fejkdata/todo.md

todo

Scoring

Score = -R - S/4 + 2*A + 2*G*W

Bar = 9

Next ID = 230

Goal	W
1	1.00
1.1	1.00
2	0.95
2.1	0.95
2.2	0.95
3	0.90
3.1	0.90
3.2	0.90
3.3	0.90
3.4	0.90
4	0.85
4.1	0.85
5	0.80
5.1	0.80
5.2	0.80
5.3	0.80
5.4	0.80
5.5	0.80
5.6	0.80
5.7	0.80
5.8	0.80
5.9	0.80
6	0.75
6.1	0.75
6.2	0.75
6.3	0.75
7	0.70
7.1	0.70
7.2	0.70
7.3	0.70
8	0.65
9	0.60
9.1	0.60
9.2	0.60
9.3	0.60
9.4	0.60
9.5	0.60
9.6	0.60
10	0.55
10.1	0.55
11	0.50
12	0.45
12.1	0.45
12.2	0.45
12.3	0.45
13	0.40
13.1	0.40
14	0.35
15	0.30
16	0.25

Items

ID	Release	Exempt	Item	R	S	A	G	Goals	Score
16	0.1.0		Add locale categories: company, phone, finance, vehicle, words.	3	8	8	9	2.1, 15	28.1
192	0.1.0	decision	Fail the gate when the shipped data passes 100 MiB, naming item 193.	1	2	6	8	2, 1.1	26.5
210	0.1.0		Add fr_FR with its geo/FR tree.	3	8	8	8	2	26.2
15	0.1.0		Add misc tables and templates, one row of its detail's table per chunk.	3	9	8	8	2, 15, 14	25.9
201	0.1.0		Place each Swedish street in the postort whose area holds it, so a big postort such as Stockholm carries its own streets.	4	6	8	8	2, 16	25.7
129	0.1.0	decision	Take a template wherever the library renders, so fake:"{/sv_SE.person.first}" and Fake("{/sv_SE.person}") render, and text with no {…} prints as written, as the CLI already does.	5	8	8	10	5.9, 7	25.0
163	0.1.0		Lift the CLI's --repeat cap, since the CLI streams each render, and give the builtins' count and decimal caps a technical reason in the README.	2	2	7	7	2, 5.7	24.8
227	0.1.0		Add a README quick start per task, for the bulk fixture author and the Go test author, each rendering one person whose name, sex, id, email and address agree.	1	2	7	6	1, 7	24.5
202	0.1.0		Add nb_NO with its geo/NO tree.	3	7	7	8	2	24.4
203	0.1.0		Add da_DK with its geo/DK tree.	3	7	7	8	2	24.4
204	0.1.0		Add fi_FI with its geo/FI tree.	3	7	7	8	2	24.4
205	0.1.0		Add is_IS with its geo/IS tree.	3	6	6	8	2	22.7
57	0.1.0		Rewrite CHANGELOG.md's [Unreleased] as what v0.1.0 holds.	1	2	6	6	1.1	22.5
217	0.1.0		Add de_DE with its geo/DE tree.	3	7	7	6	2	20.6
196	0.1.0	decision	Name, in the error for a reference nothing loaded provides, the module the reader's manifest reads by default that would provide it, or say none does.	3	4	6	8	6.2, 9.2	20.0
164	0.1.0		Let a table's format or a cell bind a name, which lives in that format or cell and keeps one pick through the draw.	2	2	5	7	4.1, 5.3	19.4
198	0.1.0		Fetch the TIGER files of every county a drawn US place spans, so a place's streets and postal codes cover all of it.	3	3	5	6	2	17.6
157	0.1.0		Show in the README's CLI section how PowerShell and cmd.exe pipe a template, one line per shell family.	1	1	5	6	7.2	17.1
181	0.1.0	decision	Fail a load where two sources define one category, unless the library's option or the CLI's flag says the later replaces the earlier, and then make every read reach the replacement.	5	4	6	9	9.3	16.8
167	0.1.0		Lower the reading cost of the files a chunk reads most before its first commit.	1	3	2	8	3, 3.4	16.6
89	0.1.0		Fail New without WithSeed, naming the option, and seed the CLI from the system.	3	3	6	7	10.1	16.0
165	0.1.0		Let a table carry name with neither key nor parent, and list the rows a name matches by their line where it matches several.	2	2	4	6	5.7	15.1
197	0.1.0	decision	Replace the namespace mount with one the loader states in one place, and give datafiles.Source.at one job.	3	3	2	8	3.2, 3	14.7
127	0.1.0		Give a Swedish street only postal codes whose delivery digit means street or rural delivery, dropping codes whose delivery digit is 9, or record why they stay.	3	3	4	6	4	14.4
110	0.1.0		Refuse an empty segment in a path Fake and FakeRecord take, as a reference does: sv_SE.person. reports path has an empty segment.	1	1	3	6	6	13.8
166	0.1.0		Let a key or name cell hold a bracket, a brace, a double quote or a pipe, so the table loads, its row draws at random, and only a selector cannot reach it.	2	2	3	6	5.7	13.1
216	0.1.0		Share between countries what geo-se.py and data_test.go hard-code for SE, in the first locale chunk that needs each.	2	2	2	6	3.2	12.3
191	0.1.0	defect	Read an existing tag through git/ref/tags/{tag} in publish_release.py, so its guard against a tag at another commit fires.	1	2	3	6	10	11.1
58	0.2.0		Ship prebuilt binaries, a container image, and packages for Homebrew, Scoop and the biggest Linux package managers, so the CLI needs no Go.	3	7	8	9	1.1, 7	29.2
206	0.2.0		Add zh_CN with its geo/CN tree.	4	8	8	8	2	25.2
208	0.2.0		Add es_MX with its geo/MX tree.	4	8	8	8	2	25.2
212	0.2.0		Add pt_BR with its geo/BR tree.	4	8	8	8	2	25.2
113	0.2.0	defect	Draw {iban(CC)} with its country's national check digits, and SE's with a real bank's id, so a validator checking more than mod 97 accepts it.	3	5	7	9	4	25.0
207	0.2.0		Add hi_IN with its geo/IN tree.	4	8	7	8	2	23.2
209	0.2.0	decision	Add ar_EG with its geo/EG tree.	4	8	7	8	2	23.2
211	0.2.0		Add bn_BD with its geo/BD tree.	4	8	7	8	2	23.2
213	0.2.0		Add id_ID with its geo/ID tree.	4	8	7	8	2	23.2
214	0.2.0	decision	Add ur_PK with its geo/PK tree.	4	8	7	8	2	23.2
154	0.2.0		Add en_US.routing, an ABA routing number over the Fed's prefix ranges with its check digit drawn by {aba()}.	2	2	6	7	2.1, 15	22.8
155	0.2.0		Add misc.isin and misc.cusip, built by their structure rules with their check digits drawn by {isin()} and {cusip()}.	2	2	6	7	2, 15	22.8
26	0.2.0	defect	Spell sv_SE.personnummer with the + Skatteverket uses from the year the holder turns 100, judged by a date the caller gives.	4	6	7	8	4	22.1
34	0.2.0		Add {isin()}, {cusip()}, {aba()} and {vin()}.	2	4	6	7	4	20.9
218	0.2.0	decision	Give every country shipped without streets its streets, once the maintainer accepts ODbL data or the country opens a register.	3	6	6	7	2.1	20.8
81	0.2.0	decision	Refuse at load every calc operand not proven numeric and every divisor not proven nonzero, in a string column too.	4	4	6	8	6.1, 4	20.6
177	0.2.0	decision	Run the nine-seat comprehension panel and the scoring run again once item 107 has moved the engine, and file what the panel names.	1	3	3	9	3	20.4
91	0.2.0		Accept a path through a name as a calc operand, so {/misc.coordinate as c}{c}: {calc(c.lat * 60)} computes from the coordinate {c} prints.	3	4	6	7	4.1, 5.3	19.9
223	0.2.0		Let a column draw a key from another record's rows, so an order's user_id names a user the same run wrote.	4	6	7	6	2, 4.1	19.9
36	0.2.0		Report every mistake a load finds in one error, as the decision "A load reports every mistake at once" states.	5	6	7	8	6	19.5
88	0.2.0		Add a 12-digit YYYYMMDDNNNC form of sv_SE.personnummer and sv_SE.samordningsnummer, the form Skatteverket's testpersonnummer series and many systems store.	2	3	6	6	4	19.4
220	0.2.0		Suggest the nearest name where a path segment names nothing: no entry "adress"; did you mean "address"?.	1	3	6	6	6	19.2
222	0.2.0		Write --format sql and SQLInsert rows as multi-row INSERTs, so a bulk fixture loads fast.	2	3	6	5	1	19.2
41	0.2.0	decision	Key every table by one key column, as the decision "A table selects by one key column, a code, never a free-form name" states.	6	7	7	8	5.5	19.1
52	0.2.0		Name the file a link error comes from beside its category path, sub.x (/d/a/sub/x.json): ….	1	2	5	7	6	19.0
117	0.2.0		List the fields of what a path has reached when its next segment names one that is not there: {/word as a}{a.zz} reports no field "zz"; word has w.	1	2	5	7	6	19.0
28	0.2.0	decision	Accept a middle name, and draw a personnummer whose sex matches a sex selected through a named pick.	4	4	6	7	4.1	18.9
24	0.2.0	defect	Stop misc.territory[EH].tld rendering .eh, the one shipped TLD misc.tld does not hold.	1	1	4	7	4	18.6
178	0.2.0		Plan with the systems architect which internal/ packages the engine splits into, by area, and how each type stops being written by more than one stage, then file the moves as items.	1	3	2	9	3, 3.2	18.4
193	0.2.0	decision	Move the largest shipped packages into nested Go modules that keep their import paths, once item 192's gate fails.	6	6	6	7	2.2, 2	17.8
228	0.2.0		Offer {/path as p} for a token whose unbound head names no loaded data, in a record's format too: today {p.first} with p unbound suggests {/p.first}.	2	2	5	6	6, 4.1	17.7
92	0.2.0		Name the hyphenated field in a calc's refusal, and say to rename it: today {calc(postal-code * 2)} reports no field "postal".	1	2	5	6	6	17.5
194	0.2.0	decision	Let a data author write and check their own .fejkdata.json index with the library or the CLI, and fail a load whose index leaves out a category file.	2	4	5	7	6.3, 9.1	17.5
