altitude-design 0.2.1 → 0.3.1

package/dist/guidance/rules.json

@@ -0,0 +1,653 @@
+{
+  "schemaVersion": 1,
+  "rules": [
+    {
+      "id": "ALT-SEM-001",
+      "title": "Interactive controls have keyboard semantics",
+      "authority": "normative-standard",
+      "diagnosticClass": "deterministic",
+      "applicability": "Focusable actions and navigation.",
+      "exceptions": [
+        "Use links for navigation and buttons for actions; specialized widgets follow their own keyboard model."
+      ],
+      "maturity": "supported",
+      "evidenceStatus": "engineering-tested",
+      "sources": [
+        "wcag22"
+      ],
+      "repair": "Use native semantics; test activation, names and disabled states.",
+      "verification": [
+        "build/checks/semantics.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#keyboard",
+        "https://www.w3.org/TR/WCAG22/#name-role-value"
+      ],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-EDIT-001",
+      "title": "Retain edits and report persistence truthfully",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "application-integration",
+      "applicability": "Forms that save through an asynchronous service.",
+      "exceptions": [
+        "A queued write may say queued, never persisted; explicit discard may clear data."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "govuk-validation"
+      ],
+      "repair": "Keep draft and committed data separate; reject stale responses; retry rejected writes without clearing input.",
+      "verification": [
+        "build/checks/pattern-workflows.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-EDIT-002",
+      "title": "Errors identify and link to the relevant field",
+      "authority": "normative-standard",
+      "diagnosticClass": "deterministic",
+      "applicability": "Detected input errors.",
+      "exceptions": [
+        "A summary is a contextual implementation, not itself a WCAG requirement; sensitive error detail may be withheld."
+      ],
+      "maturity": "supported",
+      "evidenceStatus": "engineering-tested",
+      "sources": [
+        "wcag22",
+        "govuk-validation"
+      ],
+      "repair": "Use one error model for inline messages and summary links; preserve valid description IDs and focus the linked control.",
+      "verification": [
+        "build/checks/pattern-workflows.mjs",
+        "build/checks/semantics.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#error-identification",
+        "https://www.w3.org/TR/WCAG22/#error-suggestion",
+        "https://www.w3.org/TR/WCAG22/#info-and-relationships"
+      ],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-EDIT-003",
+      "title": "Choose validation and unsaved-work policy deliberately",
+      "authority": "heuristic",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Editing and attempted cancellation or navigation.",
+      "exceptions": [
+        "Do not block navigation for pristine forms; autosave requires its own truthful operation model."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "govuk-validation",
+        "task-review"
+      ],
+      "repair": "Document submit/blur timing and connect requestLeave to cancel, router Back and navigation; explain browser unload limits.",
+      "verification": [
+        "manual: exercise cancel, Back, reload and route change with unsaved data"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-COLLECTION-001",
+      "title": "Distinguish collection states and retain identity",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "application-integration",
+      "applicability": "Asynchronously loaded collections.",
+      "exceptions": [
+        "First-use empty and no-results apply only when the application knows the distinction; offline/cache may add states."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "task-review"
+      ],
+      "repair": "Render loading, refreshing, empty, filtered empty and failure accurately; use stable keys and an explicit selection policy.",
+      "verification": [
+        "build/checks/pattern-workflows.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-ACTION-001",
+      "title": "Confirm intent separately from operation completion",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "application-integration",
+      "applicability": "Actions with significant consequences.",
+      "exceptions": [
+        "Direct actions are suitable when real recovery exists; confirmation is not universal."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "wcag22",
+        "task-review"
+      ],
+      "repair": "Name target and consequence; delay success until execute resolves; wire real undo or appropriate review, and logical focus.",
+      "verification": [
+        "build/checks/pattern-workflows.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#error-prevention-legal-financial-data"
+      ],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-REVIEW-001",
+      "title": "Allow correction and preserve a truthful receipt",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "application-integration",
+      "applicability": "Processes with a review step before final commitment.",
+      "exceptions": [
+        "Not every short form needs a separate review screen; redundant-entry and error-prevention criteria have scoped exceptions."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "wcag22"
+      ],
+      "repair": "Retain applicable answers through correction and failed submission; show a service-issued receipt and a durable destination.",
+      "verification": [
+        "build/checks/pattern-workflows.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#redundant-entry",
+        "https://www.w3.org/TR/WCAG22/#error-prevention-legal-financial-data"
+      ],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-STATUS-001",
+      "title": "Status is perceivable without moving focus unnecessarily",
+      "authority": "normative-standard",
+      "diagnosticClass": "deterministic",
+      "applicability": "Status messages that do not receive focus.",
+      "exceptions": [
+        "Urgent errors may use alerts; avoid announcing every keystroke or repeated decorative status."
