svg_conform 0.2.4 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f1d7de294c1bcf83f963e80f3505faa12d65d90a45ec86decb82ee828e79b1e2
-  data.tar.gz: 932524562cb5d1b9a78387725ab659dd21c5f2cf964ebbbec291202f5d87c876
+  metadata.gz: c570e54c0025259102584f034e789bcd18b4487d2954b858f8941c1095a7034a
+  data.tar.gz: 96aae95705ee4769216dd82a1b694d471f0dd348ae15228282f925006f66e558
 SHA512:
-  metadata.gz: 85956fa210da5c6e1282baaeddc02c44450413a9d5b5dfebdfd73d9f7534ae83ce5b0858790db2e1f1d77498dac944ba21f1f868d97fbc202cea0eb017980c36
-  data.tar.gz: 4bcddffa2c56f0ccafaf708e99bea046787c949adb0a07d58581667e421c68abcd49e8014b58e2f225078d5ea83a5d12920c8ddedc4cd6a3daedb23920a6a502
+  metadata.gz: 6314a0c0a4bd5f2cdf3a04e95852173382ccb33c9f4a2683cc38809a1a0afed53ea1febb809a12803e417769f82fed9a538ea7ee3e110f50b37bb7814ab0b541
+  data.tar.gz: 9f3f51c1f050447a6d84506e59fc52d3efaec2616deea94eb6e596c8255969a843bd69a8feebecb318308211937a81b85d079aa43a9dc9db9dd0edd045536a52

data/.gitattributes

@@ -0,0 +1 @@
+data/svg_1_1/* -text

data/.github/workflows/rake.yml

@@ -14,5 +14,8 @@ on:
 jobs:
   rake:
     uses: metanorma/ci/.github/workflows/generic-rake.yml@main
+    with:
+      # tests-passed dispatch is refused on pull_request runs; releases come from push
+      cascade: ${{ github.event_name != 'pull_request' }}
     secrets:
-      pat_token: ${{ secrets.GITHUB_TOKEN }}
+      pat_token: ${{ secrets.CLARICLE_CI_PAT_TOKEN }}

data/Gemfile

@@ -6,9 +6,12 @@ source "https://rubygems.org"
 gemspec
 
 gem "canon", "~>0.1.10"
-gem "lutaml-model", github: "lutaml/lutaml-model", branch: "main"
-gem "moxml", github: "lutaml/moxml", branch: "main"
-gem "leptris", ">= 1.9.365.1"
+gem "leptris", ">= 1.9.399.0"
+gem "lutaml-model", "~> 0.8.155" # rubygems line; drop the git-main float
+gem "moxml", "~> 0.6.0"
+# lens_core is optional at runtime (#121); development and CI use the released v1 gem.
+gem "lens_core", "~> 0.1"
+gem "nokogiri", "~> 1.16"
 gem "openssl", "~> 3.0"
 gem "rake"
 gem "rspec"

