@adia-ai/adia-ui-forge 0.8.60 → 0.8.61

package/scripts/lint-rules.generated.mjs

@@ -1,5 +1,5 @@
 // GENERATED, do not hand-edit. Sources:
-//   scripts/lint/engine/primitives.mjs, scripts/lint/engine/run.mjs
+//   scripts/lint/engine/primitives.mjs, scripts/lint/engine/run.mjs, scripts/lint/engine/baseline.mjs
 //   scripts/lint/rules/consumer/genui-doc.mjs
 //   scripts/lint/rules/consumer/hardcoded-open.mjs
 //   scripts/lint/rules/consumer/llm-key-in-client.mjs
@@ -15,7 +15,6 @@
 //   scripts/lint/rules/generated/composition/admin-content.mjs
 //   scripts/lint/rules/generated/composition/admin-entity-item.mjs
 //   scripts/lint/rules/generated/composition/admin-roster.mjs
-//   scripts/lint/rules/generated/composition/admin-scroll.mjs
 //   scripts/lint/rules/generated/composition/admin-settings.mjs
 //   scripts/lint/rules/generated/composition/admin-shell.mjs
 //   scripts/lint/rules/generated/composition/admin-sidebar.mjs
@@ -219,8 +218,24 @@ function lineOf(text, offset) {
   return n;
 }
 
-/** Suppression comment recognized on the line itself or the line before a finding. */
-const SUPPRESS_RE = /\/\*\s*adia-lint-disable\s+([A-Z0-9-]+)(?:\s*—\s*(.*?))?\s*\*\//;
+/**
+ * Suppression comment recognized on the line itself or the line before a finding.
+ *
+ * gh#3715: the reason separator accepts an em dash, a colon, or a
+ * space-padded hyphen. It used to accept ONLY the em dash, which collided
+ * head-on with `check:em-dash-added-lines` (gh#3767): that gate forbids an
+ * em dash on any added line, so obeying it made a reasoned suppression
+ * impossible to write. Worse, the failure was silent rather than loud. A
+ * hyphen did not merely lose the reason, it made the WHOLE directive fail
+ * to match, so the suppression quietly did nothing and the finding stayed
+ * live with no diagnostic anywhere.
+ *
+ * The hyphen form requires whitespace on both sides. Rule ids contain
+ * hyphens themselves (SHELL-RESIZE), and the id class is greedy, so a bare
+ * `-` with no padding would be ambiguous with the id it follows.
+ */
+const SUPPRESS_RE =
+  /\/\*\s*adia-lint-disable\s+([A-Z0-9-]+)(?:(?:\s*[\u2014:]\s*|\s+-\s+)(.*?))?\s*\*\//;
 
 /** Given all raw lines and a finding's line number, is it suppressed, and was a reason given? */
 function suppressionFor(rawLines, lineNo, ruleId) {
@@ -251,6 +266,47 @@ function allSuppressions(rawLines) {
   return out;
 }
 
+/**
+ * Loose match for anything that READS as a suppression-directive comment:
+ * opens `/* adia-lint-disable`, closes on the same line, regardless of
+ * whether its body satisfies SUPPRESS_RE's own strict grammar. Deliberately
+ * permissive: the only anchor is the shared prefix both regexes start on,
+ * so any separator/id/reason shape SUPPRESS_RE would refuse still gets
+ * caught here.
+ */
+const LOOSE_SUPPRESS_RE = /\/\*\s*adia-lint-disable\b.*?\*\//g;
+
+/**
+ * gh#4161: SUPPRESS_RE is both matcher and detector, so a directive it
+ * refuses produces no suppression, no SUPPRESS-NO-REASON, and no
+ * diagnostic anywhere, silently invisible. gh#3868 fixed the hyphen-
+ * separator case and gh#3871 swept existing inert directives; neither
+ * closed the general class. This is the loose scan that closes it: every
+ * candidate suppression-directive comment (per LOOSE_SUPPRESS_RE above)
+ * that the STRICT regex refuses to parse, one entry per hit, naming the
+ * line and a trimmed snippet, so the engine (run.mjs) can turn each into a
+ * SUPPRESS-MALFORMED (warn) finding.
+ *
+ * `strictRe` is injectable (defaults to the live SUPPRESS_RE) so a test can
+ * prove this scan against a narrower, superseded grammar too, e.g.
+ * gh#3868's own pre-fix, em-dash-only regex, not only today's.
+ */
+function malformedSuppressions(rawLines, strictRe = SUPPRESS_RE) {
+  const out = [];
+  rawLines.forEach((line, idx) => {
+    LOOSE_SUPPRESS_RE.lastIndex = 0;
+    let m;
+    while ((m = LOOSE_SUPPRESS_RE.exec(line))) {
+      const candidate = m[0];
+      const re = new RegExp(strictRe.source);
+      if (!re.test(candidate)) {
+        out.push({ lineNo: idx + 1, snippet: candidate.trim().slice(0, 90) });
+      }
+    }
+  });
+  return out;
+}
+
 const RE = {
   HEXCOLOR: /#[0-9a-fA-F]{3,8}\b/,
   FUNCCOLOR: /\b(?:rgba?|hsla?|oklch|oklab|lab|lch)\s*\(/,
@@ -265,6 +321,11 @@ const RE = {
   SSR_SIGNAL: /['"]use client['"]|\buseEffect\b|\bonMounted\b|\bonMount\b|from\s+['"](?:react|vue|svelte|next|nuxt|@sveltejs|astro)|getServerSideProps|defineNuxtComponent/i,
   TOPLEVEL_IMPORT: /^\s*import\s+['"]@adia-ai\/web-components['"]\s*;?\s*$/m,
   OVERLAY_OPEN: /<(?:modal|drawer)-ui\b[^>]*?(?<![:.\w])\bopen\b(?!\s*=\s*\{)/,
+  // gh#3888: a real @scope at-rule opening, never a bare substring match
+  // on the word "@scope" (which also matches prose in a comment, the
+  // exact loophole this fixes: MISSING-SCOPE's old `text.includes('@scope')`
+  // passed any file whose comments merely mentioned the word).
+  SCOPE_BLOCK: /@scope\s*\(/,
 };
 
