@certrev/cert-block 1.1.0 → 1.1.1

package/dist/modal/deprecated.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Public names kept only so a patch release never breaks a compiling integration (the semver
+ * contract at the head of CHANGELOG.md). Each one does nothing it used to do; removal is for 2.0.
+ */
+/** Dispatched on the document, once per document, on the first call of a removed API, so a caller
+ *  that still relies on it can see that it does nothing. `detail: { api, removedIn }`. */
+export declare const DEPRECATED_API_EVENT = "certrev:deprecated-api";
+/**
+ * @deprecated Removed in 1.1.1: the runtime FTC disclosure guard is gone. This installs nothing,
+ * checks nothing and never hides or replaces a face; whether a face shows its disclosure is settled
+ * where the face is configured. The first call per document dispatches {@link DEPRECATED_API_EVENT}.
+ * Will be deleted in 2.0.
+ */
+export declare function installFtcGuard(doc: Document): void;
+//# sourceMappingURL=deprecated.d.ts.map

package/dist/modal/deprecated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecated.d.ts","sourceRoot":"","sources":["../../src/modal/deprecated.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;0FAC0F;AAC1F,eAAO,MAAM,oBAAoB,2BAA2B,CAAA;AAK5D;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAMnD"}

package/dist/modal/deprecated.js

@@ -0,0 +1,22 @@
+/**
+ * Public names kept only so a patch release never breaks a compiling integration (the semver
+ * contract at the head of CHANGELOG.md). Each one does nothing it used to do; removal is for 2.0.
+ */
+/** Dispatched on the document, once per document, on the first call of a removed API, so a caller
+ *  that still relies on it can see that it does nothing. `detail: { api, removedIn }`. */
+export const DEPRECATED_API_EVENT = 'certrev:deprecated-api';
+/** Documents that have already been told, so repeated calls dispatch once. */
+const announcedDocs = new WeakSet();
+/**
+ * @deprecated Removed in 1.1.1: the runtime FTC disclosure guard is gone. This installs nothing,
+ * checks nothing and never hides or replaces a face; whether a face shows its disclosure is settled
+ * where the face is configured. The first call per document dispatches {@link DEPRECATED_API_EVENT}.
+ * Will be deleted in 2.0.
+ */
+export function installFtcGuard(doc) {
+    if (announcedDocs.has(doc))
+        return;
+    announcedDocs.add(doc);
+    doc.dispatchEvent(new CustomEvent(DEPRECATED_API_EVENT, { detail: { api: 'installFtcGuard', removedIn: '1.1.1' } }));
+}
+//# sourceMappingURL=deprecated.js.map

package/dist/modal/deprecated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecated.js","sourceRoot":"","sources":["../../src/modal/deprecated.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;0FAC0F;AAC1F,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAA;AAE5D,8EAA8E;AAC9E,MAAM,aAAa,GAAG,IAAI,OAAO,EAAY,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAa;IAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAM;IAClC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACtB,GAAG,CAAC,aAAa,CAChB,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CACjG,CAAA;AACF,CAAC"}

package/dist/modal/ftc-disclosure.d.ts

@@ -4,9 +4,13 @@
  * module. Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
  * is byte-exact; a reword is a contract divergence.
  *
- * Kept as its OWN module (imported by both ftc-guard + display-strings, exactly as in portal) so
- * the browser bundle emits the same `var` structure as the deployed certrev-cert.js — do not merge
- * it into display-strings.ts (that consolidation drops one `var` and breaks byte-parity).
+ * Kept as its OWN module (imported by display-strings, exactly as in portal) so the browser bundle
+ * emits the same `var` structure as the deployed certrev-cert.js — do not merge it into
+ * display-strings.ts (that consolidation drops one `var` and breaks byte-parity).
+ *
+ * It is the text the faces RENDER, nothing more. Since 1.1.1 nothing in this package checks at
+ * runtime that it is present or visible (the `ftc-guard` kill switch is gone): whether a face shows
+ * its disclosure is settled where the face is configured, not by hiding or replacing it in the page.
  */
 export declare const FTC_DISCLOSURE_LINE: "Independent editorial review of this article\u2019s text and sources. Not a product endorsement, nor medical advice.";
 //# sourceMappingURL=ftc-disclosure.d.ts.map

package/dist/modal/ftc-disclosure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ftc-disclosure.d.ts","sourceRoot":"","sources":["../../src/modal/ftc-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,mBAAmB,EAC/B,sHAA0H,CAAC"}
+{"version":3,"file":"ftc-disclosure.d.ts","sourceRoot":"","sources":["../../src/modal/ftc-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,mBAAmB,EAC/B,sHAA0H,CAAC"}

package/dist/modal/ftc-disclosure.js

@@ -4,9 +4,13 @@
  * module. Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
  * is byte-exact; a reword is a contract divergence.
  *
- * Kept as its OWN module (imported by both ftc-guard + display-strings, exactly as in portal) so
- * the browser bundle emits the same `var` structure as the deployed certrev-cert.js — do not merge
- * it into display-strings.ts (that consolidation drops one `var` and breaks byte-parity).
+ * Kept as its OWN module (imported by display-strings, exactly as in portal) so the browser bundle
+ * emits the same `var` structure as the deployed certrev-cert.js — do not merge it into
+ * display-strings.ts (that consolidation drops one `var` and breaks byte-parity).
+ *
+ * It is the text the faces RENDER, nothing more. Since 1.1.1 nothing in this package checks at
+ * runtime that it is present or visible (the `ftc-guard` kill switch is gone): whether a face shows
+ * its disclosure is settled where the face is configured, not by hiding or replacing it in the page.
  */
 export const FTC_DISCLOSURE_LINE = "Independent editorial review of this article’s text and sources. Not a product endorsement, nor medical advice.";
 //# sourceMappingURL=ftc-disclosure.js.map

