@adia-ai/adia-ui-forge 0.8.59 → 0.8.60

package/scripts/lint-rules.generated.mjs

@@ -1,4 +1,4 @@
-// GENERATED — do not hand-edit. Sources:
+// GENERATED, do not hand-edit. Sources:
 //   scripts/lint/engine/primitives.mjs, scripts/lint/engine/run.mjs
 //   scripts/lint/rules/consumer/genui-doc.mjs
 //   scripts/lint/rules/consumer/hardcoded-open.mjs
@@ -13,11 +13,17 @@
 //   scripts/lint/rules/generated/composition/action-list.mjs
 //   scripts/lint/rules/generated/composition/admin-command.mjs
 //   scripts/lint/rules/generated/composition/admin-content.mjs
+//   scripts/lint/rules/generated/composition/admin-entity-item.mjs
+//   scripts/lint/rules/generated/composition/admin-roster.mjs
 //   scripts/lint/rules/generated/composition/admin-scroll.mjs
+//   scripts/lint/rules/generated/composition/admin-settings.mjs
 //   scripts/lint/rules/generated/composition/admin-shell.mjs
 //   scripts/lint/rules/generated/composition/admin-sidebar.mjs
 //   scripts/lint/rules/generated/composition/admin-statusbar.mjs
 //   scripts/lint/rules/generated/composition/admin-topbar.mjs
+//   scripts/lint/rules/generated/composition/agent-admin.mjs
+//   scripts/lint/rules/generated/composition/avatar-group.mjs
+//   scripts/lint/rules/generated/composition/chat-composer.mjs
 //   scripts/lint/rules/generated/composition/chat-empty.mjs
 //   scripts/lint/rules/generated/composition/chat-header.mjs
 //   scripts/lint/rules/generated/composition/chat-shell.mjs
@@ -34,18 +40,30 @@
 //   scripts/lint/rules/generated/composition/editor-sidebar.mjs
 //   scripts/lint/rules/generated/composition/editor-statusbar.mjs
 //   scripts/lint/rules/generated/composition/editor-toolbar.mjs
+//   scripts/lint/rules/generated/composition/embed-shell.mjs
 //   scripts/lint/rules/generated/composition/feed-item.mjs
 //   scripts/lint/rules/generated/composition/feed.mjs
+//   scripts/lint/rules/generated/composition/fields.mjs
+//   scripts/lint/rules/generated/composition/footer.mjs
+//   scripts/lint/rules/generated/composition/form-popover.mjs
+//   scripts/lint/rules/generated/composition/header.mjs
 //   scripts/lint/rules/generated/composition/list-item.mjs
 //   scripts/lint/rules/generated/composition/menu-divider.mjs
 //   scripts/lint/rules/generated/composition/menu-item.mjs
 //   scripts/lint/rules/generated/composition/menu-label.mjs
+//   scripts/lint/rules/generated/composition/menu.mjs
+//   scripts/lint/rules/generated/composition/nav-group.mjs
+//   scripts/lint/rules/generated/composition/nav-item.mjs
 //   scripts/lint/rules/generated/composition/page-scroll.mjs
+//   scripts/lint/rules/generated/composition/radio-group.mjs
+//   scripts/lint/rules/generated/composition/search.mjs
+//   scripts/lint/rules/generated/composition/section.mjs
 //   scripts/lint/rules/generated/composition/segment.mjs
 //   scripts/lint/rules/generated/composition/segmented.mjs
 //   scripts/lint/rules/generated/composition/simple-content.mjs
 //   scripts/lint/rules/generated/composition/simple-hero.mjs
 //   scripts/lint/rules/generated/composition/simple-shell.mjs
+//   scripts/lint/rules/generated/composition/skip-nav.mjs
 //   scripts/lint/rules/generated/composition/stepper-item.mjs
 //   scripts/lint/rules/generated/composition/stepper.mjs
 //   scripts/lint/rules/generated/composition/tab.mjs
@@ -61,6 +79,7 @@
 //   scripts/lint/rules/generated/lab-posture/internal-tier.mjs
 //   scripts/lint/rules/generated/lab-posture/required-attr.mjs
 //   scripts/lint/rules/generated/lab-posture/unknown-attr.mjs
+//   scripts/lint/rules/generated/lab-posture/unknown-slot.mjs
 //   scripts/lint/rules/generated/lab-posture/unknown-tag.mjs
 //   scripts/lint/rules/genui-output/anti-patterns.mjs
 //   scripts/lint/rules/shared/attr-typo.mjs
@@ -69,8 +88,10 @@
 //   scripts/lint/rules/shared/dead-font-token.mjs
 //   scripts/lint/rules/shared/example-id-grammar.mjs
 //   scripts/lint/rules/shared/example-prop-contract.mjs
+//   scripts/lint/rules/shared/img-dimension-reserve.mjs
 //   scripts/lint/rules/shared/legacy-shell.mjs
 //   scripts/lint/rules/shared/native-primitive.mjs
+//   scripts/lint/rules/shared/no-local-escape-html.mjs
 //   scripts/lint/rules/shared/raw-color.mjs
 //   scripts/lint/rules/shared/raw-px.mjs
 //   scripts/lint/rules/shared/scope-extent.mjs
@@ -238,7 +259,7 @@ const RE = {
   BOOL_TRUE: /\bdefault:\s*true\b/,
   ATTR_TYPO: /\battr:\s*['"]/,
   NATIVE_PRIMITIVE: /<(?:button|input|select|textarea|dialog)(?![\w-])/,
-  LEGACY_SHELL: /data-chat-(?:messages|input|empty|name)|data-editor-body|data-canvas\b|data-sidebar=|data-pane-(?:side|grow)|<aside-ui\b|<dialog\s+data-command/,
+  LEGACY_SHELL: /^(?:data-chat-(?:messages|input|empty|name)|data-editor-body|data-canvas|data-sidebar|data-pane-(?:side|grow))$/,
   PX_GE: /(?<![\w.-])(\d+)px\b/g,
   SELECTOR_RULE: /^\s*[.#:[&\w][^{}\n]*\{/m,
   SSR_SIGNAL: /['"]use client['"]|\buseEffect\b|\bonMounted\b|\bonMount\b|from\s+['"](?:react|vue|svelte|next|nuxt|@sveltejs|astro)|getServerSideProps|defineNuxtComponent/i,
@@ -385,9 +406,18 @@ const VOID_TAGS = new Set([
  * are flushed as-is) so a small fixture snippet never throws.
  *
  * Returns one node per open (or self-closing/void) tag, in document
- * order: `{ tag, parentTag, line, childTags }` — `parentTag` is `'ROOT'`
- * for a top-level occurrence (the A2UI "Surface" case), `childTags` is
- * the ordered list of direct-child tag names only (not descendants).
+ * order: `{ tag, parentTag, line, childTags }`. `parentTag` is the
+ * nearest CUSTOM-ELEMENT ancestor (gh#3310) — the stack is walked from
+ * the top down past any native, non-hyphenated wrapper tag (`section`,
+ * `div`, `td`, `tr`, `tbody`, ...; the Custom Elements naming
+ * requirement means no native HTML tag is ever hyphenated, so "contains
+ * a hyphen" is the discriminator, not an allowlist) to the first
+ * hyphenated frame, and is `'ROOT'` if the walk empties the stack
+ * without finding one (the A2UI "Surface" case). `childTags` is the
+ * ordered list of DIRECT children only (not descendants, and not
+ * ancestor-walked — `allowedChildren` matching stays direct-children-only),
+ * each a `{ tag, slot }` pair (`slot` is `null` for a default-slot child —
+ * gh#3308, compositionFindings' own slot-aware allowedChildren check).
  *
  * gh#2937: `makeLinter`'s `lintText` calls every active rule's `match()`
  * with the SAME `text` string for one file — and each of the ~48
@@ -401,16 +431,34 @@ const VOID_TAGS = new Set([
  * the next file is a single cache miss that recomputes and replaces
  * the slot — no manual invalidation, no unbounded growth.
  */
-let _tagTreeCache = { text: null, nodes: null };
-function tagTree(text) {
-  if (_tagTreeCache.text === text) return _tagTreeCache.nodes;
+// gh#3310: the Custom Elements spec requires a hyphen in every custom
+// tag name, so "contains a hyphen" is a definitional discriminator for
+// "is a catalog component" — no native HTML tag is ever hyphenated, and
+// no allowlist of "transparent" wrapper tags needs maintaining.
+function nearestCustomElementAncestor(stack) {
+  for (let i = stack.length - 1; i >= 0; i -= 1) {
+    if (stack[i].tag.includes('-')) return stack[i].tag;
+  }
+  return 'ROOT';
+}
+
+let _tagTreeCache = { text: null, path: null, nodes: null };
+// gh#3492: scans `markupScanSurface(text, path)`'s blanked output, not raw
+// `text`. A `<!-- ... -->` comment naming a real tag in prose (a
+// "Pattern source:" doc header) was previously read as live markup, and
+// the comment's missing closing tag left every REAL element after it
+// folded into a phantom nesting context. Blanking (not deleting) keeps
+// line numbers aligned, same guarantee `tagOccurrences` already relies on.
+function tagTree(text, path = '') {
+  if (_tagTreeCache.text === text && _tagTreeCache.path === path) return _tagTreeCache.nodes;
+  const surface = markupScanSurface(text, path);
   const nodes = [];
-  const stack = []; // { tag, parentTag, line, children: string[] }
+  const stack = []; // { tag, parentTag, line, children: {tag, slot}[] }
   TAG_TOKEN_RE.lastIndex = 0;
   let m;
-  while ((m = TAG_TOKEN_RE.exec(text))) {
-    const [, closing, tag, , selfClose] = m;
-    const line = lineOf(text, m.index);
+  while ((m = TAG_TOKEN_RE.exec(surface))) {
+    const [, closing, tag, attrString, selfClose] = m;
+    const line = lineOf(surface, m.index);
     if (closing) {
       let at = -1;
       for (let i = stack.length - 1; i >= 0; i -= 1) {
@@ -422,8 +470,8 @@ function tagTree(text) {
       stack.length = at; // pop this frame and any unclosed frames above it
       continue;
     }
-    const parentTag = stack.length ? stack[stack.length - 1].tag : 'ROOT';
-    if (stack.length) stack[stack.length - 1].children.push(tag);
+    const parentTag = nearestCustomElementAncestor(stack);
+    if (stack.length) stack[stack.length - 1].children.push({ tag, slot: parseAttrs(attrString).slot ?? null });
     if (selfClose || VOID_TAGS.has(tag.toLowerCase())) {
       nodes.push({ tag, parentTag, line, childTags: [] });
     } else {
@@ -434,7 +482,7 @@ function tagTree(text) {
     const frame = stack.pop();
     nodes.push({ tag: frame.tag, parentTag: frame.parentTag, line: frame.line, childTags: frame.children });
   }
-  _tagTreeCache = { text, nodes };
+  _tagTreeCache = { text, path, nodes };
   return nodes;
 }
 
