The signUp use case calls `bus.publish(userSignedUpEvent, ...)` but its manifest entry declared `publishes: []`. The conformance event graph was blind to the entire auth -> marketing-pages welcome-email flow as a result. Declaring "auth.user.signed-up" makes `pnpm conformance` surface the event and its publisher.