package/dist/modal/ftc-disclosure.js.map

@@ -1 +1 @@
-{"version":3,"file":"ftc-disclosure.js","sourceRoot":"","sources":["../../src/modal/ftc-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAC/B,iHAA0H,CAAC"}
+{"version":3,"file":"ftc-disclosure.js","sourceRoot":"","sources":["../../src/modal/ftc-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAC/B,iHAA0H,CAAC"}

package/dist/modal/index.d.ts

@@ -6,13 +6,14 @@
  * storefront (`<script src=".../dist/modal/certrev-cert.js">`) instead of vendoring a copy.
  *
  * Importing this module as ESM has the SAME side effect as loading the IIFE: it registers the
- * `<certrev-cert-modal>` element and (in a browser) runs placement + interactions + FTC guard +
- * badge revalidation. Bundler users: `import '@certrev/cert-block/modal'`.
+ * `<certrev-cert-modal>` element and (in a browser) runs placement + interactions + badge
+ * revalidation (no FTC guard since 1.1.1). Bundler users: `import '@certrev/cert-block/modal'`.
  */
 import "./certrev-cert.entry.js";
 export { CERT_ISSUER_KID, CERT_ISSUER_PUBLIC_KEY_PEM, } from "./certrev-cert.entry.js";
 export { CERT_MODAL_TAG } from "./certrev-cert-modal.js";
-export { installFtcGuard } from "./ftc-guard.js";
+/** @deprecated Since 1.1.1 a no-op (the runtime FTC guard was removed); deleted in 2.0. */
+export { installFtcGuard } from "./deprecated.js";
 export { initCertInteractionsOnReady } from "./interactions.js";
 export { initCertPlacement } from "./placement.js";
 export { initBadgeRevalidation, type RevalidateDeps, revalidateBadge, } from "./revalidate.js";

package/dist/modal/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,yBAAyB,CAAC;AAKjC,OAAO,EACN,eAAe,EACf,0BAA0B,GAC1B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACN,qBAAqB,EACrB,KAAK,cAAc,EACnB,eAAe,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,yBAAyB,CAAC;AAKjC,OAAO,EACN,eAAe,EACf,0BAA0B,GAC1B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,2FAA2F;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACN,qBAAqB,EACrB,KAAK,cAAc,EACnB,eAAe,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/modal/index.js

@@ -6,8 +6,8 @@
  * storefront (`<script src=".../dist/modal/certrev-cert.js">`) instead of vendoring a copy.
  *
  * Importing this module as ESM has the SAME side effect as loading the IIFE: it registers the
- * `<certrev-cert-modal>` element and (in a browser) runs placement + interactions + FTC guard +
- * badge revalidation. Bundler users: `import '@certrev/cert-block/modal'`.
+ * `<certrev-cert-modal>` element and (in a browser) runs placement + interactions + badge
+ * revalidation (no FTC guard since 1.1.1). Bundler users: `import '@certrev/cert-block/modal'`.
  */
 // Side-effect: register the element + (in a browser) kick off the DOM passes.
 import "./certrev-cert.entry.js";
@@ -17,7 +17,8 @@ import "./certrev-cert.entry.js";
 export { CERT_ISSUER_KID, CERT_ISSUER_PUBLIC_KEY_PEM, } from "./certrev-cert.entry.js";
 // Composable entry points for advanced consumers (the IIFE wires these itself).
 export { CERT_MODAL_TAG } from "./certrev-cert-modal.js";
-export { installFtcGuard } from "./ftc-guard.js";
+/** @deprecated Since 1.1.1 a no-op (the runtime FTC guard was removed); deleted in 2.0. */
+export { installFtcGuard } from "./deprecated.js";
 export { initCertInteractionsOnReady } from "./interactions.js";
 export { initCertPlacement } from "./placement.js";
 export { initBadgeRevalidation, revalidateBadge, } from "./revalidate.js";

package/dist/modal/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/modal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,8EAA8E;AAC9E,OAAO,yBAAyB,CAAC;AAEjC,+FAA+F;AAC/F,iGAAiG;AACjG,0FAA0F;AAC1F,OAAO,EACN,eAAe,EACf,0BAA0B,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,gFAAgF;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACN,qBAAqB,EAErB,eAAe,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/modal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,8EAA8E;AAC9E,OAAO,yBAAyB,CAAC;AAEjC,+FAA+F;AAC/F,iGAAiG;AACjG,0FAA0F;AAC1F,OAAO,EACN,eAAe,EACf,0BAA0B,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,gFAAgF;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,2FAA2F;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACN,qBAAqB,EAErB,eAAe,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/modal/interactions.d.ts