@@ -446,10 +494,26 @@ function tagTree(text) {
  * string/tree matcher with no registry lookup at match-time, same as
  * every other rule). The reserved catalog name `'Surface'` in
  * `allowedParents` matches a `parentTag === 'ROOT'` occurrence.
+ *
+ * gh#3308: `allowedChildren` applies to default-slot children only — a
+ * child carrying ANY `slot=` attribute (menu-ui's `slot=trigger`,
+ * context-menu-ui's wrap-mode target) is a sibling-level named slot whose
+ * content is deliberately unconstrained by the component's own source, not
+ * a default-slot member subject to the roster check. `allowedChildrenBySlot`
+ * is the opt-in per-slot roster for the rare case a named slot DOES want
+ * constraining — a slot absent from that map (or the map itself absent)
+ * stays exempt by design, same as an unconstrained default slot.
+ *
+ * gh#3492: `path` is optional and defaults to `''`. Every current caller
+ * (the generated `COMPOSITION-*` rules) has no path to give, and doesn't
+ * need one: `tagTree()`'s HTML-comment blanking runs unconditionally
+ * regardless of path, only its `.vue`-template scoping depends on it.
  */
-function compositionFindings(text, { tag, allowedParents, allowedChildren }) {
+function compositionFindings(text, { tag, allowedParents, allowedChildren, allowedChildrenBySlot, path = '' }) {
   const out = [];
-  for (const node of tagTree(text)) {
+  const hasChildRule = (allowedChildren && allowedChildren.length)
+    || (allowedChildrenBySlot && Object.keys(allowedChildrenBySlot).length);
+  for (const node of tagTree(text, path)) {
     if (node.tag !== tag) continue;
     if (allowedParents && allowedParents.length) {
       const parentOk = node.parentTag === 'ROOT'
@@ -464,13 +528,26 @@ function compositionFindings(text, { tag, allowedParents, allowedChildren }) {
         });
       }
     }
-    if (allowedChildren && allowedChildren.length) {
+    if (hasChildRule) {
       for (const child of node.childTags) {
-        if (!allowedChildren.includes(child)) {
+        if (child.slot) {
+          const slotAllowed = allowedChildrenBySlot && allowedChildrenBySlot[child.slot];
+          if (!slotAllowed) continue; // named slot left unconstrained by design
+          if (!slotAllowed.includes(child.tag)) {
+            out.push({
+              line: node.line,
+              snippet: `<${tag} slot="${child.slot}"> > <${child.tag}>`,
+              why: `<${tag}> declares a2ui.allowedChildrenBySlot.${child.slot}: [${slotAllowed.join(', ')}] — <${child.tag}> is not one of them`,
+            });
+          }
+          continue;
+        }
+        if (!allowedChildren || !allowedChildren.length) continue; // default slot unconstrained
+        if (!allowedChildren.includes(child.tag)) {
           out.push({
             line: node.line,
-            snippet: `<${tag}> > <${child}>`,
-            why: `<${tag}> declares a2ui.allowedChildren: [${allowedChildren.join(', ')}] — <${child}> is not one of them`,
+            snippet: `<${tag}> > <${child.tag}>`,
+            why: `<${tag}> declares a2ui.allowedChildren: [${allowedChildren.join(', ')}] — <${child.tag}> is not one of them`,
           });
         }
       }
@@ -950,6 +1027,46 @@ function requiredAttrFindings(text, manifest, path = '') {
   return out;
 }
 
+/**
+ * UNKNOWN-SLOT (gh#3222): a `slot="…"` value that is not a slot name ANY
+ * component in the manifest declares. `manifest` here is the flat
+ * `{ slotNames: [...] }` shape `trimForEmbed`'s own `'slot-names'` branch
+ * produces (gen-lab-posture-rules.mjs) — not the per-tag `{ components }`
+ * shape `buildManifestIndex` reads for the other five rules.
+ *
+ * Deliberately NOT a per-tag/nearest-ancestor check the way UNKNOWN-ATTR
+ * validates an attribute against its own element's tag: Light DOM's
+ * `slot=` is decorative metadata this kit's own component JS reads with
+ * an unscoped selector, so the element carrying `slot="action"` is
+ * routinely a `<header>`'s own descendant rather than a direct child of
+ * the component that actually declares the `action` slot
+ * (card.examples.html's `<header><span slot="heading">…` — `heading` is
+ * `card-ui`'s slot, two levels down from `<card-ui>` itself, past a plain
+ * `<header>` wrapper with no manifest entry of its own). Reliably finding
+ * the "owning" tag would need a nearest-kit-ancestor tree walk that is
+ * fragile against exactly this shape; checking the NAME against the
+ * manifest-wide vocabulary instead still catches the real failure mode
+ * (a generator inventing a slot name no component anywhere declares)
+ * without that fragility — the same "name only, never placement" scope
+ * this primitive's own callers document.
+ */
+function slotNameFindings(text, manifest, path = '') {
+  const known = new Set((manifest && manifest.slotNames) || []);
+  const out = [];
+  for (const occ of tagOccurrences(text, path)) {
+    const value = occ.attrs.slot;
+    if (value === undefined || value === null) continue;
+    if (isDynamicAttr('slot', value)) continue;
+    if (known.has(value)) continue;
+    out.push({
+      line: occ.line,
+      snippet: `<${occ.tag} slot="${value}">`,
+      why: `UNKNOWN-SLOT: slot="${value}" is not a slot name any component in the installed manifest declares`,
+    });
+  }
+  return out;
+}
+
 /**
  * Yaml-corpus primitive (LLD-0016 §C3): reads one component yaml's own
  * top-level `component:` scalar and its `props:` mapping's first-level key
@@ -1004,6 +1121,18 @@ function extractYamlComponentPropKeys(text) {
  * @param {Array<{id:string, severity:string, scope:string, fileTypes:string[], match:Function}>} rules
  * @param {{scopes?: string[]}} [opts] which rule scopes to run — omit for all
  */
+// gh#3716: a `scope: 'forge-only'` rule is declared to check framework
+// source (packages/web-components, packages/web-modules), the two trees
+// that are actually authored as scoped components. `npm run lint` sweeps
+// the whole repo unscoped (the monorepo is both the framework source and
+// its own consumer), so without this restriction a forge-only rule also
+// fires against e.g. apps/* page CSS that was never authored to that
+// contract. `consumer-only`/`shared` rules carry no such corpus fence.
+const FORGE_ONLY_PATHS = ['packages/web-components/', 'packages/web-modules/'];
+function isForgeOnlyPath(path) {
+  return FORGE_ONLY_PATHS.some((p) => path.startsWith(p));
+}
+
 function makeLinter(rules, opts = {}) {
   const scopes = opts.scopes || null;
   const active = rules.filter((r) => !scopes || scopes.includes(r.scope));
@@ -1014,6 +1143,7 @@ function makeLinter(rules, opts = {}) {
     let findings = [];
     for (const rule of active) {
       if (rule.fileTypes && rule.fileTypes.length && !rule.fileTypes.includes(fileExt)) continue;
+      if (rule.scope === 'forge-only' && !isForgeOnlyPath(path)) continue;
       const hits = rule.match(text, path, { scopes }) || [];
       for (const h of hits) {
         findings.push({ name: rule.id, line: h.line, snippet: h.snippet, why: h.why });
@@ -1061,16 +1191,31 @@ const RULES = [];
 
 const APPLIES_EXT = ['.html', '.htm', '.vue', '.svelte', '.astro', '.tsx', '.jsx', '.js', '.mjs', '.ts'];
 
+// gh#3717: a whole-file `String.includes('validate_schema')` cleared the
+// finding on ANY occurrence of the name anywhere in the file, a prose
+// comment, a docstring, an unrelated identifier, even a substring baked
+// into a fixture string. site/pages/catalogs/catalogs.setup.js passed
+// purely because a comment mentions both names while `.doc =` is set with
+// no validation ever run. The fix asks two sharper questions instead:
+// (1) is the `.doc =` assignment itself real code, not commented out
+// (stripCommentLines, gh#976's own comment-stripping primitive, the same
+// one that keeps a retired-selector rule from firing on a docstring), and
+// (2) does the SAME module actually CALL validate_schema(...) or
+// check_anti_patterns(...), a real call expression, not a bare mention.
+const VALIDATE_CALL_RE = /\b(?:validate_schema|check_anti_patterns)\s*\(/;
+
 const genuiUnvalidated = {
   id: 'GENUI-UNVALIDATED',
   severity: 'error',
   scope: 'consumer-only',
   fileTypes: APPLIES_EXT,
-  match(text) {
-    const m = /\.doc\s*=/.exec(text);
-    if (!m) return [];
-    const line = lineOf(text, m.index);
-    if (text.includes('validate_schema') || text.includes('check_anti_patterns')) return [];
+  match(text, filePath) {
+    if (!/\.doc\s*=/.test(text)) return [];
+    const stripped = stripCommentLines(text, ext(filePath)).map((l) => l.stripped).join('\n');
+    const m = /\.doc\s*=/.exec(stripped);
+    if (!m) return []; // every `.doc =` in the file was inside a comment
+    if (VALIDATE_CALL_RE.test(stripped)) return [];
+    const line = lineOf(stripped, m.index);
     return [{
       line,
       snippet: '.doc = … with no validate in file',
@@ -1088,6 +1233,42 @@ const genuiUnvalidated = {
 // a declarative `src=`/`transport=` on an instance.
 const RUNTIME_HOME_PATH = /(?:^|[\\/])packages[\\/]web-modules[\\/]runtime[\\/](?:a2ui-root|gen-root)[\\/]/;
 
