@adia-ai/adia-ui-forge 0.8.59 → 0.8.61

package/scripts/lint-rules.generated.mjs

@@ -1,5 +1,5 @@
-// GENERATED — do not hand-edit. Sources:
-//   scripts/lint/engine/primitives.mjs, scripts/lint/engine/run.mjs
+// GENERATED, do not hand-edit. Sources:
+//   scripts/lint/engine/primitives.mjs, scripts/lint/engine/run.mjs, scripts/lint/engine/baseline.mjs
 //   scripts/lint/rules/consumer/genui-doc.mjs
 //   scripts/lint/rules/consumer/hardcoded-open.mjs
 //   scripts/lint/rules/consumer/llm-key-in-client.mjs
@@ -13,11 +13,16 @@
 //   scripts/lint/rules/generated/composition/action-list.mjs
 //   scripts/lint/rules/generated/composition/admin-command.mjs
 //   scripts/lint/rules/generated/composition/admin-content.mjs
-//   scripts/lint/rules/generated/composition/admin-scroll.mjs
+//   scripts/lint/rules/generated/composition/admin-entity-item.mjs
+//   scripts/lint/rules/generated/composition/admin-roster.mjs
+//   scripts/lint/rules/generated/composition/admin-settings.mjs
 //   scripts/lint/rules/generated/composition/admin-shell.mjs
 //   scripts/lint/rules/generated/composition/admin-sidebar.mjs
 //   scripts/lint/rules/generated/composition/admin-statusbar.mjs
 //   scripts/lint/rules/generated/composition/admin-topbar.mjs
+//   scripts/lint/rules/generated/composition/agent-admin.mjs
+//   scripts/lint/rules/generated/composition/avatar-group.mjs
+//   scripts/lint/rules/generated/composition/chat-composer.mjs
 //   scripts/lint/rules/generated/composition/chat-empty.mjs
 //   scripts/lint/rules/generated/composition/chat-header.mjs
 //   scripts/lint/rules/generated/composition/chat-shell.mjs
@@ -34,18 +39,30 @@
 //   scripts/lint/rules/generated/composition/editor-sidebar.mjs
 //   scripts/lint/rules/generated/composition/editor-statusbar.mjs
 //   scripts/lint/rules/generated/composition/editor-toolbar.mjs
+//   scripts/lint/rules/generated/composition/embed-shell.mjs
 //   scripts/lint/rules/generated/composition/feed-item.mjs
 //   scripts/lint/rules/generated/composition/feed.mjs
+//   scripts/lint/rules/generated/composition/fields.mjs
+//   scripts/lint/rules/generated/composition/footer.mjs
+//   scripts/lint/rules/generated/composition/form-popover.mjs
+//   scripts/lint/rules/generated/composition/header.mjs
 //   scripts/lint/rules/generated/composition/list-item.mjs
 //   scripts/lint/rules/generated/composition/menu-divider.mjs
 //   scripts/lint/rules/generated/composition/menu-item.mjs
 //   scripts/lint/rules/generated/composition/menu-label.mjs
+//   scripts/lint/rules/generated/composition/menu.mjs
+//   scripts/lint/rules/generated/composition/nav-group.mjs
+//   scripts/lint/rules/generated/composition/nav-item.mjs
 //   scripts/lint/rules/generated/composition/page-scroll.mjs
+//   scripts/lint/rules/generated/composition/radio-group.mjs
+//   scripts/lint/rules/generated/composition/search.mjs
+//   scripts/lint/rules/generated/composition/section.mjs
 //   scripts/lint/rules/generated/composition/segment.mjs
 //   scripts/lint/rules/generated/composition/segmented.mjs
 //   scripts/lint/rules/generated/composition/simple-content.mjs
 //   scripts/lint/rules/generated/composition/simple-hero.mjs
 //   scripts/lint/rules/generated/composition/simple-shell.mjs
+//   scripts/lint/rules/generated/composition/skip-nav.mjs
 //   scripts/lint/rules/generated/composition/stepper-item.mjs
 //   scripts/lint/rules/generated/composition/stepper.mjs
 //   scripts/lint/rules/generated/composition/tab.mjs
@@ -61,6 +78,7 @@
 //   scripts/lint/rules/generated/lab-posture/internal-tier.mjs
 //   scripts/lint/rules/generated/lab-posture/required-attr.mjs
 //   scripts/lint/rules/generated/lab-posture/unknown-attr.mjs
+//   scripts/lint/rules/generated/lab-posture/unknown-slot.mjs
 //   scripts/lint/rules/generated/lab-posture/unknown-tag.mjs
 //   scripts/lint/rules/genui-output/anti-patterns.mjs
 //   scripts/lint/rules/shared/attr-typo.mjs
@@ -69,8 +87,10 @@
 //   scripts/lint/rules/shared/dead-font-token.mjs
 //   scripts/lint/rules/shared/example-id-grammar.mjs
 //   scripts/lint/rules/shared/example-prop-contract.mjs
+//   scripts/lint/rules/shared/img-dimension-reserve.mjs
 //   scripts/lint/rules/shared/legacy-shell.mjs
 //   scripts/lint/rules/shared/native-primitive.mjs
+//   scripts/lint/rules/shared/no-local-escape-html.mjs
 //   scripts/lint/rules/shared/raw-color.mjs
 //   scripts/lint/rules/shared/raw-px.mjs
 //   scripts/lint/rules/shared/scope-extent.mjs
@@ -198,8 +218,24 @@ function lineOf(text, offset) {
   return n;
 }
 
-/** Suppression comment recognized on the line itself or the line before a finding. */
-const SUPPRESS_RE = /\/\*\s*adia-lint-disable\s+([A-Z0-9-]+)(?:\s*—\s*(.*?))?\s*\*\//;
+/**
+ * Suppression comment recognized on the line itself or the line before a finding.
+ *
+ * gh#3715: the reason separator accepts an em dash, a colon, or a
+ * space-padded hyphen. It used to accept ONLY the em dash, which collided
+ * head-on with `check:em-dash-added-lines` (gh#3767): that gate forbids an
+ * em dash on any added line, so obeying it made a reasoned suppression
+ * impossible to write. Worse, the failure was silent rather than loud. A
+ * hyphen did not merely lose the reason, it made the WHOLE directive fail
+ * to match, so the suppression quietly did nothing and the finding stayed
+ * live with no diagnostic anywhere.
+ *
+ * The hyphen form requires whitespace on both sides. Rule ids contain
+ * hyphens themselves (SHELL-RESIZE), and the id class is greedy, so a bare
+ * `-` with no padding would be ambiguous with the id it follows.
+ */
+const SUPPRESS_RE =
+  /\/\*\s*adia-lint-disable\s+([A-Z0-9-]+)(?:(?:\s*[\u2014:]\s*|\s+-\s+)(.*?))?\s*\*\//;
 
 /** Given all raw lines and a finding's line number, is it suppressed, and was a reason given? */
 function suppressionFor(rawLines, lineNo, ruleId) {
@@ -230,6 +266,47 @@ function allSuppressions(rawLines) {
   return out;
 }
 
+/**
+ * Loose match for anything that READS as a suppression-directive comment:
+ * opens `/* adia-lint-disable`, closes on the same line, regardless of
+ * whether its body satisfies SUPPRESS_RE's own strict grammar. Deliberately
+ * permissive: the only anchor is the shared prefix both regexes start on,
+ * so any separator/id/reason shape SUPPRESS_RE would refuse still gets
+ * caught here.
+ */
+const LOOSE_SUPPRESS_RE = /\/\*\s*adia-lint-disable\b.*?\*\//g;
+
+/**
+ * gh#4161: SUPPRESS_RE is both matcher and detector, so a directive it
+ * refuses produces no suppression, no SUPPRESS-NO-REASON, and no
+ * diagnostic anywhere, silently invisible. gh#3868 fixed the hyphen-
+ * separator case and gh#3871 swept existing inert directives; neither
+ * closed the general class. This is the loose scan that closes it: every
+ * candidate suppression-directive comment (per LOOSE_SUPPRESS_RE above)
+ * that the STRICT regex refuses to parse, one entry per hit, naming the
+ * line and a trimmed snippet, so the engine (run.mjs) can turn each into a
+ * SUPPRESS-MALFORMED (warn) finding.
+ *
+ * `strictRe` is injectable (defaults to the live SUPPRESS_RE) so a test can
+ * prove this scan against a narrower, superseded grammar too, e.g.
+ * gh#3868's own pre-fix, em-dash-only regex, not only today's.
+ */
+function malformedSuppressions(rawLines, strictRe = SUPPRESS_RE) {
+  const out = [];
+  rawLines.forEach((line, idx) => {
+    LOOSE_SUPPRESS_RE.lastIndex = 0;
+    let m;
+    while ((m = LOOSE_SUPPRESS_RE.exec(line))) {
+      const candidate = m[0];
+      const re = new RegExp(strictRe.source);
+      if (!re.test(candidate)) {
+        out.push({ lineNo: idx + 1, snippet: candidate.trim().slice(0, 90) });
+      }
+    }
+  });
+  return out;
+}
+
 const RE = {
   HEXCOLOR: /#[0-9a-fA-F]{3,8}\b/,
   FUNCCOLOR: /\b(?:rgba?|hsla?|oklch|oklab|lab|lch)\s*\(/,
@@ -238,12 +315,17 @@ const RE = {
   BOOL_TRUE: /\bdefault:\s*true\b/,
   ATTR_TYPO: /\battr:\s*['"]/,
   NATIVE_PRIMITIVE: /<(?:button|input|select|textarea|dialog)(?![\w-])/,
-  LEGACY_SHELL: /data-chat-(?:messages|input|empty|name)|data-editor-body|data-canvas\b|data-sidebar=|data-pane-(?:side|grow)|<aside-ui\b|<dialog\s+data-command/,
+  LEGACY_SHELL: /^(?:data-chat-(?:messages|input|empty|name)|data-editor-body|data-canvas|data-sidebar|data-pane-(?:side|grow))$/,
   PX_GE: /(?<![\w.-])(\d+)px\b/g,
   SELECTOR_RULE: /^\s*[.#:[&\w][^{}\n]*\{/m,
   SSR_SIGNAL: /['"]use client['"]|\buseEffect\b|\bonMounted\b|\bonMount\b|from\s+['"](?:react|vue|svelte|next|nuxt|@sveltejs|astro)|getServerSideProps|defineNuxtComponent/i,
   TOPLEVEL_IMPORT: /^\s*import\s+['"]@adia-ai\/web-components['"]\s*;?\s*$/m,
   OVERLAY_OPEN: /<(?:modal|drawer)-ui\b[^>]*?(?<![:.\w])\bopen\b(?!\s*=\s*\{)/,
+  // gh#3888: a real @scope at-rule opening, never a bare substring match
+  // on the word "@scope" (which also matches prose in a comment, the
+  // exact loophole this fixes: MISSING-SCOPE's old `text.includes('@scope')`
+  // passed any file whose comments merely mentioned the word).
+  SCOPE_BLOCK: /@scope\s*\(/,
 };
 
 /** Per-declaration split on `;` — mirrors both Python scripts' `line.split(';')` loops. */
@@ -385,9 +467,18 @@ const VOID_TAGS = new Set([
  * are flushed as-is) so a small fixture snippet never throws.
  *
  * Returns one node per open (or self-closing/void) tag, in document
- * order: `{ tag, parentTag, line, childTags }` — `parentTag` is `'ROOT'`
- * for a top-level occurrence (the A2UI "Surface" case), `childTags` is
- * the ordered list of direct-child tag names only (not descendants).
+ * order: `{ tag, parentTag, line, childTags }`. `parentTag` is the
+ * nearest CUSTOM-ELEMENT ancestor (gh#3310) — the stack is walked from
+ * the top down past any native, non-hyphenated wrapper tag (`section`,
+ * `div`, `td`, `tr`, `tbody`, ...; the Custom Elements naming
+ * requirement means no native HTML tag is ever hyphenated, so "contains
+ * a hyphen" is the discriminator, not an allowlist) to the first
+ * hyphenated frame, and is `'ROOT'` if the walk empties the stack
+ * without finding one (the A2UI "Surface" case). `childTags` is the
+ * ordered list of DIRECT children only (not descendants, and not
+ * ancestor-walked — `allowedChildren` matching stays direct-children-only),
+ * each a `{ tag, slot }` pair (`slot` is `null` for a default-slot child —
+ * gh#3308, compositionFindings' own slot-aware allowedChildren check).
  *
  * gh#2937: `makeLinter`'s `lintText` calls every active rule's `match()`
  * with the SAME `text` string for one file — and each of the ~48
@@ -401,16 +492,34 @@ const VOID_TAGS = new Set([
  * the next file is a single cache miss that recomputes and replaces
  * the slot — no manual invalidation, no unbounded growth.
  */
-let _tagTreeCache = { text: null, nodes: null };
-function tagTree(text) {
-  if (_tagTreeCache.text === text) return _tagTreeCache.nodes;
+// gh#3310: the Custom Elements spec requires a hyphen in every custom
+// tag name, so "contains a hyphen" is a definitional discriminator for
+// "is a catalog component" — no native HTML tag is ever hyphenated, and
+// no allowlist of "transparent" wrapper tags needs maintaining.
+function nearestCustomElementAncestor(stack) {
+  for (let i = stack.length - 1; i >= 0; i -= 1) {
+    if (stack[i].tag.includes('-')) return stack[i].tag;
+  }
+  return 'ROOT';
+}
+
+let _tagTreeCache = { text: null, path: null, nodes: null };
+// gh#3492: scans `markupScanSurface(text, path)`'s blanked output, not raw
+// `text`. A `<!-- ... -->` comment naming a real tag in prose (a
+// "Pattern source:" doc header) was previously read as live markup, and
+// the comment's missing closing tag left every REAL element after it
+// folded into a phantom nesting context. Blanking (not deleting) keeps
+// line numbers aligned, same guarantee `tagOccurrences` already relies on.
+function tagTree(text, path = '') {
+  if (_tagTreeCache.text === text && _tagTreeCache.path === path) return _tagTreeCache.nodes;
+  const surface = markupScanSurface(text, path);
   const nodes = [];
-  const stack = []; // { tag, parentTag, line, children: string[] }
+  const stack = []; // { tag, parentTag, line, children: {tag, slot}[] }
   TAG_TOKEN_RE.lastIndex = 0;
   let m;
-  while ((m = TAG_TOKEN_RE.exec(text))) {
-    const [, closing, tag, , selfClose] = m;
-    const line = lineOf(text, m.index);
+  while ((m = TAG_TOKEN_RE.exec(surface))) {
+    const [, closing, tag, attrString, selfClose] = m;
+    const line = lineOf(surface, m.index);
     if (closing) {
       let at = -1;
       for (let i = stack.length - 1; i >= 0; i -= 1) {
@@ -422,8 +531,8 @@ function tagTree(text) {
       stack.length = at; // pop this frame and any unclosed frames above it
       continue;
     }
-    const parentTag = stack.length ? stack[stack.length - 1].tag : 'ROOT';
-    if (stack.length) stack[stack.length - 1].children.push(tag);
+    const parentTag = nearestCustomElementAncestor(stack);
+    if (stack.length) stack[stack.length - 1].children.push({ tag, slot: parseAttrs(attrString).slot ?? null });
     if (selfClose || VOID_TAGS.has(tag.toLowerCase())) {
       nodes.push({ tag, parentTag, line, childTags: [] });
     } else {
@@ -434,7 +543,7 @@ function tagTree(text) {
     const frame = stack.pop();
     nodes.push({ tag: frame.tag, parentTag: frame.parentTag, line: frame.line, childTags: frame.children });
   }
-  _tagTreeCache = { text, nodes };
+  _tagTreeCache = { text, path, nodes };
   return nodes;
 }
 
