feat: Autorenkonventionen nach Eigentum geschnitten - kb/CONVENTIONS.md, deklarierte Collections (3.0.0)

Files changed:
- .gitea/workflows/ci.yml
- .wikitool-kb.json
- AGENTS.md
- CHANGES.md
- INSTALL.md
- README.md
- VERSION
- instructions/CONTRACT.md
- instructions/dev/testing-conventions.md
- instructions/german-terminology.md
- instructions/kb-profiles.md
- instructions/migrations/3.0.0-authoring-conventions.md
- instructions/private-instance.md
- instructions/setup-instance.md
- instructions/wiki-ingest/SKILL.md
- instructions/wiki-manage/SKILL.md
- kb/CONTRACT.md
- kb/CONVENTIONS.md
- kb/CONVENTIONS.md.template
- kb/comparisons/COLLECTION.md
- kb/concepts/COLLECTION.md
- kb/entities/COLLECTION.md
- kb/sources/COLLECTION.md
- tools/CONTRACT.md
- tools/README.md
- tools/chemenu/commands/dist_cmd.py
- tools/chemenu/commands/docs_verify.py
- tools/chemenu/commands/doctor.py
- tools/chemenu/commands/new_page.py
- tools/chemenu/conventions.py
- tools/chemenu/kb_collections.py
- tools/chemenu/kb_scan.py
- tools/chemenu/provenance.py
- tools/chemenu/sections.py
- tools/chemenu/tests/conftest.py
- tools/chemenu/tests/test_conventions.py
- tools/chemenu/tests/test_dist_cmd.py
- tools/chemenu/tests/test_doctor.py
- tools/chemenu/tests/test_new_page.py
- tools/chemenu/tests/test_types_cmd.py
- types/comparison.md
- types/concept.md
- types/entity.md
- types/source.md
- types/type-spec.md

instructions/private-instance.md

@@ -100,17 +100,36 @@ So the merge has to be scoped. That is the procedure below, and it is not option
    [setup-instance.md](setup-instance.md), then [bootstrap.md](bootstrap.md) for the venv and
    the skills.
 
+   A clone inherits the upstream's `kb/CONVENTIONS.md` and `kb/*/COLLECTION.md` rather than
+   templates, because it inherits the upstream's whole tree. They are yours from this point on:
+   rewrite them if this instance writes its pages differently - the update procedure below
+   restores them on every merge, so the change sticks. [kb-profiles.md](kb-profiles.md) has the
+   alternatives.
+
 ## Taking a stack update
 
 Take the machinery, never the content. The merge is held open, the content stages are forced
-back to your own state, and only then does it close:
+back to your own state, and only then does it close.
+
+**Three files under those stages are machinery, not content**, and forcing them back is how an
+upstream contract change gets silently discarded:
+
+| Path | Why it must take the upstream side |
+|---|---|
+| `kb/CONTRACT.md` | The stack's own knowledge-layer contract. Every rule in it is enforced by `wikitool`; an instance never edits it |
+| `kb/CONVENTIONS.md.template` | The template your `kb/CONVENTIONS.md` was filled from. The filled file is yours; the template is the stack's |
+| `raw/CONTRACT.md` | The raw stage's contract, for the same reason as the first row |
+
+Everything else under `kb/` and `raw/` is yours, `kb/CONVENTIONS.md` and each
+`kb/<name>/COLLECTION.md` included - they bind your corpus, and they are exactly what the
+restore below is protecting.
 
 ```bash
 BEFORE=$(git rev-parse HEAD)
 git fetch upstream
 
 # --no-commit holds the merge open; it may report conflicts under kb/ or raw/,
-# which the next three lines are about to make irrelevant.
+# which the next four lines are about to make irrelevant.
 git merge --no-commit --no-ff upstream/main || true
 
 # Whatever the merge did to the content stages, undo it. HEAD is still your
@@ -119,18 +138,32 @@ git rm -rq --cached --ignore-unmatch kb raw
 rm -rf kb raw
 git checkout HEAD -- kb raw
 
+# ...then take the upstream side back for the machinery that lives among it.
+# MERGE_HEAD is still resolvable while the merge is open.
+git checkout MERGE_HEAD -- kb/CONTRACT.md kb/CONVENTIONS.md.template raw/CONTRACT.md
+
 git commit --no-edit
 ```
 
-Then **check that it worked**, rather than trusting that it did:
+Then **check that it worked**, rather than trusting that it did. The same three paths are
+excluded here, spelled out rather than held in a variable so that the check can be read on its
+own and copied on its own:
 
 ```bash
-git diff --name-only $BEFORE HEAD -- kb raw     # must print nothing
+git diff --name-only "$BEFORE" HEAD -- kb raw \
+  | grep -vE '^(kb/CONTRACT\.md|kb/CONVENTIONS\.md\.template|raw/CONTRACT\.md)$'
 ```
 
+Must print nothing.
+
 An empty result is the proof that the update touched machinery only. A non-empty one means a
 path slipped through - inspect it before going further.
 
+**The exclusion is not cosmetic.** Without it the check reports *empty* for an update that just
+ate a `kb/CONTRACT.md` change - it would be confirming the failure it exists to catch. If one of
+the three paths does not appear in the diff at all, that is fine: it means upstream did not
+touch it.
+
 Then, as after any stack change: `doctor`, `docs verify`, `instructions verify`, `migrate status`,
 `lint`. A `migrate status` with outstanding links means the update crossed a compatibility
 boundary - follow [migrate-corpus.md](migrate-corpus.md) before doing anything else.
@@ -157,11 +190,20 @@ merge above. Nothing is lost by the detour: the fix has to pass that CI either w
   above overwrites those stages with your own afterwards, so the conflict resolves itself.
   Never resolve one by hand with `git add -A` - that is exactly how the upstream version, which
   git left sitting in your working tree, gets committed into your instance.
-- **`git diff` after the merge shows something under `kb/` or `raw/`?** Stop. The scoping step
-  did not take. Do not publish; find out which path came through and where from.
+- **`git diff` after the merge shows something under `kb/` or `raw/`?** Stop - unless it is one
+  of the three machinery paths the check excludes, which is the update working as intended. For
+  anything else the scoping step did not take: do not publish; find out which path came through
+  and where from.
 - **Conflict in `tools/`, `types/` or `instructions/`?** You changed the stack locally, which
   step "Where stack development happens" says not to do. Take the upstream side and re-file the
   change as an issue there.
+- **...but you changed how *your pages* are written?** That is not a stack change and the rule
+  above does not apply to it. Language, section headings, naming forms, tone, relationship
+  labels and the confidence rubric live in `kb/CONVENTIONS.md`, and each collection's authoring
+  rules in `kb/<name>/COLLECTION.md` - all under `kb/`, all yours, all restored by the merge
+  procedure rather than overwritten by it. If you find yourself editing `tools/` or `types/` to
+  change an authoring convention, that is a stack bug: file it, because the split exists
+  precisely so you do not have to.
 
 ## Scope