openvibe-sdk 0.80.0: explicit gates sex acts and porn (and a child with nudity); nudity alone is art (#110)

ddiff --git a/CHANGELOG.md b/CHANGELOG.md
iindex 876f26c..b2cdb05 100644
---- a/CHANGELOG.md
++++ b/CHANGELOG.md
@@@ -1,5 +1,15 @@
  # Changelog
  
++## 0.80.0 (2026-11-01)
++
++- **`openvibe-sdk/explicit`: nudity is art.** The owner, 2026-10-31: "naked and nude is fine… stop being against art on
++  my platform." `isExplicit()` now gates what OpenVibe.Live's own rule gates (Live#469), word for word.
++  - **Still gated:** sex acts and pornography (sexual acts or activity, having sex, porn, masturbation, intercourse,
++    oral sex, penetration, pornographic or sexually explicit content), and any text that puts a child and nudity
++    together.
++  - **No longer gated:** nudity and body words on their own. A nude figure-drawing class publishes; "a child is shown
++    naked" never does.
++
  ## 0.79.0 (2026-10-31)
  
  - **`openvibe-sdk/machines`: the network's machines hub** (plan L34, step M2; Contracts 0.258.0). A person's machines
ddiff --git a/README.md b/README.md
iindex bd05f6c..624d66a 100644
---- a/README.md
++++ b/README.md
@@@ -2,16 +2,16 @@
  
  > Supported browser and server clients for the OpenVibe platform.
  
--**Status:** alpha, v0.79.0 (roadmap Wave 2; developer apps from Wave 20; Media objects v2 from Wave 4; the Tools platform API; Search, Chat, AI, Vision and consent clients; sign-in with recovery and a client health check). Every release is tagged (see [CHANGELOG.md](CHANGELOG.md)). Tested against local stub servers and the built-in mock platform only, never against the live platform. Services pin release tags; each repository's `STATUS.json` names the one it uses.
++**Status:** alpha, v0.80.0 (roadmap Wave 2; developer apps from Wave 20; Media objects v2 from Wave 4; the Tools platform API; Search, Chat, AI, Vision and consent clients; sign-in with recovery and a client health check). Every release is tagged (see [CHANGELOG.md](CHANGELOG.md)). Tested against local stub servers and the built-in mock platform only, never against the live platform. Services pin release tags; each repository's `STATUS.json` names the one it uses.
  **Plan:** OpenVibe End-to-End Realignment & Implementation Plan, revision 3 (20 Sep 2026), §3.2; roadmap §30.  
  **License:** MIT ([LICENSE](LICENSE)). This package is a library that apps outside the network embed, so it uses MIT. The OpenVibe services themselves stay AGPL-3.0.
  
  **If a capability is not in the SDK, it is not public.** Apps call services through `openvibe-sdk` and never build internal routes themselves. A route with no SDK wrapper is internal, even when you can reach it, and it can change without notice. To make a capability public, first define it in OpenVibe.Contracts, then wrap it here.
  
--After v0.79.0 is tagged:
++After v0.80.0 is tagged:
  
  ```bash
--npm install https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.79.0
++npm install https://codeload.github.com/OpenVibers/OpenVibe.SDK/tar.gz/refs/tags/v0.80.0
  ```
  
  It has no runtime dependencies. It needs Node ≥ 20, or any browser with `fetch`, Web Crypto and `TextDecoder`. There is no build step. The package is CommonJS with ESM entry points (`import` works). Each subpath has its own `.d.ts`. For a page with no bundler, `browser/openvibe-sdk.mjs` is one self-contained ES module of the browser-safe subpaths (see [Browser without a bundler](#browser-without-a-bundler)). It does not depend on `openvibe-contracts` at runtime: it copies the contract types it uses (from Contracts v0.86.0, a devDependency the tests check them against).
ddiff --git a/STATUS.json b/STATUS.json
iindex 5b2724b..964666d 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -3,7 +3,7 @@
    "stage": "alpha",
    "code": true,
    "wave": "W2",
--  "version": "0.79.0",
++  "version": "0.80.0",
    "plan": "OpenVibe End-to-End Realignment & Implementation Plan, revision 3 (20 Sep 2026), §3.2; roadmap §30",
    "deployed": false,
    "deployment": "none: a package released as git tags; services and apps pin a tag",
ddiff --git a/browser/openvibe-sdk.mjs b/browser/openvibe-sdk.mjs
iindex 4a4dde8..8761989 100644
---- a/browser/openvibe-sdk.mjs
++++ b/browser/openvibe-sdk.mjs
@@@ -1,4 +1,4 @@
--// Generated by scripts/browser-bundle.js from browser.js (openvibe-sdk 0.79.0, MIT). Do not edit.
++// Generated by scripts/browser-bundle.js from browser.js (openvibe-sdk 0.80.0, MIT). Do not edit.
  // One self-contained ES module: core at the top level plus the browser-safe subpaths as namespaces
  // (auth, registry, modules, realtime, media, community, bot, search, bench, vision, themes, redact, chat, ai, jobs, tools, projects, geo). No server-only code: no service tokens, JWT verification, events, identity.
  /* eslint-disable */
@@@ -46,7 +46,7 @@ const { paginate, offsetPager } = __load(7);
  const semver = __load(6);
  