@@ -446,10 +555,26 @@ function tagTree(text) {
  * string/tree matcher with no registry lookup at match-time, same as
  * every other rule). The reserved catalog name `'Surface'` in
  * `allowedParents` matches a `parentTag === 'ROOT'` occurrence.
+ *
+ * gh#3308: `allowedChildren` applies to default-slot children only — a
+ * child carrying ANY `slot=` attribute (menu-ui's `slot=trigger`,
+ * context-menu-ui's wrap-mode target) is a sibling-level named slot whose
+ * content is deliberately unconstrained by the component's own source, not
+ * a default-slot member subject to the roster check. `allowedChildrenBySlot`
+ * is the opt-in per-slot roster for the rare case a named slot DOES want
+ * constraining — a slot absent from that map (or the map itself absent)
+ * stays exempt by design, same as an unconstrained default slot.
+ *
+ * gh#3492: `path` is optional and defaults to `''`. Every current caller
+ * (the generated `COMPOSITION-*` rules) has no path to give, and doesn't
+ * need one: `tagTree()`'s HTML-comment blanking runs unconditionally
+ * regardless of path, only its `.vue`-template scoping depends on it.
  */
-function compositionFindings(text, { tag, allowedParents, allowedChildren }) {
+function compositionFindings(text, { tag, allowedParents, allowedChildren, allowedChildrenBySlot, path = '' }) {
   const out = [];
-  for (const node of tagTree(text)) {
+  const hasChildRule = (allowedChildren && allowedChildren.length)
+    || (allowedChildrenBySlot && Object.keys(allowedChildrenBySlot).length);
+  for (const node of tagTree(text, path)) {
     if (node.tag !== tag) continue;
     if (allowedParents && allowedParents.length) {
       const parentOk = node.parentTag === 'ROOT'
@@ -464,13 +589,26 @@ function compositionFindings(text, { tag, allowedParents, allowedChildren }) {
         });
       }
     }
-    if (allowedChildren && allowedChildren.length) {
+    if (hasChildRule) {
       for (const child of node.childTags) {
-        if (!allowedChildren.includes(child)) {
+        if (child.slot) {
+          const slotAllowed = allowedChildrenBySlot && allowedChildrenBySlot[child.slot];
+          if (!slotAllowed) continue; // named slot left unconstrained by design
+          if (!slotAllowed.includes(child.tag)) {
+            out.push({
+              line: node.line,
+              snippet: `<${tag} slot="${child.slot}"> > <${child.tag}>`,
+              why: `<${tag}> declares a2ui.allowedChildrenBySlot.${child.slot}: [${slotAllowed.join(', ')}] — <${child.tag}> is not one of them`,
+            });
+          }
+          continue;
+        }
+        if (!allowedChildren || !allowedChildren.length) continue; // default slot unconstrained
+        if (!allowedChildren.includes(child.tag)) {
           out.push({
             line: node.line,
-            snippet: `<${tag}> > <${child}>`,
-            why: `<${tag}> declares a2ui.allowedChildren: [${allowedChildren.join(', ')}] — <${child}> is not one of them`,
+            snippet: `<${tag}> > <${child.tag}>`,
+            why: `<${tag}> declares a2ui.allowedChildren: [${allowedChildren.join(', ')}] — <${child.tag}> is not one of them`,
           });
         }
       }
@@ -660,6 +798,32 @@ function markupScanSurface(text, path = '') {
   return surface;
 }
 
+const CSS_COMMENT_RE = /\/\*[\s\S]*?(?:\*\/|$)/g;
+
+/**
+ * gh#4008: the text `RE.SCOPE_BLOCK` (MISSING-SCOPE) actually tests, BLANKING
+ * (not deleting: line numbers must survive) every `/* ... *\/` CSS comment
+ * range the same way `markupScanSurface`'s HTML_COMMENT_RE already blanks
+ * markup comments above. gh#3888 closed "`@scope` appearing only in a bare
+ * word inside a comment must not satisfy MISSING-SCOPE" by switching the
+ * rule's substring test to a real at-rule regex (`/@scope\s*\(/`), but never
+ * blanked the comment itself, so a comment that carries the FULL pattern,
+ * `/* @scope (admin-shell) *\/`, still matches the same regex the raw-text
+ * word never could. An unterminated comment blanks to end-of-file, mirroring
+ * `markupScanSurface`'s own behavior for an unterminated `<!--`.
+ *
+ * Only used where a real, live at-rule (or declaration) is what the caller
+ * means to detect, NOT a general-purpose "strip all CSS comments" helper.
+ * `isFoundationCss`'s `/* forge-lint: foundation *\/` opt-in tag and
+ * missing-scope.mjs's own `PREFIX_SCOPED_RE` are deliberately read straight
+ * out of raw text instead: those tags are AUTHORED inside a comment on
+ * purpose, so blanking comments before reading them would break the very
+ * mechanism they are.
+ */
+function cssCommentBlankedSurface(text) {
+  return text.replace(CSS_COMMENT_RE, (m) => m.replace(/[^\n]/g, ' '));
+}
+
 /**
  * ADR-0108 D5 / LLD-0019 C5: builds lookup tables from a manifest object
  * shaped like `packages/gen-ui/mcp/factory/manifest.js`'s `getManifest()`
@@ -950,6 +1114,46 @@ function requiredAttrFindings(text, manifest, path = '') {
   return out;
 }
 
+/**
+ * UNKNOWN-SLOT (gh#3222): a `slot="…"` value that is not a slot name ANY
+ * component in the manifest declares. `manifest` here is the flat
+ * `{ slotNames: [...] }` shape `trimForEmbed`'s own `'slot-names'` branch
+ * produces (gen-lab-posture-rules.mjs) — not the per-tag `{ components }`
+ * shape `buildManifestIndex` reads for the other five rules.
+ *
+ * Deliberately NOT a per-tag/nearest-ancestor check the way UNKNOWN-ATTR
+ * validates an attribute against its own element's tag: Light DOM's
+ * `slot=` is decorative metadata this kit's own component JS reads with
+ * an unscoped selector, so the element carrying `slot="action"` is
+ * routinely a `<header>`'s own descendant rather than a direct child of
+ * the component that actually declares the `action` slot
+ * (card.examples.html's `<header><span slot="heading">…` — `heading` is
+ * `card-ui`'s slot, two levels down from `<card-ui>` itself, past a plain
+ * `<header>` wrapper with no manifest entry of its own). Reliably finding
+ * the "owning" tag would need a nearest-kit-ancestor tree walk that is
+ * fragile against exactly this shape; checking the NAME against the
+ * manifest-wide vocabulary instead still catches the real failure mode
+ * (a generator inventing a slot name no component anywhere declares)
+ * without that fragility — the same "name only, never placement" scope
+ * this primitive's own callers document.
+ */
+function slotNameFindings(text, manifest, path = '') {
+  const known = new Set((manifest && manifest.slotNames) || []);
+  const out = [];
+  for (const occ of tagOccurrences(text, path)) {
+    const value = occ.attrs.slot;
+    if (value === undefined || value === null) continue;
+    if (isDynamicAttr('slot', value)) continue;
+    if (known.has(value)) continue;
+    out.push({
+      line: occ.line,
+      snippet: `<${occ.tag} slot="${value}">`,
+      why: `UNKNOWN-SLOT: slot="${value}" is not a slot name any component in the installed manifest declares`,
+    });
+  }
+  return out;
+}
+
 /**
  * Yaml-corpus primitive (LLD-0016 §C3): reads one component yaml's own
  * top-level `component:` scalar and its `props:` mapping's first-level key
@@ -1004,6 +1208,18 @@ function extractYamlComponentPropKeys(text) {
  * @param {Array<{id:string, severity:string, scope:string, fileTypes:string[], match:Function}>} rules
  * @param {{scopes?: string[]}} [opts] which rule scopes to run — omit for all
  */
+// gh#3716: a `scope: 'forge-only'` rule is declared to check framework
+// source (packages/web-components, packages/web-modules), the two trees
+// that are actually authored as scoped components. `npm run lint` sweeps
+// the whole repo unscoped (the monorepo is both the framework source and
+// its own consumer), so without this restriction a forge-only rule also
+// fires against e.g. apps/* page CSS that was never authored to that
+// contract. `consumer-only`/`shared` rules carry no such corpus fence.
+const FORGE_ONLY_PATHS = ['packages/web-components/', 'packages/web-modules/'];
+function isForgeOnlyPath(path) {
+  return FORGE_ONLY_PATHS.some((p) => path.startsWith(p));
+}
+
 function makeLinter(rules, opts = {}) {
   const scopes = opts.scopes || null;
   const active = rules.filter((r) => !scopes || scopes.includes(r.scope));
@@ -1014,16 +1230,28 @@ function makeLinter(rules, opts = {}) {
     let findings = [];
     for (const rule of active) {
       if (rule.fileTypes && rule.fileTypes.length && !rule.fileTypes.includes(fileExt)) continue;
+      if (rule.scope === 'forge-only' && !isForgeOnlyPath(path)) continue;
       const hits = rule.match(text, path, { scopes }) || [];
       for (const h of hits) {
-        findings.push({ name: rule.id, line: h.line, snippet: h.snippet, why: h.why });
+        findings.push({
+          name: rule.id,
+          line: h.line,
+          snippet: h.snippet,
+          why: h.why,
+          ...(h.severity ? { severity: h.severity } : {}),
+        });
       }
     }
 
     // Suppression syntax (LLD-0016 §Interfaces):
-    // /* adia-lint-disable <rule-id> — <reason> */ on the finding's own line
-    // or the line before it drops that one finding. A bare disable with no
-    // <reason> is itself a finding (SUPPRESS-NO-REASON, warn) — checked
+    // /* adia-lint-disable RULE-ID: reason text */ on the finding's own line
+    // or the line before it drops that one finding. The separator may be a
+    // colon, a space-padded hyphen, or an em dash (SUPPRESS_RE in
+    // primitives.mjs is the one source); the padding on the hyphen is
+    // required because rule ids contain hyphens. Prefer the colon or the
+    // padded hyphen when writing one, since check:em-dash-added-lines
+    // (gh#3767) rejects an em dash on any added line. A bare disable with no
+    // <reason> is itself a finding (SUPPRESS-NO-REASON, warn), checked
     // once per suppression comment in the file, independent of whether it
     // actually suppressed anything this run.
     findings = findings.filter((f) => !suppressionFor(rawLines, f.line, f.name).suppressed);
@@ -1038,6 +1266,24 @@ function makeLinter(rules, opts = {}) {
       }
     }
 
+    // gh#4161: SUPPRESS_RE is both matcher and detector, so a directive it
+    // refuses produces no suppression, no SUPPRESS-NO-REASON, and no
+    // diagnostic at all, silently invisible (gh#3868/gh#3871 each closed
+    // one specific inert shape, never the general class). This loose scan
+    // closes it: every adia-lint-disable-shaped comment the strict grammar
+    // refuses to parse becomes a warn-severity SUPPRESS-MALFORMED finding
+    // naming the file (via the caller) and line, so a malformed directive
+    // is loud instead of vanishing.
+    for (const s of malformedSuppressions(rawLines)) {
+      findings.push({
+        name: 'SUPPRESS-MALFORMED',
+        line: s.lineNo,
+        snippet: s.snippet,
+        why: 'a comment mentioning adia-lint-disable that the strict directive grammar (SUPPRESS_RE) refuses to parse; it suppresses nothing and raises no other diagnostic, fix the <id>/<separator>/<reason> shape or drop the comment',
+        severity: 'warn',
+      });
+    }
+
     findings.sort((a, b) => (a.line - b.line) || (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
     return findings;
   }
@@ -1055,22 +1301,161 @@ function render(path, findings) {
 }
 