+// gh#3714: the old check matched ".doc =" and "src="/"transport=" anywhere
+// in the FILE, so a2ui-root.js's own docstring (documenting both usage
+// modes side by side in one comment block) tripped it, even with the
+// RUNTIME_HOME_PATH exemption above already carved out for that one file.
+// The real bug is broader than that single case: any consumer file wiring
+// TWO root elements, one fed declaratively and one fed programmatically,
+// was also a false positive, since the old match never asked WHICH
+// element each signal belonged to.
+//
+// This is a regex heuristic, not a JS/HTML parser, so it correlates by two
+// cheap signals rather than real scope analysis:
+//   1. Single-element files: if the file has exactly one <a2ui-root>/
+//      <gen-root> tag, any ".doc =" assignment anywhere in the file is
+//      presumed to target that one element (nothing else for it to mean).
+//   2. Multi-element files: a ".doc =" assignment correlates to a specific
+//      element only when its target variable was bound via
+//      document.getElementById('id') / document.querySelector('#id') to
+//      an element carrying a matching id="..." attribute.
+// Documented misses (false negatives), by design rather than oversight:
+//   - A file with 2+ root elements where NONE carry an id= attribute, or
+//     where the ".doc =" target variable is bound some other way (a
+//     framework ref, a destructured array, ".doc =" set via "this.el"),
+//     cannot be correlated and is silently allowed. The old file-wide
+//     check would have (over-)caught this, at the cost of the
+//     a2ui-root.js false positive this ticket exists to fix.
+// Documented possible false positive: in a single-element file, a ".doc ="
+// assignment that provably targets a DIFFERENT, unrelated object which
+// merely has its own "doc" property (e.g. an unrelated "state.doc = ...")
+// cannot be told apart from a real root reference by rule 1 above.
+const ROOT_TAG = /<(a2ui-root|gen-root)\b([^>]*)>/g;
+const ID_ATTR = /\bid\s*=\s*["']([^"']+)["']/;
+const DECLARATIVE_ATTR = /\b(?:src|transport)\s*=/;
+const VAR_TO_ID =
+  /(?:const|let|var)?\s*([A-Za-z_$][\w$]*)\s*=\s*document\.(?:getElementById\(\s*['"]([\w-]+)['"]\s*\)|querySelector\(\s*['"]#([\w-]+)['"]\s*\))/g;
+const DOC_ASSIGN = /([A-Za-z_$][\w$]*)\.doc\s*=/g;
+
 const genuiDocConflict = {
   id: 'GENUI-DOC-CONFLICT',
   severity: 'error',
@@ -1095,17 +1276,34 @@ const genuiDocConflict = {
   fileTypes: APPLIES_EXT,
   match(text, filePath) {
     if (typeof filePath === 'string' && RUNTIME_HOME_PATH.test(filePath)) return [];
-    const m = /\.doc\s*=/.exec(text);
-    if (!m) return [];
-    const line = lineOf(text, m.index);
-    if (/<(?:a2ui-root|gen-root)[^>]*\b(?:src|transport)=/.test(text)) {
-      return [{
-        line,
-        snippet: '.doc = … alongside src=/transport=',
+
+    const elements = [];
+    for (const m of text.matchAll(ROOT_TAG)) {
+      const attrs = m[2];
+      const idMatch = ID_ATTR.exec(attrs);
+      elements.push({ id: idMatch ? idMatch[1] : null, declarative: DECLARATIVE_ATTR.test(attrs) });
+    }
+    if (elements.length === 0) return [];
+
+    const idsWithDeclarative = new Set(elements.filter((e) => e.declarative && e.id).map((e) => e.id));
+    const varToId = new Map();
+    for (const m of text.matchAll(VAR_TO_ID)) {
+      varToId.set(m[1], m[2] || m[3]);
+    }
+    const soleElementIsDeclarative = elements.length === 1 && elements[0].declarative;
+
+    const findings = [];
+    for (const m of text.matchAll(DOC_ASSIGN)) {
+      const targetId = varToId.get(m[1]);
+      const conflicts = targetId ? idsWithDeclarative.has(targetId) : soleElementIsDeclarative;
+      if (!conflicts) continue;
+      findings.push({
+        line: lineOf(text, m.index),
+        snippet: '.doc = … alongside src=/transport= on the same root',
         why: 'two feed paths fight — a root is fed EITHER declaratively (src/transport) OR programmatically (.doc), never both',
-      }];
+      });
     }
-    return [];
+    return findings;
   },
 };
 
@@ -1126,6 +1324,13 @@ RULES.push(genuiUnvalidated, genuiDocConflict);
 // gets the exemption; scope it to that tree, not the filename alone.
 const EXAMPLES_FILE = /\.examples\.html$/;
 const CATALOG_CONTENTS_FILE = /\.contents\.html$/;
+// packages/web-components/templates/ is the Class R npm mirror of those same
+// catalog/apps/playgrounds demo fragments (ADR-0084, built by
+// scripts/build/templates-mirror.mjs). The mirror step renames each file to
+// `pattern-library-<name>.html` and drops the `catalog/` prefix, so a
+// mirrored demo's default-open state no longer matches either pattern above
+// even though it is a byte-for-byte copy of already-exempt source markup.
+const TEMPLATES_MIRROR_DIR = /^packages\/web-components\/templates\//;
 
