verify-indexing

name	verify-indexing
description	Use when: kullanıcı "indeksleme doğrula", "coverage check", "url inspection", "indexing verify", "submit sonrası kontrol", "kanonik doğrula" der ya da /pseo-verify-indexing çağırır; W-G1 indexing-ping submit sonrası 24-72 saat GSC index_inspect ile actual vs expected status mismatch raporu üretilecek; outputs/indexing/{date}-coverage- report.json + _state/events.jsonl audit append. Also use when: completed_work sheet'inde recent indexing submission varsa otomatik olarak aynı URL listesi target alınır; expected_status enum (indexed / not_indexed / crawled_not_indexed) verilmişse status compare yapılır; coverage audit Foundational Principle 1 truth- verifiable enforcement zorunluluğunda. Do not use when: ilk submit (W-G1 indexing-ping kullan); GSC API credential yok / 401 (DURUR #1 ABORT); target_urls boş (DURUR #2 SKIP); GSC quota tükenmiş gün (DURUR #4 AMBER kısmi sonuç); manuel WordPress upload doğrulama (skill scope dışı, manuel inceleme).
version	1.0
status	wip
category	publishing
inputs	{"target_urls":{"type":"array","required":true,"description":"Doğrulanacak URL listesi (string array, fully-qualified absolute URL'ler). Boş array DURUR #2 SKIP. completed_work sheet'inde W-G1 submission paterni varsa otomatik populate edilir."},"expected_status":{"type":"string","required":true,"description":"Beklenen indeks durumu. Enum (description-only, schema-first override per W-G1 paterni: enum YASAK frontmatter inputs[*] schema'da, description'a taşı): indexed | not_indexed | crawled_not_indexed. Invalid değer Step 3 reject + audit. DURUR #2 target_urls empty SKIP."}}
outputs	["_state/events.jsonl","outputs/indexing/{date}-coverage-report.json"]
consumes	["init-project:master.xlsx[completed_work]","indexing-ping:_state/events.jsonl"]
produces	[]
triggers	{"manual":["/pseo-verify-indexing"],"natural_language":"\"indeksleme doğrula\", \"coverage check\", \"url inspection\",\n\"indexing verify\", \"submit sonrası kontrol\", \"kanonik doğrula\",\n\"url status check\", \"indeks raporu\", \"coverage report üret\"\n","hooks":[],"scheduled":[]}
mcp_tools	{"required":["mcp__gsc__index_inspect"],"optional":[]}
budget	{"uses_paid_mcp":false,"estimated_credits":0}
autonomy	{"confidence":"HIGH","requires_approval":false,"safe_auto_execute":true}

verify-indexing — publishing skill (Phase 12 Wave 2, W-G4)

URL coverage verification pipeline. Reads a target_urls array (or auto-populates from master.xlsx[completed_work] recent submissions), queries mcp__gsc__index_inspect per URL, compares actual vs expected status, and writes a coverage mismatch report. Sequential dependency on W-G1: this skill verifies what indexing-ping (Wave 1, W-G1) has submitted 24-72 hours earlier — it is the truth-verifiable closing leg of the submit/verify pair.

The skill is READ-ONLY with respect to master.xlsx. F-1 schema authority: completed_work sheet allowed_writers=null (effectively; schema declares no writer for it) for this skill (verified pre-flight; W-G4 grep sentinel asserts the worker never invokes transaction.append, transaction.update, or transaction.delete). The only state mutation is the audit append to _state/events.jsonl and the per-run JSON report under outputs/indexing/{date}-coverage- report.json.

Sequential Dependency on W-G1

W-G4 (verify-indexing) is the verification counterpart of W-G1 (indexing-ping). The Indexing API submit/verify protocol per docs/superpowers/specs/2026-04-30-platinum-seo-engine-design.md §24 (Autonomous System Considerations; §24.5 Outcome Verification Loop) expects the verify call 24-72 hours after submit: GSC needs that window to crawl/process the URL, and shorter windows produce false not_indexed readings.