 
+/**
+ * scripts/lint/engine/baseline.mjs (gh#3718): the checked-in baseline of
+ * known SCOPE-EXTENT sites, and the normalization that keys them.
+ *
+ * No static `node:fs`/`node:path`/`node:url` import, same as
+ * `scripts/lint/engine/primitives.mjs` and `scripts/lint/engine/run.mjs`,
+ * because this module is inlined into the shared generated bank (LLD-0016
+ * §C5) and copied byte-for-byte to 4 destinations, one of which
+ * (anti-patterns.generated.js) is browser-reachable; check:browser-safe
+ * forbids a top-level `node:*` import there. `process.getBuiltinModule()`
+ * reaches the same builtins with zero import statements, undefined in a
+ * browser, so this fails soft to "excuse nothing" there instead of throwing.
+ *
+ * Loaded once per process. Four outcomes, all of them chosen rather than
+ * incidental:
+ *
+ * 1. No Node fs/path/url builtins (browser context). Not an error: no site
+ *    is excused, so every finding reports at the rule's own severity.
+ * 2. No baseline file on disk. Same as (1).
+ * 3. An unusable baseline file: unparseable, OR parseable but not an object
+ *    with an object "sites" (JSON.parse succeeds on null, on a bare string, on
+ *    a number and on an array, so "it parsed" says nothing about the shape).
+ *    Same as (1), excuse nothing, but WARN loudly naming what was wrong. It
+ *    must not throw: this is one rule's data file, and an uncaught error here
+ *    takes down the whole lint run for every other rule, which is a far worse
+ *    failure than losing the downgrades.
+ * 4. A readable baseline. Its sites are excused, nothing else is.
+ *
+ * What is never an outcome is "unreadable, therefore everything is excused",
+ * which would disable the rule silently.
+ */
+let cache = null;
+
+const isPlainObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+
+const describe = (v) => (v === null ? 'null' : Array.isArray(v) ? 'an array' : typeof v);
+
+function nodeBuiltins() {
+  if (typeof process === 'undefined' || typeof process.getBuiltinModule !== 'function') return null;
+  return {
+    fs: process.getBuiltinModule('node:fs'),
+    path: process.getBuiltinModule('node:path'),
+    url: process.getBuiltinModule('node:url'),
+  };
+}
+
+function load() {
+  if (cache) return cache;
+  const builtins = nodeBuiltins();
+  if (!builtins) {
+    cache = { sites: {} };
+    return cache;
+  }
+  const here = builtins.path.dirname(builtins.url.fileURLToPath(import.meta.url));
+  const baselinePath = builtins.path.join(here, '..', 'scope-extent-baseline.json');
+  if (!builtins.fs.existsSync(baselinePath)) {
+    cache = { sites: {} };
+    return cache;
+  }
+  try {
+    const parsed = JSON.parse(builtins.fs.readFileSync(baselinePath, 'utf8'));
+    // Shape validation lives INSIDE the try, deliberately. JSON.parse succeeds
+    // on `null`, on a bare string, on a number and on an array, so a parse that
+    // did not throw proves nothing about the shape. Validating out here is how
+    // a file containing the four characters `null` reached `cache.sites` and
+    // threw past the catch, crashing every other rule's run.
+    if (!isPlainObject(parsed)) {
+      throw new TypeError(`expected a JSON object at the top level, got ${describe(parsed)}`);
+    }
+    // An absent `sites` is a legitimately empty baseline (excuses nothing) and
+    // is NOT warned about; a present-but-wrong-typed `sites` is a real mistake
+    // and is. Warning on the empty case would train readers to ignore the
+    // warning, which is how a loud instrument stops being read.
+    if (parsed.sites !== undefined && !isPlainObject(parsed.sites)) {
+      throw new TypeError(`"sites" must be an object, got ${describe(parsed.sites)}`);
+    }
+    cache = { ...parsed, sites: parsed.sites || {} };
+  } catch (err) {
+    console.warn(
+      `[SCOPE-EXTENT] baseline at ${baselinePath} is unusable, excusing nothing: ${err.message}`,
+    );
+    cache = { sites: {} };
+  }
+  return cache;
+}
+
+/**
+ * Normalize a matched block so that reformatting does not invalidate an entry:
+ * strip CSS comments, collapse all whitespace, drop spaces around the
+ * punctuation that separates declarations. Editing the selector or the
+ * declaration itself still changes the key, which is intended, and that is a real
+ * change to a known site.
+ *
+ * The matcher itself can stop mid-comment (a comment mentioning a property
+ * name like "min-width:" satisfies the same width/height text test the real
+ * rule looks for), so a raw match can end inside an unterminated `/* ... `
+ * with no closing marker in the captured text yet. That trailing open
+ * comment is stripped too, same as a closed one: it carries no declaration
+ * text, and dropping it is what keeps a baseline key from carrying prose
+ * (comment wording, including punctuation the rest of this codebase avoids)
+ * that has nothing to do with the actual finding.
+ */
+function normalizeMatch(raw) {
+  return raw
+    .replace(/\/\*[\s\S]*?\*\//g, '')
+    .replace(/\/\*[\s\S]*$/g, '')
+    .replace(/\s+/g, ' ')
+    .replace(/\s*([{};:,])\s*/g, '$1')
+    .trim();
+}
+
+/** The baselined keys for one file, as a multiset (duplicates preserved). */
+function baselineFor(path) {
+  const p = (path || '').replace(/\\/g, '/');
+  return load().sites[p] || [];
+}
+
+/** Total baselined entries. The acceptance compares this to a live count. */
+function baselineCount() {
+  const { sites } = load();
+  return Object.values(sites).reduce((n, list) => n + list.length, 0);
+}
+
+
 const RULES = [];
 {
 
 
 const APPLIES_EXT = ['.html', '.htm', '.vue', '.svelte', '.astro', '.tsx', '.jsx', '.js', '.mjs', '.ts'];
 
+// gh#3717: a whole-file `String.includes('validate_schema')` cleared the
+// finding on ANY occurrence of the name anywhere in the file, a prose
+// comment, a docstring, an unrelated identifier, even a substring baked
+// into a fixture string. site/pages/catalogs/catalogs.setup.js passed
+// purely because a comment mentions both names while `.doc =` is set with
+// no validation ever run. The fix asks two sharper questions instead:
+// (1) is the `.doc =` assignment itself real code, not commented out
+// (stripCommentLines, gh#976's own comment-stripping primitive, the same
+// one that keeps a retired-selector rule from firing on a docstring), and
+// (2) does the SAME module actually CALL validate_schema(...) or
+// check_anti_patterns(...), a real call expression, not a bare mention.
+const VALIDATE_CALL_RE = /\b(?:validate_schema|check_anti_patterns)\s*\(/;
+
 const genuiUnvalidated = {
   id: 'GENUI-UNVALIDATED',
   severity: 'error',
   scope: 'consumer-only',
   fileTypes: APPLIES_EXT,
-  match(text) {
-    const m = /\.doc\s*=/.exec(text);
-    if (!m) return [];
-    const line = lineOf(text, m.index);
-    if (text.includes('validate_schema') || text.includes('check_anti_patterns')) return [];
+  match(text, filePath) {
+    if (!/\.doc\s*=/.test(text)) return [];
+    const stripped = stripCommentLines(text, ext(filePath)).map((l) => l.stripped).join('\n');
+    const m = /\.doc\s*=/.exec(stripped);
+    if (!m) return []; // every `.doc =` in the file was inside a comment
+    if (VALIDATE_CALL_RE.test(stripped)) return [];
+    const line = lineOf(stripped, m.index);
     return [{
       line,
       snippet: '.doc = … with no validate in file',
@@ -1088,6 +1473,42 @@ const genuiUnvalidated = {
 // a declarative `src=`/`transport=` on an instance.
 const RUNTIME_HOME_PATH = /(?:^|[\\/])packages[\\/]web-modules[\\/]runtime[\\/](?:a2ui-root|gen-root)[\\/]/;
 
+// gh#3714: the old check matched ".doc =" and "src="/"transport=" anywhere
+// in the FILE, so a2ui-root.js's own docstring (documenting both usage
+// modes side by side in one comment block) tripped it, even with the
+// RUNTIME_HOME_PATH exemption above already carved out for that one file.
+// The real bug is broader than that single case: any consumer file wiring
+// TWO root elements, one fed declaratively and one fed programmatically,
+// was also a false positive, since the old match never asked WHICH
+// element each signal belonged to.
+//
+// This is a regex heuristic, not a JS/HTML parser, so it correlates by two
+// cheap signals rather than real scope analysis:
+//   1. Single-element files: if the file has exactly one <a2ui-root>/
+//      <gen-root> tag, any ".doc =" assignment anywhere in the file is
+//      presumed to target that one element (nothing else for it to mean).
+//   2. Multi-element files: a ".doc =" assignment correlates to a specific
+//      element only when its target variable was bound via
+//      document.getElementById('id') / document.querySelector('#id') to
+//      an element carrying a matching id="..." attribute.
+// Documented misses (false negatives), by design rather than oversight:
+//   - A file with 2+ root elements where NONE carry an id= attribute, or
+//     where the ".doc =" target variable is bound some other way (a
+//     framework ref, a destructured array, ".doc =" set via "this.el"),
+//     cannot be correlated and is silently allowed. The old file-wide
+//     check would have (over-)caught this, at the cost of the
+//     a2ui-root.js false positive this ticket exists to fix.
+// Documented possible false positive: in a single-element file, a ".doc ="
+// assignment that provably targets a DIFFERENT, unrelated object which
+// merely has its own "doc" property (e.g. an unrelated "state.doc = ...")
+// cannot be told apart from a real root reference by rule 1 above.
+const ROOT_TAG = /<(a2ui-root|gen-root)\b([^>]*)>/g;
+const ID_ATTR = /\bid\s*=\s*["']([^"']+)["']/;
+const DECLARATIVE_ATTR = /\b(?:src|transport)\s*=/;
+const VAR_TO_ID =
+  /(?:const|let|var)?\s*([A-Za-z_$][\w$]*)\s*=\s*document\.(?:getElementById\(\s*['"]([\w-]+)['"]\s*\)|querySelector\(\s*['"]#([\w-]+)['"]\s*\))/g;
+const DOC_ASSIGN = /([A-Za-z_$][\w$]*)\.doc\s*=/g;
+
 const genuiDocConflict = {
   id: 'GENUI-DOC-CONFLICT',
   severity: 'error',
@@ -1095,17 +1516,34 @@ const genuiDocConflict = {
   fileTypes: APPLIES_EXT,
   match(text, filePath) {
     if (typeof filePath === 'string' && RUNTIME_HOME_PATH.test(filePath)) return [];
-    const m = /\.doc\s*=/.exec(text);
-    if (!m) return [];
-    const line = lineOf(text, m.index);
-    if (/<(?:a2ui-root|gen-root)[^>]*\b(?:src|transport)=/.test(text)) {
-      return [{
-        line,
-        snippet: '.doc = … alongside src=/transport=',
+
+    const elements = [];
+    for (const m of text.matchAll(ROOT_TAG)) {
+      const attrs = m[2];
+      const idMatch = ID_ATTR.exec(attrs);
+      elements.push({ id: idMatch ? idMatch[1] : null, declarative: DECLARATIVE_ATTR.test(attrs) });
+    }
+    if (elements.length === 0) return [];
+
+    const idsWithDeclarative = new Set(elements.filter((e) => e.declarative && e.id).map((e) => e.id));
+    const varToId = new Map();
+    for (const m of text.matchAll(VAR_TO_ID)) {
+      varToId.set(m[1], m[2] || m[3]);
+    }
+    const soleElementIsDeclarative = elements.length === 1 && elements[0].declarative;
+
+    const findings = [];
+    for (const m of text.matchAll(DOC_ASSIGN)) {
+      const targetId = varToId.get(m[1]);
+      const conflicts = targetId ? idsWithDeclarative.has(targetId) : soleElementIsDeclarative;
+      if (!conflicts) continue;
+      findings.push({
+        line: lineOf(text, m.index),
+        snippet: '.doc = … alongside src=/transport= on the same root',
         why: 'two feed paths fight — a root is fed EITHER declaratively (src/transport) OR programmatically (.doc), never both',
-      }];
+      });
     }
-    return [];
+    return findings;
   },
 };
 
@@ -1126,6 +1564,13 @@ RULES.push(genuiUnvalidated, genuiDocConflict);
 // gets the exemption; scope it to that tree, not the filename alone.
 const EXAMPLES_FILE = /\.examples\.html$/;
 const CATALOG_CONTENTS_FILE = /\.contents\.html$/;
+// packages/web-components/templates/ is the Class R npm mirror of those same
+// catalog/apps/playgrounds demo fragments (ADR-0084, built by
+// scripts/build/templates-mirror.mjs). The mirror step renames each file to
+// `pattern-library-<name>.html` and drops the `catalog/` prefix, so a
+// mirrored demo's default-open state no longer matches either pattern above
+// even though it is a byte-for-byte copy of already-exempt source markup.
+const TEMPLATES_MIRROR_DIR = /^packages\/web-components\/templates\//;
 