 /** Per-declaration split on `;` — mirrors both Python scripts' `line.split(';')` loops. */
@@ -737,6 +798,32 @@ function markupScanSurface(text, path = '') {
   return surface;
 }
 
+const CSS_COMMENT_RE = /\/\*[\s\S]*?(?:\*\/|$)/g;
+
+/**
+ * gh#4008: the text `RE.SCOPE_BLOCK` (MISSING-SCOPE) actually tests, BLANKING
+ * (not deleting: line numbers must survive) every `/* ... *\/` CSS comment
+ * range the same way `markupScanSurface`'s HTML_COMMENT_RE already blanks
+ * markup comments above. gh#3888 closed "`@scope` appearing only in a bare
+ * word inside a comment must not satisfy MISSING-SCOPE" by switching the
+ * rule's substring test to a real at-rule regex (`/@scope\s*\(/`), but never
+ * blanked the comment itself, so a comment that carries the FULL pattern,
+ * `/* @scope (admin-shell) *\/`, still matches the same regex the raw-text
+ * word never could. An unterminated comment blanks to end-of-file, mirroring
+ * `markupScanSurface`'s own behavior for an unterminated `<!--`.
+ *
+ * Only used where a real, live at-rule (or declaration) is what the caller
+ * means to detect, NOT a general-purpose "strip all CSS comments" helper.
+ * `isFoundationCss`'s `/* forge-lint: foundation *\/` opt-in tag and
+ * missing-scope.mjs's own `PREFIX_SCOPED_RE` are deliberately read straight
+ * out of raw text instead: those tags are AUTHORED inside a comment on
+ * purpose, so blanking comments before reading them would break the very
+ * mechanism they are.
+ */
+function cssCommentBlankedSurface(text) {
+  return text.replace(CSS_COMMENT_RE, (m) => m.replace(/[^\n]/g, ' '));
+}
+
 /**
  * ADR-0108 D5 / LLD-0019 C5: builds lookup tables from a manifest object
  * shaped like `packages/gen-ui/mcp/factory/manifest.js`'s `getManifest()`
@@ -1146,14 +1233,25 @@ function makeLinter(rules, opts = {}) {
       if (rule.scope === 'forge-only' && !isForgeOnlyPath(path)) continue;
       const hits = rule.match(text, path, { scopes }) || [];
       for (const h of hits) {
-        findings.push({ name: rule.id, line: h.line, snippet: h.snippet, why: h.why });
+        findings.push({
+          name: rule.id,
+          line: h.line,
+          snippet: h.snippet,
+          why: h.why,
+          ...(h.severity ? { severity: h.severity } : {}),
+        });
       }
     }
 