@@ -8,8 +8,8 @@
  *     (revealing the row's `.acc-bio` in place; the name caret rotates via CSS) and mirrors the
  *     state on `aria-expanded`. A click on a link inside the row (e.g. the "Compensated expert"
  *     cue) is NOT a toggle. Keyboard: Enter/Space on the role=button row.
- *   • In-page modals: a `[data-certrev-modal-open]` control opens the unified
- *     `<certrev-cert-modal>` element via its `.open('cert'|'expert')` method. Bare /
+ *   • In-page modals: a `[data-certrev-modal-open]` control opens its OWN face's
+ *     `<certrev-cert-modal>` element (`ownCertModal`) via its `.open('cert'|'expert')` method. Bare /
  *     `"cert"` opens the certificate dialog; `"expert"` opens the reviewer dialog. With no JS / no
  *     element / no envelope a link control falls back to its href (the certificate or the CertREV
  *     profile page). The element owns its OWN close plumbing (× / Close / backdrop / Esc) inside its
@@ -21,6 +21,12 @@ export declare const ACC_ATTR = "data-certrev-acc";
 export declare const MODAL_OPEN_ATTR = "data-certrev-modal-open";
 export declare const INITIALS_ATTR = "data-certrev-initials";
 export declare const CARD_SELECTOR = ".certrev-card";
+/** Stamped on a control that could not tell which modal is its own (value: the reason), beside the
+ *  bubbling {@link MODAL_UNRESOLVED_EVENT}, so the miss is inspectable rather than a silent link. */
+export declare const MODAL_UNRESOLVED_ATTR = "data-certrev-modal-unresolved";
+/** Dispatched on a control whose face has no modal of its own but sits between other faces'
+ *  (`ownCertModal` → `ambiguous`). `detail: { reason: 'ambiguous', modals }`. */
+export declare const MODAL_UNRESOLVED_EVENT = "certrev:modal-unresolved";
 /** The dialog a `data-certrev-modal-open` control targets. */
 export type ModalKind = 'cert' | 'expert';
 /** Toggle a contributor row's accordion bio open/closed (the `.open` class drives the CSS reveal +
@@ -29,11 +35,21 @@ export declare function toggleAccordion(row: Element): void;
 /** Resolve a `data-certrev-modal-open` value to the dialog it opens. `"expert"` opens the reviewer
  *  modal; anything else (the bare attribute, or `"cert"`) opens the certificate modal. */
 export declare function modalTargetKind(value: string | null): ModalKind;
-/** Open a cert dialog via the `<certrev-cert-modal>` element. Returns false (so the caller lets an
- *  href fall back) when the element is absent or declines (no envelope + no fetch source). */
+/** Open a cert dialog via the document's FIRST `<certrev-cert-modal>` element: a page-level helper
+ *  for a page with one face. Controls go through `openOwnModal`, which finds their own face's element.
+ *  Returns false (so the caller lets an href fall back) when the element is absent or declines (no
+ *  envelope + no fetch source). */
 export declare function openModal(doc: Document, kind: ModalKind): boolean;
 /** Open the page's certificate modal (backward-compatible wrapper over openModal). */
 export declare function openCertModal(doc: Document): boolean;
+/**
+ * Open a dialog of `control`'s OWN face's `<certrev-cert-modal>` (see `ownCertModal`), which is what
+ * the delegated click / key handlers do. Returns false (so a link control follows its own href) when
+ * the face has no modal, the element declines, or the control cannot tell which modal is its own; in
+ * that last case it is stamped `data-certrev-modal-unresolved="ambiguous"` and receives
+ * `certrev:modal-unresolved`, and another face's certificate is never opened in its place.
+ */
+export declare function openOwnModal(control: Element, kind: ModalKind): boolean;
 /**
  * Replace a broken avatar `<img>` with its initials placeholder — the SAME markup the Liquid emits
  * when no photo URL is present. The SSR can't know a present URL will 404 (the canary's expert photo

package/dist/modal/interactions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interactions.d.ts","sourceRoot":"","sources":["../../src/modal/interactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,eAAO,MAAM,QAAQ,qBAAqB,CAAA;AAC1C,eAAO,MAAM,eAAe,4BAA4B,CAAA;AACxD,eAAO,MAAM,aAAa,0BAA0B,CAAA;AACpD,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C,8DAA8D;AAC9D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;AAczC;6DAC6D;AAC7D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAGlD;AAED;0FAC0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAE/D;AAED;8FAC8F;AAC9F,wBAAgB,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAIjE;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAEpD;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAU5D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAItD;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAyDxD;AAED,qDAAqD;AACrD,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAI/D"}
+{"version":3,"file":"interactions.d.ts","sourceRoot":"","sources":["../../src/modal/interactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,eAAO,MAAM,QAAQ,qBAAqB,CAAA;AAC1C,eAAO,MAAM,eAAe,4BAA4B,CAAA;AACxD,eAAO,MAAM,aAAa,0BAA0B,CAAA;AACpD,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAC5C;qGACqG;AACrG,eAAO,MAAM,qBAAqB,kCAAkC,CAAA;AACpE;iFACiF;AACjF,eAAO,MAAM,sBAAsB,6BAA6B,CAAA;AAEhE,8DAA8D;AAC9D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;AAczC;6DAC6D;AAC7D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAGlD;AAED;0FAC0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAE/D;AAED;;;mCAGmC;AACnC,wBAAgB,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAIjE;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAEpD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAavE;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAU5D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAItD;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAyDxD;AAED,qDAAqD;AACrD,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAI/D"}