 
 RULES.push({
@@ -1137,6 +1582,7 @@ RULES.push({
     const p = (path || '').replace(/\\/g, '/');
     if (EXAMPLES_FILE.test(p)) return [];
     if (CATALOG_CONTENTS_FILE.test(p) && p.split('/')[0] === 'catalog') return [];
+    if (TEMPLATES_MIRROR_DIR.test(p)) return [];
     const out = [];
     text.split('\n').forEach((line, i) => {
       if (RE.OVERLAY_OPEN.test(line)) {
@@ -1222,8 +1668,11 @@ RULES.push({
     const pages = (text.match(/<admin-page[\s/>]/g) || []).length;
     const scrolls = (text.match(/<admin-scroll[\s/>]/g) || []).length;
     if (scrolls && pages > scrolls) {
+      // report the first <admin-page> occurrence, the line a developer would
+      // actually attach an adia-lint-disable comment to for this finding.
+      const firstIndex = text.search(/<admin-page[\s/>]/);
       out.push({
-        line: 1,
+        line: lineOf(text, firstIndex),
         snippet: '<admin-page> × N inside <admin-scroll>',
         why: 'each <admin-scroll> hosts exactly one <admin-page> — multiple pages need multiple scroll regions',
       });
@@ -1243,6 +1692,8 @@ RULES.push({
 }
 
 {
+
+
 const APPLIES_EXT = ['.html', '.htm', '.vue', '.svelte', '.astro', '.tsx', '.jsx', '.js', '.mjs', '.ts'];
 
 
@@ -1252,9 +1703,10 @@ RULES.push({
   scope: 'consumer-only',
   fileTypes: APPLIES_EXT,
   match(text) {
-    if (/<admin-sidebar[^>]*\bresizable\b/.test(text) && !text.includes('data-sidebar-resize')) {
+    const m = /<admin-sidebar[^>]*\bresizable\b/.exec(text);
+    if (m && !text.includes('data-sidebar-resize')) {
       return [{
-        line: 1,
+        line: lineOf(text, m.index),
         snippet: '<admin-sidebar resizable> without [data-sidebar-resize]',
         why: '[resizable] needs a child <div data-sidebar-resize> or there is no drag handle',
       }];
@@ -1322,6 +1774,29 @@ RULES.push(ssrDoubleRouter, ssrToplevelImport);
 {
 
 
+// gh#3888: a second, honestly-named opt-out alongside `forge-lint:
+// foundation`. Some CSS intentionally scopes via a repeated parent-tag
+// selector prefix (`admin-shell [data-x] { … }`) instead of a real
+// `@scope` at-rule. Labeling that shape `forge-lint: foundation` would
+// be a lie (neither file is a token sheet); this tag says what the
+// file actually does instead.
+//
+// ALLOWLISTED, not a self-serve bypass (gh#3888 critic finding): an
+// undocumented, unrestricted opt-out comment is the same shape as the
+// substring-loophole bug this rule just fixed, only deliberate. A
+// file adding this comment on its own must FAIL, naming the allowlist,
+// so escaping MISSING-SCOPE this way always needs a human to edit this
+// rule module, never just a CSS comment.
+//
+// gh#3922 closed the follow-up: the two files gh#3888 allowlisted
+// (admin-shell.helpers.css, admin-shell.mobile-nav.css) are now real
+// `@scope (admin-shell) { … }` blocks and admin-shell.test.js's prefix
+// assertions were rewritten to match. The allowlist is empty again;
+// `forge-lint: prefix-scoped` stays available as a mechanism, not a
+// standing exemption; a future file needs a human to add it here.
+const PREFIX_SCOPED_RE = /forge-lint:\s*prefix-scoped/i;
+const PREFIX_SCOPED_ALLOWLIST = [];
+
 
 RULES.push({
   id: 'MISSING-SCOPE',
@@ -1331,19 +1806,34 @@ RULES.push({
   match(text, path) {
     const isTokenish = isFoundationCss(path, text, 'forge-lint');
     if (isTokenish) return [];
-    if (text.includes('@scope')) return [];
+    // gh#4008: a comment carrying the full `@scope (...)` pattern (not just
+    // the bare word gh#3888 already excluded) must not satisfy this test:
+    // blank CSS comments first, mirroring markupScanSurface's HTML-comment
+    // blanking, so only a REAL, live at-rule can match.
+    if (RE.SCOPE_BLOCK.test(cssCommentBlankedSurface(text))) return [];
+    const normalizedPath = (path || '').replace(/\\/g, '/');
+    const claimsPrefixScoped = PREFIX_SCOPED_RE.test(text.slice(0, 1000));
+    const isAllowlisted = PREFIX_SCOPED_ALLOWLIST.some((p) => normalizedPath.endsWith(p));
+    if (claimsPrefixScoped && !isAllowlisted) {
+      return [{
+        line: 1,
+        snippet: '(file has CSS rules but no @scope block)',
+        why: `forge-lint: prefix-scoped is allowlisted to zero files (gh#3922 closed the last two, gh#3888). Adding this comment does not opt a file out; either wrap it in a real @scope block, or ask for the allowlist to be extended in scripts/lint/rules/forge/missing-scope.mjs itself.`,
+      }];
+    }
+    if (claimsPrefixScoped && isAllowlisted) return [];
     if (!RE.SELECTOR_RULE.test(text)) return [];
     return [{
       line: 1,
       snippet: '(file has CSS rules but no @scope block)',
-      why: 'component CSS must be wrapped in `@scope (<tag>) { … }` so styles don\'t leak in light DOM (foundation/token sheets excepted; opt out with /* forge-lint: foundation */)',
+      why: 'component CSS must be wrapped in `@scope (<tag>) { … }` so styles don\'t leak in light DOM (foundation/token sheets excepted with /* forge-lint: foundation */)',
     }];
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/accordion/accordion-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/accordion/accordion-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1351,15 +1841,16 @@ RULES.push({
 const TAG = "accordion-item-ui";
 const ALLOWED_PARENTS = ["accordion-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACCORDION-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1374,7 +1865,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/accordion/accordion.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/accordion/accordion.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1382,15 +1873,16 @@ RULES.push({
 const TAG = "accordion-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["accordion-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACCORDION-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1398,14 +1890,15 @@ RULES.push({
       "<accordion-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></accordion-ui>"
     ],
     "clean": [
-      "<accordion-ui><accordion-item-ui></accordion-item-ui></accordion-ui>"
+      "<accordion-ui><accordion-item-ui></accordion-item-ui></accordion-ui>",
+      "<accordion-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></accordion-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/action-list/action-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/action-list/action-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1413,15 +1906,16 @@ RULES.push({
 const TAG = "action-item-ui";
 const ALLOWED_PARENTS = ["action-list-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACTION-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1436,7 +1930,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/action-list/action-list.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/action-list/action-list.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1444,15 +1938,16 @@ RULES.push({
 const TAG = "action-list-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["action-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ACTION-LIST-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1460,14 +1955,15 @@ RULES.push({
       "<action-list-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></action-list-ui>"
     ],
     "clean": [
-      "<action-list-ui><action-item-ui></action-item-ui></action-list-ui>"
+      "<action-list-ui><action-item-ui></action-item-ui></action-list-ui>",
+      "<action-list-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></action-list-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-command/admin-command.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-command/admin-command.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1475,15 +1971,16 @@ RULES.push({
 const TAG = "admin-command";
 const ALLOWED_PARENTS = ["admin-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-COMMAND",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1498,7 +1995,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-content/admin-content.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-content/admin-content.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1506,15 +2003,16 @@ RULES.push({
 const TAG = "admin-content";
 const ALLOWED_PARENTS = ["admin-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-CONTENT",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1529,38 +2027,103 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-scroll/admin-scroll.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-entity-item/admin-entity-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "admin-scroll";
-const ALLOWED_PARENTS = ["admin-content"];
+const TAG = "admin-entity-item";
+const ALLOWED_PARENTS = ["admin-topbar","admin-statusbar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-ADMIN-SCROLL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-ADMIN-ENTITY-ITEM",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><admin-scroll></admin-scroll></div>"
+      "<div><admin-entity-item></admin-entity-item></div>"
     ],
     "clean": [
-      "<admin-content><admin-scroll></admin-scroll></admin-content>"
+      "<admin-topbar><admin-entity-item></admin-entity-item></admin-topbar>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-shell/admin-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/admin-roster/admin-roster.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "admin-roster-ui";
+const ALLOWED_PARENTS = ["agent-admin-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-ADMIN-ROSTER-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><admin-roster-ui></admin-roster-ui></div>"
+    ],
+    "clean": [
+      "<agent-admin-ui><admin-roster-ui></admin-roster-ui></agent-admin-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/admin-settings/admin-settings.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "admin-settings-ui";
+const ALLOWED_PARENTS = ["agent-admin-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-ADMIN-SETTINGS-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><admin-settings-ui></admin-settings-ui></div>"
+    ],
+    "clean": [
+      "<agent-admin-ui><admin-settings-ui></admin-settings-ui></agent-admin-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-shell/admin-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1568,15 +2131,16 @@ RULES.push({
 const TAG = "admin-shell";
 const ALLOWED_PARENTS = ["Surface"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1591,7 +2155,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-sidebar/admin-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-sidebar/admin-sidebar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1599,15 +2163,16 @@ RULES.push({
 const TAG = "admin-sidebar";
 const ALLOWED_PARENTS = ["admin-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1622,7 +2187,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-statusbar/admin-statusbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-statusbar/admin-statusbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1630,15 +2195,16 @@ RULES.push({
 const TAG = "admin-statusbar";
 const ALLOWED_PARENTS = ["admin-shell","admin-content","admin-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-STATUSBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1653,7 +2219,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/admin-topbar/admin-topbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-topbar/admin-topbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1661,15 +2227,16 @@ RULES.push({
 const TAG = "admin-topbar";
 const ALLOWED_PARENTS = ["admin-shell","admin-content","admin-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-ADMIN-TOPBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1684,7 +2251,105 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-empty/chat-empty.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/agent-admin/agent-admin.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "agent-admin-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["admin-roster-ui","admin-settings-ui","chat-shell"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-AGENT-ADMIN-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<agent-admin-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></agent-admin-ui>"
+    ],
+    "clean": [
+      "<agent-admin-ui><admin-roster-ui></admin-roster-ui></agent-admin-ui>",
+      "<agent-admin-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></agent-admin-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/avatar/avatar-group.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "avatar-group-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["avatar-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-AVATAR-GROUP-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<avatar-group-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></avatar-group-ui>"
+    ],
+    "clean": [
+      "<avatar-group-ui><avatar-ui></avatar-ui></avatar-group-ui>",
+      "<avatar-group-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></avatar-group-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-composer/chat-composer.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "chat-composer";
+const ALLOWED_PARENTS = ["chat-shell"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-CHAT-COMPOSER",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><chat-composer></chat-composer></div>"
+    ],
+    "clean": [
+      "<chat-shell><chat-composer></chat-composer></chat-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-empty/chat-empty.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1692,15 +2357,16 @@ RULES.push({
 const TAG = "chat-empty";
 const ALLOWED_PARENTS = ["chat-thread"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-EMPTY",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1715,7 +2381,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-header/chat-header.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-header/chat-header.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1723,15 +2389,16 @@ RULES.push({
 const TAG = "chat-header";
 const ALLOWED_PARENTS = ["chat-shell","chat-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-HEADER",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1746,23 +2413,24 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-shell/chat-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-shell/chat-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
 const TAG = "chat-shell";
-const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_PARENTS = ["Surface","agent-admin-ui","pane-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1777,7 +2445,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-sidebar/chat-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-sidebar/chat-sidebar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1785,15 +2453,16 @@ RULES.push({
 const TAG = "chat-sidebar";
 const ALLOWED_PARENTS = ["chat-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1808,7 +2477,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-status/chat-status.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-status/chat-status.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1816,15 +2485,16 @@ RULES.push({
 const TAG = "chat-status";
 const ALLOWED_PARENTS = ["chat-header"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-STATUS",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1839,7 +2509,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/chat/chat-thread/chat-thread.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/chat/chat-thread/chat-thread.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1847,15 +2517,16 @@ RULES.push({
 const TAG = "chat-thread";
 const ALLOWED_PARENTS = ["chat-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-THREAD",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1870,7 +2541,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/choice-card/choice-card.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/choice-card/choice-card.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1878,15 +2549,16 @@ RULES.push({
 const TAG = "choice-card-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["choice-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHOICE-CARD-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1894,14 +2566,15 @@ RULES.push({
       "<choice-card-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></choice-card-ui>"
     ],
     "clean": [
-      "<choice-card-ui><choice-ui></choice-ui></choice-card-ui>"
+      "<choice-card-ui><choice-ui></choice-ui></choice-card-ui>",
+      "<choice-card-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></choice-card-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/choice-card/choice.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/choice-card/choice.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1909,15 +2582,16 @@ RULES.push({
 const TAG = "choice-ui";
 const ALLOWED_PARENTS = ["choice-card-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHOICE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1932,7 +2606,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/drilldown/drilldown.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/drilldown/drilldown.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1940,15 +2614,16 @@ RULES.push({
 const TAG = "drilldown-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["breadcrumb-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-DRILLDOWN-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1956,14 +2631,15 @@ RULES.push({
       "<drilldown-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></drilldown-ui>"
     ],
     "clean": [
-      "<drilldown-ui><breadcrumb-ui></breadcrumb-ui></drilldown-ui>"
+      "<drilldown-ui><breadcrumb-ui></breadcrumb-ui></drilldown-ui>",
+      "<drilldown-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></drilldown-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-canvas-empty/editor-canvas-empty.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-canvas-empty/editor-canvas-empty.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -1971,15 +2647,16 @@ RULES.push({
 const TAG = "editor-canvas-empty";
 const ALLOWED_PARENTS = ["editor-canvas"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS-EMPTY",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -1994,7 +2671,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-canvas-toolbar/editor-canvas-toolbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-canvas-toolbar/editor-canvas-toolbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2002,15 +2679,16 @@ RULES.push({
 const TAG = "editor-canvas-toolbar";
 const ALLOWED_PARENTS = ["editor-canvas"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS-TOOLBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2025,7 +2703,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-canvas/editor-canvas.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-canvas/editor-canvas.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2033,15 +2711,16 @@ RULES.push({
 const TAG = "editor-canvas";
 const ALLOWED_PARENTS = ["editor-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2056,7 +2735,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-shell/editor-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-shell/editor-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2064,15 +2743,16 @@ RULES.push({
 const TAG = "editor-shell";
 const ALLOWED_PARENTS = ["Surface"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2087,7 +2767,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-sidebar/editor-sidebar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-sidebar/editor-sidebar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2095,15 +2775,16 @@ RULES.push({
 const TAG = "editor-sidebar";
 const ALLOWED_PARENTS = ["editor-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2118,7 +2799,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-statusbar/editor-statusbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-statusbar/editor-statusbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2126,15 +2807,16 @@ RULES.push({
 const TAG = "editor-statusbar";
 const ALLOWED_PARENTS = ["editor-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-STATUSBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2149,7 +2831,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/editor/editor-toolbar/editor-toolbar.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/editor/editor-toolbar/editor-toolbar.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2157,15 +2839,16 @@ RULES.push({
 const TAG = "editor-toolbar";
 const ALLOWED_PARENTS = ["editor-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EDITOR-TOOLBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2180,7 +2863,39 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/feed/feed-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/embed-shell/embed-shell.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "embed-shell";
+const ALLOWED_PARENTS = ["Surface","theme-provider"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-EMBED-SHELL",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<col-ui><embed-shell></embed-shell></col-ui>"
+    ],
+    "clean": [
+      "<embed-shell></embed-shell>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/feed/feed-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2188,15 +2903,16 @@ RULES.push({
 const TAG = "feed-item-ui";
 const ALLOWED_PARENTS = ["feed-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-FEED-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2211,7 +2927,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/feed/feed.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/feed/feed.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2219,185 +2935,520 @@ RULES.push({
 const TAG = "feed-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["feed-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FEED-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<feed-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></feed-ui>"
+    ],
+    "clean": [
+      "<feed-ui><feed-item-ui></feed-item-ui></feed-ui>",
+      "<feed-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></feed-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/fields/fields.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "fields-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["field-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FIELDS-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<fields-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></fields-ui>"
+    ],
+    "clean": [
+      "<fields-ui><field-ui></field-ui></fields-ui>",
+      "<fields-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></fields-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/footer/footer.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "footer-ui";
+const ALLOWED_PARENTS = ["page-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FOOTER-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><footer-ui></footer-ui></div>"
+    ],
+    "clean": [
+      "<page-ui><footer-ui></footer-ui></page-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-modules/form/form-popover/form-popover.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "form-popover-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["check-ui","radio-ui","input-ui","textarea-ui","divider-ui","field-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-FORM-POPOVER-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<form-popover-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></form-popover-ui>"
+    ],
+    "clean": [
+      "<form-popover-ui><check-ui></check-ui></form-popover-ui>",
+      "<form-popover-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></form-popover-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/header/header.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "header-ui";
+const ALLOWED_PARENTS = ["page-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-HEADER-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><header-ui></header-ui></div>"
+    ],
+    "clean": [
+      "<page-ui><header-ui></header-ui></page-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/list/list-item.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "list-item-ui";
+const ALLOWED_PARENTS = ["list-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-LIST-ITEM-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><list-item-ui></list-item-ui></div>"
+    ],
+    "clean": [
+      "<list-ui><list-item-ui></list-item-ui></list-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu-divider.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "menu-divider-ui";
+const ALLOWED_PARENTS = ["menu-ui","context-menu-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-MENU-DIVIDER-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><menu-divider-ui></menu-divider-ui></div>"
+    ],
+    "clean": [
+      "<menu-ui><menu-divider-ui></menu-divider-ui></menu-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu-item.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "menu-item-ui";
+const ALLOWED_PARENTS = ["menu-ui","context-menu-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-MENU-ITEM-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><menu-item-ui></menu-item-ui></div>"
+    ],
+    "clean": [
+      "<menu-ui><menu-item-ui></menu-item-ui></menu-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu-label.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "menu-label-ui";
+const ALLOWED_PARENTS = ["menu-ui"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-MENU-LABEL-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<div><menu-label-ui></menu-label-ui></div>"
+    ],
+    "clean": [
+      "<menu-ui><menu-label-ui></menu-label-ui></menu-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/menu/menu.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "menu-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["menu-item-ui","menu-divider-ui","menu-label-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-MENU-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<menu-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></menu-ui>"
+    ],
+    "clean": [
+      "<menu-ui><menu-item-ui></menu-item-ui></menu-ui>",
+      "<menu-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></menu-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/nav-group/nav-group.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "nav-group-ui";
+const ALLOWED_PARENTS = ["nav-ui"];
+const ALLOWED_CHILDREN = ["nav-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-FEED-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-NAV-GROUP-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<feed-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></feed-ui>"
+      "<div><nav-group-ui></nav-group-ui></div>",
+      "<nav-group-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></nav-group-ui>"
     ],
     "clean": [
-      "<feed-ui><feed-item-ui></feed-item-ui></feed-ui>"
+      "<nav-ui><nav-group-ui></nav-group-ui></nav-ui>",
+      "<nav-ui><nav-group-ui><nav-item-ui></nav-item-ui></nav-group-ui></nav-ui>",
+      "<nav-ui><nav-group-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></nav-group-ui></nav-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/list/list-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/nav-item/nav-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "list-item-ui";
-const ALLOWED_PARENTS = ["list-ui"];
+const TAG = "nav-item-ui";
+const ALLOWED_PARENTS = ["nav-ui","nav-group-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-LIST-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-NAV-ITEM-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><list-item-ui></list-item-ui></div>"
+      "<div><nav-item-ui></nav-item-ui></div>"
     ],
     "clean": [
-      "<list-ui><list-item-ui></list-item-ui></list-ui>"
+      "<nav-ui><nav-item-ui></nav-item-ui></nav-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/menu/menu-divider.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/shell/page-scroll/page-scroll.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "menu-divider-ui";
-const ALLOWED_PARENTS = ["menu-ui"];
+const TAG = "page-scroll";
+const ALLOWED_PARENTS = ["admin-content"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-MENU-DIVIDER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-PAGE-SCROLL",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><menu-divider-ui></menu-divider-ui></div>"
+      "<div><page-scroll></page-scroll></div>"
     ],
     "clean": [
-      "<menu-ui><menu-divider-ui></menu-divider-ui></menu-ui>"
+      "<admin-content><page-scroll></page-scroll></admin-content>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/menu/menu-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/radio-group/radio-group.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "menu-item-ui";
-const ALLOWED_PARENTS = ["menu-ui"];
-const ALLOWED_CHILDREN = [];
+const TAG = "radio-group-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["radio-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-MENU-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-RADIO-GROUP-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><menu-item-ui></menu-item-ui></div>"
+      "<radio-group-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></radio-group-ui>"
     ],
     "clean": [
-      "<menu-ui><menu-item-ui></menu-item-ui></menu-ui>"
+      "<radio-group-ui><radio-ui></radio-ui></radio-group-ui>",
+      "<radio-group-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></radio-group-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/menu/menu-label.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/search/search.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "menu-label-ui";
-const ALLOWED_PARENTS = ["menu-ui"];
-const ALLOWED_CHILDREN = [];
+const TAG = "search-ui";
+const ALLOWED_PARENTS = [];
+const ALLOWED_CHILDREN = ["input-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-MENU-LABEL-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-SEARCH-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><menu-label-ui></menu-label-ui></div>"
+      "<search-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></search-ui>"
     ],
     "clean": [
-      "<menu-ui><menu-label-ui></menu-label-ui></menu-ui>"
+      "<search-ui><input-ui></input-ui></search-ui>",
+      "<search-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></search-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/shell/page-scroll/page-scroll.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/section/section.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
 