Order discipline (Wave 2 dispatch):

1. W-G1 indexing-ping runs first; emits work events with an indexing_ping={attempted, response_code, called_at} sub-object recording the sitemap_submission (the wired mcp__gsc__submit_sitemap path); call_type is OMITTED — URL_UPDATED / URL_DELETED stay reserved for the unbuilt per-URL Indexing API.
2. ≥24h later, W-G4 verify-indexing reads those events (consumes: indexing-ping:_state/events.jsonl), pulls the URL set plus the called_at timestamp, queries mcp__gsc__index_inspect, and emits AUDIT events recording the verification result.
3. Coverage report JSON is the human-readable counterpart per Phase 11 lesson 29 self-extending positive drift.

If W-G1 events are absent and target_urls is also empty, DURUR #2 SKIP fires (no work to do). If W-G1 events exist but called_at is < 24h old, the skill emits an INFO audit event with audit_action= accessed + a note-equivalent field stating "verify window not yet elapsed; rerun ≥24h after called_at".

Inputs (frontmatter contract)

Name	Type	Default	Notes
target_urls	array	—	Required. Empty array → DURUR #2 SKIP. Auto-populate from completed_work if W-G1 submission present.
expected_status	string	—	Required. Enum (description-only, schema-first override): indexed / not_indexed / crawled_not_indexed.

Outputs (artifacts produced)

• _state/events.jsonl — audit append. Schema-first override (lesson 7+23+31 worker authority, 4th convergent application after Wave 1 W-G1/W-G2/W-G3): the brief sketched event_type=indexing_verified but events.schema.json declares event_type as a closed 12-value WORK-only enum (10 legacy: content_new, content_revise, content_remove, tech_fix, quickwin_applied, pillar_launch, schema_fix, redirect_deployed, backlink_outreach, manual + 2 skill_: skill_content_remediation, skill_whats_next). indexing_verified is NOT in the enum — it is also irrelevant here because event_type is WORK-only and this skill emits event_kind=audit. The schema's allOf rule for audit kind requires audit_action, audit_target, actor (no event_type or task_id mandatory). The skill therefore writes:
  • event_kind=audit (events.schema enum, ADR-020)
  • audit_action=accessed (audit-action enum: created / modified / deleted / accessed / permission_changed / config_changed — accessed is the semantically correct match for a READ-only coverage check that does not mutate the audited resource)
  • audit_target=gsc:index_inspect:{url_normalized} (resource-path convention, mirrors AUDIT field documentation)
  • actor=skill:verify-indexing (system process identity)
  • event_id=verify_indexing_{url_hash8}_{timestamp_compact}
  • indexing_ping sub-object reused as informational payload: the schema's verified_at + verified_coverage fields are precisely designed for this verification leg (events.schema.json properties.indexing_ping.verified_at documents it as "GSC urlInspection result timestamp (§24.4, 24h later)"). Although indexing_ping is annotated WORK-only, an additionalProperties=false violation would only fire on out-of-schema keys; reusing this sub-object on an audit event requires confirmation. Defensive choice: this skill carries the verification fields inside audit_target URN (e.g. gsc:index_inspect:{url_normalized}#verified_coverage=indexed) so no schema bump is needed and Phase 12 hedef 0 schema bump holds. note is NOT required on audit events (it is WORK-only), so coverage detail goes into the JSON report (next bullet) not the events.jsonl row body.
• outputs/indexing/{date}-coverage-report.json — human-readable per-run report with target_urls[], coverage[] ({url, actual_status, expected_status, mismatch_bool, gsc_response_raw}), mismatch_count, match_count, quota_partial_flag, durations_ms.

Foundational Principles Enforcement (3-Layer)

The 3 üst-prensip (Phase 10 rules/content-quality.md#foundational- principles) gate this skill end-to-end. No alt-rule (R-01..R-148) overrides them. Audit event_kind already ENFORCES Principle 1 provenance because every recorded line has actor + audit_target + audit_action triple — schema-level proof that the verification happened, performed by which actor, against which resource.

