@@ -185,3 +185,15 @@ jobs:
       # narrowing what the gate scans.
       - name: Compile JSDoc `@example` blocks against the built types
         run: node scripts/check-doc-example-types.mjs
+
+      # objectui#5250 (the maintainer ruling's JSON-fence slice). Every `json` /
+      # `jsonc` node document in `content/docs` is judged through the STRICT
+      # authoring face — `StrictAnyComponentSchema`, read from the
+      # `@object-ui/types` the build step above produced (the snippet gate's
+      # closure carries it) — the face `objectui validate` judges with. A fence
+      # that is deliberately not a complete node document is declared on the
+      # line above it, and the declaration is re-judged on every run. Last of
+      # the three, for the reason the step above gives: a newly wired blocking
+      # gate must not mask an established one.
+      - name: Judge JSON doc fences through the strict authoring face
+        run: node scripts/check-doc-json-fences.mjs
@@ -710,7 +710,7 @@ A single-record detail view with grouped fields, actions, and tabs.
       "title": "Customer Info",
       "fields": [
         { "name": "customer", "label": "Customer", "type": "text" },
-        { "name": "email", "label": "Email", "type": "email" },
+        { "name": "email", "label": "Email", "type": "text" },
         { "name": "created", "label": "Created", "type": "date", "format": "MMM d, yyyy" }
       ]
     },
 
@@ -54,13 +54,17 @@ behaviour. Common customisations:
 
 ### Wire Up Submission
 
+A control that runs something is its own node type, `action:button`, and its
+props go in the `properties` bag; `actionType: "api"` sends the request to
+`target`:
+
 ```json
 {
-  "type": "button",
-  "label": "Sign In",
-  "action": {
-    "type": "submit",
-    "endpoint": "/api/auth/login",
+  "type": "action:button",
+  "properties": {
+    "label": "Sign In",
+    "actionType": "api",
+    "target": "/api/auth/login",
     "method": "POST"
   }
 }
 
@@ -33,13 +33,16 @@ Customize dashboard blocks for your needs:
 
 ### Add Real Data
 
+A `card` fetches nothing. A live figure comes from a data-bound block: an
+`element:number` takes its object from the per-element `dataSource` binding and
+its aggregate from its `properties` bag (see the
+[Data Source guide](/docs/guide/data-source)):
+
 ```json
 {
-  "type": "card",
-  "dataSource": {
-    "api": "/api/stats/revenue",
-    "method": "GET"
-  }
+  "type": "element:number",
+  "dataSource": { "object": "order" },
+  "properties": { "aggregate": "count" }
 }
 ```
 
@@ -55,13 +58,16 @@ Customize dashboard blocks for your needs:
 
 ### Add Actions
 
+A control that runs something is its own node type, `action:button`, and its
+props go in the `properties` bag; `actionType: "url"` navigates to `target`:
+
 ```json
 {
-  "type": "button",
-  "label": "View Details",
-  "action": {
-    "type": "navigate",
-    "path": "/dashboard/details"
+  "type": "action:button",
+  "properties": {
+    "label": "View Details",
+    "actionType": "url",
+    "target": "/dashboard/details"
   }
 }
 ```
 
@@ -39,25 +39,30 @@ Customize e-commerce blocks for your store:
 
 ### Add Product Data
 
+A `card` fetches nothing. Records come from a data-bound block that names its
+object in the per-element `dataSource` binding (see the
+[Data Source guide](/docs/guide/data-source)):
+
 ```json
 {
-  "type": "card",
-  "dataSource": {
-    "api": "/api/products",
-    "method": "GET"
-  }
+  "type": "object-grid",
+  "dataSource": { "object": "product", "limit": 20 }
 }
 ```
 
 ### Add to Cart Action
 
+A control that runs something is its own node type, `action:button`, and its
+props go in the `properties` bag; `actionType: "api"` sends the request to
+`target`:
+
 ```json
 {
-  "type": "button",
-  "label": "Add to Cart",
-  "action": {
-    "type": "submit",
-    "endpoint": "/api/cart",
+  "type": "action:button",
+  "properties": {
+    "label": "Add to Cart",
+    "actionType": "api",
+    "target": "/api/cart",
     "method": "POST"
   }
 }
 