package/dist/modal/interactions.js

@@ -8,8 +8,8 @@
  *     (revealing the row's `.acc-bio` in place; the name caret rotates via CSS) and mirrors the
  *     state on `aria-expanded`. A click on a link inside the row (e.g. the "Compensated expert"
  *     cue) is NOT a toggle. Keyboard: Enter/Space on the role=button row.
- *   • In-page modals: a `[data-certrev-modal-open]` control opens the unified
- *     `<certrev-cert-modal>` element via its `.open('cert'|'expert')` method. Bare /
+ *   • In-page modals: a `[data-certrev-modal-open]` control opens its OWN face's
+ *     `<certrev-cert-modal>` element (`ownCertModal`) via its `.open('cert'|'expert')` method. Bare /
  *     `"cert"` opens the certificate dialog; `"expert"` opens the reviewer dialog. With no JS / no
  *     element / no envelope a link control falls back to its href (the certificate or the CertREV
  *     profile page). The element owns its OWN close plumbing (× / Close / backdrop / Esc) inside its
@@ -17,11 +17,17 @@
  *
  * No crypto, no network — pure DOM. Idempotent install (guarded so a double-load can't double-bind).
  */
-import { CERT_MODAL_TAG } from './certrev-cert-modal.js';
+import { CERT_MODAL_TAG, ownCertModal } from './certrev-cert-modal.js';
 export const ACC_ATTR = 'data-certrev-acc';
 export const MODAL_OPEN_ATTR = 'data-certrev-modal-open';
 export const INITIALS_ATTR = 'data-certrev-initials';
 export const CARD_SELECTOR = '.certrev-card';
+/** Stamped on a control that could not tell which modal is its own (value: the reason), beside the
+ *  bubbling {@link MODAL_UNRESOLVED_EVENT}, so the miss is inspectable rather than a silent link. */
+export const MODAL_UNRESOLVED_ATTR = 'data-certrev-modal-unresolved';
+/** Dispatched on a control whose face has no modal of its own but sits between other faces'
+ *  (`ownCertModal` → `ambiguous`). `detail: { reason: 'ambiguous', modals }`. */
+export const MODAL_UNRESOLVED_EVENT = 'certrev:modal-unresolved';
 /** Avatar base classes whose `--initials` variant is the SSR no-photo fallback (kept in lockstep
  *  with certrev-badge.liquid / certrev-memo.liquid). A broken <img> is swapped to `{base} {base}--initials`. */
 const AVATAR_BASE_CLASSES = ['avatar', 'certrev-memo__avatar'];
@@ -38,8 +44,10 @@ export function toggleAccordion(row) {
 export function modalTargetKind(value) {
     return value === 'expert' ? 'expert' : 'cert';
 }
-/** Open a cert dialog via the `<certrev-cert-modal>` element. Returns false (so the caller lets an
- *  href fall back) when the element is absent or declines (no envelope + no fetch source). */
+/** Open a cert dialog via the document's FIRST `<certrev-cert-modal>` element: a page-level helper
+ *  for a page with one face. Controls go through `openOwnModal`, which finds their own face's element.
+ *  Returns false (so the caller lets an href fall back) when the element is absent or declines (no
+ *  envelope + no fetch source). */
 export function openModal(doc, kind) {
     const el = doc.querySelector(CERT_MODAL_TAG);
     if (el && typeof el.open === 'function')
@@ -50,6 +58,25 @@ export function openModal(doc, kind) {
 export function openCertModal(doc) {
     return openModal(doc, 'cert');
 }
+/**
+ * Open a dialog of `control`'s OWN face's `<certrev-cert-modal>` (see `ownCertModal`), which is what
+ * the delegated click / key handlers do. Returns false (so a link control follows its own href) when
+ * the face has no modal, the element declines, or the control cannot tell which modal is its own; in
+ * that last case it is stamped `data-certrev-modal-unresolved="ambiguous"` and receives
+ * `certrev:modal-unresolved`, and another face's certificate is never opened in its place.
+ */
+export function openOwnModal(control, kind) {
+    const own = ownCertModal(control);
+    if (own.modal) {
+        const el = own.modal;
+        return typeof el.open === 'function' ? el.open(kind) : false;
+    }
+    if (own.reason === 'ambiguous') {
+        control.setAttribute(MODAL_UNRESOLVED_ATTR, own.reason);
+        control.dispatchEvent(new CustomEvent(MODAL_UNRESOLVED_EVENT, { bubbles: true, detail: { reason: own.reason, modals: own.count } }));
+    }
+    return false;
+}
 function asElement(target) {
     return target && target.closest ? target : null;
 }
@@ -95,7 +122,7 @@ export function initCertInteractions(doc) {
         // (Close is owned by the <certrev-cert-modal> element inside its shadow root.)
         const opener = el.closest(`[${MODAL_OPEN_ATTR}]`);
         if (opener) {
-            if (openModal(doc, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR))))
+            if (openOwnModal(opener, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR))))
                 e.preventDefault();
             return;
         }
@@ -124,7 +151,7 @@ export function initCertInteractions(doc) {
             return;
         const opener = el.closest(`[${MODAL_OPEN_ATTR}]`);
         if (opener) {
-            if (openModal(doc, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR)))) {
+            if (openOwnModal(opener, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR)))) {
                 e.preventDefault();
                 return;
             }