data/Gemfile.lock

@@ -0,0 +1,211 @@
+PATH
+  remote: .
+  specs:
+    svg_conform (0.2.6)
+      lutaml-model (~> 0.8.155)
+      moxml (~> 0.6.0)
+      nokogiri (~> 1.16)
+      rainbow
+      table_tennis
+      thor
+      yeptris (~> 0.6.36)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    ast (2.4.3)
+    base64 (0.3.0)
+    bigdecimal (4.1.3)
+    canon (0.1.23)
+      diff-lcs
+      json
+      moxml
+      nokogiri
+      paint
+      table_tennis
+      thor
+      unicode-name
+    concurrent-ruby (1.3.8)
+    csv (3.3.7)
+    diff-lcs (1.6.2)
+    ffi (1.17.4-aarch64-linux-gnu)
+    ffi (1.17.4-aarch64-linux-musl)
+    ffi (1.17.4-arm-linux-gnu)
+    ffi (1.17.4-arm-linux-musl)
+    ffi (1.17.4-arm64-darwin)
+    ffi (1.17.4-x86_64-darwin)
+    ffi (1.17.4-x86_64-linux-gnu)
+    ffi (1.17.4-x86_64-linux-musl)
+    json (3.1.0)
+    language_server-protocol (3.17.0.6)
+    lens_core (0.1.0)
+    leptris (1.9.416.0-aarch64-linux)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-aarch64-linux-musl)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-arm-linux)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-arm-linux-musl)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-arm64-darwin)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-x86_64-darwin)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-x86_64-linux)
+      ffi (~> 1.15)
+    leptris (1.9.416.0-x86_64-linux-musl)
+      ffi (~> 1.15)
+    lint_roller (1.1.0)
+    liquid (5.14.0)
+      bigdecimal
+      strscan (>= 3.1.1)
+    lutaml-model (0.8.174)
+      base64 (>= 0.1.1)
+      bigdecimal
+      canon
+      concurrent-ruby
+      liquid (>= 4.0, < 6.0)
+      moxml (~> 0.6.1)
+      ostruct
+      rubyzip (~> 3.7)
+      thor (~> 1.4)
+    memo_wise (1.13.0)
+    moxml (0.6.4)
+    nokogiri (1.19.7-aarch64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.7-aarch64-linux-musl)
+      racc (~> 1.4)
+    nokogiri (1.19.7-arm-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.7-arm-linux-musl)
+      racc (~> 1.4)
+    nokogiri (1.19.7-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.7-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.7-x86_64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.7-x86_64-linux-musl)
+      racc (~> 1.4)
+    openssl (3.3.3)
+    ostruct (0.6.3)
+    paint (2.3.0)
+    parallel (2.3.0)
+    parser (3.3.13.0)
+      ast (~> 2.4.1)
+      racc
+    prism (2.1.0-aarch64-linux-gnu)
+    prism (2.1.0-aarch64-linux-musl)
+    prism (2.1.0-arm-linux-gnu)
+    prism (2.1.0-arm-linux-musl)
+    prism (2.1.0-arm64-darwin)
+    prism (2.1.0-x86_64-darwin)
+    prism (2.1.0-x86_64-linux-gnu)
+    prism (2.1.0-x86_64-linux-musl)
+    racc (1.8.1)
+    rainbow (3.1.1)
+    rake (13.4.2)
+    regexp_parser (2.13.1)
+    rspec (3.13.2)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.7)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.6)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.9)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.8)
+    rubocop (1.92.2)
+      json (>= 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
+      parallel (>= 1.10)
+      parser (>= 3.3.0.2)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 2.11.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.51.0)
+      parser (>= 3.3.7.2)
+      prism (>= 1.7)
+    rubocop-performance (1.27.0)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.89.0, < 2.0)
+      rubocop-ast (>= 1.47.1, < 2.0)
+    rubocop-rake (0.7.1)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.72.1)
+    rubocop-rspec (3.10.2)
+      lint_roller (~> 1.1)
+      regexp_parser (>= 2.0)
+      rubocop (~> 1.86, >= 1.86.2)
+    ruby-progressbar (1.13.0)
+    rubyzip (3.7.0)
+    strscan (3.1.8)
+    table_tennis (1.0.0)
+      csv (~> 3.3)
+      ffi (~> 1.17)
+      memo_wise (~> 1.13)
+      paint (~> 2.3)
+      unicode-display_width (~> 3.2)
+    thor (1.5.0)
+    unicode-display_width (3.3.0)
+      unicode-emoji (~> 4.3)
+    unicode-emoji (4.3.0)
+    unicode-name (1.15.1)
+      unicode-types (~> 1.12)
+    unicode-types (1.12.0)
+    yeptris (0.6.61.1-aarch64-linux)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-aarch64-linux-musl)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-arm-linux-eabihf)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-arm-linux-musleabihf)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-arm64-darwin)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-x86_64-darwin)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-x86_64-linux)
+      ffi (~> 1.15)
+    yeptris (0.6.61.1-x86_64-linux-musl)
+      ffi (~> 1.15)
+
+PLATFORMS
+  aarch64-linux
+  aarch64-linux-gnu
+  aarch64-linux-musl
+  arm-linux
+  arm-linux-eabihf
+  arm-linux-gnu
+  arm-linux-musl
+  arm-linux-musleabihf
+  arm64-darwin
+  x86_64-darwin
+  x86_64-linux-gnu
+  x86_64-linux-musl
+
+DEPENDENCIES
+  canon (~> 0.1.10)
+  lens_core (~> 0.1)
+  leptris (>= 1.9.399.0)
+  lutaml-model (~> 0.8.155)
+  moxml (~> 0.6.0)
+  nokogiri (~> 1.16)
+  openssl (~> 3.0)
+  rake
+  rspec
+  rubocop
+  rubocop-performance
+  rubocop-rake
+  rubocop-rspec
+  svg_conform!
+
+BUNDLED WITH
+   2.7.2