 
 RULES.push({
@@ -1137,6 +1342,7 @@ RULES.push({
     const p = (path || '').replace(/\\/g, '/');
     if (EXAMPLES_FILE.test(p)) return [];
     if (CATALOG_CONTENTS_FILE.test(p) && p.split('/')[0] === 'catalog') return [];
+    if (TEMPLATES_MIRROR_DIR.test(p)) return [];
     const out = [];
     text.split('\n').forEach((line, i) => {
       if (RE.OVERLAY_OPEN.test(line)) {
@@ -1343,7 +1549,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/accordion/accordion-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/accordion/accordion-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1351,15 +1557,16 @@ RULES.push({
 const TAG = "accordion-item-ui";
 const ALLOWED_PARENTS = ["accordion-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACCORDION-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1374,7 +1581,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/accordion/accordion.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/accordion/accordion.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1382,15 +1589,16 @@ RULES.push({
 const TAG = "accordion-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["accordion-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACCORDION-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1398,14 +1606,15 @@ RULES.push({
       "<accordion-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></accordion-ui>"
     ],
     "clean": [
-      "<accordion-ui><accordion-item-ui></accordion-item-ui></accordion-ui>"
+      "<accordion-ui><accordion-item-ui></accordion-item-ui></accordion-ui>",
+      "<accordion-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></accordion-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/action-list/action-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/action-list/action-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1413,15 +1622,16 @@ RULES.push({
 const TAG = "action-item-ui";
 const ALLOWED_PARENTS = ["action-list-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACTION-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1436,7 +1646,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/action-list/action-list.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/action-list/action-list.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1444,15 +1654,16 @@ RULES.push({
 const TAG = "action-list-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["action-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACTION-LIST-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1460,14 +1671,15 @@ RULES.push({
       "<action-list-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></action-list-ui>"
     ],
     "clean": [
-      "<action-list-ui><action-item-ui></action-item-ui></action-list-ui>"
+      "<action-list-ui><action-item-ui></action-item-ui></action-list-ui>",
+      "<action-list-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></action-list-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-command/admin-command.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-command/admin-command.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1475,15 +1687,16 @@ RULES.push({
 const TAG = "admin-command";
 const ALLOWED_PARENTS = ["admin-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-COMMAND",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1498,7 +1711,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-content/admin-content.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-content/admin-content.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1506,15 +1719,16 @@ RULES.push({
 const TAG = "admin-content";
 const ALLOWED_PARENTS = ["admin-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-CONTENT",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1529,7 +1743,71 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-scroll/admin-scroll.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-entity-item/admin-entity-item.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "admin-entity-item";
+const ALLOWED_PARENTS = ["admin-topbar","admin-statusbar"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-ADMIN-ENTITY-ITEM",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><admin-entity-item></admin-entity-item></div>"
+    ],
+    "clean": [
+      "<admin-topbar><admin-entity-item></admin-entity-item></admin-topbar>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/admin-roster/admin-roster.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "admin-roster-ui";
+const ALLOWED_PARENTS = ["agent-admin-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-ADMIN-ROSTER-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><admin-roster-ui></admin-roster-ui></div>"
+    ],
+    "clean": [
+      "<agent-admin-ui><admin-roster-ui></admin-roster-ui></agent-admin-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-scroll/admin-scroll.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1537,15 +1815,16 @@ RULES.push({
 const TAG = "admin-scroll";
 const ALLOWED_PARENTS = ["admin-content"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SCROLL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1560,7 +1839,39 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-shell/admin-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/admin-settings/admin-settings.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "admin-settings-ui";
+const ALLOWED_PARENTS = ["agent-admin-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-ADMIN-SETTINGS-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><admin-settings-ui></admin-settings-ui></div>"
+    ],
+    "clean": [
+      "<agent-admin-ui><admin-settings-ui></admin-settings-ui></agent-admin-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-shell/admin-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1568,15 +1879,16 @@ RULES.push({
 const TAG = "admin-shell";
 const ALLOWED_PARENTS = ["Surface"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1591,7 +1903,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-sidebar/admin-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-sidebar/admin-sidebar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1599,15 +1911,16 @@ RULES.push({
 const TAG = "admin-sidebar";
 const ALLOWED_PARENTS = ["admin-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1622,7 +1935,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-statusbar/admin-statusbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-statusbar/admin-statusbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1630,15 +1943,16 @@ RULES.push({
 const TAG = "admin-statusbar";
 const ALLOWED_PARENTS = ["admin-shell","admin-content","admin-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-STATUSBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1653,7 +1967,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-topbar/admin-topbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-topbar/admin-topbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1661,15 +1975,16 @@ RULES.push({
 const TAG = "admin-topbar";
 const ALLOWED_PARENTS = ["admin-shell","admin-content","admin-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-TOPBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1684,7 +1999,105 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-empty/chat-empty.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/agent-admin/agent-admin.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "agent-admin-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["admin-roster-ui","admin-settings-ui","chat-shell"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-AGENT-ADMIN-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<agent-admin-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></agent-admin-ui>"
+    ],
+    "clean": [
+      "<agent-admin-ui><admin-roster-ui></admin-roster-ui></agent-admin-ui>",
+      "<agent-admin-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></agent-admin-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/avatar/avatar-group.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "avatar-group-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["avatar-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-AVATAR-GROUP-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<avatar-group-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></avatar-group-ui>"
+    ],
+    "clean": [
+      "<avatar-group-ui><avatar-ui></avatar-ui></avatar-group-ui>",
+      "<avatar-group-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></avatar-group-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-composer/chat-composer.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "chat-composer";
+const ALLOWED_PARENTS = ["chat-shell"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-CHAT-COMPOSER",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><chat-composer></chat-composer></div>"
+    ],
+    "clean": [
+      "<chat-shell><chat-composer></chat-composer></chat-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-empty/chat-empty.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1692,15 +2105,16 @@ RULES.push({
 const TAG = "chat-empty";
 const ALLOWED_PARENTS = ["chat-thread"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-EMPTY",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1715,7 +2129,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-header/chat-header.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-header/chat-header.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1723,15 +2137,16 @@ RULES.push({
 const TAG = "chat-header";
 const ALLOWED_PARENTS = ["chat-shell","chat-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-HEADER",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1746,23 +2161,24 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-shell/chat-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-shell/chat-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
 const TAG = "chat-shell";
-const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_PARENTS = ["Surface","agent-admin-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1777,7 +2193,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-sidebar/chat-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-sidebar/chat-sidebar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1785,15 +2201,16 @@ RULES.push({
 const TAG = "chat-sidebar";
 const ALLOWED_PARENTS = ["chat-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1808,7 +2225,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-status/chat-status.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-status/chat-status.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1816,15 +2233,16 @@ RULES.push({
 const TAG = "chat-status";
 const ALLOWED_PARENTS = ["chat-header"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-STATUS",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1839,7 +2257,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-thread/chat-thread.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-thread/chat-thread.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1847,15 +2265,16 @@ RULES.push({
 const TAG = "chat-thread";
 const ALLOWED_PARENTS = ["chat-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-THREAD",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1870,7 +2289,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/choice-card/choice-card.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/choice-card/choice-card.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1878,15 +2297,16 @@ RULES.push({
 const TAG = "choice-card-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["choice-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHOICE-CARD-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1894,14 +2314,15 @@ RULES.push({
       "<choice-card-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></choice-card-ui>"
     ],
     "clean": [
-      "<choice-card-ui><choice-ui></choice-ui></choice-card-ui>"
+      "<choice-card-ui><choice-ui></choice-ui></choice-card-ui>",
+      "<choice-card-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></choice-card-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/choice-card/choice.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/choice-card/choice.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1909,15 +2330,16 @@ RULES.push({
 const TAG = "choice-ui";
 const ALLOWED_PARENTS = ["choice-card-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHOICE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1932,7 +2354,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/drilldown/drilldown.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/drilldown/drilldown.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1940,15 +2362,16 @@ RULES.push({
 const TAG = "drilldown-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["breadcrumb-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-DRILLDOWN-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1956,14 +2379,15 @@ RULES.push({
       "<drilldown-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></drilldown-ui>"
     ],
     "clean": [
-      "<drilldown-ui><breadcrumb-ui></breadcrumb-ui></drilldown-ui>"
+      "<drilldown-ui><breadcrumb-ui></breadcrumb-ui></drilldown-ui>",
+      "<drilldown-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></drilldown-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-canvas-empty/editor-canvas-empty.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-canvas-empty/editor-canvas-empty.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1971,15 +2395,16 @@ RULES.push({
 const TAG = "editor-canvas-empty";
 const ALLOWED_PARENTS = ["editor-canvas"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS-EMPTY",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1994,7 +2419,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-canvas-toolbar/editor-canvas-toolbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-canvas-toolbar/editor-canvas-toolbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2002,15 +2427,16 @@ RULES.push({
 const TAG = "editor-canvas-toolbar";
 const ALLOWED_PARENTS = ["editor-canvas"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS-TOOLBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2018,386 +2444,759 @@ RULES.push({
       "<div><editor-canvas-toolbar></editor-canvas-toolbar></div>"
     ],
     "clean": [
-      "<editor-canvas><editor-canvas-toolbar></editor-canvas-toolbar></editor-canvas>"
+      "<editor-canvas><editor-canvas-toolbar></editor-canvas-toolbar></editor-canvas>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-canvas/editor-canvas.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "editor-canvas";
+const ALLOWED_PARENTS = ["editor-shell"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EDITOR-CANVAS",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><editor-canvas></editor-canvas></div>"
+    ],
+    "clean": [
+      "<editor-shell><editor-canvas></editor-canvas></editor-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-shell/editor-shell.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "editor-shell";
+const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EDITOR-SHELL",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<col-ui><editor-shell></editor-shell></col-ui>"
+    ],
+    "clean": [
+      "<editor-shell></editor-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-sidebar/editor-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "editor-sidebar";
+const ALLOWED_PARENTS = ["editor-shell"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EDITOR-SIDEBAR",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><editor-sidebar></editor-sidebar></div>"
+    ],
+    "clean": [
+      "<editor-shell><editor-sidebar></editor-sidebar></editor-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-statusbar/editor-statusbar.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "editor-statusbar";
+const ALLOWED_PARENTS = ["editor-shell"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EDITOR-STATUSBAR",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><editor-statusbar></editor-statusbar></div>"
+    ],
+    "clean": [
+      "<editor-shell><editor-statusbar></editor-statusbar></editor-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-toolbar/editor-toolbar.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "editor-toolbar";
+const ALLOWED_PARENTS = ["editor-shell"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EDITOR-TOOLBAR",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><editor-toolbar></editor-toolbar></div>"
+    ],
+    "clean": [
+      "<editor-shell><editor-toolbar></editor-toolbar></editor-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/embed-shell/embed-shell.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "embed-shell";
+const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EMBED-SHELL",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<col-ui><embed-shell></embed-shell></col-ui>"
+    ],
+    "clean": [
+      "<embed-shell></embed-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/feed/feed-item.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "feed-item-ui";
+const ALLOWED_PARENTS = ["feed-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FEED-ITEM-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><feed-item-ui></feed-item-ui></div>"
+    ],
+    "clean": [
+      "<feed-ui><feed-item-ui></feed-item-ui></feed-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/feed/feed.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "feed-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["feed-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FEED-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<feed-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></feed-ui>"
+    ],
+    "clean": [
+      "<feed-ui><feed-item-ui></feed-item-ui></feed-ui>",
+      "<feed-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></feed-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/fields/fields.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "fields-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["field-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FIELDS-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<fields-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></fields-ui>"
+    ],
+    "clean": [
+      "<fields-ui><field-ui></field-ui></fields-ui>",
+      "<fields-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></fields-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/footer/footer.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "footer-ui";
+const ALLOWED_PARENTS = ["page-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FOOTER-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><footer-ui></footer-ui></div>"
+    ],
+    "clean": [
+      "<page-ui><footer-ui></footer-ui></page-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/form/form-popover/form-popover.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "form-popover-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["check-ui","radio-ui","input-ui","textarea-ui","divider-ui","field-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FORM-POPOVER-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<form-popover-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></form-popover-ui>"
+    ],
+    "clean": [
+      "<form-popover-ui><check-ui></check-ui></form-popover-ui>",
+      "<form-popover-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></form-popover-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-canvas/editor-canvas.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/header/header.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "editor-canvas";
-const ALLOWED_PARENTS = ["editor-shell"];
+const TAG = "header-ui";
+const ALLOWED_PARENTS = ["page-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-EDITOR-CANVAS",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-HEADER-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><editor-canvas></editor-canvas></div>"
+      "<div><header-ui></header-ui></div>"
     ],
     "clean": [
-      "<editor-shell><editor-canvas></editor-canvas></editor-shell>"
+      "<page-ui><header-ui></header-ui></page-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-shell/editor-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/list/list-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "editor-shell";
-const ALLOWED_PARENTS = ["Surface"];
+const TAG = "list-item-ui";
+const ALLOWED_PARENTS = ["list-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-EDITOR-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-LIST-ITEM-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<col-ui><editor-shell></editor-shell></col-ui>"
+      "<div><list-item-ui></list-item-ui></div>"
     ],
     "clean": [
-      "<editor-shell></editor-shell>"
+      "<list-ui><list-item-ui></list-item-ui></list-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-sidebar/editor-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu-divider.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "editor-sidebar";
-const ALLOWED_PARENTS = ["editor-shell"];
+const TAG = "menu-divider-ui";
+const ALLOWED_PARENTS = ["menu-ui","context-menu-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-EDITOR-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-MENU-DIVIDER-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><editor-sidebar></editor-sidebar></div>"
+      "<div><menu-divider-ui></menu-divider-ui></div>"
     ],
     "clean": [
-      "<editor-shell><editor-sidebar></editor-sidebar></editor-shell>"
+      "<menu-ui><menu-divider-ui></menu-divider-ui></menu-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-statusbar/editor-statusbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "editor-statusbar";
-const ALLOWED_PARENTS = ["editor-shell"];
+const TAG = "menu-item-ui";
+const ALLOWED_PARENTS = ["menu-ui","context-menu-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-EDITOR-STATUSBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-MENU-ITEM-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><editor-statusbar></editor-statusbar></div>"
+      "<div><menu-item-ui></menu-item-ui></div>"
     ],
     "clean": [
-      "<editor-shell><editor-statusbar></editor-statusbar></editor-shell>"
+      "<menu-ui><menu-item-ui></menu-item-ui></menu-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-toolbar/editor-toolbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu-label.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "editor-toolbar";
-const ALLOWED_PARENTS = ["editor-shell"];
+const TAG = "menu-label-ui";
+const ALLOWED_PARENTS = ["menu-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-EDITOR-TOOLBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-MENU-LABEL-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><editor-toolbar></editor-toolbar></div>"
+      "<div><menu-label-ui></menu-label-ui></div>"
     ],
     "clean": [
-      "<editor-shell><editor-toolbar></editor-toolbar></editor-shell>"
+      "<menu-ui><menu-label-ui></menu-label-ui></menu-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/feed/feed-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "feed-item-ui";
-const ALLOWED_PARENTS = ["feed-ui"];
-const ALLOWED_CHILDREN = [];
+const TAG = "menu-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["menu-item-ui","menu-divider-ui","menu-label-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-FEED-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-MENU-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><feed-item-ui></feed-item-ui></div>"
+      "<menu-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></menu-ui>"
     ],
     "clean": [
-      "<feed-ui><feed-item-ui></feed-item-ui></feed-ui>"
+      "<menu-ui><menu-item-ui></menu-item-ui></menu-ui>",
+      "<menu-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></menu-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/feed/feed.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/nav-group/nav-group.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "feed-ui";
-const ALLOWED_PARENTS = [];
-const ALLOWED_CHILDREN = ["feed-item-ui"];
+const TAG = "nav-group-ui";
+const ALLOWED_PARENTS = ["nav-ui"];
+const ALLOWED_CHILDREN = ["nav-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-FEED-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-NAV-GROUP-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<feed-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></feed-ui>"
+      "<div><nav-group-ui></nav-group-ui></div>",
+      "<nav-group-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></nav-group-ui>"
     ],
     "clean": [
-      "<feed-ui><feed-item-ui></feed-item-ui></feed-ui>"
+      "<nav-ui><nav-group-ui></nav-group-ui></nav-ui>",
+      "<nav-ui><nav-group-ui><nav-item-ui></nav-item-ui></nav-group-ui></nav-ui>",
+      "<nav-ui><nav-group-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></nav-group-ui></nav-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/list/list-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/nav-item/nav-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "list-item-ui";
-const ALLOWED_PARENTS = ["list-ui"];
+const TAG = "nav-item-ui";
+const ALLOWED_PARENTS = ["nav-ui","nav-group-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-LIST-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-NAV-ITEM-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><list-item-ui></list-item-ui></div>"
+      "<div><nav-item-ui></nav-item-ui></div>"
     ],
     "clean": [
-      "<list-ui><list-item-ui></list-item-ui></list-ui>"
+      "<nav-ui><nav-item-ui></nav-item-ui></nav-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/menu/menu-divider.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/page-scroll/page-scroll.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "menu-divider-ui";
-const ALLOWED_PARENTS = ["menu-ui"];
+const TAG = "page-scroll";
+const ALLOWED_PARENTS = ["admin-content"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-MENU-DIVIDER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-PAGE-SCROLL",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><menu-divider-ui></menu-divider-ui></div>"
+      "<div><page-scroll></page-scroll></div>"
     ],
     "clean": [
-      "<menu-ui><menu-divider-ui></menu-divider-ui></menu-ui>"
+      "<admin-content><page-scroll></page-scroll></admin-content>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/menu/menu-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/radio-group/radio-group.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "menu-item-ui";
-const ALLOWED_PARENTS = ["menu-ui"];
-const ALLOWED_CHILDREN = [];
+const TAG = "radio-group-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["radio-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-MENU-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-RADIO-GROUP-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><menu-item-ui></menu-item-ui></div>"
+      "<radio-group-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></radio-group-ui>"
     ],
     "clean": [
-      "<menu-ui><menu-item-ui></menu-item-ui></menu-ui>"
+      "<radio-group-ui><radio-ui></radio-ui></radio-group-ui>",
+      "<radio-group-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></radio-group-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/menu/menu-label.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/search/search.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "menu-label-ui";
-const ALLOWED_PARENTS = ["menu-ui"];
-const ALLOWED_CHILDREN = [];
+const TAG = "search-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["input-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-MENU-LABEL-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-SEARCH-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><menu-label-ui></menu-label-ui></div>"
+      "<search-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></search-ui>"
     ],
     "clean": [
-      "<menu-ui><menu-label-ui></menu-label-ui></menu-ui>"
+      "<search-ui><input-ui></input-ui></search-ui>",
+      "<search-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></search-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/page-scroll/page-scroll.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/section/section.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "page-scroll";
-const ALLOWED_PARENTS = ["admin-content"];
+const TAG = "section-ui";
+const ALLOWED_PARENTS = ["page-ui","admin-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-PAGE-SCROLL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-SECTION-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><page-scroll></page-scroll></div>"
+      "<div><section-ui></section-ui></div>"
     ],
     "clean": [
-      "<admin-content><page-scroll></page-scroll></admin-content>"
+      "<page-ui><section-ui></section-ui></page-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/segment/segment.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/segment/segment.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2405,15 +3204,16 @@ RULES.push({
 const TAG = "segment-ui";
 const ALLOWED_PARENTS = ["segmented-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SEGMENT-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2428,7 +3228,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/segmented/segmented.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/segmented/segmented.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2436,15 +3236,16 @@ RULES.push({
 const TAG = "segmented-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["segment-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SEGMENTED-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2452,14 +3253,15 @@ RULES.push({
       "<segmented-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></segmented-ui>"
     ],
     "clean": [
-      "<segmented-ui><segment-ui></segment-ui></segmented-ui>"
+      "<segmented-ui><segment-ui></segment-ui></segmented-ui>",
+      "<segmented-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></segmented-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/simple/simple-content/simple-content.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/simple/simple-content/simple-content.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2467,15 +3269,16 @@ RULES.push({
 const TAG = "simple-content";
 const ALLOWED_PARENTS = ["simple-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-CONTENT",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2490,7 +3293,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/simple/simple-hero/simple-hero.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/simple/simple-hero/simple-hero.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2498,15 +3301,16 @@ RULES.push({
 const TAG = "simple-hero";
 const ALLOWED_PARENTS = ["simple-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-HERO",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2521,7 +3325,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/simple/simple-shell/simple-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/simple/simple-shell/simple-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2529,15 +3333,16 @@ RULES.push({
 const TAG = "simple-shell";
 const ALLOWED_PARENTS = ["Surface"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2552,7 +3357,39 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/stepper/stepper-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/skip-nav/skip-nav.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "skip-nav-ui";
+const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-SKIP-NAV-UI",
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<col-ui><skip-nav-ui></skip-nav-ui></col-ui>"
+    ],
+    "clean": [
+      "<skip-nav-ui></skip-nav-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/stepper/stepper-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2560,15 +3397,16 @@ RULES.push({
 const TAG = "stepper-item-ui";
 const ALLOWED_PARENTS = ["stepper-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-STEPPER-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2583,7 +3421,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/stepper/stepper.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/stepper/stepper.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2591,15 +3429,16 @@ RULES.push({
 const TAG = "stepper-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["stepper-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-STEPPER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2607,14 +3446,15 @@ RULES.push({
       "<stepper-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></stepper-ui>"
     ],
     "clean": [
-      "<stepper-ui><stepper-item-ui></stepper-item-ui></stepper-ui>"
+      "<stepper-ui><stepper-item-ui></stepper-item-ui></stepper-ui>",
+      "<stepper-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></stepper-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tabs/tab.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tabs/tab.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2622,15 +3462,16 @@ RULES.push({
 const TAG = "tab-ui";
 const ALLOWED_PARENTS = ["tabs-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TAB-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2645,7 +3486,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tabs/tabs.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tabs/tabs.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2653,15 +3494,16 @@ RULES.push({
 const TAG = "tabs-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["tab-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TABS-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2669,14 +3511,15 @@ RULES.push({
       "<tabs-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></tabs-ui>"
     ],
     "clean": [
-      "<tabs-ui><tab-ui></tab-ui></tabs-ui>"
+      "<tabs-ui><tab-ui></tab-ui></tabs-ui>",
+      "<tabs-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></tabs-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/timeline/timeline-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/timeline/timeline-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2684,15 +3527,16 @@ RULES.push({
 const TAG = "timeline-item-ui";
 const ALLOWED_PARENTS = ["timeline-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TIMELINE-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2707,7 +3551,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/timeline/timeline.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/timeline/timeline.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2715,15 +3559,16 @@ RULES.push({
 const TAG = "timeline-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["timeline-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TIMELINE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2731,14 +3576,15 @@ RULES.push({
       "<timeline-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></timeline-ui>"
     ],
     "clean": [
-      "<timeline-ui><timeline-item-ui></timeline-item-ui></timeline-ui>"
+      "<timeline-ui><timeline-item-ui></timeline-item-ui></timeline-ui>",
+      "<timeline-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></timeline-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/toolbar/toolbar-group.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/toolbar/toolbar-group.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2746,15 +3592,16 @@ RULES.push({
 const TAG = "toolbar-group-ui";
 const ALLOWED_PARENTS = ["toolbar-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TOOLBAR-GROUP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2769,7 +3616,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tour/tour-step.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tour/tour-step.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2777,15 +3624,16 @@ RULES.push({
 const TAG = "tour-step-ui";
 const ALLOWED_PARENTS = ["tour-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TOUR-STEP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2800,7 +3648,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tour/tour.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tour/tour.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2808,15 +3656,16 @@ RULES.push({
 const TAG = "tour-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["tour-step-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TOUR-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2824,14 +3673,15 @@ RULES.push({
       "<tour-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></tour-ui>"
     ],
     "clean": [
-      "<tour-ui><tour-step-ui></tour-step-ui></tour-ui>"
+      "<tour-ui><tour-step-ui></tour-step-ui></tour-ui>",
+      "<tour-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></tour-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tree/tree-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tree/tree-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2839,15 +3689,16 @@ RULES.push({
 const TAG = "tree-item-ui";
 const ALLOWED_PARENTS = ["tree-ui","tree-item-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TREE-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2862,7 +3713,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tree/tree.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tree/tree.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2870,15 +3721,16 @@ RULES.push({
 const TAG = "tree-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["tree-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TREE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2886,35 +3738,27 @@ RULES.push({
       "<tree-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></tree-ui>"
     ],
     "clean": [
-      "<tree-ui><tree-item-ui></tree-item-ui></tree-ui>"
+      "<tree-ui><tree-item-ui></tree-item-ui></tree-ui>",
+      "<tree-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></tree-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
 //
 // ENUM-VALUE (ADR-0108 D5): a declared enum attribute set to a value outside its manifest-declared enum (default + opt-in + internal).
 //
-// severity: 'info' here governs ONLY `npm run lint`'s bare-repo-shaped
+// severity: 'error' here governs ONLY `npm run lint`'s bare-repo-shaped
 // advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
 // (packages/plugins/adia-ui-factory/scripts/lab-posture-guard.mjs,
 // LLD-0019 C4) does not read this field — a lab-posture write denies on
 // ANY finding from these same matcher functions regardless of severity
 // (ADR-0108 D5: "PreToolUse deny... error under the lab hook").
-//
-// Demoted warn -> info (gh#2939, Kim-ruled 2026-09-03): gh#2911's G2
-// warn-triage sample found this rule's class overwhelmingly manifest
-// drift, not real authoring bugs (INTERNAL-TIER 594/1413 findings, 42%
-// of the corpus total — almost entirely shipped-and-sanctioned values
-// like button-ui[variant="primary"] the tier manifest hasn't promoted
-// to match reality). The matcher/detection logic is UNCHANGED — this is
-// a severity relabel only. Fixing the underlying manifest drift itself
-// is split out as gh#3044, not this ticket.
 