package/dist/modal/interactions.js.map

@@ -1 +1 @@
-{"version":3,"file":"interactions.js","sourceRoot":"","sources":["../../src/modal/interactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CAAA;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAA;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,uBAAuB,CAAA;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAA;AAU5C;gHACgH;AAChH,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,sBAAsB,CAAU,CAAA;AAEvE,qGAAqG;AACrG,MAAM,aAAa,GAAG,IAAI,OAAO,EAAY,CAAA;AAE7C;6DAC6D;AAC7D,MAAM,UAAU,eAAe,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AAC3D,CAAC;AAED;0FAC0F;AAC1F,MAAM,UAAU,eAAe,CAAC,KAAoB;IACnD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AAC9C,CAAC;AAED;8FAC8F;AAC9F,MAAM,UAAU,SAAS,CAAC,GAAa,EAAE,IAAe;IACvD,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,cAAc,CAA4B,CAAA;IACvE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,KAAK,CAAA;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,GAAa;IAC1C,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,MAA0B;IAC5C,OAAO,MAAM,IAAK,MAAkB,CAAC,OAAO,CAAC,CAAC,CAAE,MAAkB,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAqB;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,CAAA;IAChD,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAM;IAC5B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,IAAI,CAAC,IAAI;QAAE,OAAM;IACjB,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACpD,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,IAAI,IAAI,YAAY,CAAA;IAC5C,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAA;IAC3B,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAa;IAC/C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAmB,OAAO,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAClE,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,GAAa;IACjD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAM;IAClC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEtB,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAM;QAEf,sGAAsG;QACtG,+EAA+E;QAC/E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,eAAe,GAAG,CAAC,CAAA;QACjD,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,cAAc,EAAE,CAAA;YAC7F,OAAM;QACP,CAAC;QAED,wFAAwF;QACxF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAA;QACvC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,eAAe,CAAC,GAAG,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,6FAA6F;IAC7F,iFAAiF;IACjF,GAAG,CAAC,gBAAgB,CACnB,OAAO,EACP,CAAC,CAAC,EAAE,EAAE;QACL,MAAM,CAAC,GAAG,CAAC,CAAC,MAAwB,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC;YAAE,gBAAgB,CAAC,CAAqB,CAAC,CAAA;IACvG,CAAC,EACD,IAAI,CACJ,CAAA;IAED,4FAA4F;IAC5F,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEvB,kGAAkG;IAClG,4FAA4F;IAC5F,4FAA4F;IAC5F,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACrC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,UAAU;YAAE,OAAM;QACtE,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAM;QAE1C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,eAAe,GAAG,CAAC,CAAA;QACjD,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,CAAC,CAAC,cAAc,EAAE,CAAA;gBAClB,OAAM;YACP,CAAC;QACF,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAA;QACvC,IAAI,GAAG,EAAE,CAAC;YACT,CAAC,CAAC,cAAc,EAAE,CAAA;YAClB,eAAe,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;IACF,CAAC,CAAC,CAAA;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,2BAA2B,CAAC,GAAa;IACxD,MAAM,GAAG,GAAG,GAAS,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;;QAC1F,GAAG,EAAE,CAAA;AACX,CAAC"}
+{"version":3,"file":"interactions.js","sourceRoot":"","sources":["../../src/modal/interactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAEtE,MAAM,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CAAA;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAA;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,uBAAuB,CAAA;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAA;AAC5C;qGACqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAAG,+BAA+B,CAAA;AACpE;iFACiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAA;AAUhE;gHACgH;AAChH,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,sBAAsB,CAAU,CAAA;AAEvE,qGAAqG;AACrG,MAAM,aAAa,GAAG,IAAI,OAAO,EAAY,CAAA;AAE7C;6DAC6D;AAC7D,MAAM,UAAU,eAAe,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AAC3D,CAAC;AAED;0FAC0F;AAC1F,MAAM,UAAU,eAAe,CAAC,KAAoB;IACnD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AAC9C,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,SAAS,CAAC,GAAa,EAAE,IAAe;IACvD,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,cAAc,CAA4B,CAAA;IACvE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,KAAK,CAAA;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,GAAa;IAC1C,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,IAAe;IAC7D,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,GAAG,CAAC,KAAyB,CAAA;QACxC,OAAO,OAAO,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC7D,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,CAAC,YAAY,CAAC,qBAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QACvD,OAAO,CAAC,aAAa,CACpB,IAAI,WAAW,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAC7G,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,MAA0B;IAC5C,OAAO,MAAM,IAAK,MAAkB,CAAC,OAAO,CAAC,CAAC,CAAE,MAAkB,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAqB;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,CAAA;IAChD,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAM;IAC5B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,IAAI,CAAC,IAAI;QAAE,OAAM;IACjB,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACpD,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,IAAI,IAAI,YAAY,CAAA;IAC5C,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAA;IAC3B,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAa;IAC/C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAmB,OAAO,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/F,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAClE,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,GAAa;IACjD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAM;IAClC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEtB,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAM;QAEf,sGAAsG;QACtG,+EAA+E;QAC/E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,eAAe,GAAG,CAAC,CAAA;QACjD,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,cAAc,EAAE,CAAA;YACnG,OAAM;QACP,CAAC;QAED,wFAAwF;QACxF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAA;QACvC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,eAAe,CAAC,GAAG,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,6FAA6F;IAC7F,iFAAiF;IACjF,GAAG,CAAC,gBAAgB,CACnB,OAAO,EACP,CAAC,CAAC,EAAE,EAAE;QACL,MAAM,CAAC,GAAG,CAAC,CAAC,MAAwB,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC;YAAE,gBAAgB,CAAC,CAAqB,CAAC,CAAA;IACvG,CAAC,EACD,IAAI,CACJ,CAAA;IAED,4FAA4F;IAC5F,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEvB,kGAAkG;IAClG,4FAA4F;IAC5F,4FAA4F;IAC5F,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACrC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,UAAU;YAAE,OAAM;QACtE,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAM;QAE1C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,eAAe,GAAG,CAAC,CAAA;QACjD,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,CAAC,CAAC,cAAc,EAAE,CAAA;gBAClB,OAAM;YACP,CAAC;QACF,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAA;QACvC,IAAI,GAAG,EAAE,CAAC;YACT,CAAC,CAAC,cAAc,EAAE,CAAA;YAClB,eAAe,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;IACF,CAAC,CAAC,CAAA;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,2BAA2B,CAAC,GAAa;IACxD,MAAM,GAAG,GAAG,GAAS,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;;QAC1F,GAAG,EAAE,CAAA;AACX,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@certrev/cert-block",
-	"version": "1.1.0",
+	"version": "1.1.1",
 	"description": "Headless render edge for the CertREV CertDeliveryEnvelope: SSR-safe React cert components, a framework-agnostic <certrev-badge> Web Component, a schema.org JSON-LD projector, and a fail-closed verify layer over the shared VerdictKernel.",
 	"repository": {
 		"type": "git",