219	0.2.0		Name the path and the Go type where a struct field's type cannot hold what its tag renders: sv_SE.person renders text, which int cannot hold.	1	2	5	6	6	17.5
221	0.2.0		Refuse two references under a record --format by saying a run renders one record: today {/users}{/orders} reports that an inline record has no fields.	1	2	5	6	6	17.5
229	0.2.0		Say where a template that opens like JSON fails to parse as JSON, by line and column, before it renders as a format string.	2	2	5	6	6, 5.1	17.1
53	0.2.0		Let a table column carry a datatype, so --format json writes "safe": true and --format sql a boolean.	4	5	6	6	4	16.9
55	0.2.0		Document ErrNoColumns and MaxRepeat in the README's Library section.	1	2	6	7	12	16.8
18	0.2.0		Give the address records one column set across countries: region and municipality as columns on geo.SE.address too.	4	4	6	6	5	16.6
44	0.2.0	decision	Have misc.tld[se] select the row keyed .se, or have its miss name [.se].	1	1	4	6	6	15.8
31	0.2.0		Rename misc.territory.country to sovereign.	3	2	4	7	5.8	15.7
20	0.2.0	defect	Weight sv_SE.sex and en_US.sex by bearers, as the README's Data section says they are.	2	2	4	6	4	15.7
50	0.2.0		Reword prove's refusal of a typed column reading a row, {/region}.	1	2	4	6	6	15.5
224	0.2.0		Name the module in every error about its manifest or its files, where the module is an fs.FS whose root is the module.	1	2	4	6	6	15.5
17	0.2.0		Give every shipped category a column for each part its format composes, and one record shape across the national ids; re-pin the shape.	5	6	6	6	5	15.1
170	0.2.0		Decide in one function whether a read lands in a name's pick, which refuseTwiceDrawnIn calls at load and keptInPick at render.	3	3	2	8	3, 3.2	14.7
29	0.2.0		Let a path go from a selected row into the template beside its family: geo.US.locality[1714000].address.	4	4	5	6	5	14.6
42	0.2.0		Refuse a struct tag's datatype other than its Go type's before proving its values, as the README's Library section promises.	2	2	4	6	6	14.5
32	0.2.0		Add misc.browser as the parent of misc.useragent, so misc.browser[Chrome].useragent resolves.	3	3	4	6	4.1	14.4
22	0.2.0		Give url and email a path that draws only domains nobody can register, keeping the wide set as the default.	3	4	7	8	16	14.0
46	0.2.0		Report the same error every load for a table with two bad options.	2	2	3	7	6, 10	14.0
158	0.2.0		Drop a UTF-8 byte order mark that starts stdin, and say in the README how to stop PowerShell 5.1 sending Göteborg as G?teborg.	2	2	4	5	7.2, 5.1	13.5
226	0.2.0		Show in the README how to make a column unique, such as an email's local part carrying {seq()}.	1	2	4	4	4	13.3
171	0.2.0		Handle a template that only reads one record column in one place, so checkColumns, itemDatatype, proveColumnItem and renderLeaf no longer each special-case readsColumn.	3	3	2	7	3, 3.2	12.8
27	0.2.0		Merge en_US.ip and sv_SE.ip, today byte-identical, into one misc.ip.	3	2	4	6	8	12.3
225	0.2.0		Drop "a field cannot be named weight" from the refusal of a weight that is no number, and name the column a table's weight reads.	1	1	3	5	6	12.2
107	0.2.0	decision	Move the template engine into the internal/ packages item 178 plans, untangled so no type is written by more than one stage, leaving the root the public API and its options.	6	9	3	8	3.2, 3.4	12.2
186	0.2.0	decision	Load a module carrying functions through an option of its own, its functions reaching the generator's randomness and date through an interface the root declares.	6	7	5	8	9.5, 9.1	11.8
168	0.2.0	principle	Test the shared steps of data-import/ in the merge gate, starting with geo.fence.	2	4	2	6	3	11.8
161	0.2.0		Let a field whose name starts or ends with whitespace be bound to a name, or refuse such an identifier, so { x as p} means one thing.	2	2	2	6	5.6, 4.1	11.7
175	0.2.0		Rewrite the comments the 2026-10-09 panel needed several reads of, and delete those it read as restating their code.	1	2	1	6	3.4	11.3
195	0.2.0	principle	Parse each builtin argument once, in checkArgs, and hand prep and proveNumber the parsed value.	3	3	2	6	3	11.1
112	0.2.0		Check a calc's field operands where its template resolves, beside its name operands, once item 36 reports every mistake at once.	2	2	1	6	3.2	10.3
172	0.2.0		Pass drawSteps the kind of read it draws as an argument of its own, so no caller signals a sibling path by a nil pins or a fresh read by a nil memo.	2	2	1	6	3.2	10.3
173	0.2.0		Call what a token reads its spelling, never a name, in format.go, arm.go and reference.go, so a name in the engine is only a bound name.	2	3	1	6	3.2	10.1
174	0.2.0		Spell once the fact that a walk's next step leaves a selected row, which pathPos.fromRow and tableRoute.nextLinked each spell today.	1	1	1	5	3.2	9.8
108	0.2.0	defect	Name item 26 in the decision "No builtin reads the clock, so a date is bounded by days, never by an age", as the item that ends its conflict with goal 4.	1	1	1	4	3.4	8.0
169	0.2.0	question	Reword the decision "A parent row with no child row is a load error" to say what each geo import does with such a row: drop it, or exit where geo-se.py would lose a kommun or a län.	1	1	1	4	3	8.0
38	0.3.0	defect	Compare calcParser.binary's operator as a rune.	1	1	3	6	6	13.8
45	0.3.0		Name the node a selector follows in childNamed's refusal.	1	1	3	6	6	13.8
49	0.3.0		Report a CRLF rows file holding only its header as having no rows.	1	1	3	6	6	13.8
13	0.3.0	defect	Place xlsx cells by their r reference in data-import/xlsx.py.	2	2	3	6	4	13.7
39	0.3.0		Stop the columnKinds suggestion naming a field's own kind or a narrower one.	1	2	3	6	6	13.5
51	0.3.0		Spell a table one way across the errors that name it.	1	2	3	6	6	13.5
115	0.3.0		Spell a rows file's line one way in every error, naming the file.	1	2	3	6	6	13.5
14	0.3.0		Spell misc.creditcard's digit runs {digits(n)}.	2	2	4	6	8	13.3
11	0.3.0		Test that every geo tree holds the five table names and the address columns that port across countries.	1	2	3	5	4	13.0
35	0.3.0		Add {base64url(n)} for JWT shapes.	1	2	4	5	8	13.0
40	0.3.0		Parse defaultTable's path with the library's grammar.	2	2	3	5	3.2	12.5
21	0.3.0		List title in both locales, and sv_SE's birth-number, in the README's Data list of what each locale carries.	1	1	4	6	12	12.2
86	0.3.0		Read both en_US.phone formats' area codes from one category, as their exchange reads en_US.phone-exchange.	1	2	2	5	3.2	11.5
23	0.3.0		Give every other shipped category that could reach something real a path that never does.	3	6	6	7	16	11.0
75	0.3.0		Run every README sh, go and text example as a test, and compare each "Renders" line to a seeded render.	2	6	4	7	12.2	10.8
33	0.3.0		Group data/misc into folders where a group name makes a path easier to guess.	4	5	4	5	5	10.8
72	0.3.0	principle	Fail the merge gate when test coverage falls below the last recorded figure.	2	3	2	5	3	10.2
30	0.3.0		Draw email.local from username, so the two share one handle list.	2	2	3	5	8	10.0
95	0.3.0	principle	Hold a struct's columns and the field each fills in one slice.	1	2	1	5	3.2	9.5
116	0.3.0		Turn a row index into its rows file's line in one function.	1	2	1	5	3.2	9.5
19	0.3.0		Fill the 398 Swedish localities weighted 200 from SCB småorter.	2	4	4	6	14	9.2
56	0.3.0	defect	Build on a manual run of test.yml.	1	1	1	4	1	8.8
109	0.3.0	principle	Indent every script under data-import/ with hard tabs, as AGENTS.md requires and release-tooling/ does.	2	4	1	4	3	6.2
63	0.4.0		Pair a street with its exact postnummer.	3	6	5	8	4.1	19.1
62	0.4.0		Add {btc()} and {eth()}.	2	4	4	6	4	15.2
59	0.4.0		Promise in Generator's godoc that its renders run one at a time.	1	1	5	5	12	13.2
65	0.4.0		Hold every change AGENTS.md says owes a CHANGELOG.md entry to one in CI.	2	3	4	5	5.8	13.2
66	0.4.0		Cut the README's Layout block to the lines that say what a file name cannot.	1	1	2	5	3.4	11.8
67	0.4.0		Cut AGENTS.md to the rules only it states, and explain every term its comprehension rule uses.	1	2	1	6	3.4	11.3
64	0.4.0		Give every entry in docs/decisions.md the goal it serves, its date, who made it and the premise it rests on.	1	4	1	6	3.4	10.8
68	0.4.0	decision	Make gitea.larvit.se/larvit/fejkdata a pull mirror of GitHub.	2	1	1	3	1.1	5.8
69	1.0.0		Announce v1.0.0 where a developer choosing a fake-data tool already reads, with a README first screen for someone deciding in a minute.	1	3	7	9	1.1	30.2
70	1.0.0		Publish a homepage with an in-browser generator, the library compiled to WebAssembly.	3	6	6	6	1.1	19.5
190	1.1.0	question	Decide whether fejkdata pseudonymises real datasets, and if so add the goal, the audience persona and the items below to the README and the plan.	6	9	7	8	1, 4	21.8