     // Suppression syntax (LLD-0016 §Interfaces):
-    // /* adia-lint-disable <rule-id> — <reason> */ on the finding's own line
-    // or the line before it drops that one finding. A bare disable with no
-    // <reason> is itself a finding (SUPPRESS-NO-REASON, warn) — checked
+    // /* adia-lint-disable RULE-ID: reason text */ on the finding's own line
+    // or the line before it drops that one finding. The separator may be a
+    // colon, a space-padded hyphen, or an em dash (SUPPRESS_RE in
+    // primitives.mjs is the one source); the padding on the hyphen is
+    // required because rule ids contain hyphens. Prefer the colon or the
+    // padded hyphen when writing one, since check:em-dash-added-lines
+    // (gh#3767) rejects an em dash on any added line. A bare disable with no
+    // <reason> is itself a finding (SUPPRESS-NO-REASON, warn), checked
     // once per suppression comment in the file, independent of whether it
     // actually suppressed anything this run.
     findings = findings.filter((f) => !suppressionFor(rawLines, f.line, f.name).suppressed);
@@ -1168,6 +1266,24 @@ function makeLinter(rules, opts = {}) {
       }
     }
 
+    // gh#4161: SUPPRESS_RE is both matcher and detector, so a directive it
+    // refuses produces no suppression, no SUPPRESS-NO-REASON, and no
+    // diagnostic at all, silently invisible (gh#3868/gh#3871 each closed
+    // one specific inert shape, never the general class). This loose scan
+    // closes it: every adia-lint-disable-shaped comment the strict grammar
+    // refuses to parse becomes a warn-severity SUPPRESS-MALFORMED finding
+    // naming the file (via the caller) and line, so a malformed directive
+    // is loud instead of vanishing.
+    for (const s of malformedSuppressions(rawLines)) {
+      findings.push({
+        name: 'SUPPRESS-MALFORMED',
+        line: s.lineNo,
+        snippet: s.snippet,
+        why: 'a comment mentioning adia-lint-disable that the strict directive grammar (SUPPRESS_RE) refuses to parse; it suppresses nothing and raises no other diagnostic, fix the <id>/<separator>/<reason> shape or drop the comment',
+        severity: 'warn',
+      });
+    }
+
     findings.sort((a, b) => (a.line - b.line) || (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
     return findings;
   }
@@ -1185,6 +1301,130 @@ function render(path, findings) {
 }
 