-const TAG = "page-scroll";
-const ALLOWED_PARENTS = ["admin-content"];
+const TAG = "section-ui";
+const ALLOWED_PARENTS = ["page-ui","admin-sidebar"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
-  id: "COMPOSITION-PAGE-SCROLL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  id: "COMPOSITION-SECTION-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
     "smelly": [
-      "<div><page-scroll></page-scroll></div>"
+      "<div><section-ui></section-ui></div>"
     ],
     "clean": [
-      "<admin-content><page-scroll></page-scroll></admin-content>"
+      "<page-ui><section-ui></section-ui></page-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/segment/segment.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/segment/segment.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2405,15 +3456,16 @@ RULES.push({
 const TAG = "segment-ui";
 const ALLOWED_PARENTS = ["segmented-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SEGMENT-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2428,7 +3480,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/segmented/segmented.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/segmented/segmented.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2436,15 +3488,16 @@ RULES.push({
 const TAG = "segmented-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["segment-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SEGMENTED-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2452,14 +3505,15 @@ RULES.push({
       "<segmented-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></segmented-ui>"
     ],
     "clean": [
-      "<segmented-ui><segment-ui></segment-ui></segmented-ui>"
+      "<segmented-ui><segment-ui></segment-ui></segmented-ui>",
+      "<segmented-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></segmented-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/simple/simple-content/simple-content.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/simple/simple-content/simple-content.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2467,15 +3521,16 @@ RULES.push({
 const TAG = "simple-content";
 const ALLOWED_PARENTS = ["simple-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-CONTENT",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2490,7 +3545,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/simple/simple-hero/simple-hero.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/simple/simple-hero/simple-hero.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2498,15 +3553,16 @@ RULES.push({
 const TAG = "simple-hero";
 const ALLOWED_PARENTS = ["simple-shell"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-HERO",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2521,7 +3577,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-modules/simple/simple-shell/simple-shell.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-modules/simple/simple-shell/simple-shell.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2529,15 +3585,16 @@ RULES.push({
 const TAG = "simple-shell";
 const ALLOWED_PARENTS = ["Surface"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2552,7 +3609,39 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/stepper/stepper-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/skip-nav/skip-nav.yaml's a2ui.allowedParents/allowedChildren.
+// Rebuild: node scripts/build/gen-composition-rules.mjs
+// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
+
+
+const TAG = "skip-nav-ui";
+const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
+
+
+RULES.push({
+  id: "COMPOSITION-SKIP-NAV-UI",
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text) {
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
+  },
+  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
+  fixtures: {
+    "smelly": [
+      "<col-ui><skip-nav-ui></skip-nav-ui></col-ui>"
+    ],
+    "clean": [
+      "<skip-nav-ui></skip-nav-ui>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED: do not hand-edit. Source: packages/web-components/components/stepper/stepper-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2560,15 +3649,16 @@ RULES.push({
 const TAG = "stepper-item-ui";
 const ALLOWED_PARENTS = ["stepper-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-STEPPER-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2583,7 +3673,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/stepper/stepper.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/stepper/stepper.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2591,15 +3681,16 @@ RULES.push({
 const TAG = "stepper-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["stepper-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-STEPPER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2607,14 +3698,15 @@ RULES.push({
       "<stepper-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></stepper-ui>"
     ],
     "clean": [
-      "<stepper-ui><stepper-item-ui></stepper-item-ui></stepper-ui>"
+      "<stepper-ui><stepper-item-ui></stepper-item-ui></stepper-ui>",
+      "<stepper-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></stepper-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tabs/tab.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tabs/tab.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2622,15 +3714,16 @@ RULES.push({
 const TAG = "tab-ui";
 const ALLOWED_PARENTS = ["tabs-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TAB-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2645,7 +3738,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tabs/tabs.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tabs/tabs.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2653,15 +3746,16 @@ RULES.push({
 const TAG = "tabs-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["tab-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TABS-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2669,14 +3763,15 @@ RULES.push({
       "<tabs-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></tabs-ui>"
     ],
     "clean": [
-      "<tabs-ui><tab-ui></tab-ui></tabs-ui>"
+      "<tabs-ui><tab-ui></tab-ui></tabs-ui>",
+      "<tabs-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></tabs-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/timeline/timeline-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/timeline/timeline-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2684,15 +3779,16 @@ RULES.push({
 const TAG = "timeline-item-ui";
 const ALLOWED_PARENTS = ["timeline-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TIMELINE-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2707,7 +3803,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/timeline/timeline.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/timeline/timeline.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2715,15 +3811,16 @@ RULES.push({
 const TAG = "timeline-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["timeline-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TIMELINE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2731,14 +3828,15 @@ RULES.push({
       "<timeline-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></timeline-ui>"
     ],
     "clean": [
-      "<timeline-ui><timeline-item-ui></timeline-item-ui></timeline-ui>"
+      "<timeline-ui><timeline-item-ui></timeline-item-ui></timeline-ui>",
+      "<timeline-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></timeline-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/toolbar/toolbar-group.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/toolbar/toolbar-group.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2746,15 +3844,16 @@ RULES.push({
 const TAG = "toolbar-group-ui";
 const ALLOWED_PARENTS = ["toolbar-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TOOLBAR-GROUP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2769,7 +3868,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tour/tour-step.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tour/tour-step.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2777,15 +3876,16 @@ RULES.push({
 const TAG = "tour-step-ui";
 const ALLOWED_PARENTS = ["tour-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TOUR-STEP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2800,7 +3900,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tour/tour.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tour/tour.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2808,15 +3908,16 @@ RULES.push({
 const TAG = "tour-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["tour-step-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TOUR-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2824,14 +3925,15 @@ RULES.push({
       "<tour-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></tour-ui>"
     ],
     "clean": [
-      "<tour-ui><tour-step-ui></tour-step-ui></tour-ui>"
+      "<tour-ui><tour-step-ui></tour-step-ui></tour-ui>",
+      "<tour-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></tour-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tree/tree-item.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tree/tree-item.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2839,15 +3941,16 @@ RULES.push({
 const TAG = "tree-item-ui";
 const ALLOWED_PARENTS = ["tree-ui","tree-item-ui"];
 const ALLOWED_CHILDREN = [];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TREE-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2862,7 +3965,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/components/tree/tree.yaml's a2ui.allowedParents/allowedChildren.
+// GENERATED: do not hand-edit. Source: packages/web-components/components/tree/tree.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
 // Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
 