Details

16. Add locale categories: company, phone, finance, vehicle, words.

Shape: T = table, t = template, c = choice.

sv_SE (source research)

Category	Shape	Source	Licence
person title, birthdate, age, blood type weighted	t	geblod.nu distribution	facts
organisationsnummer by form, vat	t	Bolagsverket group digits, Luhn, SE…01	facts
company name patterns, legal form weighted	t	Bolagsverket registrations 2025	CC BY 2.5 SE
sni industry codes	T	SCB SNI 2025	"Källa: SCB"
ssyk occupations	T	SCB SSYK 2012	"Källa: SCB"
phone mobile, fixed per area code, E.164	T+t	PTS numbering plan 2024	facts
bankgiro, plusgiro, bankaccount clearing + Luhn/mod-11	T+t	Bankinfrastruktur CSV, Bankgirot rules	facts
licenseplate ABC 123, ABC 12A, blocked combinations	t	Transportstyrelsen	facts
car make, model weighted by registrations	T	Mobility Sweden 2025	cite
word noun, verb, adjective, adverb; sentence	T+t	SALDO	CC BY 4.0
month and weekday names, holiday	t+T	CLDR sv, lag 1989:253	Unicode
territory localised names keyed by alpha2	T	CLDR sv territory names	Unicode

en_US (source research, and part1–part4)

Category	Shape	Source	Licence
ein valid ranges	t	IRS	facts
company names, suffix, naics	t+T	SEC tickers for patterns, NAICS 2022	public domain
phone NANP with valid NPA (the NXX ships as en_US.phone-exchange)	t	NANPA rules	facts
bankaccount	t	—	—
licenseplate per state	T	hand-authored patterns	facts
car make, model	T	NHTSA vPIC	public domain
word, sentence, paragraph	T+t	Moby POS or WordNet	public domain / WordNet
month and weekday names, holiday	t+T	CLDR en	Unicode

192. Fail the gate when the shipped data passes 100 MiB, naming item 193.

Carries out the decision "The shipped data is Go packages a library imports by choice, and the CLI carries every one, from 0.1.0", whose premise the maintainer set at 100 MiB on 2026-10-09: a fifth of the 500 MiB a Go module zip may hold. A test sums the bytes of the tracked files under data/. Items 202 to 205, 210 and 217, a locale each, grow them inside 0.1.0.

210. Add fr_FR with its geo/FR tree.

France holds more French speakers than DR Congo: 64M to 49M on Wikipedia's "Geographical distribution of French speakers", which credits a 2022 OIF report but flags its table as not taken from that report. The Base Adresse Nationale (Licence Ouverte 2.0) holds every street with its code postal.

15. Add misc tables and templates, one row of its detail's table per chunk.

Shape: T = table, t = template, c = choice.

Category	Shape	Source	Licence
ip v4 documentation ranges, private, CIDR; ipv6 2001:db8::/32; mac locally administered	t	RFC 5737, 1918, 9637	facts
creditcard per network: IIN, length, CVV, expiry	T+t	network rules, {luhn()}	facts
bic	t	structure rules	facts
ean, upc, gtin, isbn, issn, imei, asin, sku	t	check-digit rules, GS1 demo prefix 952	facts
product name, adjective, material, department, garmentsize	T/c	LLM-written lists	—
airport IATA, ICAO, territory, municipality; airline; aircraft; flight, seat, pnr	T+t	OurAirports, Wikidata	public domain, CC0
element, unit, planet	T	PubChem, BIPM, NASA	public domain, CC BY 4.0
animal by class, plant	T	Wikidata	CC0
bloodtype weighted (global)	c	AABB	facts
color named, hex, rgb, hsl, cmyk	T+t	CSS Color 4, XKCD	W3C, CC0
programminglanguage, os, browser, database column/type/engine, fileext	T/c	Linguist, curated	MIT
commit message, branch, sha	t	LLM-written, {hex(40)}	—
password, hash, jwt, slug, hostname, avatar, placeholderimage	t	shapes	—
book title, author; genre; instrument; dish, ingredient	T	Gutenberg catalog, MusicBrainz, USDA	CC0
lorem, hacker, hipster, catchphrase, buzzword, quote	T/c	lorem ipsum, LLM-written	—
direction, continent, ulid	c/t	—	—

201. Place each Swedish street in the postort whose area holds it, so a big postort such as Stockholm carries its own streets.