data/TODO.issue-100/00-overview.md

@@ -0,0 +1,135 @@
+# Issue 100 — Spec-version profiles and shared lens diagnostics
+
+## Outcome
+
+Ship a versioned, zero-runtime-dependency `LensCore` diagnostics contract, make
+`svg_conform` emit that contract without breaking its transitional interfaces,
+and add two opt-in, corpus-backed profiles:
+
+- SVG 1.1 Full in static processing mode.
+- SVG 2 in secure static processing mode.
+
+The work ends with a pinned LensCore candidate and an observable adoption
+handoff. Publishing a LensCore gem and migrating other lens repositories are
+follow-on work, not part of this issue.
+
+## Current state
+
+- `svg_conform` defines diagnostics in several places. `ValidationContext` and
+  `ErrorTracker` collect `infos`, but `ValidationResult`,
+  `ConformanceReport`, and the `check` command project only errors and warnings.
+- `ValidationResult#to_h` and `#to_text`, Lutaml-backed
+  `ConformanceReport`, CLI JSON/YAML/table output, and the svgcheck compatibility
+  path do not share one canonical report object.
+- Profiles are Lutaml models loaded from `config/profiles/*.yml`; requirements
+  are registered independently in `lib/svg_conform/profile.rb`,
+  `lib/svg_conform/profile_compiler.rb`, and
+  `lib/svg_conform/requirements.rb`.
+- Validation supports DOM and SAX requirement hooks, with SAX as the normal
+  validation path. The current profiles describe project policies, not complete
+  SVG 1.1 Full or SVG 2 secure-static conformance.
+- `SvgConform::References::ReferenceClassifier.classify` already returns typed
+  internal-fragment, data-URI, URN, external-URL, and relative-path references.
+  `LinkValidationRequirement` consumes that API. Data URIs currently expose
+  their media type but are not decoded or syntax-checked.
+- The repository has no committed `Gemfile.lock` and no LensCore dependency.
+
+## Target design
+
+### One diagnostics contract
+
+The new `claricle/lens_core` repository owns schema version `1`, Ruby value
+objects, JSON/YAML parsers, and JSON/YAML/human renderers. A report carries its
+schema version, producer, profile identity, validity, summary counts, and an
+ordered diagnostics collection. A diagnostic has a stable severity, extensible
+kind, stable requirement ID, message, optional citations/remediation/context,
+and an optional typed location that can represent XML coordinates or binary
+offsets/records.
+
+`svg_conform` constructs that report once. Existing hashes, text/table output,
+`ConformanceReport`, and svgcheck-compatible output become projections or
+adapters over it for one transition. The adapter preserves all four existing
+channels: errors, validity errors, warnings, and infos.
+
+### Profiles as explicit requirement matrices
+
+Each profile has stable requirement IDs, normative citations, expected failure
+behavior, DOM/SAX coverage, focused fixtures, and documentation. SVG 1.1 Full
+uses the pinned 2011 Recommendation and its flat DTD, plus the Recommendation's
+Appendix G.2 handling and referenced CSS/XML-stylesheet rules. SVG 2 uses the
+pinned Candidate Recommendation and enforces secure-static processing,
+including its external-resource boundary.
+
+The profiles are additive and opt-in. Existing profile behavior and the default
+profile do not change.
+
+## Work sequence
+
+| Card | Work item | Depends on | Effort |
+| --- | --- | --- | --- |
+| 01 | Build LensCore diagnostics v1 | — | 4–7 person-days |