 
+/**
+ * scripts/lint/engine/baseline.mjs (gh#3718): the checked-in baseline of
+ * known SCOPE-EXTENT sites, and the normalization that keys them.
+ *
+ * No static `node:fs`/`node:path`/`node:url` import, same as
+ * `scripts/lint/engine/primitives.mjs` and `scripts/lint/engine/run.mjs`,
+ * because this module is inlined into the shared generated bank (LLD-0016
+ * §C5) and copied byte-for-byte to 4 destinations, one of which
+ * (anti-patterns.generated.js) is browser-reachable; check:browser-safe
+ * forbids a top-level `node:*` import there. `process.getBuiltinModule()`
+ * reaches the same builtins with zero import statements, undefined in a
+ * browser, so this fails soft to "excuse nothing" there instead of throwing.
+ *
+ * Loaded once per process. Four outcomes, all of them chosen rather than
+ * incidental:
+ *
+ * 1. No Node fs/path/url builtins (browser context). Not an error: no site
+ *    is excused, so every finding reports at the rule's own severity.
+ * 2. No baseline file on disk. Same as (1).
+ * 3. An unusable baseline file: unparseable, OR parseable but not an object
+ *    with an object "sites" (JSON.parse succeeds on null, on a bare string, on
+ *    a number and on an array, so "it parsed" says nothing about the shape).
+ *    Same as (1), excuse nothing, but WARN loudly naming what was wrong. It
+ *    must not throw: this is one rule's data file, and an uncaught error here
+ *    takes down the whole lint run for every other rule, which is a far worse
+ *    failure than losing the downgrades.
+ * 4. A readable baseline. Its sites are excused, nothing else is.
+ *
+ * What is never an outcome is "unreadable, therefore everything is excused",
+ * which would disable the rule silently.
+ */
+let cache = null;
+
+const isPlainObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+
+const describe = (v) => (v === null ? 'null' : Array.isArray(v) ? 'an array' : typeof v);
+
+function nodeBuiltins() {
+  if (typeof process === 'undefined' || typeof process.getBuiltinModule !== 'function') return null;
+  return {
+    fs: process.getBuiltinModule('node:fs'),
+    path: process.getBuiltinModule('node:path'),
+    url: process.getBuiltinModule('node:url'),
+  };
+}
+
+function load() {
+  if (cache) return cache;
+  const builtins = nodeBuiltins();
+  if (!builtins) {
+    cache = { sites: {} };
+    return cache;
+  }
+  const here = builtins.path.dirname(builtins.url.fileURLToPath(import.meta.url));
+  const baselinePath = builtins.path.join(here, '..', 'scope-extent-baseline.json');
+  if (!builtins.fs.existsSync(baselinePath)) {
+    cache = { sites: {} };
+    return cache;
+  }
+  try {
+    const parsed = JSON.parse(builtins.fs.readFileSync(baselinePath, 'utf8'));
+    // Shape validation lives INSIDE the try, deliberately. JSON.parse succeeds
+    // on `null`, on a bare string, on a number and on an array, so a parse that
+    // did not throw proves nothing about the shape. Validating out here is how
+    // a file containing the four characters `null` reached `cache.sites` and
+    // threw past the catch, crashing every other rule's run.
+    if (!isPlainObject(parsed)) {
+      throw new TypeError(`expected a JSON object at the top level, got ${describe(parsed)}`);
+    }
+    // An absent `sites` is a legitimately empty baseline (excuses nothing) and
+    // is NOT warned about; a present-but-wrong-typed `sites` is a real mistake
+    // and is. Warning on the empty case would train readers to ignore the
+    // warning, which is how a loud instrument stops being read.
+    if (parsed.sites !== undefined && !isPlainObject(parsed.sites)) {
+      throw new TypeError(`"sites" must be an object, got ${describe(parsed.sites)}`);
+    }
+    cache = { ...parsed, sites: parsed.sites || {} };
+  } catch (err) {
+    console.warn(
+      `[SCOPE-EXTENT] baseline at ${baselinePath} is unusable, excusing nothing: ${err.message}`,
+    );
+    cache = { sites: {} };
+  }
+  return cache;
+}
+
+/**
+ * Normalize a matched block so that reformatting does not invalidate an entry:
+ * strip CSS comments, collapse all whitespace, drop spaces around the
+ * punctuation that separates declarations. Editing the selector or the
+ * declaration itself still changes the key, which is intended, and that is a real
+ * change to a known site.
+ *
+ * The matcher itself can stop mid-comment (a comment mentioning a property
+ * name like "min-width:" satisfies the same width/height text test the real
+ * rule looks for), so a raw match can end inside an unterminated `/* ... `
+ * with no closing marker in the captured text yet. That trailing open
+ * comment is stripped too, same as a closed one: it carries no declaration
+ * text, and dropping it is what keeps a baseline key from carrying prose
+ * (comment wording, including punctuation the rest of this codebase avoids)
+ * that has nothing to do with the actual finding.
+ */
+function normalizeMatch(raw) {
+  return raw
+    .replace(/\/\*[\s\S]*?\*\//g, '')
+    .replace(/\/\*[\s\S]*$/g, '')
+    .replace(/\s+/g, ' ')
+    .replace(/\s*([{};:,])\s*/g, '$1')
+    .trim();
+}
+
+/** The baselined keys for one file, as a multiset (duplicates preserved). */
+function baselineFor(path) {
+  const p = (path || '').replace(/\\/g, '/');
+  return load().sites[p] || [];
+}
+
+/** Total baselined entries. The acceptance compares this to a live count. */
+function baselineCount() {
+  const { sites } = load();
+  return Object.values(sites).reduce((n, list) => n + list.length, 0);
+}
+
+
 const RULES = [];
 {
 
@@ -1428,8 +1668,11 @@ RULES.push({
     const pages = (text.match(/<admin-page[\s/>]/g) || []).length;
     const scrolls = (text.match(/<admin-scroll[\s/>]/g) || []).length;
     if (scrolls && pages > scrolls) {
+      // report the first <admin-page> occurrence, the line a developer would
+      // actually attach an adia-lint-disable comment to for this finding.
+      const firstIndex = text.search(/<admin-page[\s/>]/);
       out.push({
-        line: 1,
+        line: lineOf(text, firstIndex),
         snippet: '<admin-page> × N inside <admin-scroll>',
         why: 'each <admin-scroll> hosts exactly one <admin-page> — multiple pages need multiple scroll regions',
       });
@@ -1449,6 +1692,8 @@ RULES.push({
 }
 
 {
+
+
 const APPLIES_EXT = ['.html', '.htm', '.vue', '.svelte', '.astro', '.tsx', '.jsx', '.js', '.mjs', '.ts'];
 