 
 const MANIFEST_SNAPSHOT = {
@@ -3252,6 +4096,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -3315,6 +4162,9 @@ const MANIFEST_SNAPSHOT = {
               }
             ]
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant",
             "values": [
@@ -4048,13 +4898,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "precision",
             "values": [
               {
-                "value": "date"
+                "value": "date",
+                "tier": "default"
               },
               {
-                "value": "minute"
+                "value": "minute",
+                "tier": "opt-in"
               },
               {
-                "value": "second"
+                "value": "second",
+                "tier": "opt-in"
               }
             ]
           },
@@ -4578,6 +5431,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -5270,7 +6127,30 @@ const MANIFEST_SNAPSHOT = {
             "name": "to"
           },
           {
-            "name": "value"
+            "name": "value",
+            "values": [
+              {
+                "value": "today"
+              },
+              {
+                "value": "7d"
+              },
+              {
+                "value": "30d"
+              },
+              {
+                "value": "90d"
+              },
+              {
+                "value": "qtd"
+              },
+              {
+                "value": "ytd"
+              },
+              {
+                "value": "custom"
+              }
+            ]
           }
         ]
       },
@@ -5403,16 +6283,19 @@ const MANIFEST_SNAPSHOT = {
             "name": "side",
             "values": [
               {
-                "value": "left"
+                "value": "left",
+                "tier": "opt-in"
               },
               {
-                "value": "right"
+                "value": "right",
+                "tier": "default"
               },
               {
                 "value": "top"
               },
               {
-                "value": "bottom"
+                "value": "bottom",
+                "tier": "opt-in"
               }
             ]
           },
@@ -5907,13 +6790,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "scale",
             "values": [
               {
-                "value": "linear"
+                "value": "linear",
+                "tier": "default"
               },
               {
-                "value": "log"
+                "value": "log",
+                "tier": "opt-in"
               },
               {
-                "value": "quantile"
+                "value": "quantile",
+                "tier": "opt-in"
               }
             ]
           },
@@ -6134,7 +7020,29 @@ const MANIFEST_SNAPSHOT = {
             "name": "text"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "info",
+                "tier": "opt-in"
+              },
+              {
+                "value": "success",
+                "tier": "opt-in"
+              },
+              {
+                "value": "warning",
+                "tier": "opt-in"
+              },
+              {
+                "value": "danger",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -6180,7 +7088,33 @@ const MANIFEST_SNAPSHOT = {
             "name": "error"
           },
           {
-            "name": "inputmode"
+            "name": "inputmode",
+            "values": [
+              {
+                "value": "text"
+              },
+              {
+                "value": "decimal"
+              },
+              {
+                "value": "numeric"
+              },
+              {
+                "value": "tel"
+              },
+              {
+                "value": "search"
+              },
+              {
+                "value": "email"
+              },
+              {
+                "value": "url"
+              },
+              {
+                "value": "none"
+              }
+            ]
           },
           {
             "name": "label"
@@ -6281,7 +7215,24 @@ const MANIFEST_SNAPSHOT = {
             "required": true
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "pending"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -6313,7 +7264,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "searchPlaceholder"
           },
           {
-            "name": "statusFilter"
+            "name": "statusFilter",
+            "values": [
+              {
+                "value": "all"
+              },
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -6355,7 +7323,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "printable"
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           }
         ]
       },
@@ -6387,7 +7372,27 @@ const MANIFEST_SNAPSHOT = {
             "name": "exportable"
           },
           {
-            "name": "filter"
+            "name": "filter",
+            "values": [
+              {
+                "value": ""
+              },
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           },
           {
             "name": "hrefPattern",
@@ -6600,7 +7605,21 @@ const MANIFEST_SNAPSHOT = {
             "name": "label"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "transparent",
+                "tier": "opt-in"
+              },
+              {
+                "value": "blur",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -7229,6 +8248,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -7434,7 +8457,15 @@ const MANIFEST_SNAPSHOT = {
             "name": "current"
           },
           {
-            "name": "cycle"
+            "name": "cycle",
+            "values": [
+              {
+                "value": "monthly"
+              },
+              {
+                "value": "annual"
+              }
+            ]
           },
           {
             "name": "cycleToggle",
@@ -10082,7 +11113,7 @@ const MANIFEST_SNAPSHOT = {
 