@@ -2870,15 +3973,16 @@ RULES.push({
 const TAG = "tree-ui";
 const ALLOWED_PARENTS = [];
 const ALLOWED_CHILDREN = ["tree-item-ui"];
+const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-TREE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4) — advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN });
+    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
   },
   fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
   fixtures: {
@@ -2886,35 +3990,27 @@ RULES.push({
       "<tree-ui><not-an-allowed-child-ui></not-an-allowed-child-ui></tree-ui>"
     ],
     "clean": [
-      "<tree-ui><tree-item-ui></tree-item-ui></tree-ui>"
+      "<tree-ui><tree-item-ui></tree-item-ui></tree-ui>",
+      "<tree-ui><not-an-allowed-child-ui slot=\"arbitrary-slot\"></not-an-allowed-child-ui></tree-ui>"
     ]
   },
 });
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
 //
 // ENUM-VALUE (ADR-0108 D5): a declared enum attribute set to a value outside its manifest-declared enum (default + opt-in + internal).
 //
-// severity: 'info' here governs ONLY `npm run lint`'s bare-repo-shaped
+// severity: 'error' here governs ONLY `npm run lint`'s bare-repo-shaped
 // advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
 // (packages/plugins/adia-ui-factory/scripts/lab-posture-guard.mjs,
 // LLD-0019 C4) does not read this field — a lab-posture write denies on
 // ANY finding from these same matcher functions regardless of severity
 // (ADR-0108 D5: "PreToolUse deny... error under the lab hook").
-//
-// Demoted warn -> info (gh#2939, Kim-ruled 2026-09-03): gh#2911's G2
-// warn-triage sample found this rule's class overwhelmingly manifest
-// drift, not real authoring bugs (INTERNAL-TIER 594/1413 findings, 42%
-// of the corpus total — almost entirely shipped-and-sanctioned values
-// like button-ui[variant="primary"] the tier manifest hasn't promoted
-// to match reality). The matcher/detection logic is UNCHANGED — this is
-// a severity relabel only. Fixing the underlying manifest drift itself
-// is split out as gh#3044, not this ticket.
 
 
 const MANIFEST_SNAPSHOT = {
@@ -3133,10 +4229,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -3252,6 +4344,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -3315,6 +4410,9 @@ const MANIFEST_SNAPSHOT = {
               }
             ]
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant",
             "values": [
@@ -4048,13 +5146,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "precision",
             "values": [
               {
-                "value": "date"
+                "value": "date",
+                "tier": "default"
               },
               {
-                "value": "minute"
+                "value": "minute",
+                "tier": "opt-in"
               },
               {
-                "value": "second"
+                "value": "second",
+                "tier": "opt-in"
               }
             ]
           },
@@ -4578,6 +5679,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -5270,7 +6375,30 @@ const MANIFEST_SNAPSHOT = {
             "name": "to"
           },
           {
-            "name": "value"
+            "name": "value",
+            "values": [
+              {
+                "value": "today"
+              },
+              {
+                "value": "7d"
+              },
+              {
+                "value": "30d"
+              },
+              {
+                "value": "90d"
+              },
+              {
+                "value": "qtd"
+              },
+              {
+                "value": "ytd"
+              },
+              {
+                "value": "custom"
+              }
+            ]
           }
         ]
       },
@@ -5403,16 +6531,19 @@ const MANIFEST_SNAPSHOT = {
             "name": "side",
             "values": [
               {
-                "value": "left"
+                "value": "left",
+                "tier": "opt-in"
               },
               {
-                "value": "right"
+                "value": "right",
+                "tier": "default"
               },
               {
                 "value": "top"
               },
               {
-                "value": "bottom"
+                "value": "bottom",
+                "tier": "opt-in"
               }
             ]
           },
@@ -5907,13 +7038,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "scale",
             "values": [
               {
-                "value": "linear"
+                "value": "linear",
+                "tier": "default"
               },
               {
-                "value": "log"
+                "value": "log",
+                "tier": "opt-in"
               },
               {
-                "value": "quantile"
+                "value": "quantile",
+                "tier": "opt-in"
               }
             ]
           },
@@ -6134,7 +7268,29 @@ const MANIFEST_SNAPSHOT = {
             "name": "text"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "info",
+                "tier": "opt-in"
+              },
+              {
+                "value": "success",
+                "tier": "opt-in"
+              },
+              {
+                "value": "warning",
+                "tier": "opt-in"
+              },
+              {
+                "value": "danger",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -6180,7 +7336,33 @@ const MANIFEST_SNAPSHOT = {
             "name": "error"
           },
           {
-            "name": "inputmode"
+            "name": "inputmode",
+            "values": [
+              {
+                "value": "text"
+              },
+              {
+                "value": "decimal"
+              },
+              {
+                "value": "numeric"
+              },
+              {
+                "value": "tel"
+              },
+              {
+                "value": "search"
+              },
+              {
+                "value": "email"
+              },
+              {
+                "value": "url"
+              },
+              {
+                "value": "none"
+              }
+            ]
           },
           {
             "name": "label"
@@ -6281,7 +7463,24 @@ const MANIFEST_SNAPSHOT = {
             "required": true
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "pending"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -6313,7 +7512,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "searchPlaceholder"
           },
           {
-            "name": "statusFilter"
+            "name": "statusFilter",
+            "values": [
+              {
+                "value": "all"
+              },
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -6355,7 +7571,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "printable"
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           }
         ]
       },
@@ -6387,7 +7620,27 @@ const MANIFEST_SNAPSHOT = {
             "name": "exportable"
           },
           {
-            "name": "filter"
+            "name": "filter",
+            "values": [
+              {
+                "value": ""
+              },
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           },
           {
             "name": "hrefPattern",
@@ -6600,7 +7853,21 @@ const MANIFEST_SNAPSHOT = {
             "name": "label"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "transparent",
+                "tier": "opt-in"
+              },
+              {
+                "value": "blur",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -7229,6 +8496,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -7434,7 +8705,15 @@ const MANIFEST_SNAPSHOT = {
             "name": "current"
           },
           {
-            "name": "cycle"
+            "name": "cycle",
+            "values": [
+              {
+                "value": "monthly"
+              },
+              {
+                "value": "annual"
+              }
+            ]
           },
           {
             "name": "cycleToggle",
@@ -8149,6 +9428,10 @@ const MANIFEST_SNAPSHOT = {
               {
                 "value": "dot-grid",
                 "tier": "default"
+              },
+              {
+                "value": "noise",
+                "tier": "alternative"
               }
             ]
           }
@@ -10082,7 +11365,7 @@ const MANIFEST_SNAPSHOT = {
 
 RULES.push({
   id: "ENUM-VALUE",
-  severity: "info",
+  severity: "error",
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text, path = '') {
@@ -10103,12 +11386,12 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
 //
-// INTERNAL-TIER (ADR-0108 D3/D5): a declared enum value present in the manifest but tiered `internal` — reachable in source, never the intended answer for a generator or author.
+// INTERNAL-TIER (ADR-0108 D3/D5): a declared enum value present in the manifest but tiered `internal`, reachable in source, never the intended answer for a generator or author.
 //
 // severity: 'info' here governs ONLY `npm run lint`'s bare-repo-shaped
 // advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
@@ -10343,10 +11626,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -10462,6 +11741,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -10525,6 +11807,9 @@ const MANIFEST_SNAPSHOT = {
               }
             ]
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant",
             "values": [
@@ -11258,13 +12543,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "precision",
             "values": [
               {
-                "value": "date"
+                "value": "date",
+                "tier": "default"
               },
               {
-                "value": "minute"
+                "value": "minute",
+                "tier": "opt-in"
               },
               {
-                "value": "second"
+                "value": "second",
+                "tier": "opt-in"
               }
             ]
           },
@@ -11788,6 +13076,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -12480,7 +13772,30 @@ const MANIFEST_SNAPSHOT = {
             "name": "to"
           },
           {
-            "name": "value"
+            "name": "value",
+            "values": [
+              {
+                "value": "today"
+              },
+              {
+                "value": "7d"
+              },
+              {
+                "value": "30d"
+              },
+              {
+                "value": "90d"
+              },
+              {
+                "value": "qtd"
+              },
+              {
+                "value": "ytd"
+              },
+              {
+                "value": "custom"
+              }
+            ]
           }
         ]
       },
@@ -12613,16 +13928,19 @@ const MANIFEST_SNAPSHOT = {
             "name": "side",
             "values": [
               {
-                "value": "left"
+                "value": "left",
+                "tier": "opt-in"
               },
               {
-                "value": "right"
+                "value": "right",
+                "tier": "default"
               },
               {
                 "value": "top"
               },
               {
-                "value": "bottom"
+                "value": "bottom",
+                "tier": "opt-in"
               }
             ]
           },
@@ -13117,13 +14435,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "scale",
             "values": [
               {
-                "value": "linear"
+                "value": "linear",
+                "tier": "default"
               },
               {
-                "value": "log"
+                "value": "log",
+                "tier": "opt-in"
               },
               {
-                "value": "quantile"
+                "value": "quantile",
+                "tier": "opt-in"
               }
             ]
           },
@@ -13344,7 +14665,29 @@ const MANIFEST_SNAPSHOT = {
             "name": "text"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "info",
+                "tier": "opt-in"
+              },
+              {
+                "value": "success",
+                "tier": "opt-in"
+              },
+              {
+                "value": "warning",
+                "tier": "opt-in"
+              },
+              {
+                "value": "danger",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -13390,7 +14733,33 @@ const MANIFEST_SNAPSHOT = {
             "name": "error"
           },
           {
-            "name": "inputmode"
+            "name": "inputmode",
+            "values": [
+              {
+                "value": "text"
+              },
+              {
+                "value": "decimal"
+              },
+              {
+                "value": "numeric"
+              },
+              {
+                "value": "tel"
+              },
+              {
+                "value": "search"
+              },
+              {
+                "value": "email"
+              },
+              {
+                "value": "url"
+              },
+              {
+                "value": "none"
+              }
+            ]
           },
           {
             "name": "label"
@@ -13491,7 +14860,24 @@ const MANIFEST_SNAPSHOT = {
             "required": true
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "pending"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -13523,7 +14909,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "searchPlaceholder"
           },
           {
-            "name": "statusFilter"
+            "name": "statusFilter",
+            "values": [
+              {
+                "value": "all"
+              },
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -13565,7 +14968,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "printable"
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           }
         ]
       },
@@ -13597,7 +15017,27 @@ const MANIFEST_SNAPSHOT = {
             "name": "exportable"
           },
           {
-            "name": "filter"
+            "name": "filter",
+            "values": [
+              {
+                "value": ""
+              },
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           },
           {
             "name": "hrefPattern",
@@ -13810,7 +15250,21 @@ const MANIFEST_SNAPSHOT = {
             "name": "label"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "transparent",
+                "tier": "opt-in"
+              },
+              {
+                "value": "blur",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -14439,6 +15893,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -14644,7 +16102,15 @@ const MANIFEST_SNAPSHOT = {
             "name": "current"
           },
           {
-            "name": "cycle"
+            "name": "cycle",
+            "values": [
+              {
+                "value": "monthly"
+              },
+              {
+                "value": "annual"
+              }
+            ]
           },
           {
             "name": "cycleToggle",
@@ -15359,6 +16825,10 @@ const MANIFEST_SNAPSHOT = {
               {
                 "value": "dot-grid",
                 "tier": "default"
+              },
+              {
+                "value": "noise",
+                "tier": "alternative"
               }
             ]
           }
@@ -17313,18 +18783,23 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
 //
 // REQUIRED-ATTR (ADR-0108 D5 / gh#3221): a manifest-declared `required: true` prop with no matching attribute set on the occurrence at all.
 //
-// severity: 'warn' here governs ONLY `npm run lint`'s bare-repo-shaped
-// advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
+// severity: 'warn' here governs `npm run lint`'s bare-repo-shaped
+// advisory bank (ADR-0040 unchanged) AND the lab-posture write-time hook
 // (packages/plugins/adia-ui-factory/scripts/lab-posture-guard.mjs,
-// LLD-0019 C4) does not read this field — a lab-posture write denies on
-// ANY finding from these same matcher functions regardless of severity
+// LLD-0019 C4 amendment, gh#3236) — unlike every sibling rule in this
+// family, this one IS wired into the hook's write-time pass but never
+// denies: a finding surfaces as a non-blocking `hookSpecificOutput.
+// additionalContext` on a "allow" decision instead (conductor ruling,
+// gh#3221, 2026-09-04: "a false-positive rule never blocks authoring at
+// the keystroke"). The other four rules in this family stay severity-
+// blind at write time — ANY of their findings still denies unconditionally
 // (ADR-0108 D5: "PreToolUse deny... error under the lab hook").
 