GeoNames gives Stockholm's 1,139 postal codes 2 points and Göteborg's 758 one, and streets() in geo-se.py counts each road segment toward the nearest postort's point. Every street then ships at most 363 names under Stockholm, the rest going to Bromma, Hägersten and other neighbours. Find an open source of areas first, such as SCB's tätort polygons (CC0), and how a tätort maps to a postort; record the source in DATA-LICENSES.md and the method in the decision on the default embed. The README's warning that a street may sit under a neighbouring postort is revised to match.

129. Take a template wherever the library renders, so fake:"{/sv_SE.person.first}" and Fake("{/sv_SE.person}") render, and text with no {…} prints as written, as the CLI already does.

Goal 5.9. Today a path is a second spelling of the template that reads it; afterwards only the template remains.

• A lone reference, a template of one reference token and nothing else, is what it references, as a record column reading one reference already is: FakeRecord("{/users}") returns the columns of users. The CLI's loneReference and the isPath check it copies from the token grammar then go, and --format sql takes its default --table from the library's parse of the reference.
• Fake and FakeRecord take a template. FakeTemplate folds into Fake, FakeRecordTemplate into FakeRecord, and IsTemplate goes, with grammar.IsTemplate.
• Fake of a lone reference costs what Fake of its path costs today, and the allocation gate holds a case for it.
• List and --list give each entry as the template that renders it, {/sv_SE.person}.
• Text that is not a JSON value and holds no {…} prints as written (goal 5.1), in a string field's struct tag and Fake alike, as stdin's text does in the CLI: Fake("sv_SE.person") returns sv_SE.person. CHANGELOG.md says that a path with no {…} prints as its text. A struct tag's - still skips its field.
• Where text with no {…} is refused, as a record or in a typed struct field, and it spells a path the data offers, the error names {/that.path}.
• A lone reference to nothing exits 2 under --format, where it exits 1 today.
• A lone reference written as an object holding only a format, {"format":"{/users}"}, or as a one-item choice, ["{/users}"], names the record as {/users} does.
• A struct tag of a bare JSON number or boolean, fake:"42", renders its text, as stdin and NewTemplate already do.
• grammar.CallerPath, which strips a path's leading /, goes with the path spelling, and so does the README's Library line allowing it.
• Decide whether a lone reference under --format draws as its path draws today or as a template draws: under one seed, drawing users as a path and as the template {/users} picks different rows.
• This revises the decisions "A struct tag is a template by its shape", "FakeTemplate and NewTemplate both stay", "--list stays a plain list of paths", "The CLI renders exactly the template on its stdin, and adds nothing", and the exit-1 rule for a lone reference to nothing in "A template that does not compile is misuse (exit 2), including a reference that resolves to nothing, save a lone reference under the CLI's --format until item 129". The README's examples and exit codes, the godoc examples in doc.go and CHANGELOG.md's entries move to the template spelling. Delete items 40 and 110, which this closes.

Split it into items for the CLI, struct tags and the library before starting.

163. Lift the CLI's --repeat cap, since the CLI streams each render, and give the builtins' count and decimal caps a technical reason in the README.

The README's Audience names a bulk fixture author writing millions of rows, and -n 5000000 is misuse today, so they loop. The decision "The repeat cap bounds renders, not bytes" covers nested repeats in data, not -n. The README's Functions section justifies the builtin caps by a fat-fingered hex(2000000000), a guess at a mistake under goal 5.7; the reason that holds is that one render may not allocate gigabytes. The goals audit of the narrowed goal 5.7 found it.

227. Add a README quick start per task, for the bulk fixture author and the Go test author, each rendering one person whose name, sex, id, email and address agree.

From the 2026-10-11 audience bench: the bulk fixture author assembled a users record from six sections, Records, Datatype, Functions, the person example, Names and Transforms, and the Go test author took three runs to a struct whose personnummer, name and email agree. The record both reached: {/sv_SE.sex as s}{/sv_SE.last-name as l}{/sv_SE.address as a} with {s.first-name}, {date(1940-01-01,2006-12-31,'060102')}-{s.birth-number.number}{luhn()} and {lowercase(ascii(s.first-name))}.{lowercase(ascii(l))}. Bench the quick starts with both personas before merging.

202. Add nb_NO with its geo/NO tree.

nb is Bokmål, the written standard most Norwegians use. Kartverket's address register (CC BY 4.0) holds every street with its postnummer. Bring's postal register spells every poststed in capitals, so the import recases each poststed before well_cased sees it.

203. Add da_DK with its geo/DK tree.

Danmarks Adresseregister through Datafordeler (free) holds every street with its postnummer.

204. Add fi_FI with its geo/FI tree.

Posti's free postal code file names each postinumeroalue, and Digiroad (CC BY 4.0) names the streets. A street carries its Finnish name, plus a Swedish-name column where the municipality is bilingual.

205. Add is_IS with its geo/IS tree.

Staðfangaskrá, Iceland's address register, holds every street with its póstnúmer.

57. Rewrite CHANGELOG.md's [Unreleased] as what v0.1.0 holds.

Nothing has shipped, so "no longer paths", "where it used to fail" and "where it used to be an empty string" describe versions no reader can have installed.

217. Add de_DE with its geo/DE tree.

GeoNames publishes Germany's postal codes. Its address data is published by each Land; where open registers cover every Land, they are its street source, else it ships without streets (decision: no open address register covering it whole).

196. Name, in the error for a reference nothing loaded provides, the module the reader's manifest reads by default that would provide it, or say none does.

Carries out the decision "The shipped data is Go packages a library imports by choice, and the CLI carries every one, from 0.1.0", and ends the locale-address decision's conflict with goal 6.2. Carved out of item 182 on 2026-10-11, after six rounds of the comprehension panel ruled each attempt worse. Tried and ruled worse: a module list carried per category from each source's manifest (two routes, walked and indexed); the union of every manifest's list on the Generator, noted at four entry points; and the same noted inside loadReached, its list threaded through loadInline and structCompile. Each named every module read, even loaded ones, until the list held namespaces and the note named only those nothing in the tree provides, which the product-owner and goals reviewers accepted. A shipped locale's Modules() already carries its places, so this serves a bare FS beside a stand-in, a --data-path folder and anyone else's module; the error names the module and points to Modules(), as the 2026-10-11 bench asked. Bench the manifest key and the note's wording with the data author, since entries changed from import paths to namespaces after the 2026-10-11 bench.

164. Let a table's format or a cell bind a name, which lives in that format or cell and keeps one pick through the draw.

The maintainer ruled so on 2026-10-09: a name is a lexical closure, as the decision "A name lives in the category binding it, or in the repeat or choice item binding it, and is drawn on its first read" now states. Today table.go refuses {/sv_SE.person as p}{p.first} {p.last} in a cell with a table binds no name. A cell reads no name its table's format binds. Revise that decision's title and the README's Names list with it.

198. Fetch the TIGER files of every county a drawn US place spans, so a place's streets and postal codes cover all of it.

streets() in geo-us.py fetches only each drawn place's main county, the one holding most of its people. A ZCTA in a place's other counties then has no address range and is dropped: New York, under Kings County, ships Brooklyn's codes, one Manhattan code and none on Staten Island, and its streets are mostly Brooklyn's. Whether a neighbouring county is fetched depends on which other places the draw picks. The fix reads every county in localities' county_part.