+| 02 | Adopt LensCore in svg_conform | 01 | 3–5 person-days |
+| 03 | Ship SVG 1.1 Full/static | 02 | 8–12 person-days |
+| 04 | Ship SVG 2 secure-static | 02, 03 shared processing/source plumbing | 4–6 person-days |
+| 05 | Freeze the candidate and adoption handoff | 01–04 | 2–4 person-days |
+
+Overall estimate: **21–34 person-days**. The range includes implementation,
+focused tests, fixtures, documentation, and integration fixes. It excludes gem
+publication, work in other lens repositories, and external review latency.
+Confidence is medium: the largest uncertainty is whether the existing XML stack
+can perform offline SVG 1.1 DTD validation without another runtime dependency;
+Card 03 resolves that with a bounded spike before implementation proceeds.
+
+## Acceptance map
+
+| Issue acceptance criterion | Planned evidence |
+| --- | --- |
+| SVG 1.1 and SVG 2 profiles ship, are documented, and each has a corpus | Cards 03 and 04 profile specs, focused fixture directories, CLI checks, and profile documentation |
+| The diagnostics model is extracted, versioned, and shaped for reuse by other lenses | Cards 01 and 02 schema/model/renderer specs plus XML and binary location examples |
+| A diagnostics JSON round-trip corpus is pinned | Card 05 byte-stable parse/render goldens tied to exact LensCore and svg_conform commits |
+| Other lenses can adopt the shape without SVG code | Card 05 host-only check and handoff manifest; actual EMF/PNG/PostScript migrations remain separate issues |
+
+## Scope boundaries
+
+Included:
+
+- LensCore schema/model/parser/renderer v1 and its zero-runtime-dependency gem.
+- The svg_conform adapter and transitional aliases.
+- SVG 1.1 Full/static and SVG 2 secure-static profiles.
+- A pinned JSON corpus and cross-repository adoption handoff.
+
+Excluded:
+
+- EMF, PNG, or PostScript implementation, fixtures, dependency changes, and
+  releases.
+- Publishing LensCore or replacing its temporary Git pin with a released gem.
+- SVG 1.1 Tiny/Basic profiles. They are a future sibling profile of
+  `svg_1_1_full_static`, to be added once the SVG 1.1 Mobile Profiles
+  specification is available as reference material; the repository's available
+  Tiny reference is for SVG Tiny 1.2.
+- Complete SVG 2 document/rendering conformance beyond secure-static processing.
+- Profile inheritance or a redesign of existing profile discovery.
+- Full-suite, full-corpus, or fuzz testing for this issue.
+
+## Normative sources
+
+- SVG 1.1 Second Edition Recommendation:
+  <https://www.w3.org/TR/2011/REC-SVG11-20110816/>
+- SVG 1.1 conformance criteria:
+  <https://www.w3.org/TR/2011/REC-SVG11-20110816/conform.html#ConformingSVGDocuments>
+- SVG 1.1 flat DTD:
+  <https://www.w3.org/Graphics/SVG/1.1/DTD/svg11-flat-20110816.dtd>
+- CSS 2 core grammar referenced by SVG 1.1:
+  <https://www.w3.org/TR/2008/REC-CSS2-20080411/grammar.html>
+- Associating Style Sheets with XML 1.0:
+  <https://www.w3.org/TR/1999/REC-xml-stylesheet-19990629/>
+- SVG 2 Candidate Recommendation snapshot:
+  <https://www.w3.org/TR/2026/CR-SVG2-20261006/>
+- SVG 2 secure-static processing mode:
+  <https://www.w3.org/TR/2026/CR-SVG2-20261006/conform.html#secure-static-mode>
+
+## Verification policy
+
+Each card names only focused specs, fixture checks, lint, and build commands.
+No card requires a full test suite, a corpus sweep, or fuzzing. Commands are run
+in the repository named by the card.