 
@@ -17544,10 +19019,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -17663,6 +19134,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -17726,6 +19200,9 @@ const MANIFEST_SNAPSHOT = {
               }
             ]
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant",
             "values": [
@@ -18459,13 +19936,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "precision",
             "values": [
               {
-                "value": "date"
+                "value": "date",
+                "tier": "default"
               },
               {
-                "value": "minute"
+                "value": "minute",
+                "tier": "opt-in"
               },
               {
-                "value": "second"
+                "value": "second",
+                "tier": "opt-in"
               }
             ]
           },
@@ -18989,6 +20469,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -19681,7 +21165,30 @@ const MANIFEST_SNAPSHOT = {
             "name": "to"
           },
           {
-            "name": "value"
+            "name": "value",
+            "values": [
+              {
+                "value": "today"
+              },
+              {
+                "value": "7d"
+              },
+              {
+                "value": "30d"
+              },
+              {
+                "value": "90d"
+              },
+              {
+                "value": "qtd"
+              },
+              {
+                "value": "ytd"
+              },
+              {
+                "value": "custom"
+              }
+            ]
           }
         ]
       },
@@ -19814,16 +21321,19 @@ const MANIFEST_SNAPSHOT = {
             "name": "side",
             "values": [
               {
-                "value": "left"
+                "value": "left",
+                "tier": "opt-in"
               },
               {
-                "value": "right"
+                "value": "right",
+                "tier": "default"
               },
               {
                 "value": "top"
               },
               {
-                "value": "bottom"
+                "value": "bottom",
+                "tier": "opt-in"
               }
             ]
           },
@@ -20318,13 +21828,16 @@ const MANIFEST_SNAPSHOT = {
             "name": "scale",
             "values": [
               {
-                "value": "linear"
+                "value": "linear",
+                "tier": "default"
               },
               {
-                "value": "log"
+                "value": "log",
+                "tier": "opt-in"
               },
               {
-                "value": "quantile"
+                "value": "quantile",
+                "tier": "opt-in"
               }
             ]
           },
@@ -20534,18 +22047,40 @@ const MANIFEST_SNAPSHOT = {
                 "value": "off"
               },
               {
-                "value": "polite"
+                "value": "polite"
+              },
+              {
+                "value": "assertive"
+              }
+            ]
+          },
+          {
+            "name": "text"
+          },
+          {
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "info",
+                "tier": "opt-in"
+              },
+              {
+                "value": "success",
+                "tier": "opt-in"
+              },
+              {
+                "value": "warning",
+                "tier": "opt-in"
               },
               {
-                "value": "assertive"
+                "value": "danger",
+                "tier": "opt-in"
               }
             ]
-          },
-          {
-            "name": "text"
-          },
-          {
-            "name": "variant"
           }
         ]
       },
@@ -20591,7 +22126,33 @@ const MANIFEST_SNAPSHOT = {
             "name": "error"
           },
           {
-            "name": "inputmode"
+            "name": "inputmode",
+            "values": [
+              {
+                "value": "text"
+              },
+              {
+                "value": "decimal"
+              },
+              {
+                "value": "numeric"
+              },
+              {
+                "value": "tel"
+              },
+              {
+                "value": "search"
+              },
+              {
+                "value": "email"
+              },
+              {
+                "value": "url"
+              },
+              {
+                "value": "none"
+              }
+            ]
           },
           {
             "name": "label"
@@ -20692,7 +22253,24 @@ const MANIFEST_SNAPSHOT = {
             "required": true
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "pending"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -20724,7 +22302,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "searchPlaceholder"
           },
           {
-            "name": "statusFilter"
+            "name": "statusFilter",
+            "values": [
+              {
+                "value": "all"
+              },
+              {
+                "value": "available"
+              },
+              {
+                "value": "connected"
+              },
+              {
+                "value": "error"
+              },
+              {
+                "value": "coming-soon"
+              }
+            ]
           }
         ]
       },
@@ -20766,7 +22361,24 @@ const MANIFEST_SNAPSHOT = {
             "name": "printable"
           },
           {
-            "name": "status"
+            "name": "status",
+            "values": [
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           }
         ]
       },
@@ -20798,7 +22410,27 @@ const MANIFEST_SNAPSHOT = {
             "name": "exportable"
           },
           {
-            "name": "filter"
+            "name": "filter",
+            "values": [
+              {
+                "value": ""
+              },
+              {
+                "value": "draft"
+              },
+              {
+                "value": "open"
+              },
+              {
+                "value": "paid"
+              },
+              {
+                "value": "past-due"
+              },
+              {
+                "value": "void"
+              }
+            ]
           },
           {
             "name": "hrefPattern",
@@ -21011,7 +22643,21 @@ const MANIFEST_SNAPSHOT = {
             "name": "label"
           },
           {
-            "name": "variant"
+            "name": "variant",
+            "values": [
+              {
+                "value": "default",
+                "tier": "default"
+              },
+              {
+                "value": "transparent",
+                "tier": "opt-in"
+              },
+              {
+                "value": "blur",
+                "tier": "opt-in"
+              }
+            ]
           }
         ]
       },
@@ -21640,6 +23286,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -21845,7 +23495,15 @@ const MANIFEST_SNAPSHOT = {
             "name": "current"
           },
           {
-            "name": "cycle"
+            "name": "cycle",
+            "values": [
+              {
+                "value": "monthly"
+              },
+              {
+                "value": "annual"
+              }
+            ]
           },
           {
             "name": "cycleToggle",
@@ -22560,6 +24218,10 @@ const MANIFEST_SNAPSHOT = {
               {
                 "value": "dot-grid",
                 "tier": "default"
+              },
+              {
+                "value": "noise",
+                "tier": "alternative"
               }
             ]
           }
@@ -24513,7 +26175,7 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
@@ -24672,10 +26334,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -24788,6 +26446,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "multi"
           },
+          {
+            "name": "options"
+          },
           {
             "name": "question"
           },
@@ -24827,6 +26488,9 @@ const MANIFEST_SNAPSHOT = {
           {
             "name": "size"
           },
+          {
+            "name": "suggestions"
+          },
           {
             "name": "variant"
           }
@@ -25380,6 +27044,10 @@ const MANIFEST_SNAPSHOT = {
           },
           {
             "name": "thinking"
+          },
+          {
+            "name": "thinkingBudget",
+            "attribute": "thinking-budget"
           }
         ]
       },
@@ -27129,6 +28797,10 @@ const MANIFEST_SNAPSHOT = {
       {
         "tag": "pagination-ui",
         "attrs": [
+          {
+            "name": "noLandmark",
+            "attribute": "no-landmark"
+          },
           {
             "name": "page"
           },
@@ -28963,7 +30635,131 @@ RULES.push({
 }
 
 {
-// GENERATED — do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
+// packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
+// Rebuild: node scripts/build/gen-lab-posture-rules.mjs
+// Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
+//
+// UNKNOWN-SLOT (gh#3222): a `slot="…"` value that is not a slot name any component in the installed manifest declares. Name only, never placement: see trimForEmbed's own `slot-names` branch for why there is no per-tag/nearest-ancestor check.
+//
+// severity: 'error' here governs ONLY `npm run lint`'s bare-repo-shaped
+// advisory bank (ADR-0040 unchanged). The lab-posture write-time hook
+// (packages/plugins/adia-ui-factory/scripts/lab-posture-guard.mjs,
+// LLD-0019 C4) does not read this field — a lab-posture write denies on
+// ANY finding from these same matcher functions regardless of severity
+// (ADR-0108 D5: "PreToolUse deny... error under the lab hook").
+
+
+const MANIFEST_SNAPSHOT = {
+    "slotNames": [
+      "action",
+      "action-leading",
+      "actions",
+      "actions-leading",
+      "add",
+      "after",
+      "after-invoice-history",
+      "aside",
+      "attach",
+      "badge",
+      "bar",
+      "before",
+      "before-plan-picker",
+      "body",
+      "breadcrumb",
+      "canvas",
+      "caption",
+      "caret",
+      "change",
+      "chart",
+      "charts",
+      "chip",
+      "chrome",
+      "cite",
+      "close",
+      "complete",
+      "content",
+      "copy",
+      "cursor",
+      "customer-block",
+      "default",
+      "description",
+      "digit",
+      "empty",
+      "error",
+      "eyebrow",
+      "footer",
+      "header",
+      "header-actions",
+      "heading",
+      "hint",
+      "icon",
+      "icon-trailing",
+      "image",
+      "kpis",
+      "label",
+      "leading",
+      "lede",
+      "legal",
+      "loading",
+      "media",
+      "meta",
+      "model",
+      "name",
+      "off",
+      "on",
+      "panel",
+      "popover",
+      "prefix",
+      "presets",
+      "primary",
+      "remit-to-block",
+      "scope",
+      "secondary",
+      "send",
+      "skeleton",
+      "status",
+      "subtitle",
+      "suffix",
+      "summary",
+      "table",
+      "text",
+      "time",
+      "title",
+      "toolbar",
+      "track",
+      "trailing",
+      "trigger",
+      "value",
+      "zoom"
+    ]
+  };
+
+
+RULES.push({
+  id: "UNKNOWN-SLOT",
+  severity: "error",
+  scope: 'shared',
+  fileTypes: MARKUP_EXT,
+  match(text, path = '') {
+    return slotNameFindings(text, MANIFEST_SNAPSHOT, path).map((f) => ({ line: f.line, snippet: f.snippet, why: f.why }));
+  },
+  fix: null, // a manifest-drift violation names the correction in its own diagnostic; applying it is a judgment call the agent makes, not a mechanical rewrite
+  fixtures: {
+    "smelly": [
+      "<span slot=\"not-a-real-slot-name\"></span>"
+    ],
+    "clean": [
+      "<span slot=\"action\"></span>",
+      "<span slot=\"${s.section}\"></span>",
+      "<span slot=\"{s.section}\"></span>"
+    ]
+  },
+});
+}
+
+{
+// GENERATED, do not hand-edit. Source: packages/web-components/**/*.a2ui.json + yaml,
 // packages/web-modules/**/*.a2ui.json + yaml (ADR-0108 D5 / LLD-0019 C5).
 // Rebuild: node scripts/build/gen-lab-posture-rules.mjs
 // Freshness gate: node scripts/verify/check-lab-posture-rules-fresh.mjs --verify
@@ -29024,10 +30820,6 @@ const MANIFEST_SNAPSHOT = {
         "tag": "admin-roster-ui",
         "attrs": []
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": []
@@ -30580,6 +32372,120 @@ RULES.push({
 {
 
 
+// gh#3627 (follow-up to gh#3604): select-ui's avatar `<img>` shipped with no
+// width/height HTML attributes, sizing purely dependent on select.css's own
+// rule loading before first paint. select.css already carried explicit
+// width/height on that selector (packages/web-components/components/select/
+// select.css's `img[data-option-avatar]` rule), nothing was wrong with the
+// CSS. The gap was the OTHER half of the contract: an `<img>` stamped by a
+// component's own render logic needs its own width/height (or an inline
+// aspect-ratio) so the box is reserved from HTML parse time, independent of
+// when that component's stylesheet actually applies (a per-route CSS bundle
+// can arrive after first paint, gh#3357). gh#3604's fix added exactly that
+// to the three template-literal `<img>` sites in select.class.js; this rule
+// keeps a fourth one from shipping the same way.
+//
+// Scope, deliberately narrow: ONLY a literal `<img ...>` tag authored
+// inside a JS template-literal/string in packages/web-components or
+// packages/web-modules, the shape that actually regressed. Three things
+// this rule does NOT catch, on purpose:
+//   1. `document.createElement('img')` call sites (avatar.class.js,
+//      image.class.js, integration-card.class.js), each of those adopts
+//      the img into a host element that already carries its own explicit
+//      size (avatar-ui's :host sizing tokens, image-ui's own #applySize(),
+//      a fixed-size logo slot), so the box is reserved by the PARENT
+//      regardless of the img's own attributes. Flagging every
+//      createElement('img') would nag on a legitimate, already-reserved
+//      pattern this framework uses on purpose, exactly the "sized by a
+//      parent's grid cell" false positive this rule is written to avoid.
+//   2. Demo/example/gallery markup (`.html`, `.yaml` examples, `.a2ui.json`),
+//      illustrative content already exempt from render-timing concerns
+//      (HARDCODED-OPEN's `.examples.html` precedent is the same reasoning).
+//   3. `apps/`, `playgrounds/`, `catalog/`, consumer/demo surfaces, not
+//      framework source. NO-LOCAL-ESCAPE-HTML (gh#3641/gh#3678) is the
+//      precedent for widening a framework-scoped rule to a consumer tree
+//      only once a ticket finds and migrates a real instance there; no such
+//      instance exists for this rule yet.
+// An author who has a real reason an img here doesn't need its own box
+// (e.g. deliberately sized by an ancestor CSS grid/flex cell) can still
+// suppress a specific finding with the standard engine-wide
+// adia-lint-disable comment (SUPPRESS_RE/suppressionFor, primitives.mjs).
+//
+// Known imprecision (documented, not fixed here): like every other
+// CODE_EXT rule in this bank, comment-stripping is line-based and doesn't
+// understand string literals, so a hardcoded `src="https://..."` URL on
+// the SAME source line as `width=`/`height=` would truncate the line at
+// `//` and could false-positive. Every real instance in this corpus today
+// interpolates `src` from a variable (`src="${escapeHTML(x)}"`), not a
+// literal URL, so this hasn't triggered in practice; a literal `//` URL
+// sharing a line with the dimension attributes is the one shape to watch
+// for in review.
+//
+// gh#3985 (a second consequence of the same string-literal-blind gap
+// above): a plain JS string mentioning markup IN PROSE, not authoring it,
+// still satisfies `<img\b[^>]*?>`, PR #3977's own vitest-setup error
+// message ("...a <link>, <script> or " + "<img> src), turn that loading
+// off...") matched a bare, zero-attribute `<img>` and read as an
+// error-severity finding on a file that emits no DOM at all. Every REAL
+// `<img>` this rule was written to catch (gh#3604's select.class.js
+// sites, this corpus's only non-comment instances) sets at least one real
+// attribute (`src=` at minimum: an img with none renders nothing, so
+// hand-authored markup never omits it); a bare `<img>`/`<img >` with zero
+// `name=value` pairs is never genuine output markup in this corpus, only
+// prose describing one, so HAS_ANY_ATTR below gates the match the same
+// way HAS_WIDTH/HAS_HEIGHT already gate the dimension check. This is a
+// narrow, corpus-verified discriminator, not a full JS/HTML parse (an
+// attribute-bearing `<img width=100>` still mentioned in a doc comment or
+// prose sentence would still false-positive; none exists in this corpus
+// today, watch for it in review the same way the paragraph above already
+// asks).
+const IMG_TAG_RE = /<img\b[^>]*?>/gis;
+const HAS_WIDTH = /\bwidth\s*=/i;
+const HAS_HEIGHT = /\bheight\s*=/i;
+const HAS_ASPECT_RATIO = /aspect-ratio\s*:/i;
+const HAS_ANY_ATTR = /\S=/;
+const CORPUS_PATH_RE = /packages[\\/](web-components|web-modules)[\\/]/;
+
+
+RULES.push({
+  id: 'IMG-DIMENSION-RESERVE',
+  severity: 'error',
+  scope: 'shared',
+  fileTypes: CODE_EXT,
+  match(text, path) {
+    const out = [];
+    const normalized = (path || '').replace(/\\/g, '/');
+    if (!CORPUS_PATH_RE.test(normalized)) return out;
+    if (normalized.endsWith('.test.js')) return out;
+
+    const rawLines = text.split('\n');
+    const blanked = stripCommentLines(text, ext(path))
+      .map((l) => l.stripped)
+      .join('\n');
+
+    IMG_TAG_RE.lastIndex = 0;
+    let m;
+    while ((m = IMG_TAG_RE.exec(blanked))) {
+      const tag = m[0];
+      if (!HAS_ANY_ATTR.test(tag)) continue; // gh#3985: no attribute at all, prose mentioning <img>, not authored markup
+      if ((HAS_WIDTH.test(tag) && HAS_HEIGHT.test(tag)) || HAS_ASPECT_RATIO.test(tag)) continue;
+      const lineNo = lineOf(blanked, m.index);
+      out.push({
+        line: lineNo,
+        snippet: (rawLines[lineNo - 1] || tag).trim().slice(0, 90),
+        why: 'an <img> stamped by component render logic needs its own width/height (or an inline aspect-ratio) so the box is reserved before CSS applies (gh#3604 CLS)',
+      });
+    }
+    return out;
+  },
+});
+}
+
+{
+
+
+const SHELLS = new Set(['admin-shell', 'chat-shell', 'editor-shell', 'app-shell-ui', 'adia-chat-ui', 'adia-editor-ui']);
+
 