package/src/components/render-cert-block.ts

@@ -753,12 +753,9 @@ function floatingPill(facts: CertBlockFacts, placed: PlacedTest): string {
 // `data-certrev-*`-hooked building blocks the locked layouts use, so the custom face
 // carries the same markers as banner/sidebar and the crawl monitor reads them alike.
 //
-// NOT the ftc-guard, though — and the comment here claimed otherwise for as long as the
-// face has existed. `modal/ftc-guard.ts` looks for `data-ftc-line` / `data-ftc-disclosure`
-// hooks, which `CertBadge.tsx` and `render-badge-html.ts` emit and this renderer emits at
-// NONE of its three scope-line sites. The kill switch therefore cannot see anything
-// renderCertBlock produces, on ANY face. Whether it should is a live design question
-// (which surfaces the switch covers) — not something to settle by quietly adding hooks.
+// No runtime guard watches any of it: the `modal/ftc-guard.ts` kill switch (which never saw
+// this renderer's output anyway: it keyed on `.certrev-memo`) was removed in 1.1.1. Whether a
+// face shows its scope line is decided by its configuration, not policed in the page.
 // ─────────────────────────────────────────────────────────────────────────────
 
 function renderCustomFace(facts: CertBlockFacts, placed: PlacedTest, responsive = false): string {

package/src/modal/certrev-cert-modal.ts

@@ -23,6 +23,9 @@
  *    so the document-level delegate can't see the close controls.
  *  - Fonts inject at document level on first open (font faces don't scope into a
  *    shadow root); deferring to first open avoids loading them on every article view.
+ *  - A page can carry several faces, each with its own element (a WordPress Query Loop, a
+ *    related-posts block). A trigger opens its OWN face's element (`ownCertModal`), never the
+ *    document's first one, and a suppressed element hides only its own face's triggers.
  */
 
 import { type CertDeliveryArtifact, isTombstone } from '@certrev/cert-contract'
@@ -33,6 +36,44 @@ import { CERT_MODAL_CSS } from './certrev-cert-modal.styles.js'
 export const CERT_MODAL_TAG = 'certrev-cert-modal'
 type ModalKind = 'cert' | 'expert'
 
+/**
+ * One rendered face on a surface that can print several per page: the WordPress plugin wraps each
+ * face's card, memo and rail wraps in `<div data-certrev-cert="1">`. A trigger never reaches a
+ * `<certrev-cert-modal>` in another face root, and one outside every face root never reaches a
+ * modal inside one.
+ */
+export const FACE_ROOT_SELECTOR = '[data-certrev-cert]'
+
+/** The element a trigger opens, or why it has none. */
+export type OwnCertModal =
+	| { readonly modal: Element; readonly reason: null }
+	| { readonly modal: null; readonly reason: 'none' | 'ambiguous'; readonly count: number }
+
+/**
+ * The `<certrev-cert-modal>` that belongs to `trigger`'s face: the one in the SMALLEST subtree that
+ * holds both. Walk up from the trigger; the first ancestor holding a modal decides:
+ *  - exactly one → that is the face's modal. On Shopify the card wrap (badge + modal) and the memo
+ *    wrap (triggers only) are placed apart in the article, and their nearest common container holds
+ *    the page's one modal; a Builder page puts one modal beside the CMS content; a WordPress face root
+ *    holds its own.
+ *  - more than one → `ambiguous`: the trigger's face has no modal of its own and sits between other
+ *    faces'. Picking one would open another cert's certificate, so there is no answer.
+ * The walk never leaves the trigger's face root, and only counts modals in that same face root (or,
+ * for a trigger in none, modals in none), so a WordPress face without a modal resolves to `none`.
+ */
+export function ownCertModal(trigger: Element): OwnCertModal {
+	const face = trigger.closest(FACE_ROOT_SELECTOR)
+	for (let node: Element | null = trigger; node; node = node.parentElement) {
+		const found = Array.from(node.querySelectorAll(CERT_MODAL_TAG)).filter(
+			(m) => m.closest(FACE_ROOT_SELECTOR) === face,
+		)
+		if (found.length === 1) return { modal: found[0] as Element, reason: null }
+		if (found.length > 1) return { modal: null, reason: 'ambiguous', count: found.length }
+		if (node === face) break
+	}
+	return { modal: null, reason: 'none', count: 0 }
+}
+
 /** Shared constructable stylesheet (one per document lifetime). */
 let sharedSheet: CSSStyleSheet | null = null
 function supportsConstructableSheets(): boolean {
@@ -208,11 +249,13 @@ export class CertRevCertModal extends HTMLElement {
 	/**
 	 * The modal kill-switch: a fetched envelope is REVOKED/EXPIRED. Don't open;
 	 * mark the host suppressed (mirrors the badge revalidation's `data-certrev-suppressed`) and
-	 * hide the light-DOM triggers so a stale click can't re-open a pulled cert. Best-effort DOM.
+	 * hide THIS face's light-DOM triggers (those whose `ownCertModal` is this element) so a stale
+	 * click can't re-open a pulled cert. Another face's triggers on the page are not touched.
 	 */
 	private markSuppressed(): void {
 		this.setAttribute('data-certrev-suppressed', '')
-		for (const t of Array.from(document.querySelectorAll('[data-certrev-modal-open]'))) {
+		for (const t of Array.from(this.ownerDocument.querySelectorAll('[data-certrev-modal-open]'))) {
+			if (ownCertModal(t).modal !== this) continue
 			t.setAttribute('hidden', '')
 			t.setAttribute('aria-hidden', 'true')
 		}