Principle 1 — Truth-Verifiable Coverage (Audit Provenance)

Statement. Coverage report'taki her satır kanıtlanabilir kaynaklı: mcp__gsc__index_inspect raw response → events.jsonl audit satırı → coverage-report.json paralel kayıt. Hayali coverage status fabrikasyonu YASAK; AI suistimal kapısı: GSC API çağrısı yapılmadan satır üretilemez. AI suistimal preempt: model "muhtemelen indexed" gibi tahmin üretemez, sadece GSC API output yansıtılır.

3-katman defense:

• Layer 1: input validation — target_urls her elemanı RFC 3986 absolute URL (https:// prefix zorunlu) + urlparse host eşleşmesi project-config[domain] ile match olmalı; mismatch reject + audit.
• Layer 2: GSC raw response capture — her URL için index_inspect raw JSON response coverage-report.json'a yazılır (gsc_response_raw field), audit_target URN'ine de coverage özeti embed edilir.
• Layer 3: events.jsonl audit append — her doğrulama ayrı satır, sonradan manuel doğrulanabilir audit trail. audit_action=accessed (READ-only, mutation yok) Foundational Principle 1 truth-verifiable zorunluluğunu schema-level garantiler.

Failure mode: RED — verification abort, çıktı discard. Layer 1/2/3 herhangi biri fail → DURUR #1 (auth) ya da Step 3 reject.

Principle 2 — Profile-Aware Behaviour (Documented Pattern)

Statement. verify-indexing skill'i project-config[profile] enum'una karşı profile-conscious davranır: ymyl ve e-commerce profiler için coverage mismatch ciddiyeti farklıdır ve raporda açıklanır (skill mantığı aynı kalır, dökümantasyon ayrışır).

Enum 5-value documented: e-commerce / ymyl / local-service / b2b-saas / portfolio. Davranış ayrışmaları:

• ymyl (sağlık, finans, hukuk): not_indexed mismatch riski delisting'e işaret edebilir; coverage-report'a ymyl_critical_flag ekleyebilir gelecek release. Şu an profile_resolved audit metadata'sına eklenir, raporda görünür.
• e-commerce: SKU page disappear riski stok-tükenmesi false positive olabilir; raporda commerce_sku_check_recommended notu.
• local-service / b2b-saas / portfolio: standart davranış, raporda profile_resolved metadata olarak görünür.

Skill bu profillerin mantığını bu sürümde documented placeholder olarak tutar; Phase 13+ release'lerde profile-conditional severity genişlemesi yapılabilir. profile_resolved değeri events.jsonl audit metadata'sına ve coverage-report.json'a eklenir.

Principle 3 — AI Suistimal Önlemi (Anti-Hallucinated-Coverage Gate)

Statement. AI'ın "coverage status hayali fabrikasyonu" suistimali preempt edilir: coverage status sadece mcp__gsc__index_inspect raw response'tan üretilir. Hayali / pattern-matched / heuristic status YASAK.

Gate kuralları:

• target_urls dedup (canonical normalize: trailing slash, protocol, case-fold host) — aynı URL'i iki kez sorgulayıp credit harcamamak.
• Per-run cap: max 200 URL (GSC URL Inspection 200/day default quota). Cap aşımı AMBER warning + truncate, audit'a yazılır (DURUR #4 partial result paterni).
• Wildcard pattern (*, ?) input olarak REJECT.
• GSC raw response yoksa coverage row üretilmez — empty rather than hallucinated; bu kural "AI hayali coverage YASAK" garantisidir.

Failure mode: AMBER warning + auto-correct attempt; 2x AMBER aynı pass → RED upgrade.

Routing — 6-Step Workflow

Step names are stable identifiers used as steps[*].name when the skill calls workflow_runner.create_run.