 
@@ -1458,9 +1703,10 @@ RULES.push({
   scope: 'consumer-only',
   fileTypes: APPLIES_EXT,
   match(text) {
-    if (/<admin-sidebar[^>]*\bresizable\b/.test(text) && !text.includes('data-sidebar-resize')) {
+    const m = /<admin-sidebar[^>]*\bresizable\b/.exec(text);
+    if (m && !text.includes('data-sidebar-resize')) {
       return [{
-        line: 1,
+        line: lineOf(text, m.index),
         snippet: '<admin-sidebar resizable> without [data-sidebar-resize]',
         why: '[resizable] needs a child <div data-sidebar-resize> or there is no drag handle',
       }];
@@ -1528,6 +1774,29 @@ RULES.push(ssrDoubleRouter, ssrToplevelImport);
 {
 
 
+// gh#3888: a second, honestly-named opt-out alongside `forge-lint:
+// foundation`. Some CSS intentionally scopes via a repeated parent-tag
+// selector prefix (`admin-shell [data-x] { … }`) instead of a real
+// `@scope` at-rule. Labeling that shape `forge-lint: foundation` would
+// be a lie (neither file is a token sheet); this tag says what the
+// file actually does instead.
+//
+// ALLOWLISTED, not a self-serve bypass (gh#3888 critic finding): an
+// undocumented, unrestricted opt-out comment is the same shape as the
+// substring-loophole bug this rule just fixed, only deliberate. A
+// file adding this comment on its own must FAIL, naming the allowlist,
+// so escaping MISSING-SCOPE this way always needs a human to edit this
+// rule module, never just a CSS comment.
+//
+// gh#3922 closed the follow-up: the two files gh#3888 allowlisted
+// (admin-shell.helpers.css, admin-shell.mobile-nav.css) are now real
+// `@scope (admin-shell) { … }` blocks and admin-shell.test.js's prefix
+// assertions were rewritten to match. The allowlist is empty again;
+// `forge-lint: prefix-scoped` stays available as a mechanism, not a
+// standing exemption; a future file needs a human to add it here.
+const PREFIX_SCOPED_RE = /forge-lint:\s*prefix-scoped/i;
+const PREFIX_SCOPED_ALLOWLIST = [];
+
 
 RULES.push({
   id: 'MISSING-SCOPE',
@@ -1537,12 +1806,27 @@ RULES.push({
   match(text, path) {
     const isTokenish = isFoundationCss(path, text, 'forge-lint');
     if (isTokenish) return [];
-    if (text.includes('@scope')) return [];
+    // gh#4008: a comment carrying the full `@scope (...)` pattern (not just
+    // the bare word gh#3888 already excluded) must not satisfy this test:
+    // blank CSS comments first, mirroring markupScanSurface's HTML-comment
+    // blanking, so only a REAL, live at-rule can match.
+    if (RE.SCOPE_BLOCK.test(cssCommentBlankedSurface(text))) return [];
+    const normalizedPath = (path || '').replace(/\\/g, '/');
+    const claimsPrefixScoped = PREFIX_SCOPED_RE.test(text.slice(0, 1000));
+    const isAllowlisted = PREFIX_SCOPED_ALLOWLIST.some((p) => normalizedPath.endsWith(p));
+    if (claimsPrefixScoped && !isAllowlisted) {
+      return [{
+        line: 1,
+        snippet: '(file has CSS rules but no @scope block)',
+        why: `forge-lint: prefix-scoped is allowlisted to zero files (gh#3922 closed the last two, gh#3888). Adding this comment does not opt a file out; either wrap it in a real @scope block, or ask for the allowlist to be extended in scripts/lint/rules/forge/missing-scope.mjs itself.`,
+      }];
+    }
+    if (claimsPrefixScoped && isAllowlisted) return [];
     if (!RE.SELECTOR_RULE.test(text)) return [];
     return [{
       line: 1,
       snippet: '(file has CSS rules but no @scope block)',
-      why: 'component CSS must be wrapped in `@scope (<tag>) { … }` so styles don\'t leak in light DOM (foundation/token sheets excepted; opt out with /* forge-lint: foundation */)',
+      why: 'component CSS must be wrapped in `@scope (<tag>) { … }` so styles don\'t leak in light DOM (foundation/token sheets excepted with /* forge-lint: foundation */)',
     }];
   },
 });
@@ -1562,7 +1846,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ACCORDION-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1594,7 +1878,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ACCORDION-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1627,7 +1911,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ACTION-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1659,7 +1943,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ACTION-LIST-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1692,7 +1976,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-COMMAND",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1724,7 +2008,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-CONTENT",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1756,7 +2040,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-ENTITY-ITEM",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1788,7 +2072,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-ROSTER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1806,38 +2090,6 @@ RULES.push({
 });
 }
 