data/TODO.issue-100/01-build-lens-core-v1.md

@@ -0,0 +1,92 @@
+# 01 — Build LensCore diagnostics v1
+
+Effort: **4–7 person-days**
+
+Repository: `claricle/lens_core` (new)
+
+## Purpose
+
+Create the independent, zero-runtime-dependency gem that owns the shared
+diagnostics wire format and all of its renderers. It must be useful without
+loading svg_conform or any document-format implementation.
+
+## Contract
+
+Schema version `1` defines these public concepts:
+
+- `LensCore::Report`: `schema_version`, producer name/version, profile ID and
+  citations, validity, summary counts, ordered diagnostics, and an optional
+  caller-supplied timestamp.
+- `LensCore::Diagnostic`: severity (`error`, `warning`, or `info`), extensible
+  kind, stable requirement ID, message, citations, optional remediation,
+  JSON-safe context, and optional location.
+- `LensCore::Citation`: required absolute `uri` and optional human label.
+- `LensCore::Location`: an explicit location type plus applicable fields. XML
+  locations can carry line, column, and path; binary locations can carry byte
+  offset, byte length, record index, and record type. Absent coordinates are
+  omitted rather than populated with invented zeroes.
+
+The schema rejects an unsupported major schema version but permits new
+diagnostic `kind` values and unknown additive object members so compatible v1
+producers can evolve. Parsers return stable LensCore error classes for malformed
+JSON/YAML, unsupported versions, schema violations, unsafe YAML tags, and
+non-UTF-8 text.
+
+Rendering rules are deterministic: diagnostic input order is preserved,
+standard object keys follow schema order, extension keys are lexical, summary
+counts are derived from diagnostics, and timestamps appear only when supplied.
+JSON parsing followed by JSON rendering is byte-stable for canonical inputs.
+
+## Files and implementation
+
+- Add `lens_core.gemspec`, `Gemfile`, `Rakefile`, and `lib/lens_core.rb`. The
+  gemspec has no runtime dependencies; implementation uses Ruby's JSON, YAML,
+  and time facilities.
+- Add value objects in:
+  - `lib/lens_core/report.rb`
+  - `lib/lens_core/diagnostic.rb`
+  - `lib/lens_core/citation.rb`
+  - `lib/lens_core/location.rb`
+- Add `lib/lens_core/parsers/json.rb` and `yaml.rb`, and matching renderers in
+  `lib/lens_core/renderers/json.rb`, `yaml.rb`, and `human.rb`. Keep validation
+  and canonicalization shared rather than reimplemented in each format.
+- Add the normative machine-readable schema at
+  `schemas/lens-diagnostics-v1.json` and document field semantics, compatibility
+  rules, omission/null behavior, ordering, UTF-8 handling, and failure classes
+  in `docs/diagnostics-v1.adoc`.
+- Add `spec/lens_core/report_spec.rb`, `spec/lens_core/parsers_spec.rb`,
+  `spec/lens_core/renderers_spec.rb`, and `spec/lens_core/schema_spec.rb`, with
+  small fixtures under `spec/fixtures/v1/`. Include XML-location and
+  binary-location reports to prove the contract is not SVG-shaped; these are
+  format-neutral examples, not claims that another lens has adopted the gem.
+
+Keep the Ruby model and JSON Schema at independently readable version constants,
+so a host can report both the gem version and schema version. Do not add SVG
+names, SVG requirement IDs, or dependencies on a lens repository.
+
+## Done when
+
+- The gem builds with zero runtime dependencies and can be required in a clean
+  Ruby process.
+- Schema-valid JSON and safe YAML parse to the same report model; JSON, YAML,
+  and human renderers all include errors, warnings, and infos.
+- Canonical JSON fixtures round-trip byte-for-byte, while malformed, unsafe,
+  non-UTF-8, and unsupported-version fixtures fail with documented LensCore
+  errors.
+- XML and binary fixture locations survive parse/render without losing present
+  coordinates or manufacturing absent ones.
+- The schema, Ruby model, and documentation agree on required fields,
+  compatibility behavior, ordering, timestamp handling, and omission rules.
+- All changed Ruby passes the repository linter and the gem artifact builds.
+
+```sh
+bundle install
+bundle exec rspec spec/lens_core/report_spec.rb spec/lens_core/parsers_spec.rb spec/lens_core/renderers_spec.rb spec/lens_core/schema_spec.rb
+bundle exec rubocop
+bundle exec rake build
+```
+
+## Status
+
+State: done
+PR: https://github.com/claricle/lens_core/pull/1