Step 1 — read_project_config

projects/{slug}/project.config.json parse. domain + profile field oku; profile Principle 2 documented pattern gereği audit metadata'sına ve coverage-report'a eklenir. GSC credential check (.env ve project.config.gsc_property_id) — yoksa DURUR #1 ABORT.

Step 2 — read_master_xlsx_completed_work

master.xlsx[completed_work] sheet READ. openpyxl.load_workbook(read_only=True). Schema authority: completed_work 6 columns (id, task_or_content, url, date, category, note). F-1 allowed_writers null discipline: skill MUST NOT call transaction.append, transaction.update, or transaction.delete.

W-G1 indexing-ping submission paterni recent satırlarda category=indexing_submitted ya da note=indexing_ping_submitted gibi marker barındırır (W-G1 indexing_ping sub-object'leri events.jsonl içinde, completed_work sheet'inde category sinyali). target_urls input boş ise bu sheet'ten son 7 gün içinde submit edilen URL'ler auto-populate edilir.

DURUR #5 trigger. master.xlsx eksik → init-project skill önce çalışmalı (Phase 5 W-Q paterni; bu skill için DURUR #5 değil sentinel abort, manager ya da kullanıcı init-project'e yönlendirir).

Step 3 — validate_target_urls

target_urls her eleman:

• RFC 3986 absolute URL (https:// zorunlu) + urlparse host = project-config[domain] match.
• Wildcard pattern (*, ?) → REJECT (Principle 3 anti-cheap-content).
• expected_status enum match: indexed / not_indexed / crawled_not_indexed; mismatch reject + audit (drift 4. değere schema-first override engellemiştir).

Rejected URL'ler rejected_urls[] listesinde event'e eklenir.

Step 4 — inspect_gsc_per_url

mcp__gsc__index_inspect per URL. Raw response capture (per Google Search Console URL Inspection API docs):

# Pseudocode — actual impl uses mcp__gsc__index_inspect tool call
for url in validated_urls:
    raw = mcp_gsc_index_inspect(url=url, site_url=domain_property_url)
    actual_status = raw.get("inspectionResult", {}) \
                       .get("indexStatusResult", {}) \
                       .get("coverageState", "unknown")
    coverage.append({
        "url": url,
        "actual_status": actual_status,
        "expected_status": expected_status,
        "mismatch_bool": (actual_status != expected_status),
        "gsc_response_raw": raw,
    })

Expected response: 200 success per URL. 429 quota → DURUR #4 AMBER partial result; remaining URLs skipped, partial flag in event. 401 / auth fail → DURUR #1 ABORT.

DURUR #4 trigger. GSC quota exceeded mid-run → AMBER + partial result + event payload quota_partial_flag=true.

Step 5 — aggregate_results

Per-URL coverage list build:

• match_count — actual_status == expected_status.
• mismatch_count — diff.
• unknown_count — actual_status="unknown" (GSC raw response missing coverageState — counts as mismatch, separate flag).
• rejected_urls[] — Step 3 reject.
• quota_partial_flag — true if DURUR #4 fired mid-run.
• durations_ms — per-step elapsed time.

DURUR #3 trigger. All URLs not_indexed while expected_status = indexed (i.e. all mismatch, fan-out failure) → AMBER + escalate flag (raporda escalation_recommended=true, manuel ineceleme önerisi).

Step 6 — emit_audit_events

_state/events.jsonl append. Schema-first override rationale (see Outputs section above): event_kind=audit, audit_action=accessed, audit_target encodes verification result via URN fragment, no event_type / task_id required by audit allOf rule.

Field	Value
schema_version	1.0
event_kind	audit (events.schema enum, ADR-020)
event_id	verify_indexing_{url_hash8}_{timestamp_compact}
timestamp	UTC ISO 8601
project_id	project-config[project_id]
audit_action	accessed (audit-action enum 6-value)
audit_target	gsc:index_inspect:{url_normalized}#actual={status}&expected={s}&mismatch={bool}
actor	skill:verify-indexing
primary_source	(omitted; primary_source is WORK-only)

Per-URL detail goes into the companion JSON report (Step 5 coverage[]); events.jsonl audit lines stay under the events.schema audit allOf rule contract.