157. Show in the README's CLI section how PowerShell and cmd.exe pipe a template, one line per shell family.

Split from item 129. cmd.exe's echo keeps its quotes and a trailing space, so echo {/users} | fejkdata sends {/users} and stops naming the record.

181. Fail a load where two sources define one category, unless the library's option or the CLI's flag says the later replaces the earlier, and then make every read reach the replacement.

Carries out the decision "The shipped data is Go packages a library imports by choice, and the CLI carries every one, from 0.1.0". Proposed spellings: WithReplace() and a boolean --replace covering every -d, so it goes anywhere on the line. Bench the option, the flag and the clash error with the data and hand fixture authors before merging; the error names the option or the flag. A clash is found from the categories each source's index names and the files each source without a manifest holds, without parsing them. Revises the decision "A --data-path override rebinds every reference to the category it replaces", ending its conflict with goal 9.3. The changelog names the flag, the option and the new refusal. The same embed.FS passed twice, as svse.Modules() beside data.Modules() passes geose.FS, loads once and is no clash. Until then, a -d file replacing sv_SE/first-name.json breaks {/sv_SE.person} with token {n.name}: no variant of this 2-way choice carries "name", naming no replacement; the clash error ends that.

167. Lower the reading cost of the files a chunk reads most before its first commit.

reading-cost on 2026-10-11: the last 5 chunks' median is 91452 new input tokens before their first commit, the 5 before them 69756. Read most over the last 5 (opens and searches): README.md 37, todo.md 29, docs/decisions.md 15, CHANGELOG.md 12, data_test.go 11, shipped_test.go 8, cmd/fejkdata/main.go 7, data-import/geo-us.py 7, DATA-LICENSES.md 5, bench_test.go 5. The chunk shipping this item runs reading-cost --reset.

89. Fail New without WithSeed, naming the option, and seed the CLI from the system.

Goal 10.1 has the caller supply the seed, and today New without WithSeed seeds itself. It ships in 0.1.0, where New already starts refusing a call naming no data, so New breaks once before anyone depends on it. Mark WithSeed required in the Library section's options table. Its tests then stop swapping randomBytes, as fejkdata_test.go does today, which fails every New in the package while that test runs.

165. Let a table carry name with neither key nor parent, and list the rows a name matches by their line where it matches several.

The maintainer ruled so on 2026-10-09. Today bindOptions in internal/rows refuses such a table, since ambiguous, which reports a name matching several rows, lists those rows by key. Afterwards ambiguous lists them by line, the header being line 1, and ends with "make the names unique, or add a key column".

197. Replace the namespace mount with one the loader states in one place, and give datafiles.Source.at one job.

Item 182 shipped on 2026-10-11 over a paired ruling with Shape fallen, by the maintainer's decision recorded in the comprehension-floor entry. Three seats named the same two costs: mounted in internal/datafiles/mount.go, a partial fs.FS that fakes the folders above a module's namespace and serves only ReadDir and ReadFile; and Source.at, which is at once the mounted flag, the prefix labelled strips from error labels and the folder Manifest reads from. Tried and ruled down within item 182: doubled folders (data/sv_SE/sv_SE/), the mount as a prefix on Category.Folders that Load strips (two coordinate systems), and a complete fs.FS wrapper. Whatever replaces it keeps errors naming files where they are on disk for a data path, and keeps index.go unaware of namespaces.

127. Give a Swedish street only postal codes whose delivery digit means street or rural delivery, dropping codes whose delivery digit is 9, or record why they stay.

docs/research/research-geo-se.md reads delivery digit 0 or 1 as boxes, 2–4 and 6–7 as street, 5 as rural, 8 as reply mail and 9 as competitions or temporary, with exceptions in big cities. street_delivery drops 0, 1 and 8 and keeps 9. The panel of 2026-10-05 found it; whether a shipped street carries a 9 code is unchecked.

110. Refuse an empty segment in a path Fake and FakeRecord take, as a reference does: sv_SE.person. reports path has an empty segment.

Today Fake("sv_SE.person.") reports no field "", while {/sv_SE.person.} reports path has an empty segment. grammar.CheckSegments is the check a reference, a sibling path and a step up .. run.

166. Let a key or name cell hold a bracket, a brace, a double quote or a pipe, so the table loads, its row draws at random, and only a selector cannot reach it.

The maintainer ruled so on 2026-10-09. Today checkSelectorCells in internal/rows refuses the whole table. Afterwards a path naming such a key fails with an error naming the character a selector cannot spell, and the README says a row whose name holds such a character is still selected by its key.

216. Share between countries what geo-se.py and data_test.go hard-code for SE, in the first locale chunk that needs each.

A second country reading GeoNames' postal codes moves geonames(), and the streets() wrapper around geo.Nearest, from geo-se.py into geo.py. data_test.go's geoPlaces reads every country but US by SE's column positions, and a locality is keyed by name in SE and by code in US: a new country states its own.

191. Read an existing tag through git/ref/tags/{tag} in publish_release.py, so its guard against a tag at another commit fires.

GitHub has no tags/{tag} endpoint and answers 404 whether or not the tag exists. So when the tag already sits at another commit, the release job publishes on that old tag, and the guard never stops it. The guard follows an annotated tag to its commit before comparing. A test over a stub of request runs in the merge gate and pins the guard, which no test covers today.

58. Ship prebuilt binaries, a container image, and packages for Homebrew, Scoop and the biggest Linux package managers, so the CLI needs no Go.

GoReleaser attaches the binaries to the release the tag workflow publishes, and builds deb and rpm packages, an Alpine APK and an AUR package beside Homebrew and Scoop. The binaries carry the stamped tag, which --version prints. v0.1.0 ships first, so it can be tested before it is packaged.

206. Add zh_CN with its geo/CN tree.

Written in simplified characters. rows.Pins holds eight pins inline, enough for a five-deep geo tree. If CN's tree runs deeper, raise that number to keep a render off the heap. It ships without streets (decision: no open address register covering it whole).

208. Add es_MX with its geo/MX tree.

Mexico holds the most Spanish speakers. SEPOMEX publishes every código postal with its asentamiento, and INEGI's Marco Geoestadístico names the streets.

212. Add pt_BR with its geo/BR tree.

Brazil holds the most Portuguese speakers. IBGE's CNEFE lists every address with its CEP.

113. Draw {iban(CC)} with its country's national check digits, and SE's with a real bank's id, so a validator checking more than mod 97 accepts it.

iban in internal/builtinfunc/checksum.go draws a random numeric BBAN and sets only the mod-97 digits. BE's last two digits are the first ten mod 97, NO carries a mod-11 account check digit, FI a Luhn digit, ES two control digits, and SE's three-digit bank id must be a real bank's (docs/research/research-sources-se.md). Goal 4 asks for the check the real system applies; the README's {iban(CC)} row promises only length and mod 97, and changes with it.

207. Add hi_IN with its geo/IN tree.

Hindi is written in Devanagari. India's PIN code directory is open data on data.gov.in. It ships without streets (decision: no open address register covering it whole).

209. Add ar_EG with its geo/EG tree.

Standard Arabic has no native speakers. Confirm from Ethnologue's country pages that Egypt holds the most second-language speakers, and record the answer in the decision. It ships without streets (decision: no open address register covering it whole).

211. Add bn_BD with its geo/BD tree.

Bangladesh holds the most Bengali speakers. It ships without streets (decision: no open address register covering it whole).

213. Add id_ID with its geo/ID tree.

Indonesian is spoken almost only in Indonesia. It ships without streets (decision: no open address register covering it whole).

214. Add ur_PK with its geo/PK tree.

Urdu is Pakistan's national language, yet India has more native speakers: 50.8M by its 2011 census against Pakistan's 22.3M by its 2023 one. Confirm from Ethnologue's country pages that Pakistan holds the most speakers in all, else the locale is ur_IN, and record the answer in the decision. It ships without streets (decision: no open address register covering it whole).

154. Add en_US.routing, an ABA routing number over the Fed's prefix ranges with its check digit drawn by {aba()}.

Needs item 34.