 RULES.push({
   id: 'LEGACY-SHELL',
@@ -30587,18 +32493,50 @@ RULES.push({
   scope: 'shared',
   fileTypes: [],
   match(text, path) {
-    const out = [];
-    for (const { lineNo, raw, stripped } of stripCommentLines(text, ext(path))) {
-      if (!stripped.trim()) continue;
-      if (RE.LEGACY_SHELL.test(stripped)) {
-        out.push({
-          line: lineNo,
-          snippet: raw.trim().slice(0, 90),
-          why: 'retired shell shape (ADR-0024, v0.4.0) — use the bespoke tag (chat-thread / chat-composer / chat-empty · admin-sidebar / admin-command · editor-canvas · pane-ui)',
-        });
+    // Component yaml contains contract prose and A2UI JSON, not live HTML.
+    // Match syntax in source rather than retirement examples or name prefixes.
+    const fileExt = ext(path);
+    if (YAML_EXT.includes(fileExt)) return [];
+    const lines = stripCommentLines(text, fileExt);
+    const source = markupScanSurface(lines.map(({ stripped }) => stripped).join('\n'));
+    const found = new Set();
+    for (const { attrs, tag, line } of tagOccurrences(source, path)) {
+      if (Object.keys(attrs).some((name) => RE.LEGACY_SHELL.test(name)) ||
+          (tag === 'dialog' && Object.hasOwn(attrs, 'data-command'))) found.add(line);
+    }
+    // aside-ui remains a supported in-page slot stub. Only its use as a
+    // shell region is retired; native wrappers preserve that shell context.
+    for (const { tag, parentTag, line } of tagTree(source, path)) {
+      if (tag === 'aside-ui' && SHELLS.has(parentTag)) found.add(line);
+    }
+    const referenceSurfaces = [];
+    if (CODE_EXT.includes(fileExt) || STYLE_EXT.includes(fileExt)) {
+      referenceSurfaces.push({ text: source, line: 1 });
+    } else {
+      // Inline executable blocks need the same coverage as separate files.
+      // Scan their bodies only, so selectors quoted in page prose stay clean.
+      for (const block of source.matchAll(/<(script|style)\b[^>]*>([\s\S]*?)<\/\1\s*>/gi)) {
+        const start = block.index + block[0].indexOf('>') + 1;
+        const body = stripCommentLines(block[2], block[1].toLowerCase() === 'script' ? '.js' : '.css')
+          .map(({ stripped }) => stripped).join('\n');
+        referenceSurfaces.push({ text: body, line: lineOf(source, start) });
       }
     }
-    return out;
+    // Keep selector reads and DOM attribute writes covered as well as
+    // markup. Exact attribute names preserve unrelated namespaced hooks.
+    const references = /\[\s*([\w-]+)(?=[\s\]=~|^$*])|\b(?:setAttribute|getAttribute|hasAttribute|removeAttribute|toggleAttribute)\s*\(\s*['"]([\w-]+)['"]/g;
+    for (const surface of referenceSurfaces) {
+      for (const match of surface.text.matchAll(references)) {
+        if (RE.LEGACY_SHELL.test(match[1] || match[2])) {
+          found.add(surface.line + lineOf(surface.text, match.index) - 1);
+        }
+      }
+    }
+    return [...found].sort((a, b) => a - b).map((line) => ({
+      line,
+      snippet: lines[line - 1].raw.trim().slice(0, 90),
+      why: 'retired shell shape (ADR-0024, v0.4.0): use the bespoke tag (chat-thread / chat-composer / chat-empty · admin-sidebar / admin-command · editor-canvas · pane-ui)',
+    }));
   },
 });
 }
@@ -30682,6 +32620,66 @@ RULES.push({
 {
 
 
+// gh#3641: escapeHTML was independently defined seven times across the
+// framework corpus (six components plus chat-shell, one of the seven
+// spelled `escapeHtml`, case varies, tour.class.js, three of the seven
+// leaving quotes unescaped (an attribute-breakout XSS vector). The
+// shared, quote-safe implementation now lives at
+// packages/web-components/core/html-escape.js; this rule refuses a new
+// local `function escapeHtml(`/`escapeHTML(` (any casing) inside the
+// framework corpus (packages/web-components, packages/web-modules) so
+// the fix cannot re-fragment the way it already did once (twice: the
+// original 5-variant fragmentation, then a 7th instance under a
+// different casing that a case-sensitive first version of this very
+// rule could not see). Case-insensitive on purpose: the defect class is
+// "a local escapeHTML-shaped helper", not one exact spelling.
+// gh#3678: five more local copies turned up in apps/ (construct-canvas,
+// genui), two of them quote-unsafe, the same attribute-breakout defect
+// class this rule was written for. This scope note previously said
+// consumer app code was exempt because it "owns its own copy of a value
+// this small", that call was reversed by conductor ruling (gh#3678
+// resolution 2: migrate, not wontfix), so CORPUS_PATH_RE now also
+// matches apps/. playgrounds/ and catalog/ remain out of scope until a
+// ticket similarly finds and migrates a local copy there.
+// `declare function` is a .d.ts ambient signature, not a re-implementation:
+// html-escape.d.ts's own `export declare function escapeHTML(...)` must
+// not flag itself. Only a real function body is the defect this rule
+// exists for. The lookbehind requires `\s+` (one or more), not `\s`
+// (exactly one), so `declare  function` (extra space) or a line break
+// between the two keywords still exempts the ambient signature.
+const LOCAL_DEF_RE = /(?<!declare\s+)\bfunction\s+escapeHtml\s*\(/i;
+const OWNER_PATH_RE = /packages[\\/]web-components[\\/]core[\\/]html-escape\.(js|d\.ts)$/;
+const CORPUS_PATH_RE = /(?:packages[\\/](web-components|web-modules)|(?:^|[\\/])apps)[\\/]/;
+
+
+RULES.push({
+  id: 'NO-LOCAL-ESCAPE-HTML',
+  severity: 'error',
+  scope: 'shared',
+  fileTypes: CODE_EXT,
+  match(text, path) {
+    const out = [];
+    const normalized = path.replace(/\\/g, '/');
+    if (!CORPUS_PATH_RE.test(normalized)) return out;
+    if (OWNER_PATH_RE.test(normalized)) return out;
+    for (const { lineNo, raw, stripped } of stripCommentLines(text, ext(path))) {
+      if (!stripped.trim()) continue;
+      if (LOCAL_DEF_RE.test(stripped)) {
+        out.push({
+          line: lineNo,
+          snippet: raw.trim().slice(0, 90),
+          why: 'do not redefine escapeHTML locally, import { escapeHTML } from the core barrel (packages/web-components/core/html-escape.js), gh#3641',
+        });
+      }
+    }
+    return out;
+  },
+});
+}
+
+{
+
+
 // Parity with the two retired scripts: forge-lint recognized only
 // `forge-lint: foundation`, adia-lint only `adia-lint: foundation` — never
 // either tag under the other script. Since this rule is shared, the active
@@ -30694,6 +32692,39 @@ function optInTagsFor(scopes) {
   return ['forge-lint', 'adia-lint'];
 }
 
+// gh#3839: a `var(--token, <literal>)` fallback is still a shipped literal
+// whenever the named token is undefined: RAW-COLOR must see inside it.
+// `light-dark(<light>, <dark>)` is the one legitimate literal-pair form (both
+// arms are meant to be literal color values by design), so its call is
+// stripped out, balanced on parens, so a color function nested in either
+// arm (e.g. `light-dark(oklch(...), oklch(...))`) is stripped too, before
+// the rest of the declaration (var() fallbacks included) is scanned as
+// plain text. Custom-property names never match HEXCOLOR/FUNCCOLOR, so
+// leaving `var(` unstripped carries no risk of matching the reference
+// itself, only a literal actually sitting in its fallback.
+function stripBalancedCalls(text, fnName) {
+  const token = `${fnName}(`;
+  let result = '';
+  let i = 0;
+  while (i < text.length) {
+    const idx = text.indexOf(token, i);
+    if (idx === -1) {
+      result += text.slice(i);
+      break;
+    }
+    result += text.slice(i, idx);
+    let depth = 1;
+    let j = idx + token.length;
+    while (j < text.length && depth > 0) {
+      if (text[j] === '(') depth += 1;
+      else if (text[j] === ')') depth -= 1;
+      j += 1;
+    }
+    i = j;
+  }
+  return result;
+}
+
 
 RULES.push({
   id: 'RAW-COLOR',
@@ -30709,8 +32740,8 @@ RULES.push({
       for (const decl of stripped.split(';')) {
         const d = decl.trim();
         if (!d || d.startsWith('//') || d.startsWith('/*') || d.startsWith('*')) continue;
-        if (decl.includes('var(') || decl.includes('light-dark(')) continue;
-        if (RE.HEXCOLOR.test(decl) || RE.FUNCCOLOR.test(decl)) {
+        const scanText = decl.includes('light-dark(') ? stripBalancedCalls(decl, 'light-dark') : decl;
+        if (RE.HEXCOLOR.test(scanText) || RE.FUNCCOLOR.test(scanText)) {
           out.push({
             line: lineNo,
             snippet: raw.trim().slice(0, 90),
@@ -30775,20 +32806,48 @@ RULES.push({
 
 
 
+/**
+ * SCOPE-EXTENT (gh#3718): error severity, with the pre-existing corpus of
+ * findings downgraded to warn via a checked-in baseline rather than by a
+ * blanket severity.json entry.
+ *
+ * The blanket downgrade is what this replaces. It made every site invisible,
+ * including sites added after the downgrade, so the rule could not do the one
+ * job it was written for. The baseline inverts that: known sites stay warn,
+ * anything not in the baseline errors.
+ *
+ * Sites are keyed on the normalized text of the matched block, per file, as a
+ * MULTISET, not on line numbers. A line-keyed baseline goes stale whenever an
+ * unrelated edit shifts a selector down, which reports a pre-existing finding
+ * as new for a reason that has nothing to do with this rule. The multiset also
+ * keeps duplicates, so a second identical violation in an already-baselined
+ * file exceeds its entry and errors, which a per-file count would miss.
+ */
+
 RULES.push({
   id: 'SCOPE-EXTENT',
   severity: 'error',
   scope: 'shared',
   fileTypes: STYLE_EXT,
-  match(text) {
+  match(text, path) {
     const out = [];
     const re = new RegExp(RE.SCOPE_EXTENT.source, 'gs');
+    // A local copy, consumed as we go: each baselined entry excuses exactly
+    // one finding, so the second identical violation in the same file finds
+    // the entry already spent and reports at full severity.
+    const remaining = [...baselineFor(path)];
     let m;
     while ((m = re.exec(text))) {
+      const key = normalizeMatch(m[0]);
+      const at = remaining.indexOf(key);
+      const baselined = at !== -1;
+      if (baselined) remaining.splice(at, 1);
       out.push({
         line: lineOf(text, m.index),
         snippet: ':scope { … width/height … }',
         why: "a primitive is size-agnostic — let the consumer own width/height; don't set extent on :scope",
+        // Per-finding override; absent means the rule's own severity applies.
+        ...(baselined ? { severity: 'warn' } : {}),
       });
     }
     return out;