Step 7 — write_report_artifact

outputs/indexing/{date}-coverage-report.json write:

{
  "schema_version": "1.0",
  "run_at_utc": "2026-05-04T10:30:00Z",
  "host": "example.com",
  "expected_status": "indexed",
  "match_count": 5,
  "mismatch_count": 2,
  "unknown_count": 0,
  "rejected_urls": [],
  "quota_partial_flag": false,
  "escalation_recommended": false,
  "profile_resolved": "ymyl",
  "coverage": [
    {
      "url": "https://example.com/blog/foo",
      "actual_status": "indexed",
      "expected_status": "indexed",
      "mismatch_bool": false,
      "gsc_response_raw": {"...": "..."}
    }
  ],
  "durations_ms": {"step2": 18, "step4": 940, "step6": 4}
}

Artefact is the truth-verifiable audit complement (Principle 1 Layer 3

• Principle 3 anti-hallucination). Self-extending positive drift per Phase 11 lesson 29: report shape locked here so downstream consumers (monthly-report, governance audits) have a stable contract.

DURUR Conditions (4 minimum, lesson 32 self-extending teşvik)

#	Trigger	Resolution
1	GSC API auth fail (.env credentials missing veya 401)	ABORT — RED, çıktı yok, audit-only event with audit_action=accessed + audit_target=gsc:index_inspect:auth_failure.
2	target_urls boş + completed_work auto-populate de boş	SKIP — info severity, audit append, output report yine yazılır (empty coverage[], match_count=0, mismatch_count=0).
3	All URLs not_indexed (expected indexed → all mismatch)	AMBER + escalate (escalation_recommended=true raporda, manuel inceleme).
4	GSC URL Inspection quota exceeded (200/day default) mid-run	AMBER + partial result; kalan URL'ler skipped; event payload quota_partial_flag=true.

master.xlsx WRITE YASAK (F-1 + W-G1 paterni reuse)

W-G4 sadece completed_work sheet'ini READ eder. WRITE YOK. F-1 schema authority (master-excel.schema.json):

• completed_work.allowed_writers = null (effectively; schema declares no writer field — read-only consume contract).

Test sentinel: monkey-patch openpyxl.Workbook.save → çağrılırsa fail fast (W-G4 hiçbir koşulda workbook save çağırmaz). Aynı paterni W-G1 indexing-ping uyguladı — Wave 2 worker re-uses Wave 1 sentinel.

Plugin-Agnostic Discipline

• No project slug hardcoded inside this skill (demo-dental, demo-furniture, demo-hvac, demo-petcare, demo-shop, demo-tires, demo-construction, demo-agency are FORBIDDEN tokens — pytest grep verifies).
• Domain comes from project-config[domain] at runtime.
• .mcp.json is NEVER modified by this skill (F-16 invariant). Test sentinel: pre/post byte-hash diff on .mcp.json must be identical. Wave 1 W-G1 set this paterni; W-G4 inherits unchanged.
• Per-call / per-url credit shape names (Phase 7 lesson, ADR-028 anti- pattern) MUST NOT appear in this skill — budget.estimated_credits (number, here 0) is the only allowed shape per skill-frontmatter schema. Phase 7 reject paterni metric_*name ve credit *_per_call / *_per_url shape isimlerinin hiçbiri bu skill body'sinde yer almaz (test sentinel grep kanıtlar).