155. Add misc.isin and misc.cusip, built by their structure rules with their check digits drawn by {isin()} and {cusip()}.

Needs item 34: {luhn()} skips letters, so it draws a wrong ISIN check digit, and CUSIP's check digit is not Luhn.

26. Spell sv_SE.personnummer with the + Skatteverket uses from the year the holder turns 100, judged by a date the caller gives.

The format hard-codes -, and its earliest birthdate, 1930-01-01, makes the oldest draws invalid from 2030. A system holding Swedish personnummer often breaks on the +, so a fixture carrying one is a valuable test. Whether a number takes + depends on the date it is read, and the decision "No builtin reads the clock, so a date is bounded by days, never by an age" forbids a builtin from reading that date off the clock. This item revises it: once the caller gives the date, an age is a bound, and the CLI's default date makes output change with the day it runs unless the flag is given. Do the first step before the rest:

• Explore how a caller passes input data, such as the date a number is read on, to a render: in the template, as a plain option, or both. Make the library require the date, as item 89 makes it require the seed, and let the CLI default it to the system's when its flag is absent. Bench the spelling; --now reads like the clock. Shape the input so it can later narrow the draws to adults, children, 65 and over, or a mix, and so let a test ask for a centenarian; narrowing itself waits for its own item.
• Draw birthdates back past 100 years before the given date, so a + can appear. Read in 2026, the oldest shipped birthdate is 96 years old, so no draw carries a + until 2030. Skatteverket's test series reaches back to 1890, with birth numbers 980/981 before 1900. Draw no birthdate after the given date.
• Weight the ages by the territory's population, so the share of + numbers follows its demography: research-age-bands.md.
• Let a data author's own category spell the separator too, through a builtin or a function a data module provides (item 186), and update the README's personnummer recipe and its "a day in 1930–2025" count.
• Rewrite the README's --seed and WithSeed rows to goal 10's wording, and name the new required option in the changelog: New breaks a second time here, after item 89, as the maintainer accepted.
• Research: sv_SE.samordningsnummer also hard-codes - and draws from 1930. Check whether Lag (2022:1697) om samordningsnummer gives it the same +; folkbokföringslagen 18 § states the rule for personnummer only.

34. Add {isin()}, {cusip()}, {aba()} and {vin()}.

isin: Luhn over letters expanded to digits. aba: 3-7-1 weights. vin: position 9 over the whole; a sample taking the WMI, since the check sits mid-string.

218. Give every country shipped without streets its streets, once the maintainer accepts ODbL data or the country opens a register.

Ends the decision "A country with no open address register covering it whole ships its places and postal codes without streets".

81. Refuse at load every calc operand not proven numeric and every divisor not proven nonzero, in a string column too.

The decision "A constant zero divisor is a load error; in a string column a divisor that is not constant prints Inf" lets {calc(a/(b*c))} with b fixed at "0" write Inf into every row. An operand that is sometimes not a number prints NaN. Both work against goals 6.1 and 4. valueproof.go already proves a typed column's divisor nonzero. Once every operand is proven, neverNumeric and constantValue in calc.go go, and with them their reading of NaN and Inf as numbers, which proven.Literal refuses: calc reads text as a number one way.

177. Run the nine-seat comprehension panel and the scoring run again once item 107 has moved the engine, and file what the panel names.

Needs item 107. The decision "comprehension floor: every dimension and the overall at 7.0 or above, from 0.2.0" holds the scores this run is measured against.

91. Accept a path through a name as a calc operand, so {/misc.coordinate as c}{c}: {calc(c.lat * 60)} computes from the coordinate {c} prints.

A calc operand parses as a bare identifier, so {calc(c.lat * 60)} fails with unexpected ".lat * 60", and a second binding of /misc.coordinate.lat would draw another coordinate. Resolve the path through compileArm's leaves, as operandNodes does for a bare name. Binding the path instead, {p.price as pr}, says no field "p"; a binding names a field, or a reference… though p is a bound name.

223. Let a column draw a key from another record's rows, so an order's user_id names a user the same run wrote.

From the 2026-10-11 audience bench: "user_id": "{/users.id}" draws a fresh user, so {seq()} makes it 1, 2, 3 beside the order's own id, and the workaround types the user count twice, in -n and in {int(1,N)}.

36. Report every mistake a load finds in one error, as the decision "A load reports every mistake at once" states.

New and NewTemplate stop at the first, so data holding two mistakes takes two runs to fix. Split it into items before starting, one of them the shape a Go caller iterates and the CLI prints, and the order of an inline template's mistakes, which name no path; reword the README's "New refuses a mistake in the data" to every mistake.

88. Add a 12-digit YYYYMMDDNNNC form of sv_SE.personnummer and sv_SE.samordningsnummer, the form Skatteverket's testpersonnummer series and many systems store.

A system that stores the 12-digit form never meets the +, so it needs a fixture in that form.

41. Key every table by one key column, as the decision "A table selects by one key column, a code, never a free-form name" states.

geo.SE.municipality[Lund] and misc.territory[Sweden] select a row today. Steps:

• Have a selector that misses name the key of every row whose cell spells it, matched without case, else say the table selects by its key: misc.territory[Sweden] and misc.territory[se] name [SE], misc.protocol[tcp] its key, and misc.loglevel[Error] [err].
• Delete the name option and the load checks it carries, and have New refuse a table still carrying name, naming key.
• Key misc.loglevel on keyword, and geo.SE.locality on the integer data-import/geo-se.py assigns as the decision states, linking street and postal-code by it.
• Drop key from last-name and sv_SE.title, and re-pin testdata/shipped_shape.txt.
• Leave no selection by name in README.md, CHANGELOG.md, docs/ or --help.

52. Name the file a link error comes from beside its category path, sub.x (/d/a/sub/x.json): ….

With several --data-path layers the author has to work out which directory won, while a parse error on the same file names it.

117. List the fields of what a path has reached when its next segment names one that is not there: {/word as a}{a.zz} reports no field "zz"; word has w.

Today the refusal names only the missing field, so a data author fixing a typo opens the category to find the spelling. Item 92 covers the hyphenated calc operand only.

28. Accept a middle name, and draw a personnummer whose sex matches a sex selected through a named pick.

Today personnummer draws its own sex, so a name and a number agree only through the README Data section's template, which reads both through one bound sex.

24. Stop misc.territory[EH].tld rendering .eh, the one shipped TLD misc.tld does not hold.

ISO 3166 reserves it for Western Sahara and the root zone has never been delegated it, so no resolver answers for it.

178. Plan with the systems architect which internal/ packages the engine splits into, by area, and how each type stops being written by more than one stage, then file the moves as items.

The maintainer chose on 2026-10-09 to regroup the engine into packages in 0.2.0, untangled first, over naming the root files by area. What the panels of 2026-10-09 on b9d1af6 found:

• The 25 flat root files are the worst level of the tree; both architect seats grouped them by hand into public API, load, names, render, paths and proofs.
• The named-pick machinery spans name.go, namefence.go, pick.go, env.go, render.go, path.go and record.go, and every seat found it hardest.
• template is filled in four phases by four functions, readsColumn has four readers in three files, and renderEnv shares one frameStack by pointer behind a by-value env.
• Calc lives in five places, and paths are walked by compiledPath, callerPathSteps and drawSteps over one compileStep.

The decision "The template engine stays the root package until item 107; what reads no engine type, a table's rows included, sits in internal/" says why the engine stayed whole: template, table, arm, op and nameBinding sit in one cycle, since several load stages each write part of the same structs. The plan answers four questions. How does load finish each value before render reads it? Which packages does that give, and what is each one's fan-out? How does the allocation gate hold? Which of items 170 to 175 does it answer or close? It lands as a docs/decisions.md entry replacing that decision, and as items under item 107, each shipping with a paired ruling no worse.

193. Move the largest shipped packages into nested Go modules that keep their import paths, once item 192's gate fails.

Carries out the decision "The shipped data is Go packages a library imports by choice, and the CLI carries every one, from 0.1.0". Each nested module requires the core release that drops its package, so no build sees the package twice. It brings per-module tags and a workspace, so it moves into the release of the chunk whose data trips the gate.