-{
-// GENERATED: do not hand-edit. Source: packages/web-modules/shell/admin-scroll/admin-scroll.yaml's a2ui.allowedParents/allowedChildren.
-// Rebuild: node scripts/build/gen-composition-rules.mjs
-// Freshness gate: node scripts/verify/check-composition-rules-fresh.mjs --verify
-
-
-const TAG = "admin-scroll";
-const ALLOWED_PARENTS = ["admin-content"];
-const ALLOWED_CHILDREN = [];
-const ALLOWED_CHILDREN_BY_SLOT = null;
-
-
-RULES.push({
-  id: "COMPOSITION-ADMIN-SCROLL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
-  scope: 'shared',
-  fileTypes: MARKUP_EXT,
-  match(text) {
-    return compositionFindings(text, { tag: TAG, allowedParents: ALLOWED_PARENTS, allowedChildren: ALLOWED_CHILDREN, allowedChildrenBySlot: ALLOWED_CHILDREN_BY_SLOT });
-  },
-  fix: null, // moving markup to satisfy a composition constraint is a judgment call, not a mechanical rename (LLD-0016 §Risks R4/R5)
-  fixtures: {
-    "smelly": [
-      "<div><admin-scroll></admin-scroll></div>"
-    ],
-    "clean": [
-      "<admin-content><admin-scroll></admin-scroll></admin-content>"
-    ]
-  },
-});
-}
-
 {
 // GENERATED: do not hand-edit. Source: packages/web-modules/agent-admin/admin-settings/admin-settings.yaml's a2ui.allowedParents/allowedChildren.
 // Rebuild: node scripts/build/gen-composition-rules.mjs
@@ -1852,7 +2104,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SETTINGS-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1884,7 +2136,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1916,7 +2168,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1948,7 +2200,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-STATUSBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -1980,7 +2232,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-ADMIN-TOPBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2012,7 +2264,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-AGENT-ADMIN-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2045,7 +2297,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-AVATAR-GROUP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2078,7 +2330,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHAT-COMPOSER",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2110,7 +2362,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHAT-EMPTY",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2142,7 +2394,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHAT-HEADER",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2167,14 +2419,14 @@ RULES.push({
 
 
 const TAG = "chat-shell";
-const ALLOWED_PARENTS = ["Surface","agent-admin-ui"];
+const ALLOWED_PARENTS = ["Surface","agent-admin-ui","pane-ui"];
 const ALLOWED_CHILDREN = [];
 const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-CHAT-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2206,7 +2458,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHAT-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2238,7 +2490,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHAT-STATUS",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2270,7 +2522,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHAT-THREAD",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2302,7 +2554,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHOICE-CARD-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2335,7 +2587,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-CHOICE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2367,7 +2619,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-DRILLDOWN-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2400,7 +2652,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS-EMPTY",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2432,7 +2684,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS-TOOLBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2464,7 +2716,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-CANVAS",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2496,7 +2748,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2528,7 +2780,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-SIDEBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2560,7 +2812,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-STATUSBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2592,7 +2844,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-EDITOR-TOOLBAR",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2617,14 +2869,14 @@ RULES.push({
 
 
 const TAG = "embed-shell";
-const ALLOWED_PARENTS = ["Surface"];
+const ALLOWED_PARENTS = ["Surface","theme-provider"];
 const ALLOWED_CHILDREN = [];
 const ALLOWED_CHILDREN_BY_SLOT = null;
 
 
 RULES.push({
   id: "COMPOSITION-EMBED-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2656,7 +2908,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-FEED-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2688,7 +2940,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-FEED-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2721,7 +2973,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-FIELDS-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2754,7 +3006,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-FOOTER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2786,7 +3038,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-FORM-POPOVER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2819,7 +3071,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-HEADER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2851,7 +3103,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-LIST-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2883,7 +3135,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-MENU-DIVIDER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2915,7 +3167,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-MENU-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2947,7 +3199,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-MENU-LABEL-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -2979,7 +3231,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-MENU-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3012,7 +3264,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-NAV-GROUP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3047,7 +3299,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-NAV-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3079,7 +3331,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-PAGE-SCROLL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3111,7 +3363,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-RADIO-GROUP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3144,7 +3396,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SEARCH-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3177,7 +3429,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SECTION-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3209,7 +3461,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SEGMENT-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3241,7 +3493,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SEGMENTED-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3274,7 +3526,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-CONTENT",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3306,7 +3558,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-HERO",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3338,7 +3590,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SIMPLE-SHELL",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3370,7 +3622,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-SKIP-NAV-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3402,7 +3654,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-STEPPER-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3434,7 +3686,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-STEPPER-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3467,7 +3719,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TAB-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3499,7 +3751,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TABS-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3532,7 +3784,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TIMELINE-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3564,7 +3816,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TIMELINE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3597,7 +3849,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TOOLBAR-GROUP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3629,7 +3881,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TOUR-STEP-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3661,7 +3913,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TOUR-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3694,7 +3946,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TREE-ITEM-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3726,7 +3978,7 @@ const ALLOWED_CHILDREN_BY_SLOT = null;
 