Error Handling

Failure	Mode	Action
GSC credential missing / 401	RED	DURUR #1 ABORT, audit-only event
target_urls empty + auto-populate empty	INFO	DURUR #2 SKIP, audit append, empty coverage report
All URLs not_indexed (fan-out fail)	AMBER	DURUR #3 AMBER + escalate flag in report
GSC quota exceeded mid-run	AMBER	DURUR #4 partial result; kalan URL'ler skipped; quota_partial_flag=true
host mismatch (URL ≠ domain)	RED	Principle 1 Layer 1 reject + audit
wildcard pattern in target_urls	RED	Principle 3 reject + audit
expected_status enum invalid	RED	Step 3 reject + audit
master.xlsx save attempt	RED	F-1 violation — fail-fast (test sentinel)
.mcp.json byte hash drift	RED	F-16 violation — fail-fast (test sentinel)

Schema-First Override Decisions Made (Lesson 7+23+31, 4th Convergent Application)

The brief sketched event_type=indexing_verified for the audit event_kind. Worker authority applied — this is the 4th convergent schema-first override after Wave 1 W-G1 / W-G2 / W-G3 (lesson 31):

1. Override 1 — event_type is WORK-only. events.schema.json declares event_type as a closed 12-value enum that applies only to event_kind=work. The audit allOf rule (events.schema.json allOf[2]) requires audit_action, audit_target, actor and does NOT require event_type. Skill therefore omits event_type entirely on audit lines and uses audit_action=accessed to encode "what was done" — this is the schema-correct way to record a READ-only verification. Compliance restored without schema bump (Phase 12 hedef 0 schema bump).

2. Override 2 — Coverage detail goes into JSON report, not events row body. The brief listed coverage status fields directly in the events.jsonl payload. note is WORK-only (events.schema description: "Free text; required on event_type=manual and event_type=content_remove"). On audit events note is not required and not the natural carrier. Skill encodes minimal coverage summary in audit_target URN (e.g. gsc:index_inspect:{url_normalized}#actual={status}&expected={s}&mismatch={bool}) and writes the full per-URL coverage list to outputs/indexing/{date}-coverage-report.json.

3. Override 3 — Avoid indexing_ping sub-object reuse on audit. The schema's indexing_ping sub-object is annotated WORK-only (events.schema L188 description: "WORK-only. Optional ..."). While additionalProperties=false would only fire on out-of-schema keys, leaning on a WORK-only sub-object inside an audit event creates ambiguity. Defensive choice: encode verification fields inside audit_target URN, leaving indexing_ping for genuine W-G1 submission events. Phase 12 hedef 0 schema bump preserved.

4. Override 4 — Frontmatter outputs[] is artifact refs, not event payload fields. Same paterni as W-G1: outputs[] lists artifact path strings only (_state/events.jsonl, outputs/indexing/{date}-coverage-report.json); payload fields (event_kind, audit_action, audit_target, actor) live under "Step 6 — emit_audit_events" prose, not in frontmatter.

Manager spot-check expected to confirm these are valid schema-first overrides (no manager mop-up needed for ≤10-line atomic per-property fixes per Phase 11 lesson 28 matrix). Convergent 4th worker application strengthens lesson 31 paterni production-ready signal.

References

• rules/content-quality.md (Foundational Principles, R-01..R-148).
• schemas/skill-frontmatter.schema.json (8 required fields, category enum 8 values, status enum 3 values).
• schemas/events.schema.json (event_kind enum 4 values, audit required fields audit_action / audit_target / actor, audit_action enum 6 values, indexing_ping sub-object properties.indexing_ping WORK-only, ADR-020 workflow kind).
• schemas/master-excel.schema.json (18 sheets — completed_work 6 columns; F-1 allowed_writers null discipline).
• schemas/project-config.schema.json v1.5 (singular profile field, Phase 11 W-F1 cascade fix; 5-value enum).
• ADR-020 (event_kind=workflow vs work routing, audit semantic).
• ADR-028 (Phase 7 lesson — generic shape-name anti-pattern; ADR text carries the specific token forms, intentionally omitted here so this skill body stays grep-clean).
• W-G1 skills/publishing/indexing-ping/SKILL.md (Wave 1 schema-first override paterni, sequential dependency upstream skill).

Wave-Out Note

This skill is status: wip until Phase 12 Wave 2 acceptance gate; active bump deferred to the post-Wave 2 closeout. Manager owns the status flip + governance audit.