data/TODO.issue-100/02-adopt-lens-core-in-svg.md

@@ -0,0 +1,123 @@
+# 02 — Adopt LensCore in svg_conform
+
+Effort: **3–5 person-days**
+
+Repository: `claricle/svg_conform`
+
+Depends on: Card 01
+
+## Purpose
+
+Make one `LensCore::Report` the canonical representation of an svg_conform
+validation result while preserving the current public and svgcheck-compatible
+surfaces for one transition.
+
+## Dependency and load boundary
+
+- Add LensCore to `Gemfile` with the HTTPS Git repository and the exact Card 01
+  candidate commit. Generate and commit `Gemfile.lock`; assert that its LensCore
+  revision equals the handoff commit.
+- Do not add an unreleased Git dependency or Bundler-only options to
+  `svg_conform.gemspec`. Replacing the temporary Git pin with a released gem
+  requirement belongs to the later release work.
+- Load LensCore from `lib/svg_conform.rb` and expose the adapter without making
+  LensCore depend on svg_conform.
+
+## Canonical mapping
+
+Add `SvgConform::Diagnostics::LensCoreAdapter` at
+`lib/svg_conform/diagnostics/lens_core_adapter.rb` with one entry point:
+
+```ruby
+SvgConform::Diagnostics::LensCoreAdapter.call(
+  validation_result,
+  filename: nil,
+  timestamp: nil
+)
+```
+
+The adapter maps:
+
+| svg_conform source | LensCore severity | LensCore kind |
+| --- | --- | --- |
+| `errors` | `error` | the issue's violation type, falling back to `validation` |
+| `validity_errors` | `error` | `validity` |
+| `warnings` | `warning` | the issue's violation type, falling back to `validation` |
+| `infos` | `info` | the issue's violation type, falling back to `notice` |
+
+It preserves the source collection order within those channels, maps explicit
+requirement IDs without generating new IDs from messages, includes available
+line/column/element-path data, carries remediation fields already exposed by
+`ValidationIssue`, and converts issue data to JSON-safe primitives. An
+unsupported object in context fails at the adapter boundary with a stable error
+rather than leaking Ruby object inspection into JSON.
+
+Add profile-level `specification_uri`/`specification_label` to `Profile` in
+`lib/svg_conform/profile.rb`, and requirement-level
+`citation_uri`/`citation_label` to `BaseRequirement` in
+`lib/svg_conform/requirements/base_requirement.rb`; map both pairs in their
+Lutaml YAML definitions. The adapter turns them into LensCore citations.
+Existing profiles may omit them; the two new profiles may not.
+
+## Public and transitional surfaces
+
+- Extend `ValidationResult` with `infos`, `info_count`, and
+  `to_lens_core_report(timestamp: nil)`. Include infos and validity errors in
+  counts/projections without changing `valid?`: only errors and validity errors
+  make a result invalid.
+- Make `ValidationResult#to_h`, `#to_json`, and text output project the canonical
+  report. Keep their current call signatures and retain file/reference/fix data
+  as documented compatibility extensions.
+- Back `ConformanceReport.from_svg_conform_result` with the same report and keep
+  its current class, factory signature, and YAML shape as a deprecated legacy
+  projection. Preserve the `use_svgcheck_mapping:` adapter and
+  `from_svgcheck_result`; svgcheck filtering happens after canonical report
+  construction and does not mutate the canonical report.
+- Route `lib/svg_conform/commands/check.rb` JSON, YAML, and table output through
+  LensCore renderers. The accepted CLI value `table` remains an alias for the
+  human renderer for compatibility.
+- Extend `ValidationContext#add_notice`,
+  `ValidationContext#add_external_reference_notice`, and
+  `Validation::ErrorTracker#add_notice` to accept an optional explicit
+  requirement ID while preserving existing calls. Store it on the existing
+  `Errors::ValidationIssue` used by the info channel. Requirements pass their
+  own stable ID so infos no longer fall back to `unknown`.
+
+Document the v1 API and transition in the proposed `docs/diagnostics.adoc`, and
+update the existing `docs/api_reference.adoc` and `docs/cli_guide.adoc`. Add
+focused specs at `spec/svg_conform/diagnostics/lens_core_adapter_spec.rb`,
+`spec/svg_conform/validation_result_spec.rb`,
+`spec/svg_conform/conformance_report_spec.rb`, and the existing command/context
+spec paths used below. Add
+`spec/fixtures/diagnostics/external-reference-info.svg` so the library and CLI
+assertions use a small SVG that emits an ordinary informational external
+reference notice without depending on later profile fixtures.
+
+## Done when
+
+- `Gemfile.lock` pins the exact LensCore candidate commit, while the gemspec has
+  no unreleased LensCore dependency.
+- One validation result containing an error, validity error, warning, and info
+  produces one schema-valid report with correct validity and per-channel
+  summary counts.
+- The library's JSON/YAML/human paths and the ordinary `check` command render
+  from that report and preserve the informational diagnostic.
+- Existing `ValidationResult`, `ConformanceReport`, table-output, and svgcheck
+  factory call signatures remain callable and are covered by compatibility
+  specs.
+- Profile and requirement citations survive YAML loading and appear in the
+  canonical report; JSON-unsafe issue context fails deterministically.
+- All changed Ruby passes the repository linter and the gem builds.
+
+```sh
+bundle install
+bundle exec rspec spec/svg_conform/diagnostics/lens_core_adapter_spec.rb spec/svg_conform/validation_result_spec.rb spec/svg_conform/conformance_report_spec.rb spec/svg_conform/validation_context_spec.rb spec/svg_conform/commands/check_command_spec.rb
+bundle exec svg_conform check spec/fixtures/diagnostics/external-reference-info.svg --profile svg_1_2_rfc --format json
+bundle exec rubocop
+bundle exec rake build
+```
+
+## Status
+
+State: done
+PR: https://github.com/claricle/svg_conform/pull/103