+
+<https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section7001&num=0&edition=prelim>
+
+**Authoritative for:** Whether an electronically signed contract, a clickwrap acceptance or an emailed order form is enforceable, and what consumer consent steps must precede it.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/customer-experience/skills/escalation-management/SKILL.md

@@ -58,6 +58,13 @@ correctly, did we communicate on time, and what would have prevented it.
 Escalation volume is a health metric for the whole function. Rising escalations mean the normal path
 is failing more often, and that is the thing to fix.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Escalate without naming an owner. An escalation with no name on it is a broadcast.

plugins/customer-experience/skills/escalation-management/references/sources.md

@@ -0,0 +1,17 @@
+# Sources — `customer-experience:escalation-management`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## NIST SP 800-61: Incident Response Recommendations and Considerations
+
+NIST · US · public domain (US government) — quote freely
+
+<https://csrc.nist.gov/pubs/sp/800/61/r3/final>
+
+**Authoritative for:** What an incident response capability must contain and what evidence must be captured at each stage. The current revision is a substantial rewrite that drops the older four-phase framing, so do not mix guidance across revisions.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/customer-experience/skills/self-service-and-knowledge/SKILL.md

@@ -63,6 +63,13 @@ volume for a topic falls after content ships.
 Watch articles with high views *and* a high subsequent contact rate. Those are articles that are
 failing to answer, and they look like your best-performing content.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Write an article for a problem the product should not have. Fix the product and delete the article.

plugins/customer-experience/skills/self-service-and-knowledge/references/sources.md

@@ -0,0 +1,25 @@
+# Sources — `customer-experience:self-service-and-knowledge`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## Federal Plain Language Guidelines
+
+Plain Language Action and Information Network · US · public domain (US government) — quote freely
+
+<https://www.plainlanguage.gov/guidelines/>
+
+**Authoritative for:** What counts as plain language in user-facing writing — audience-first structure, active voice, short sections. Backed by statute for federal agencies, and the only free normative writing standard that is not one author's style preference.
+
+## Web Content Accessibility Guidelines 2.2
+
+World Wide Web Consortium · global · **read and cite only — copyrighted, do not reproduce**
+
+<https://www.w3.org/TR/WCAG22/>
+
+**Authoritative for:** Whether a page, email or video is accessible. It is the criteria list that US Section 508, the EU's EN 301 549 and most enterprise procurement point at, so it settles any argument that reaches a buyer's accessibility requirement.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/customer-experience/skills/support-operations/SKILL.md

@@ -69,6 +69,13 @@ by a wide margin and then blames the team.
 Review a sample of resolved contacts against a rubric agreed with the team, and coach against it.
 Reviewing only escalations trains for defense rather than quality.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Tooling
 
 Ticketing: Zendesk, Freshdesk, Intercom, Front, Help Scout, and similar; Jira Service

plugins/customer-experience/skills/support-operations/references/sources.md

@@ -0,0 +1,33 @@
+# Sources — `customer-experience:support-operations`
+
+<!-- Generated by scripts/build-sources.py from sources/*.toml. Do not edit. -->
+
+Check these before answering on anything they cover, and cite what you used. The use note on each one is binding: most of what a professional cites is free to read and not free to reproduce.
+
+## 18 U.S.C. 2511 — interception of communications
+
+US Congress, via the Office of the Law Revision Counsel · US · public domain (US government) — quote freely
+
+<https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title18-section2511&num=0&edition=prelim>
+
+**Authoritative for:** The federal one-party-consent floor for recording a call, and the criminal exposure for recording without it. It settles only the floor: several states require all-party consent, and there is no free authoritative single document for that matrix — it must be looked up per state.
+
+## Federal Plain Language Guidelines
+
+Plain Language Action and Information Network · US · public domain (US government) — quote freely
+
+<https://www.plainlanguage.gov/guidelines/>
+
+**Authoritative for:** What counts as plain language in user-facing writing — audience-first structure, active voice, short sections. Backed by statute for federal agencies, and the only free normative writing standard that is not one author's style preference.
+
+## PCI Data Security Standard
+
+PCI Security Standards Council · global · **account required — cite it; the user fetches it**
+
+<https://www.pcisecuritystandards.org/document_library/>
+
+**Authoritative for:** Whether a support agent may take a card number by phone, whether that call may be recorded, and what must happen to card data in ticket attachments and screen shares. Assessed by a qualified assessor, so genuinely dispositive.
+
+---
+
+Sources are maintained in `sources/` upstream, not here. If one is wrong, out of date, or missing, fix it there — this file is regenerated and an edit to it is lost.

plugins/data-analytics/skills/ai-ml-governance/SKILL.md

@@ -64,6 +64,13 @@ asks why a decision was made — and increasingly what a regulator expects to se
 Have a way to turn it off. Know what happens to the process when you do, and confirm the fallback
 still works — a manual path that has not been exercised in two years is not a fallback.
 
+## Sources
+
+`references/sources.md` in this skill lists the outside authorities that settle the questions
+here — what each one is authoritative for, and what you may do with it. Check them before
+answering on anything they cover, and cite what you used. Most are free to read and not free
+to reproduce; the use note on each is binding.
+
 ## Never
 
 - Deploy without an evaluation set and a monitoring plan.