 RULES.push({
   id: "ENUM-VALUE",
-  severity: "info",
+  severity: "error",
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text, path = '') {
@@ -10103,12 +11134,12 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
 //
-// INTERNAL-TIER (ADR-0108 D3/D5): a declared enum value present in the manifest but tiered `internal` — reachable in source, never the intended answer for a generator or author.
+// INTERNAL-TIER (ADR-0108 D3/D5): a declared enum value present in the manifest but tiered `internal`, reachable in source, never the intended answer for a generator or author.
 //
 // severity: 'info' here governs ONLY `npm run lint`'s bare-repo-shaped
 // advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
@@ -10462,6 +11493,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -10525,6 +11559,9 @@ const MANIFEST_SNAPSHOT = {
               }
             ]
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant",
             "values": [
@@ -11258,13 +12295,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "precision",
             "values": [
               {
-                "value": "date"
+                "value": "date",
+                "tier": "default"
               },
               {
-                "value": "minute"
+                "value": "minute",
+                "tier": "opt-in"
               },
               {
-                "value": "second"
+                "value": "second",
+                "tier": "opt-in"
               }
             ]
           },
@@ -11788,6 +12828,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -12480,7 +13524,30 @@ const MANIFEST_SNAPSHOT = {
             "name": "to"
           },
           {
-            "name": "value"
+            "name": "value",
+            "values": [
+              {
+                "value": "today"
+              },
+              {
+                "value": "7d"
+              },
+              {
+                "value": "30d"
+              },
+              {
+                "value": "90d"
+              },
+              {
+                "value": "qtd"
+              },
+              {
+                "value": "ytd"
+              },
+              {
+                "value": "custom"
+              }
+            ]
           }
         ]
       },
@@ -12613,16 +13680,19 @@ const MANIFEST_SNAPSHOT = {
             "name": "side",
             "values": [
               {
-                "value": "left"
+                "value": "left",
+                "tier": "opt-in"
               },
               {
-                "value": "right"
+                "value": "right",
+                "tier": "default"
               },
               {
                 "value": "top"
               },
               {
-                "value": "bottom"
+                "value": "bottom",
+                "tier": "opt-in"
               }
             ]
           },
@@ -13117,13 +14187,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "scale",
             "values": [
               {
-                "value": "linear"
+                "value": "linear",
+                "tier": "default"
               },
               {
-                "value": "log"
+                "value": "log",
+                "tier": "opt-in"
               },
               {
-                "value": "quantile"
+                "value": "quantile",
+                "tier": "opt-in"
               }
             ]
           },
@@ -13344,7 +14417,29 @@ const MANIFEST_SNAPSHOT = {
             "name": "text"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "info",
+                "tier": "opt-in"
+              },
+              {
+                "value": "success",
+                "tier": "opt-in"
+              },
+              {
+                "value": "warning",
+                "tier": "opt-in"
+              },
+              {
+                "value": "danger",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -13390,7 +14485,33 @@ const MANIFEST_SNAPSHOT = {
             "name": "error"
           },
           {
-            "name": "inputmode"
+            "name": "inputmode",
+            "values": [
+              {
+                "value": "text"
+              },
+              {
+                "value": "decimal"
+              },
+              {
+                "value": "numeric"
+              },
+              {
+                "value": "tel"
+              },
+              {
+                "value": "search"
+              },
+              {
+                "value": "email"
+              },
+              {
+                "value": "url"
+              },
+              {
+                "value": "none"
+              }
+            ]
           },
           {
             "name": "label"
@@ -13491,7 +14612,24 @@ const MANIFEST_SNAPSHOT = {
             "required": true
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "pending"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -13523,7 +14661,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "searchPlaceholder"
           },
           {
-            "name": "statusFilter"
+            "name": "statusFilter",
+            "values": [
+              {
+                "value": "all"
+              },
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -13565,7 +14720,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "printable"
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           }
         ]
       },
@@ -13597,7 +14769,27 @@ const MANIFEST_SNAPSHOT = {
             "name": "exportable"
           },
           {
-            "name": "filter"
+            "name": "filter",
+            "values": [
+              {
+                "value": ""
+              },
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           },
           {
             "name": "hrefPattern",
@@ -13810,7 +15002,21 @@ const MANIFEST_SNAPSHOT = {
             "name": "label"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "transparent",
+                "tier": "opt-in"
+              },
+              {
+                "value": "blur",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -14439,6 +15645,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -14644,7 +15854,15 @@ const MANIFEST_SNAPSHOT = {
             "name": "current"
           },
           {
-            "name": "cycle"
+            "name": "cycle",
+            "values": [
+              {
+                "value": "monthly"
+              },
+              {
+                "value": "annual"
+              }
+            ]
           },
           {
             "name": "cycleToggle",
@@ -17313,18 +18531,23 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
 //
 // REQUIRED-ATTR (ADR-0108 D5 / gh#3221): a manifest-declared `required: true` prop with no matching attribute set on the occurrence at all.
 //
-// severity: 'warn' here governs ONLY `npm run lint`'s bare-repo-shaped
-// advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
+// severity: 'warn' here governs `npm run lint`'s bare-repo-shaped
+// advisory bank (ADR-0040 unchanged) AND the lab-posture write-time hook
 // (packages/plugins/adia-ui-factory/scripts/lab-posture-guard.mjs,
-// LLD-0019 C4) does not read this field — a lab-posture write denies on
-// ANY finding from these same matcher functions regardless of severity
+// LLD-0019 C4 amendment, gh#3236) — unlike every sibling rule in this
+// family, this one IS wired into the hook's write-time pass but never
+// denies: a finding surfaces as a non-blocking `hookSpecificOutput.
+// additionalContext` on a "allow" decision instead (conductor ruling,
+// gh#3221, 2026-09-04: "a false-positive rule never blocks authoring at
+// the keystroke"). The other four rules in this family stay severity-
+// blind at write time — ANY of their findings still denies unconditionally
 // (ADR-0108 D5: "PreToolUse deny... error under the lab hook").
 
