diff --git a/api-docs/adr/ADR-263-ruview-npm-harness-deep-review.md b/api-docs/adr/ADR-263-ruview-npm-harness-deep-review.md
index b8ffdbea..a7b4e7c7 100644
--- a/api-docs/adr/ADR-263-ruview-npm-harness-deep-review.md
+++ b/api-docs/adr/ADR-263-ruview-npm-harness-deep-review.md
@@ -2,7 +2,7 @@
 
 | Field | Value |
 |-------|-------|
-| **Status** | Accepted — **implemented** (O1–O9 in `@ruvnet/ruview@0.2.0`; security/community extension in `0.3.0`, ADR-283): fail-closed schemas and MCP policy, async dispatch, zero runtime dependencies, bounded/redacted local Claude/Codex adapters, reviewed shared brain, and replay-verified Darwin/Flywheel gate. 53/53 tests (MEASURED, `node --test test/*.test.mjs`, 2026-07-28); CI gate in `ruview-harness-flywheel.yml` |
+| **Status** | Accepted — **implemented** (O1–O9 in `@ruvnet/ruview@0.2.0`; security/community extension in `0.3.0`, ADR-283; source-cited guidance in `0.3.1`): fail-closed schemas and MCP policy, async dispatch, zero runtime dependencies, bounded/redacted local Claude/Codex adapters, reviewed shared brain, source-checked capability guidance, and replay-verified Darwin/Flywheel gate. CI gate: `ruview-harness-flywheel.yml` |
 | **Date** | 2026-07-02 |
 | **Deciders** | ruv |
 | **Codename** | **RUVIEW-NPM-REVIEW-1** |
diff --git a/api-docs/adr/ADR-283-ruview-community-metaharness-flywheel.md b/api-docs/adr/ADR-283-ruview-community-metaharness-flywheel.md
index 4ebd0bcf..1edaca35 100644
--- a/api-docs/adr/ADR-283-ruview-community-metaharness-flywheel.md
+++ b/api-docs/adr/ADR-283-ruview-community-metaharness-flywheel.md
@@ -12,6 +12,12 @@ Extend `harness/ruview` as the single contributor automation boundary for
 repository exploration, development, debugging, testing and release
 preparation. The published package remains runtime-dependency-free.
 
+Repository exploration starts with a read-only guidance tool. Its reviewed
+catalog records capability maturity, fixed source paths, focused validation
+commands, and explicit limitations. In a checkout those citations are checked
+for existence; outside a checkout they are labelled as a packaged snapshot.
+Optional shared-brain matches remain cited evidence rather than instructions.
+
 Two local hosts are supported with executable contracts:
 
 - Claude Code uses non-interactive `claude -p --safe-mode`, JSON output, no