 RULES.push({
   id: "COMPOSITION-TREE-UI",
-  severity: 'warn', // LLD-0016 §C4: new, unproven-at-scale matcher (Risk R4): advisory until a corpus-wide rollout promotes it, same posture check-example-ids.mjs's Phase-1 rule started at.
+  severity: 'error', // gh#3719: promoted from warn once the corpus-wide rollout (LLD-0016 §C4) cleared clean, every COMPOSITION-* rule's real corpus hits fixed, so this stays advisory no longer.
   scope: 'shared',
   fileTypes: MARKUP_EXT,
   match(text) {
@@ -3977,10 +4229,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -9180,6 +9428,10 @@ const MANIFEST_SNAPSHOT = {
               {
                 "value": "dot-grid",
                 "tier": "default"
+              },
+              {
+                "value": "noise",
+                "tier": "alternative"
               }
             ]
           }
@@ -11374,10 +11626,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -16577,6 +16825,10 @@ const MANIFEST_SNAPSHOT = {
               {
                 "value": "dot-grid",
                 "tier": "default"
+              },
+              {
+                "value": "noise",
+                "tier": "alternative"
               }
             ]
           }
@@ -18767,10 +19019,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -23970,6 +24218,10 @@ const MANIFEST_SNAPSHOT = {
               {
                 "value": "dot-grid",
                 "tier": "default"
+              },
+              {
+                "value": "noise",
+                "tier": "alternative"
               }
             ]
           }
@@ -26082,10 +26334,6 @@ const MANIFEST_SNAPSHOT = {
           }
         ]
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": [
@@ -30572,10 +30820,6 @@ const MANIFEST_SNAPSHOT = {
         "tag": "admin-roster-ui",
         "attrs": []
       },
-      {
-        "tag": "admin-scroll",
-        "attrs": []
-      },
       {
         "tag": "admin-settings-ui",
         "attrs": []
@@ -32176,10 +32420,30 @@ RULES.push({
 // literal URL, so this hasn't triggered in practice; a literal `//` URL
 // sharing a line with the dimension attributes is the one shape to watch
 // for in review.
+//
+// gh#3985 (a second consequence of the same string-literal-blind gap
+// above): a plain JS string mentioning markup IN PROSE, not authoring it,
+// still satisfies `<img\b[^>]*?>`, PR #3977's own vitest-setup error
+// message ("...a <link>, <script> or " + "<img> src), turn that loading
+// off...") matched a bare, zero-attribute `<img>` and read as an
+// error-severity finding on a file that emits no DOM at all. Every REAL
+// `<img>` this rule was written to catch (gh#3604's select.class.js
+// sites, this corpus's only non-comment instances) sets at least one real
+// attribute (`src=` at minimum: an img with none renders nothing, so
+// hand-authored markup never omits it); a bare `<img>`/`<img >` with zero
+// `name=value` pairs is never genuine output markup in this corpus, only
+// prose describing one, so HAS_ANY_ATTR below gates the match the same
+// way HAS_WIDTH/HAS_HEIGHT already gate the dimension check. This is a
+// narrow, corpus-verified discriminator, not a full JS/HTML parse (an
+// attribute-bearing `<img width=100>` still mentioned in a doc comment or
+// prose sentence would still false-positive; none exists in this corpus
+// today, watch for it in review the same way the paragraph above already
+// asks).
 const IMG_TAG_RE = /<img\b[^>]*?>/gis;
 const HAS_WIDTH = /\bwidth\s*=/i;
 const HAS_HEIGHT = /\bheight\s*=/i;
 const HAS_ASPECT_RATIO = /aspect-ratio\s*:/i;
+const HAS_ANY_ATTR = /\S=/;
 const CORPUS_PATH_RE = /packages[\\/](web-components|web-modules)[\\/]/;
 