228. Offer {/path as p} for a token whose unbound head names no loaded data, in a record's format too: today {p.first} with p unbound suggests {/p.first}.

From the 2026-10-11 audience bench, a Go test author tagging {p.first} before binding p. The hint is built in checkArm before the root is known, and only where the template has no fields; offering the binding there also told {sv_SE.person.last} to bind a name sv_SE. Decide between the reference and the binding once the root is loaded.

92. Name the hyphenated field in a calc's refusal, and say to rename it: today {calc(postal-code * 2)} reports no field "postal".

A hyphen is always subtraction in a calc, and the shipped data has hyphenated fields (postal-code and street-number in geo.SE.address). The refusal names the first fragment, not the field the author meant.

194. Let a data author write and check their own .fejkdata.json index with the library or the CLI, and fail a load whose index leaves out a category file.

Goal 6.3 has an author prove their module, and goal 9.1 has fejkdata's data load as anyone's; today only fejkdata's own test, TestShippedManifestsAreCurrent over indexEntry, writes and checks an index. A category file the index leaves out never loads, silently.

53. Let a table column carry a datatype, so --format json writes "safe": true and --format sql a boolean.

Today only a JSON field takes one, so misc.httpmethod's booleans are typed in Go and text everywhere else. Typing a shipped column changes what json and sql write, so the capability is a minor and applying it to misc.httpmethod is a major.

44. Have misc.tld[se] select the row keyed .se, or have its miss name [.se].

The decision "misc.tld keys carry the leading dot, where other tables key on a bare code" leaves misc.tld[se] missing today.

31. Rename misc.territory.country to sovereign.

It holds a code, and country collides with the misc.country path it replaced.

20. Weight sv_SE.sex and en_US.sex by bearers, as the README's Data section says they are.

Neither names a weight, so a bare sex draws evenly.

50. Reword prove's refusal of a typed column reading a row, {/region}.

Say the format is the table's own (region's format "{name}"), name the read to write, {/region.<column>} with its columns, and stop calling a one-column format, {code}, composed text.

17. Give every shipped category a column for each part its format composes, and one record shape across the national ids; re-pin the shape.

misc.uuid gains variant, for one.

170. Decide in one function whether a read lands in a name's pick, which refuseTwiceDrawnIn calls at load and keptInPick at render.

All 13 seats of the 2026-10-09 panel on b9d1af6 named keptInPick and readUnder hardest, and 12 named the rule both apply as the code they would least want to change. A key addressedKeys builds at load must equal the one pickKey.under builds at render, and a mismatch splits a correlated draw without an error. refuseTwiceDrawnIn applies the same rule at load in code of its own. In the new function's comment, say why a fresh read's levels start at its head, levelKeys(…, 1) in pathArm, and a named read's at its target, levelKeys(full, 0) in compileArm, which three seats rebuilt by hand.

29. Let a path go from a selected row into the template beside its family: geo.US.locality[1714000].address.

Require the path step to reach a sibling category.

42. Refuse a struct tag's datatype other than its Go type's before proving its values, as the README's Library section promises.

datatype: boolean over {int(1,2)} on an int field answers prints an integer, not a boolean.

22. Give url and email a path that draws only domains nobody can register, keeping the wide set as the default.

17 of the 40 distinct ones shipped today sit on .se, .nu, .io and .co, which anyone may register, and only RFC 2606's example.com, .net, .org, .test, .example, .invalid and .localhost provably reach nothing.

46. Report the same error every load for a table with two bad options.

readTableOptions in table.go returns on the first in Go's map order.

158. Drop a UTF-8 byte order mark that starts stdin, and say in the README how to stop PowerShell 5.1 sending Göteborg as G?teborg.

A file a Windows editor saves with a BOM prints an invisible U+FEFF first, and a JSON template with one is read as a format string. PowerShell 5.1 encodes what it pipes to a program by $OutputEncoding, ASCII by default. The maintainer chose 0.2.0 on 2026-10-07.

171. Handle a template that only reads one record column in one place, so checkColumns, itemDatatype, proveColumnItem and renderLeaf no longer each special-case readsColumn.

Eleven seats of the 2026-10-09 panel named the "change them together" in readsColumn's comment (node.go) as action at a distance across datatype.go, valueproof.go and render.go.

107. Move the template engine into the internal/ packages item 178 plans, untangled so no type is written by more than one stage, leaving the root the public API and its options.

Needs item 178, which splits it into items before any code moves. The engine returns column values and the root builds Record. Revises the decision "The template engine stays the root package until item 107; what reads no engine type, a table's rows included, sits in internal/", and, if the vocabulary moves, "The vocabulary sits below doc.go's package clause, not in the package doc".

186. Load a module carrying functions through an option of its own, its functions reaching the generator's randomness and date through an interface the root declares.

Carries out the decision "The shipped data is Go packages a library imports by choice, and the CLI carries every one, from 0.1.0". Needs item 89's required seed and item 26's caller-given date. cli.Main's signature grows here, which a minor before 1.0 allows.

168. Test the shared steps of data-import/ in the merge gate, starting with geo.fence.

Against "Most, if not all, code should have automated tests" in technical-principles.md: no Python under data-import/ has a test, and the gate, docker build ., runs Go alone. Today geo.fence is checked only by regenerating both countries' TSVs from the full downloads and diffing them. Item 61 adds a geo script per country, each calling fence.

161. Let a field whose name starts or ends with whitespace be bound to a name, or refuse such an identifier, so { x as p} means one thing.

grammar/identifier.go allows a field named x, and { x} reads it, but checkBind in format.go refuses every padded binding, so no spelling binds that field to a name (goal 4.1), and the refusal names one meaning only (goal 5.6). The goals audit of the narrowed goal 5.7 found it.

175. Rewrite the comments the 2026-10-09 panel needed several reads of, and delete those it read as restating their code.

Reread: readField's note on clearing the pick (render.go), pickKey.under, which three seats read backwards, scopeAround's "short of the frames n renders itself", enter returning env.base as the pop mark, and add a line at walkEvery's three-index slice, which three seats found unmarked. Restating: compileCells, columnOrLinked, render's first line, categorySites, madeFolder, categoryOf, rendersInside, templateSite, templateOptions, compileFrom, flagArg, drawSeed, the calc parser's precedence line in internal/grammar, and compileChoice's note that a uniform choice draws in O(1), which choice's doc already says. A doc comment go doc shows on an exported name stays.

195. Parse each builtin argument once, in checkArgs, and hand prep and proveNumber the parsed value.

Applies "Validate data and build DTOs as early as possible" in ~/.claude/principles/technical-principles.md. Today checkArgs (internal/builtinfunc/builtins.go) checks an argument, then prep and proveNumber parse it again through atoi/atof, which panic on bad input; layout.go, transform.go and calc.go call them too; two parsers can drift, and a drift panics at compile instead of failing the load.

112. Check a calc's field operands where its template resolves, beside its name operands, once item 36 reports every mistake at once.

Needs item 36. checkCalcFields runs at compile and checkCalcNames in resolveTemplates, two passes over one rule. Moving the field check there before item 36 would change which of two mistakes in two category files a load reports, since every category compiles before any resolves.

172. Pass drawSteps the kind of read it draws as an argument of its own, so no caller signals a sibling path by a nil pins or a fresh read by a nil memo.

Ten seats of the 2026-10-09 panel named drawSteps (path.go); three named the nil arguments as the mode they had to infer.

173. Call what a token reads its spelling, never a name, in format.go, arm.go and reference.go, so a name in the engine is only a bound name.

checkReads "proves each name t reads", splitArm "splits one name into head and tail" and asks t.isName of the result in compileArm, and refTokens returns "reference names". Both architect seats of the 2026-10-09 panel and the scoring run's architect named the word as one name over several concepts, against the decision "One name, one meaning". Item 136 did this for internal/grammar.