 
@@ -17663,6 +18886,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -17726,6 +18952,9 @@ const MANIFEST_SNAPSHOT = {
               }
             ]
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant",
             "values": [
@@ -18459,13 +19688,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "precision",
             "values": [
               {
-                "value": "date"
+                "value": "date",
+                "tier": "default"
               },
               {
-                "value": "minute"
+                "value": "minute",
+                "tier": "opt-in"
               },
               {
-                "value": "second"
+                "value": "second",
+                "tier": "opt-in"
               }
             ]
           },
@@ -18989,6 +20221,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -19681,7 +20917,30 @@ const MANIFEST_SNAPSHOT = {
             "name": "to"
           },
           {
-            "name": "value"
+            "name": "value",
+            "values": [
+              {
+                "value": "today"
+              },
+              {
+                "value": "7d"
+              },
+              {
+                "value": "30d"
+              },
+              {
+                "value": "90d"
+              },
+              {
+                "value": "qtd"
+              },
+              {
+                "value": "ytd"
+              },
+              {
+                "value": "custom"
+              }
+            ]
           }
         ]
       },
@@ -19814,16 +21073,19 @@ const MANIFEST_SNAPSHOT = {
             "name": "side",
             "values": [
               {
-                "value": "left"
+                "value": "left",
+                "tier": "opt-in"
               },
               {
-                "value": "right"
+                "value": "right",
+                "tier": "default"
               },
               {
                 "value": "top"
               },
               {
-                "value": "bottom"
+                "value": "bottom",
+                "tier": "opt-in"
               }
             ]
           },
@@ -20318,13 +21580,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "scale",
             "values": [
               {
-                "value": "linear"
+                "value": "linear",
+                "tier": "default"
               },
               {
-                "value": "log"
+                "value": "log",
+                "tier": "opt-in"
               },
               {
-                "value": "quantile"
+                "value": "quantile",
+                "tier": "opt-in"
               }
             ]
           },
@@ -20545,7 +21810,29 @@ const MANIFEST_SNAPSHOT = {
             "name": "text"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "info",
+                "tier": "opt-in"
+              },
+              {
+                "value": "success",
+                "tier": "opt-in"
+              },
+              {
+                "value": "warning",
+                "tier": "opt-in"
+              },
+              {
+                "value": "danger",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -20591,7 +21878,33 @@ const MANIFEST_SNAPSHOT = {
             "name": "error"
           },
           {
-            "name": "inputmode"
+            "name": "inputmode",
+            "values": [
+              {
+                "value": "text"
+              },
+              {
+                "value": "decimal"
+              },
+              {
+                "value": "numeric"
+              },
+              {
+                "value": "tel"
+              },
+              {
+                "value": "search"
+              },
+              {
+                "value": "email"
+              },
+              {
+                "value": "url"
+              },
+              {
+                "value": "none"
+              }
+            ]
           },
           {
             "name": "label"
@@ -20692,7 +22005,24 @@ const MANIFEST_SNAPSHOT = {
             "required": true
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "pending"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -20724,7 +22054,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "searchPlaceholder"
           },
           {
-            "name": "statusFilter"
+            "name": "statusFilter",
+            "values": [
+              {
+                "value": "all"
+              },
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -20766,7 +22113,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "printable"
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           }
         ]
       },
@@ -20798,7 +22162,27 @@ const MANIFEST_SNAPSHOT = {
             "name": "exportable"
           },
           {
-            "name": "filter"
+            "name": "filter",
+            "values": [
+              {
+                "value": ""
+              },
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           },
           {
             "name": "hrefPattern",
@@ -21011,7 +22395,21 @@ const MANIFEST_SNAPSHOT = {
             "name": "label"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "transparent",
+                "tier": "opt-in"
+              },
+              {
+                "value": "blur",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -21640,6 +23038,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -21845,7 +23247,15 @@ const MANIFEST_SNAPSHOT = {
             "name": "current"
           },
           {
-            "name": "cycle"
+            "name": "cycle",
+            "values": [
+              {
+                "value": "monthly"
+              },
+              {
+                "value": "annual"
+              }
+            ]
           },
           {
             "name": "cycleToggle",
@@ -24513,7 +25923,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
@@ -24788,6 +26198,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -24827,6 +26240,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "size"
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant"
           }
@@ -25380,6 +26796,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -27129,6 +28549,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -28963,7 +30387,131 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
+// Rebuild: node scripts/build/gen-lab-posture-rules.mjs
+// Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
+//
+// UNKNOWN-SLOT (gh#3222): a `slot="…"` value that is not a slot name any component in the installed manifest declares. Name only, never placement: see trimForEmbed's own `slot-names` branch for why there is no per-tag/nearest-ancestor check.
+//
+// severity: 'error' here governs ONLY `npm run lint`'s bare-repo-shaped
+// advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
+// (packages/plugins/adia-ui-factory/scripts/lab-posture-guard.mjs,
+// LLD-0019 C4) does not read this field — a lab-posture write denies on
+// ANY finding from these same matcher functions regardless of severity
+// (ADR-0108 D5: "PreToolUse deny... error under the lab hook").
+
+
+const MANIFEST_SNAPSHOT = {
+    "slotNames": [
+      "action",
+      "action-leading",
+      "actions",
+      "actions-leading",
+      "add",
+      "after",
+      "after-invoice-history",
+      "aside",
+      "attach",
+      "badge",
+      "bar",
+      "before",
+      "before-plan-picker",
+      "body",
+      "breadcrumb",
+      "canvas",
+      "caption",
+      "caret",
+      "change",
+      "chart",
+      "charts",
+      "chip",
+      "chrome",
+      "cite",
+      "close",
+      "complete",
+      "content",
+      "copy",
+      "cursor",
+      "customer-block",
+      "default",
+      "description",
+      "digit",
+      "empty",
+      "error",
+      "eyebrow",
+      "footer",
+      "header",
+      "header-actions",
+      "heading",
+      "hint",
+      "icon",
+      "icon-trailing",
+      "image",
+      "kpis",
+      "label",
+      "leading",
+      "lede",
+      "legal",
+      "loading",
+      "media",
+      "meta",
+      "model",
+      "name",
+      "off",
+      "on",
+      "panel",
+      "popover",
+      "prefix",
+      "presets",
+      "primary",
+      "remit-to-block",
+      "scope",
+      "secondary",
+      "send",
+      "skeleton",
+      "status",
+      "subtitle",
+      "suffix",
+      "summary",
+      "table",
+      "text",
+      "time",
+      "title",
+      "toolbar",
+      "track",
+      "trailing",
+      "trigger",
+      "value",
+      "zoom"
+    ]
+  };
+
+
+RULES.push({
+  id: "UNKNOWN-SLOT",
+  severity: "error",
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text, path = '') {
+    return slotNameFindings(text, MANIFEST_SNAPSHOT, path).map((f) => ({ line: f.line, snippet: f.snippet, why: f.why }));
+  },
+  fix: null, // a manifest-drift violation names the correction in its own diagnostic; applying it is a judgment call the agent makes, not a mechanical rewrite
+  fixtures: {
+    "smelly": [
+      "<span slot=\"not-a-real-slot-name\"></span>"
+    ],
+    "clean": [
+      "<span slot=\"action\"></span>",
+      "<span slot=\"${s.section}\"></span>",
+      "<span slot=\"{s.section}\"></span>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
@@ -30580,6 +32128,99 @@ RULES.push({
 {
 