@@ -93,13 +93,17 @@ or in a TypeScript-authored schema pass the real thing —
 
 ### Add Submit Action
 
+A control that runs something is its own node type, `action:button`, and its
+props go in the `properties` bag; `actionType: "api"` sends the request to
+`target`:
+
 ```json
 {
-  "type": "button",
-  "label": "Submit",
-  "action": {
-    "type": "submit",
-    "endpoint": "/api/contact",
+  "type": "action:button",
+  "properties": {
+    "label": "Submit",
+    "actionType": "api",
+    "target": "/api/contact",
     "method": "POST"
   }
 }
 
@@ -46,19 +46,6 @@ Customize marketing blocks for your campaigns:
 }
 ```
 
-### Add Analytics
-
-```json
-{
-  "type": "button",
-  "label": "Get Started",
-  "action": {
-    "type": "analytics",
-    "event": "cta_clicked"
-  }
-}
-```
-
 ### Customize Content
 
 ```json
 
@@ -34,6 +34,7 @@ The glyph is named by `icon`:
 `name` is the SDUI identity key every node carries, alongside `id`. It is **not**
 read as a glyph name on `ui:icon`, and writing one there renders no icon:
 
+{/* doc-json: fragment — a deliberately refused node: it shows the retired name-as-glyph shape the paragraph below describes */}
 ```json
 { "type": "icon", "id": "save_icon", "name": "save_icon" }
 ```
 
@@ -128,7 +128,7 @@ All ObjectUI components follow the same schema-based pattern:
   "type": "button",
   "label": "Click Me",
   "variant": "default",
-  "size": "md",
+  "size": "default",
   "className": "mt-4"
 }
 ```
 
@@ -34,7 +34,7 @@ one has its own section below.
 | `skill-examples.yml` | Skill Example Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a MARKED fenced example in a `skills/` or `.claude/skills/` guide no longer compiles against the packages' built types, no longer parses as JSON, uses a bare `any`, or carries a marker that opts nothing in |
 | `skill-eval-tokens.yml` | Skill Eval Token Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when an eval assertion's `must_contain` token is not taught as a whole token anywhere in its own `skills/` bundle |
 | `doc-component-types.yml` | Doc Component Type Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a `content/docs/**.mdx` snippet teaches a `type` nothing registers |
-| `doc-snippet-types.yml` | Doc Snippet Type Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a covered documentation snippet no longer compiles against the packages' built types, **or** when a covered JSDoc `@example` block does (two gates, one job — see below) |
+| `doc-snippet-types.yml` | Doc Snippet Type Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a covered documentation snippet no longer compiles against the packages' built types, **or** when a covered JSDoc `@example` block does, **or** when a `json` / `jsonc` node document in `content/docs` is refused by the strict authoring face (three gates, one job — see below) |
 | `doc-fence-languages.yml` | Doc Fence Language Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a TypeScript block sits under a fence the snippet gate does not read |
 | `doc-example-ids.yml` | Doc Example Id Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a `content/docs/**` page references a schema-catalog example id the registry does not carry, or when the gate's own population collapses |
 | `pre-install-import-graph.yml` | Pre-Install Import Graph Check | Push / PR to `main`, `develop` — **no path filter**; merge-queue builds; manual | **Yes** — when a gate a workflow runs *before* `pnpm install` reaches a package anywhere in its import graph |
@@ -1159,7 +1159,7 @@ names: `pnpm exec turbo run build $(node scripts/check-doc-snippet-types.mjs --b
 
 ### JSDoc `@example` Types — the second gate in this job (`doc-snippet-types.yml`)
 
-The same job's **last** step runs `scripts/check-doc-example-types.mjs`
+The same job's second blocking step runs `scripts/check-doc-example-types.mjs`
 (`pnpm check:doc-examples`). It asks the snippet gate's question of a different corpus: every fenced
 `ts` / `tsx` block inside a JSDoc `@example` on an **exported** declaration under
 `packages/NAME/src/**` must compile `--strict` against the packages' built `dist/*.d.ts`, or be
@@ -1174,6 +1174,7 @@ copying it out of an IDE hover got TS2322, and nothing in this repository had ev
 | `pnpm check:doc-snippets` (`scripts/check-doc-snippet-types.mjs`) | fenced `ts` / `tsx` blocks in the **documents** the `UNGATED_DOCS` ledger does not exempt | **Yes** |
 | `pnpm check:doc-snippets --emit-census` | code this repository's generators emit from **template literals** | No — report-only |
 | `pnpm check:doc-examples` (`scripts/check-doc-example-types.mjs`) | fenced `ts` / `tsx` blocks in JSDoc **`@example`** tags on exported declarations under `packages/NAME/src/**` | **Yes** |
+| `pnpm check:doc-json` (`scripts/check-doc-json-fences.mjs`) | fenced `json` / `jsonc` **node documents** in `content/docs`, judged through the strict authoring face | **Yes** |
 
 **Why it shares this job rather than getting a workflow.** It is a *sibling* of the gate above, not a
 fork: it imports that script's compiler host, its built-`.d.ts` resolution and every one of its
@@ -1211,6 +1212,43 @@ example, or declare it. Run it locally exactly as this job does: build first
 (`pnpm exec turbo run build $(node scripts/check-doc-snippet-types.mjs --build-filter)`), then
 `pnpm check:doc-examples`; the gate prints that same recipe when it exits `2`.
 