package/src/modal/certrev-cert.entry.ts

@@ -10,7 +10,6 @@
 
 import type { ResolvePublicKeyByKid } from '@certrev/cert-contract'
 import './certrev-cert-modal.js' // registers the unified <certrev-cert-modal> element
-import { installFtcGuard } from './ftc-guard.js'
 import { initCertInteractionsOnReady } from './interactions.js'
 import { initCertPlacement } from './placement.js'
 import { initBadgeRevalidation } from './revalidate.js'
@@ -37,10 +36,9 @@ if (typeof document !== 'undefined') {
 	// in-article position — so the badge re-verify pass below finds `<certrev-badge>` already in
 	// place and never re-runs against a detached/re-attached node.
 	initCertPlacement(document)
+	// No disclosure guard since 1.1.1: nothing here hides, replaces or re-checks a face at load or on
+	// mutation, so a face that loads inside a closed <details>, tab or accordion renders when opened.
 	// Tap-to-expand contributor bios + the in-page certificate modal (progressive enhancement).
 	initCertInteractionsOnReady(document)
-	// FTC §3 anti-stripping: neutralize a memo whose verbatim disclosure was stripped/hidden/altered
-	// (restores the iframe kill switch in the native, in-DOM render). No-op when there's no memo.
-	installFtcGuard(document)
 	initBadgeRevalidation(document, { verify: createDeliveryVerifier(resolveKid) })
 }

package/src/modal/deprecated.ts

@@ -0,0 +1,25 @@
+/**
+ * Public names kept only so a patch release never breaks a compiling integration (the semver
+ * contract at the head of CHANGELOG.md). Each one does nothing it used to do; removal is for 2.0.
+ */
+
+/** Dispatched on the document, once per document, on the first call of a removed API, so a caller
+ *  that still relies on it can see that it does nothing. `detail: { api, removedIn }`. */
+export const DEPRECATED_API_EVENT = 'certrev:deprecated-api'
+
+/** Documents that have already been told, so repeated calls dispatch once. */
+const announcedDocs = new WeakSet<Document>()
+
+/**
+ * @deprecated Removed in 1.1.1: the runtime FTC disclosure guard is gone. This installs nothing,
+ * checks nothing and never hides or replaces a face; whether a face shows its disclosure is settled
+ * where the face is configured. The first call per document dispatches {@link DEPRECATED_API_EVENT}.
+ * Will be deleted in 2.0.
+ */
+export function installFtcGuard(doc: Document): void {
+	if (announcedDocs.has(doc)) return
+	announcedDocs.add(doc)
+	doc.dispatchEvent(
+		new CustomEvent(DEPRECATED_API_EVENT, { detail: { api: 'installFtcGuard', removedIn: '1.1.1' } }),
+	)
+}

package/src/modal/ftc-disclosure.ts

@@ -4,9 +4,13 @@
  * module. Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
  * is byte-exact; a reword is a contract divergence.
  *
- * Kept as its OWN module (imported by both ftc-guard + display-strings, exactly as in portal) so
- * the browser bundle emits the same `var` structure as the deployed certrev-cert.js — do not merge
- * it into display-strings.ts (that consolidation drops one `var` and breaks byte-parity).
+ * Kept as its OWN module (imported by display-strings, exactly as in portal) so the browser bundle
+ * emits the same `var` structure as the deployed certrev-cert.js — do not merge it into
+ * display-strings.ts (that consolidation drops one `var` and breaks byte-parity).
+ *
+ * It is the text the faces RENDER, nothing more. Since 1.1.1 nothing in this package checks at
+ * runtime that it is present or visible (the `ftc-guard` kill switch is gone): whether a face shows
+ * its disclosure is settled where the face is configured, not by hiding or replacing it in the page.
  */
 
 export const FTC_DISCLOSURE_LINE =

package/src/modal/index.ts

@@ -6,8 +6,8 @@
  * storefront (`<script src=".../dist/modal/certrev-cert.js">`) instead of vendoring a copy.
  *
  * Importing this module as ESM has the SAME side effect as loading the IIFE: it registers the
- * `<certrev-cert-modal>` element and (in a browser) runs placement + interactions + FTC guard +
- * badge revalidation. Bundler users: `import '@certrev/cert-block/modal'`.
+ * `<certrev-cert-modal>` element and (in a browser) runs placement + interactions + badge
+ * revalidation (no FTC guard since 1.1.1). Bundler users: `import '@certrev/cert-block/modal'`.
  */
 
 // Side-effect: register the element + (in a browser) kick off the DOM passes.
@@ -23,7 +23,8 @@ export {
 