 
+// gh#3627 (follow-up to gh#3604): select-ui's avatar `<img>` shipped with no
+// width/height HTML attributes, sizing purely dependent on select.css's own
+// rule loading before first paint. select.css already carried explicit
+// width/height on that selector (packages/web-components/components/select/
+// select.css's `img[data-option-avatar]` rule), nothing was wrong with the
+// CSS. The gap was the OTHER half of the contract: an `<img>` stamped by a
+// component's own render logic needs its own width/height (or an inline
+// aspect-ratio) so the box is reserved from HTML parse time, independent of
+// when that component's stylesheet actually applies (a per-route CSS bundle
+// can arrive after first paint, gh#3357). gh#3604's fix added exactly that
+// to the three template-literal `<img>` sites in select.class.js; this rule
+// keeps a fourth one from shipping the same way.
+//
+// Scope, deliberately narrow: ONLY a literal `<img ...>` tag authored
+// inside a JS template-literal/string in packages/web-components or
+// packages/web-modules, the shape that actually regressed. Three things
+// this rule does NOT catch, on purpose:
+//   1. `document.createElement('img')` call sites (avatar.class.js,
+//      image.class.js, integration-card.class.js), each of those adopts
+//      the img into a host element that already carries its own explicit
+//      size (avatar-ui's :host sizing tokens, image-ui's own #applySize(),
+//      a fixed-size logo slot), so the box is reserved by the PARENT
+//      regardless of the img's own attributes. Flagging every
+//      createElement('img') would nag on a legitimate, already-reserved
+//      pattern this framework uses on purpose, exactly the "sized by a
+//      parent's grid cell" false positive this rule is written to avoid.
+//   2. Demo/example/gallery markup (`.html`, `.yaml` examples, `.a2ui.json`),
+//      illustrative content already exempt from render-timing concerns
+//      (HARDCODED-OPEN's `.examples.html` precedent is the same reasoning).
+//   3. `apps/`, `playgrounds/`, `catalog/`, consumer/demo surfaces, not
+//      framework source. NO-LOCAL-ESCAPE-HTML (gh#3641/gh#3678) is the
+//      precedent for widening a framework-scoped rule to a consumer tree
+//      only once a ticket finds and migrates a real instance there; no such
+//      instance exists for this rule yet.
+// An author who has a real reason an img here doesn't need its own box
+// (e.g. deliberately sized by an ancestor CSS grid/flex cell) can still
+// suppress a specific finding with the standard engine-wide
+// adia-lint-disable comment (SUPPRESS_RE/suppressionFor, primitives.mjs).
+//
+// Known imprecision (documented, not fixed here): like every other
+// CODE_EXT rule in this bank, comment-stripping is line-based and doesn't
+// understand string literals, so a hardcoded `src="https://..."` URL on
+// the SAME source line as `width=`/`height=` would truncate the line at
+// `//` and could false-positive. Every real instance in this corpus today
+// interpolates `src` from a variable (`src="${escapeHTML(x)}"`), not a
+// literal URL, so this hasn't triggered in practice; a literal `//` URL
+// sharing a line with the dimension attributes is the one shape to watch
+// for in review.
+const IMG_TAG_RE = /<img\b[^>]*?>/gis;
+const HAS_WIDTH = /\bwidth\s*=/i;
+const HAS_HEIGHT = /\bheight\s*=/i;
+const HAS_ASPECT_RATIO = /aspect-ratio\s*:/i;
+const CORPUS_PATH_RE = /packages[\\/](web-components|web-modules)[\\/]/;
+
+
+RULES.push({
+  id: 'IMG-DIMENSION-RESERVE',
+  severity: 'error',
+  scope: 'shared',
+  fileTypes: CODE_EXT,
+  match(text, path) {
+    const out = [];
+    const normalized = (path || '').replace(/\\/g, '/');
+    if (!CORPUS_PATH_RE.test(normalized)) return out;
+    if (normalized.endsWith('.test.js')) return out;
+
+    const rawLines = text.split('\n');
+    const blanked = stripCommentLines(text, ext(path))
+      .map((l) => l.stripped)
+      .join('\n');
+
+    IMG_TAG_RE.lastIndex = 0;
+    let m;
+    while ((m = IMG_TAG_RE.exec(blanked))) {
+      const tag = m[0];
+      if ((HAS_WIDTH.test(tag) && HAS_HEIGHT.test(tag)) || HAS_ASPECT_RATIO.test(tag)) continue;
+      const lineNo = lineOf(blanked, m.index);
+      out.push({
+        line: lineNo,
+        snippet: (rawLines[lineNo - 1] || tag).trim().slice(0, 90),
+        why: 'an <img> stamped by component render logic needs its own width/height (or an inline aspect-ratio) so the box is reserved before CSS applies (gh#3604 CLS)',
+      });
+    }
+    return out;
+  },
+});
+}
+
+{
+
+
+const SHELLS = new Set(['admin-shell', 'chat-shell', 'editor-shell', 'app-shell-ui', 'adia-chat-ui', 'adia-editor-ui']);
+
 
 RULES.push({
   id: 'LEGACY-SHELL',
@@ -30587,18 +32228,50 @@ RULES.push({
   scope: 'shared',
   fileTypes: [],
   match(text, path) {
-    const out = [];
-    for (const { lineNo, raw, stripped } of stripCommentLines(text, ext(path))) {
-      if (!stripped.trim()) continue;
-      if (RE.LEGACY_SHELL.test(stripped)) {
-        out.push({
-          line: lineNo,
-          snippet: raw.trim().slice(0, 90),
-          why: 'retired shell shape (ADR-0024, v0.4.0) — use the bespoke tag (chat-thread / chat-composer / chat-empty · admin-sidebar / admin-command · editor-canvas · pane-ui)',
-        });
+    // Component yaml contains contract prose and A2UI JSON, not live HTML.
+    // Match syntax in source rather than retirement examples or name prefixes.
+    const fileExt = ext(path);
+    if (YAML_EXT.includes(fileExt)) return [];
+    const lines = stripCommentLines(text, fileExt);
+    const source = markupScanSurface(lines.map(({ stripped }) => stripped).join('\n'));
+    const found = new Set();
+    for (const { attrs, tag, line } of tagOccurrences(source, path)) {
+      if (Object.keys(attrs).some((name) => RE.LEGACY_SHELL.test(name)) ||
+          (tag === 'dialog' && Object.hasOwn(attrs, 'data-command'))) found.add(line);
+    }
+    // aside-ui remains a supported in-page slot stub. Only its use as a
+    // shell region is retired; native wrappers preserve that shell context.
+    for (const { tag, parentTag, line } of tagTree(source, path)) {
+      if (tag === 'aside-ui' && SHELLS.has(parentTag)) found.add(line);
+    }
+    const referenceSurfaces = [];
+    if (CODE_EXT.includes(fileExt) || STYLE_EXT.includes(fileExt)) {
+      referenceSurfaces.push({ text: source, line: 1 });
+    } else {
+      // Inline executable blocks need the same coverage as separate files.
+      // Scan their bodies only, so selectors quoted in page prose stay clean.
+      for (const block of source.matchAll(/<(script|style)\b[^>]*>([\s\S]*?)<\/\1\s*>/gi)) {
+        const start = block.index + block[0].indexOf('>') + 1;
+        const body = stripCommentLines(block[2], block[1].toLowerCase() === 'script' ? '.js' : '.css')
+          .map(({ stripped }) => stripped).join('\n');
+        referenceSurfaces.push({ text: body, line: lineOf(source, start) });
       }
     }
-    return out;
+    // Keep selector reads and DOM attribute writes covered as well as
+    // markup. Exact attribute names preserve unrelated namespaced hooks.
+    const references = /\[\s*([\w-]+)(?=[\s\]=~|^$*])|\b(?:setAttribute|getAttribute|hasAttribute|removeAttribute|toggleAttribute)\s*\(\s*['"]([\w-]+)['"]/g;
+    for (const surface of referenceSurfaces) {
+      for (const match of surface.text.matchAll(references)) {
+        if (RE.LEGACY_SHELL.test(match[1] || match[2])) {
+          found.add(surface.line + lineOf(surface.text, match.index) - 1);
+        }
+      }
+    }
+    return [...found].sort((a, b) => a - b).map((line) => ({
+      line,
+      snippet: lines[line - 1].raw.trim().slice(0, 90),
+      why: 'retired shell shape (ADR-0024, v0.4.0): use the bespoke tag (chat-thread / chat-composer / chat-empty · admin-sidebar / admin-command · editor-canvas · pane-ui)',
+    }));
   },
 });
 }
@@ -30682,6 +32355,66 @@ RULES.push({
 {
 
 
+// gh#3641: escapeHTML was independently defined seven times across the
+// framework corpus (six components plus chat-shell, one of the seven
+// spelled `escapeHtml`, case varies, tour.class.js, three of the seven
+// leaving quotes unescaped (an attribute-breakout XSS vector). The
+// shared, quote-safe implementation now lives at
+// packages/web-components/core/html-escape.js; this rule refuses a new
+// local `function escapeHtml(`/`escapeHTML(` (any casing) inside the
+// framework corpus (packages/web-components, packages/web-modules) so
+// the fix cannot re-fragment the way it already did once (twice: the
+// original 5-variant fragmentation, then a 7th instance under a
+// different casing that a case-sensitive first version of this very
+// rule could not see). Case-insensitive on purpose: the defect class is
+// "a local escapeHTML-shaped helper", not one exact spelling.
+// gh#3678: five more local copies turned up in apps/ (construct-canvas,
+// genui), two of them quote-unsafe, the same attribute-breakout defect
+// class this rule was written for. This scope note previously said
+// consumer app code was exempt because it "owns its own copy of a value
+// this small", that call was reversed by conductor ruling (gh#3678
+// resolution 2: migrate, not wontfix), so CORPUS_PATH_RE now also
+// matches apps/. playgrounds/ and catalog/ remain out of scope until a
+// ticket similarly finds and migrates a local copy there.
+// `declare function` is a .d.ts ambient signature, not a re-implementation:
+// html-escape.d.ts's own `export declare function escapeHTML(...)` must
+// not flag itself. Only a real function body is the defect this rule
+// exists for. The lookbehind requires `\s+` (one or more), not `\s`
+// (exactly one), so `declare  function` (extra space) or a line break
+// between the two keywords still exempts the ambient signature.
+const LOCAL_DEF_RE = /(?<!declare\s+)\bfunction\s+escapeHtml\s*\(/i;
+const OWNER_PATH_RE = /packages[\\/]web-components[\\/]core[\\/]html-escape\.(js|d\.ts)$/;
+const CORPUS_PATH_RE = /(?:packages[\\/](web-components|web-modules)|(?:^|[\\/])apps)[\\/]/;
+
+
+RULES.push({
+  id: 'NO-LOCAL-ESCAPE-HTML',
+  severity: 'error',
+  scope: 'shared',
+  fileTypes: CODE_EXT,
+  match(text, path) {
+    const out = [];
+    const normalized = path.replace(/\\/g, '/');
+    if (!CORPUS_PATH_RE.test(normalized)) return out;
+    if (OWNER_PATH_RE.test(normalized)) return out;
+    for (const { lineNo, raw, stripped } of stripCommentLines(text, ext(path))) {
+      if (!stripped.trim()) continue;
+      if (LOCAL_DEF_RE.test(stripped)) {
+        out.push({
+          line: lineNo,
+          snippet: raw.trim().slice(0, 90),
+          why: 'do not redefine escapeHTML locally, import { escapeHTML } from the core barrel (packages/web-components/core/html-escape.js), gh#3641',
+        });
+      }
+    }
+    return out;
+  },
+});
+}
+
+{
+
+
 // Parity with the two retired scripts: forge-lint recognized only
 // `forge-lint: foundation`, adia-lint only `adia-lint: foundation` — never
 // either tag under the other script. Since this rule is shared, the active