+### JSON Node Documents — the third gate in this job (`doc-snippet-types.yml`)
+
+The job's **last** step runs `scripts/check-doc-json-fences.mjs` (`pnpm check:doc-json`). The two
+gates above read `ts` / `tsx` only, so a `json` fence was checked by nothing:
+[#5229](https://github.com/objectstack-ai/objectui/issues/5229) taught a `validation` bag on an
+`input` node in `content/docs/blocks/forms.mdx` while every shipped tool was green. Every fenced
+`json` / `jsonc` block under `content/docs` that parses into an object whose `type` names a node
+schema is judged through the **strict authoring face** — `StrictAnyComponentSchema`, read from the
+`@object-ui/types` the build step above produced, the face `objectui validate` and `objectui check`
+judge an authored document with ([#5250](https://github.com/objectstack-ai/objectui/issues/5250)).
+So a key no schema declares fails here exactly as it fails `objectui validate`; the tolerant face
+keeps it, because `BaseSchemaCore` is `.passthrough()` for the renderer.
+
+**What it does not judge, it counts.** A fence that is not JSON, not an object, carries no string
+`type`, or names a `type` no node schema declares is not judged; the summary prints each bucket, and
+`--list` prints every fence with its bucket. Pages outside `content/docs` are not read, and the
+summary says so.
+
+**Fragments are declared, and the declaration is re-judged.** A node document that is deliberately
+not complete or not valid — a refused example that shows the error, an excerpt that elides required
+keys, an object whose `type` only collides with a node type — carries
+`{/* doc-json: fragment - why */}` (the HTML-comment form in `.md`) on the line above its fence. The
+declared fence must be one the strict face refuses: a declaration on a fence the face accepts, or on
+one that is not a node document at all, is reported as stale, so the declarations can only shrink.
+
+**It proves itself before it judges the docs.** The face must resolve inside `packages/types/dist/`;
+a document carrying an undeclared key must be refused by the strict face and accepted by the
+tolerant one; a declared-only document must be accepted; and the walk must judge at least one node
+document, including one from its anchor page. Its exit codes are the sibling gates' three: `0`
+clean, `1` the gate ran and found errors, `2` it **could not run** — `@object-ui/types` unbuilt, or
+a control or the enumeration failed — which is neither green nor red.
+
+**If it fails:** each refusal names the page, the line of its fence, and each reason — an undeclared
+key by name and path, anything else by the face's own message. Remove the key, or replace it with
+the declared key its renderer reads; declare a deliberate fragment. Run it locally with
+`pnpm --filter @object-ui/types build`, then `pnpm check:doc-json`.
+
 ## Fence Languages (`doc-fence-languages.yml`)
 
 **Triggers:** Push and PR to `main`/`develop`, merge-queue builds, plus manual dispatch — **no path
Original file line number	Diff line number	Diff line change
`@@ -710,7 +710,7 @@ A single-record detail view with grouped fields, actions, and tabs.`
`710`	`710`	`"title": "Customer Info",`
`711`	`711`	`"fields": [`
`712`	`712`	`{ "name": "customer", "label": "Customer", "type": "text" },`
`713`		`- { "name": "email", "label": "Email", "type": "email" },`
	`713`	`+ { "name": "email", "label": "Email", "type": "text" },`
`714`	`714`	`{ "name": "created", "label": "Created", "type": "date", "format": "MMM d, yyyy" }`
`715`	`715`	`]`
`716`	`716`	`},`
Original file line number	Diff line number	Diff line change
`@@ -128,7 +128,7 @@ All ObjectUI components follow the same schema-based pattern:`
`128`	`128`	`"type": "button",`
`129`	`129`	`"label": "Click Me",`
`130`	`130`	`"variant": "default",`
`131`		`- "size": "md",`
	`131`	`+ "size": "default",`
`132`	`132`	`"className": "mt-4"`
`133`	`133`	`}`
`134`	`134`	```