 // Composable entry points for advanced consumers (the IIFE wires these itself).
 export { CERT_MODAL_TAG } from "./certrev-cert-modal.js";
-export { installFtcGuard } from "./ftc-guard.js";
+/** @deprecated Since 1.1.1 a no-op (the runtime FTC guard was removed); deleted in 2.0. */
+export { installFtcGuard } from "./deprecated.js";
 export { initCertInteractionsOnReady } from "./interactions.js";
 export { initCertPlacement } from "./placement.js";
 export {

package/src/modal/interactions.ts

@@ -8,8 +8,8 @@
  *     (revealing the row's `.acc-bio` in place; the name caret rotates via CSS) and mirrors the
  *     state on `aria-expanded`. A click on a link inside the row (e.g. the "Compensated expert"
  *     cue) is NOT a toggle. Keyboard: Enter/Space on the role=button row.
- *   • In-page modals: a `[data-certrev-modal-open]` control opens the unified
- *     `<certrev-cert-modal>` element via its `.open('cert'|'expert')` method. Bare /
+ *   • In-page modals: a `[data-certrev-modal-open]` control opens its OWN face's
+ *     `<certrev-cert-modal>` element (`ownCertModal`) via its `.open('cert'|'expert')` method. Bare /
  *     `"cert"` opens the certificate dialog; `"expert"` opens the reviewer dialog. With no JS / no
  *     element / no envelope a link control falls back to its href (the certificate or the CertREV
  *     profile page). The element owns its OWN close plumbing (× / Close / backdrop / Esc) inside its
@@ -18,12 +18,18 @@
  * No crypto, no network — pure DOM. Idempotent install (guarded so a double-load can't double-bind).
  */
 
-import { CERT_MODAL_TAG } from './certrev-cert-modal.js'
+import { CERT_MODAL_TAG, ownCertModal } from './certrev-cert-modal.js'
 
 export const ACC_ATTR = 'data-certrev-acc'
 export const MODAL_OPEN_ATTR = 'data-certrev-modal-open'
 export const INITIALS_ATTR = 'data-certrev-initials'
 export const CARD_SELECTOR = '.certrev-card'
+/** Stamped on a control that could not tell which modal is its own (value: the reason), beside the
+ *  bubbling {@link MODAL_UNRESOLVED_EVENT}, so the miss is inspectable rather than a silent link. */
+export const MODAL_UNRESOLVED_ATTR = 'data-certrev-modal-unresolved'
+/** Dispatched on a control whose face has no modal of its own but sits between other faces'
+ *  (`ownCertModal` → `ambiguous`). `detail: { reason: 'ambiguous', modals }`. */
+export const MODAL_UNRESOLVED_EVENT = 'certrev:modal-unresolved'
 
 /** The dialog a `data-certrev-modal-open` control targets. */
 export type ModalKind = 'cert' | 'expert'
@@ -53,8 +59,10 @@ export function modalTargetKind(value: string | null): ModalKind {
 	return value === 'expert' ? 'expert' : 'cert'
 }
 
-/** Open a cert dialog via the `<certrev-cert-modal>` element. Returns false (so the caller lets an
- *  href fall back) when the element is absent or declines (no envelope + no fetch source). */
+/** Open a cert dialog via the document's FIRST `<certrev-cert-modal>` element: a page-level helper
+ *  for a page with one face. Controls go through `openOwnModal`, which finds their own face's element.
+ *  Returns false (so the caller lets an href fall back) when the element is absent or declines (no
+ *  envelope + no fetch source). */
 export function openModal(doc: Document, kind: ModalKind): boolean {
 	const el = doc.querySelector(CERT_MODAL_TAG) as CertModalElement | null
 	if (el && typeof el.open === 'function') return el.open(kind)
@@ -66,6 +74,28 @@ export function openCertModal(doc: Document): boolean {
 	return openModal(doc, 'cert')
 }
 
+/**
+ * Open a dialog of `control`'s OWN face's `<certrev-cert-modal>` (see `ownCertModal`), which is what
+ * the delegated click / key handlers do. Returns false (so a link control follows its own href) when
+ * the face has no modal, the element declines, or the control cannot tell which modal is its own; in
+ * that last case it is stamped `data-certrev-modal-unresolved="ambiguous"` and receives
+ * `certrev:modal-unresolved`, and another face's certificate is never opened in its place.
+ */
+export function openOwnModal(control: Element, kind: ModalKind): boolean {
+	const own = ownCertModal(control)
+	if (own.modal) {
+		const el = own.modal as CertModalElement
+		return typeof el.open === 'function' ? el.open(kind) : false
+	}
+	if (own.reason === 'ambiguous') {
+		control.setAttribute(MODAL_UNRESOLVED_ATTR, own.reason)
+		control.dispatchEvent(
+			new CustomEvent(MODAL_UNRESOLVED_EVENT, { bubbles: true, detail: { reason: own.reason, modals: own.count } }),
+		)
+	}
+	return false
+}
+
 function asElement(target: EventTarget | null): Element | null {
 	return target && (target as Element).closest ? (target as Element) : null
 }
@@ -111,7 +141,7 @@ export function initCertInteractions(doc: Document): void {
 		// (Close is owned by the <certrev-cert-modal> element inside its shadow root.)
 		const opener = el.closest(`[${MODAL_OPEN_ATTR}]`)
 		if (opener) {
-			if (openModal(doc, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR)))) e.preventDefault()
+			if (openOwnModal(opener, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR)))) e.preventDefault()
 			return
 		}
 
@@ -144,7 +174,7 @@ export function initCertInteractions(doc: Document): void {
 
 		const opener = el.closest(`[${MODAL_OPEN_ATTR}]`)
 		if (opener) {
-			if (openModal(doc, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR)))) {
+			if (openOwnModal(opener, modalTargetKind(opener.getAttribute(MODAL_OPEN_ATTR)))) {
 				e.preventDefault()
 				return
 			}