 
@@ -32203,6 +32467,7 @@ RULES.push({
     let m;
     while ((m = IMG_TAG_RE.exec(blanked))) {
       const tag = m[0];
+      if (!HAS_ANY_ATTR.test(tag)) continue; // gh#3985: no attribute at all, prose mentioning <img>, not authored markup
       if ((HAS_WIDTH.test(tag) && HAS_HEIGHT.test(tag)) || HAS_ASPECT_RATIO.test(tag)) continue;
       const lineNo = lineOf(blanked, m.index);
       out.push({
@@ -32427,6 +32692,39 @@ function optInTagsFor(scopes) {
   return ['forge-lint', 'adia-lint'];
 }
 
+// gh#3839: a `var(--token, <literal>)` fallback is still a shipped literal
+// whenever the named token is undefined: RAW-COLOR must see inside it.
+// `light-dark(<light>, <dark>)` is the one legitimate literal-pair form (both
+// arms are meant to be literal color values by design), so its call is
+// stripped out, balanced on parens, so a color function nested in either
+// arm (e.g. `light-dark(oklch(...), oklch(...))`) is stripped too, before
+// the rest of the declaration (var() fallbacks included) is scanned as
+// plain text. Custom-property names never match HEXCOLOR/FUNCCOLOR, so
+// leaving `var(` unstripped carries no risk of matching the reference
+// itself, only a literal actually sitting in its fallback.
+function stripBalancedCalls(text, fnName) {
+  const token = `${fnName}(`;
+  let result = '';
+  let i = 0;
+  while (i < text.length) {
+    const idx = text.indexOf(token, i);
+    if (idx === -1) {
+      result += text.slice(i);
+      break;
+    }
+    result += text.slice(i, idx);
+    let depth = 1;
+    let j = idx + token.length;
+    while (j < text.length && depth > 0) {
+      if (text[j] === '(') depth += 1;
+      else if (text[j] === ')') depth -= 1;
+      j += 1;
+    }
+    i = j;
+  }
+  return result;
+}
+
 
 RULES.push({
   id: 'RAW-COLOR',
@@ -32442,8 +32740,8 @@ RULES.push({
       for (const decl of stripped.split(';')) {
         const d = decl.trim();
         if (!d || d.startsWith('//') || d.startsWith('/*') || d.startsWith('*')) continue;
-        if (decl.includes('var(') || decl.includes('light-dark(')) continue;
-        if (RE.HEXCOLOR.test(decl) || RE.FUNCCOLOR.test(decl)) {
+        const scanText = decl.includes('light-dark(') ? stripBalancedCalls(decl, 'light-dark') : decl;
+        if (RE.HEXCOLOR.test(scanText) || RE.FUNCCOLOR.test(scanText)) {
           out.push({
             line: lineNo,
             snippet: raw.trim().slice(0, 90),
@@ -32508,20 +32806,48 @@ RULES.push({
 
 
 
+/**
+ * SCOPE-EXTENT (gh#3718): error severity, with the pre-existing corpus of
+ * findings downgraded to warn via a checked-in baseline rather than by a
+ * blanket severity.json entry.
+ *
+ * The blanket downgrade is what this replaces. It made every site invisible,
+ * including sites added after the downgrade, so the rule could not do the one
+ * job it was written for. The baseline inverts that: known sites stay warn,
+ * anything not in the baseline errors.
+ *
+ * Sites are keyed on the normalized text of the matched block, per file, as a
+ * MULTISET, not on line numbers. A line-keyed baseline goes stale whenever an
+ * unrelated edit shifts a selector down, which reports a pre-existing finding
+ * as new for a reason that has nothing to do with this rule. The multiset also
+ * keeps duplicates, so a second identical violation in an already-baselined
+ * file exceeds its entry and errors, which a per-file count would miss.
+ */
+
 RULES.push({
   id: 'SCOPE-EXTENT',
   severity: 'error',
   scope: 'shared',
   fileTypes: STYLE_EXT,
-  match(text) {
+  match(text, path) {
     const out = [];
     const re = new RegExp(RE.SCOPE_EXTENT.source, 'gs');
+    // A local copy, consumed as we go: each baselined entry excuses exactly
+    // one finding, so the second identical violation in the same file finds
+    // the entry already spent and reports at full severity.
+    const remaining = [...baselineFor(path)];
     let m;
     while ((m = re.exec(text))) {
+      const key = normalizeMatch(m[0]);
+      const at = remaining.indexOf(key);
+      const baselined = at !== -1;
+      if (baselined) remaining.splice(at, 1);
       out.push({
         line: lineOf(text, m.index),
         snippet: ':scope { … width/height … }',
         why: "a primitive is size-agnostic — let the consumer own width/height; don't set extent on :scope",
+        // Per-finding override; absent means the rule's own severity applies.
+        ...(baselined ? { severity: 'warn' } : {}),
       });
     }
     return out;