--complete-with, the projection is NOT a CUE-valid StackSpec v2, is NOT a ResolvedPlan, and does NOT authorize generation or deployment. Complete the reported manual actions and pass a full StackSpec v2 through CUE resolution first.
--complete-with accepts one full explicit StackSpec v2, never a partial overlay. It reconciles deterministic legacy Site, node and hardware bindings, then uses the embedded governed Architecture v2 authority. A completed result contains the explicit canonical candidate and its ResolvedPlan hash. Generator eligibility is reported independently from CUE validity and follows ResolvedPlan readiness.
--spec-output writes the exact completed canonical StackSpec v2 as deterministic JSON. It is valid only with --complete-with, never defaults to an in-place rewrite, and refuses to replace an existing canonical target; canonical replacement requires an explicit CAS-authorized StackSpec authoring flow.
A ready-for-shadow-resolution result exits successfully. A blocked result is still emitted as machine-readable output, then the command exits unsuccessfully. Context maps legacy locality and Pi hardware only; it never selects a Kit.
Examples