  /** The package version (test/version.test.js keeps it equal to package.json). */
--const SDK_VERSION = '0.79.0';
++const SDK_VERSION = '0.80.0';
  
  module.exports = {
      createClient,
ddiff --git a/package-lock.json b/package-lock.json
iindex 41b4af0..0ce1822 100644
---- a/package-lock.json
++++ b/package-lock.json
@@@ -1,12 +1,12 @@
  {
    "name": "openvibe-sdk",
--  "version": "0.79.0",
++  "version": "0.80.0",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
      "": {
        "name": "openvibe-sdk",
--      "version": "0.79.0",
++      "version": "0.80.0",
        "license": "MIT",
        "bin": {
          "openvibe-download": "bin/openvibe-download.js"
ddiff --git a/package.json b/package.json
iindex 5d779e0..606b7c2 100644
---- a/package.json
++++ b/package.json
@@@ -1,6 +1,6 @@
  {
    "name": "openvibe-sdk",
--  "version": "0.79.0",
++  "version": "0.80.0",
    "description": "Supported browser and server clients for the OpenVibe platform: auth (incl. developer apps), registry discovery, identity, user modules, events, realtime, media, community, Bot robots, search, chat, AI runs, Tools (registry, run API and jobs), VIP memberships and developer projects, the async PostgreSQL data layer (db) and the Valkey cache, limits store, queue and pub/sub, with deadlines, safe retries, problem errors and trace propagation.",
    "main": "index.js",
    "types": "types/index.d.ts",
ddiff --git a/src/core/index.js b/src/core/index.js
iindex fc61bb7..5d2b113 100644
---- a/src/core/index.js
++++ b/src/core/index.js
@@@ -8,7 +8,7 @@ const { paginate, offsetPager } = require('./paginate');
  const semver = require('./semver');
  
  /** The package version (test/version.test.js keeps it equal to package.json). */
--const SDK_VERSION = '0.79.0';
++const SDK_VERSION = '0.80.0';
  
  module.exports = {
      createClient,
ddiff --git a/src/explicit.js b/src/explicit.js
iindex 55cd598..623fe68 100644
---- a/src/explicit.js
++++ b/src/explicit.js
@@@ -1,16 +1,28 @@
  'use strict';
  /**
-- * openvibe-sdk/explicit: AI text that says a scene shows sexual content (body parts, sex acts, pornography, nudity) is
-- * not published at all — a moment, clip or paste whose description says so stays private. This is not about how
-- * anyone looks (describing people is fine, owner 2026-10-31); it is about what a public page shows.
++ * openvibe-sdk/explicit: AI text that says a scene shows sex acts or pornography is not published at all — a moment,
++ * clip or paste whose description says so stays private. Describing people is fine, and so is nudity: the owner,
++ * 2026-10-31, "naked and nude is fine… stop being against art on my platform". What stays gated is sex itself, and the
++ * hard line that nudity being art never moves: a child and a bare body in the same text.
   *
   *   isExplicit(title, overview)  // from openvibe-sdk/explicit
++ *
++ * The same rule as OpenVibe.Live's server/ai/explicit.js (Live#469), so every service that adopts this one agrees.
   */
--// What a scene shows: a service asks isExplicit() before it publishes AI text at all. Live's AI auto-clip 483 went public
--// with such a description on 2026-10-23 (Live#344 had its own copy first).
--const EXPLICIT = /\b(?:genital(?:s|ia)?|penis(?:es)?|vaginas?|vulvas?|sexual(?:ly)?\s+(?:acts?|activity|content|material|explicit|intercourse)|sex\s+acts?|(?:explicit|adult|pornographic|sexual)\s+(?:content|material|footage|scenes?|imagery|videos?|acts?)|porn(?:o|ography|ographic)?|masturbat\w*|intercourse|nudity|erotica?)\b/i;
++// What a scene shows, not what someone talks about in passing: sex acts and pornography. Nudity and body words are not
++// in it (a nude body is not a sex act). Live's AI auto-clip 483 went public with "explicit adult content… sexual acts"
++// in its description on 2026-10-23.
++const EXPLICIT = /\b(?:sexual(?:ly)?\s+(?:acts?|activity|intercourse)|sex\s+acts?|having\s+sex|(?:pornographic|sexually\s+explicit|explicit\s+adult)\s+(?:content|material|footage|scenes?|imagery|videos?|acts?)|adult\s+(?:films?|videos?)|porn(?:o|ography|ographic)?|masturbat\w*|intercourse|oral\s+sex|penetrat\w*)\b/i;
++
++// A child together with nudity or genitals is treated as explicit, whatever else the text says ("kids in swimsuits at
++// the beach" is not this): the moment is never picked, and an AI clip of it goes private for a person to review.
++const MINOR = /\b(?:child(?:ren)?|kids?|minors?|teen(?:age(?:rs?)?|s)?|toddlers?|bab(?:y|ies)|infants?|boys?|girls?|underage)\b/i;
++const NUDE = /\b(?:naked|nude|nudity|undress(?:ed|ing)?|topless|bottomless|genital(?:s|ia)?|penis(?:es)?|vaginas?|vulvas?|breasts?|nipples?)\b/i;
++const minorNude = (t) => MINOR.test(t) && NUDE.test(t);
++
++/** True when any of the texts describes sex acts or pornography, or puts a child and nudity together. */
  function isExplicit(...texts) {
--    return texts.some((t) => t != null && EXPLICIT.test(String(t)));
++    return texts.some((t) => t != null && (EXPLICIT.test(String(t)) || minorNude(String(t))));
  }
  