174. Spell once the fact that a walk's next step leaves a selected row, which pathPos.fromRow and tableRoute.nextLinked each spell today.

compileStep copies one into the other (path.go). Two seats of the 2026-10-09 panel named it.

108. Name item 26 in the decision "No builtin reads the clock, so a date is bounded by days, never by an age", as the item that ends its conflict with goal 4.

Item 26 revises the decision, but the decision does not point back to it.

169. Reword the decision "A parent row with no child row is a load error" to say what each geo import does with such a row: drop it, or exit where geo-se.py would lose a kommun or a län.

Its entry says "The import script drops or fills such rows". There are two geo imports, and geo-se.py exits when geo.fence drops a kommun or a län, while geo-us.py drops counties and states. Rewording a decision is the maintainer's call.

38. Compare calcParser.binary's operator as a rune.

byte(p.rs[p.pos]) reads U+012B ī as +, so {calc(a ī b)} compiles as a + b.

45. Name the node a selector follows in childNamed's refusal.

sv_SE.person[1].first answers 1 is not a table.

49. Report a CRLF rows file holding only its header as having no rows.

parseRows answers "line 2 is empty".

13. Place xlsx cells by their r reference in data-import/xlsx.py.

A sheet omitting an empty cell shifts every later column left.

39. Stop the columnKinds suggestion naming a field's own kind or a narrower one.

An int64 or float64 field unproven in range is told to become itself, and a uint64 one to become int64.

51. Spell a table one way across the errors that name it.

In internal/rows, Pins.PinRow names t.path and Pins.MustRow panics with t.segment, so one table is territory and misc.territory, and the short spelling names no file where two folders hold that name.

115. Spell a rows file's line one way in every error, naming the file.

Today a cell reads g.t.b, line 3 (containedNode.labelIn), a cell check t.tsv: line 3, b (compileCells) and a link t.tsv line 3 (rows.Table.Link). A reference cycle found from a table's format through a cell names no line at all: reference cycle: g.t -> format -> b -> b -> /h -> …, where the column-to-cell step in renderEdges repeats the column name.

14. Spell misc.creditcard's digit runs {digits(n)}.

A "repeat": 14 over {digits(1)} draws every 14-digit run with the odds {digits(14)} does. Both load; make the shipped data write the shorter one. Re-pin seeded output in its own commit.

11. Test that every geo tree holds the five table names and the address columns that port across countries.

Nothing checks it, and a new country breaks it silently.

40. Parse defaultTable's path with the library's grammar.

The CLI counts brackets of its own, so a change to the selector grammar desyncs the default --table silently.

86. Read both en_US.phone formats' area codes from one category, as their exchange reads en_US.phone-exchange.

Both phone formats carry the same 21-code area list, so an edit to one copy can miss the other.

23. Give every other shipped category that could reach something real a path that never does.

phone draws live PTS and NANP ranges — PTS's five fiction series are the Swedish inert set, sourced in research-sources-se.md, and the NANP one still wants a source — and bankgiro, plusgiro and routing draw live prefixes.

75. Run every README sh, go and text example as a test, and compare each "Renders" line to a seeded render.

readme_test.go loads and renders each json block, but runs no sh example (CLI, Records, Table, Linked tables), no go example (Library) and no text block of error text, and compares no "Renders e.g." output, so goal 12.2 is not met.

72. Fail the merge gate when test coverage falls below the last recorded figure.

technical-principles.md holds that test coverage should not decline. docker compose run --rm cover prints the figure, and neither the Dockerfile gate nor .github/workflows/test.yml checks it.

95. Hold a struct's columns and the field each fills in one slice.

structShape.fieldIndexes pairs with its record template's columns by index alone, against the technical principle "one owner per value".

116. Turn a row index into its rows file's line in one function.

Today containedNode's cell line in graph.go, table.compileCells and each site in internal/rows add the header line and the one-based count.

56. Build on a manual run of test.yml.

workflow_dispatch leaves github.event.before empty, so the diff compares HEAD with itself and skips docker build.

109. Indent every script under data-import/ with hard tabs, as AGENTS.md requires and release-tooling/ does.

Technical principle: indent with hard tabs. All 19 scripts indent with four spaces, so an edit there either keeps the wrong style or rewrites the whole file.

63. Pair a street with its exact postnummer.

Needs an application to Lantmäteriet; today a street goes to the nearest postal code centroid. It rewrites shipped rows, so it is a major once 1.0 is cut and a minor before that.

62. Add {btc()} and {eth()}.

They need sha256 and keccak for Base58Check and EIP-55.

59. Promise in Generator's godoc that its renders run one at a time.

A caller wanting parallel throughput then makes one generator per goroutine.

65. Hold every change AGENTS.md says owes a CHANGELOG.md entry to one in CI.

The check covers data and testdata/shipped_shape.txt alone, where AGENTS.md adds a flag, an exit code, an exported name, a fence, a builtin and the lowest Go.

66. Cut the README's Layout block to the lines that say what a file name cannot.

doc.go restates its name.

67. Cut AGENTS.md to the rules only it states, and explain every term its comprehension rule uses.

The gh rule opens by restating the decision "GitHub is canonical, and the module path names it", a second copy that drifts. The comprehension rule packs the gate, its exceptions, the round and the at-or-above-7.0 regime into one line, and uses "depth 1", "nine-seat", "four-seat" and "answers it in one run" without saying what they mean.

64. Give every entry in docs/decisions.md the goal it serves, its date, who made it and the premise it rests on.

Propose a goal for an entry that serves none.

68. Make gitea.larvit.se/larvit/fejkdata a pull mirror of GitHub.

Gitea converts a repository to a mirror only by re-creating it, so until that runs the copy there is a second owner of one history.

69. Announce v1.0.0 where a developer choosing a fake-data tool already reads, with a README first screen for someone deciding in a minute.

The human cuts v1.0.0 once the shipped data is in its record shape and one full minor has shipped with no breaking change, per the README's Versioning table; pairing a street with its exact postnummer rewrites shipped rows, so a minor with no breaking change follows it first.

190. Decide whether fejkdata pseudonymises real datasets, and if so add the goal, the audience persona and the items below to the README and the plan.

Pseudonymising a copy of production is work a hosted model cannot do well: sending the data out is the leak, a model cannot keep one person's fake identical across tables and runs, and millions of rows cost real money. A model can still name which columns hold personal data and of what kind; fejkdata then replaces them offline. Greenmask, PostgreSQL Anonymizer and Presidio cover parts of this; none draws Swedish values a real validator accepts.

Proposed goal, its place among the others for the maintainer to choose:

It pseudonymises a real dataset on your own machine: each personal value becomes a valid fake one.

1. Columns you do not name pass through byte for byte.
2. The same value under the same key becomes the same fake, in every table and every run; without the key, nobody can tell which real value a fake came from.
3. Values that belong to one person come from one pick, so a row's name, email and personnummer still agree.
4. Two values never become one fake in a column that must stay unique.

Proposed audience persona: a pseudonymising author, who replaces the personal data in a copy of production before it reaches a test or staging environment, and relies on one real value giving one fake across tables and runs.

Items to file once the goal is in:

1. Read CSV and NDJSON records on stdin, replace the columns a mapping names with a template's render, and stream every other column through unchanged. The flag or file spelling goes to a bench with the persona first.
2. Seed each replaced value's draw from HMAC-SHA256 under a key read from a file or the environment, never a flag. An unkeyed hash fails sub-goal 2: every personnummer can be hashed and the mapping reversed.
3. Key a whole row's pick by one identity column, such as a customer id, so goal 4.1's named pick holds for a person across rows and tables.
4. Redraw on a collision in a column marked unique, deterministically from the key, within a memory bound the README states.
5. Keep, on request, a personnummer's birth date or sex and a postal code's region, the docs naming what each kept field gives away.
6. Read a PostgreSQL COPY or MySQL INSERT dump.
7. Name the output pseudonymised in the README, never anonymised: under GDPR, data is personal while the key exists, and a rare mix of kept fields can still identify someone.