Summary

• add USELESSKEY-SPEC-0017-bundle-product-surface.md
• define bundle manifest, artifact, lane, and receipt contracts before broad emitter expansion
• name current and target receipt surfaces: materialization, audit-surface, bundle-verification, scanner-safety, and negative-coverage
• index SPEC-0017 and advance the real-workflow goal to the bundle manifest/receipt implementation slice

User path

This clarifies the installed bundle product contract users rely on when they generate, verify, inspect, audit, and share bundle metadata in CI.

Boundary

Docs/spec only. No emitter changes, no new profile or contract pack, no release prep, no version bump, no provider compatibility claim, no production security claim, and no scanner-evasion language.

Proof

• cargo +nightly xtask spec-check --strict
• cargo +nightly xtask docs-sync --check
• cargo +nightly xtask typos
• git diff --check

Receipts

• docs/specs/USELESSKEY-SPEC-0017-bundle-product-surface.md
• docs/specs/README.md
• plans/real-workflow-closure/implementation-plan.md
• .uselesskey/goals/active.toml

Risk

No deterministic fixture identity changes. The main risk is overclaiming future receipts, so the spec explicitly marks target receipts as implementation work for the next PR.

Rollback

Revertable before bundle manifest/receipt implementation begins.