  module.exports = { isExplicit };
ddiff --git a/test/no-looks.test.js b/test/no-looks.test.js
iindex 488cbed..5f412a8 100644
---- a/test/no-looks.test.js
++++ b/test/no-looks.test.js
@@@ -17,12 +17,17 @@ assert.strictEqual(RULES_VERSION, 'off');
  
  // isExplicit: what a scene shows (Live's clip 483 on 2026-10-23, word for word), from either module.
  assert.strictEqual(isExplicit, explicit.isExplicit, 'one function, re-exported');
++// The owner, 2026-10-31: nudity is art; sex acts and porn stay gated, and a child with nudity always is.
  for (const t of [
--    'A naked man lying on their back with legs spread, reaching toward their genitals',
      'The video shows the streamer engaging in explicit adult content, with close-up footage of sexual acts on a couch',
--    'Pornographic footage plays on the second monitor', 'The scene contains nudity', 'masturbating on camera',
++    'Pornographic footage plays on the second monitor', 'masturbating on camera', 'They are having sex on stream',
++    'A child is shown naked', 'Teens undressing in a locker room',
  ]) assert.ok(isExplicit(t), `explicit: ${t}`);
--for (const t of ['A player in Fortnite is sprinting along a pink-purple sunset map', 'They read the news from Essex', 'A sextant and a map', 'A shirtless man sits', '', null, undefined]) {
++for (const t of [
++    'A player in Fortnite is sprinting along a pink-purple sunset map', 'They read the news from Essex', 'A sextant and a map',
++    'A shirtless man sits', 'A nude figure drawing class, the model posing by the window', 'The scene contains nudity',
++    'A naked man lying on his back in the sun', 'Kids in swimsuits at the beach', '', null, undefined,
++]) {
      assert.ok(!isExplicit(t), `not explicit: ${t}`);
  }
  assert.ok(isExplicit('a fine title', null, 'the frame shows sexual activity'), 'any of several texts');
ddiff --git a/test/pack.test.js b/test/pack.test.js
iindex 95cd127..c877cb5 100644
---- a/test/pack.test.js
++++ b/test/pack.test.js
@@@ -68,7 +68,7 @@ run([
                  })().catch((err) => { console.error(err); process.exit(1); });`;
              const res = execFileSync(process.execPath, ['-e', script], { cwd: app, encoding: 'utf8' });
              assert.match(res, new RegExp(`consumer ok: ${subpaths.length} subpaths \\+ the browser bundle`));
--            assert.equal(subpaths.length, 74);   // 0.79.0 adds openvibe-sdk/machines
++            assert.equal(subpaths.length, 74);   // 0.80.0 adds openvibe-sdk/machines
              assert.ok(!fs.existsSync(path.join(app, 'node_modules/openvibe-contracts')), 'the optional peer is not installed');
          } finally {
              fs.rmSync(tmp, { recursive: true, force: true });
ddiff --git a/types/explicit.d.ts b/types/explicit.d.ts
iindex 35483d8..4aa83f6 100644
---- a/types/explicit.d.ts
++++ b/types/explicit.d.ts
@@@ -1,2 +1,2 @@
--/** True when any of the texts says a scene shows sexual content (body parts, sex acts, pornography, nudity): publish none of it. */
++/** True when any of the texts describes sex acts or pornography, or puts a child and nudity together: publish none of it. Nudity alone is not explicit. */
  export function isExplicit(...texts: unknown[]): boolean;