+      ],
+      "maturity": "supported",
+      "evidenceStatus": "engineering-tested",
+      "sources": [
+        "wcag22"
+      ],
+      "repair": "Use an appropriate live region and concise meaningful messages; test feedback with assistive technology.",
+      "verification": [
+        "build/checks/pattern-workflows.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#status-messages"
+      ],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-VISUAL-001",
+      "title": "Height has an equivalent non-depth signal",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "All meaning carried by elevation.",
+      "exceptions": [
+        "Decorative depth carries no required semantic meaning."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation"
+      ],
+      "repair": "Pair depth with text, state or border and inspect forced colors/reduced motion.",
+      "verification": [
+        "manual: forced colors, reduced motion, zoom and RTL review"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-EXP-001",
+      "title": "Hold-to-confirm remains a scoped hypothesis",
+      "authority": "experimental-hypothesis",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Considering hold gestures for consequential actions.",
+      "exceptions": [
+        "Never require a hold as the sole accessible way to complete a task."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "hold-hypothesis"
+      ],
+      "repair": "Choose review or real recovery from task consequences; evaluate hold benefits with representative users.",
+      "verification": [
+        "manual: task-based human evaluation"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-SETUP-001",
+      "title": "Installed guidance and setup versions agree",
+      "authority": "altitude-policy",
+      "diagnosticClass": "deterministic",
+      "applicability": "Projects using the explicit CLI adapter.",
+      "exceptions": [
+        "Projects may read local guidance directly without configuring an agent."
+      ],
+      "maturity": "supported",
+      "evidenceStatus": "engineering-tested",
+      "sources": [
+        "task-review"
+      ],
+      "repair": "Reinstall/build the matching package and rerun altitude init for configured clients.",
+      "verification": [
+        "build/checks/guidance.mjs",
+        "build/checks/agent-setup.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-23",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-VISUAL-002",
+      "title": "One primary action per view",
+      "authority": "altitude-policy",
+      "diagnosticClass": "deterministic",
+      "applicability": "Any view: a page, and each Dialog, Sheet and Popover. Independent parts (cards on a dashboard) can be scoped with PrimaryScope.",
+      "exceptions": [
+        "A dashboard of independent cards, each with its own task, wrapped in PrimaryScope."
+      ],
+      "maturity": "supported",
+      "evidenceStatus": "engineering-tested",
+      "sources": [
+        "altitude-elevation"
+      ],
+      "repair": "Keep one Button variant=\"primary\" per view (PageHeader's primary slot on a page); make the rest secondary or ghost, or put them in an overflow menu.",
+      "verification": [
+        "build/checks/primary-scope.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-29",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-VISUAL-003",
+      "title": "Persistent states don't rise",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "States that feel important but persist: unread, invited (awaiting someone else), recommended or most popular, current plan or item, locked behind a plan, an app-wide mode, proposed by an agent, streaming text.",
+      "exceptions": [
+        "A state that is live right now (a write in flight, something in a hand, an action being asked for) uses its own signal from Elevation.md."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation"
+      ],
+      "repair": "Say the state in words, a plate, a dot, weight or an ARIA state, and keep the thing at its own level: unread is a dot and weight 600; invited is a plate, not pending; recommended is a plate with only its CTA at level 2; current is the word and aria-current; locked stays live and opens the upgrade; a mode is a strip and a viewport border; an agent's proposal is raised, asking; streaming text stays on the ground and settles once. See Elevation.md, \"States that don't rise\".",
+      "verification": [
+        "manual:review the screen against Elevation.md, \"States that don't rise\""
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-29",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-SETTINGS-001",
+      "title": "Each settings section applies now or saves together, and destructive actions sit in a final danger zone",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Settings pages that combine standalone preferences, records saved together and destructive actions.",
+      "exceptions": [
+        "A page with only one mode needs only that mode; a single destructive action outside settings follows the consequential-action contract alone."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "nng-toggle",
+        "task-review"
+      ],
+      "repair": "Give each section one mode: apply-now controls report their own write (pending, committed, failed with the control restored); fields that form one record join one draft saved once. Move delete, transfer and similar actions to a final section titled Danger zone, at the same height as the others, each named by its outcome with its consequence in words.",
+      "verification": [
+        "build/checks/settings-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-MEMBERS-001",
+      "title": "Invitations are settled records, and guards are said where the action would be",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Member lists with invitations, roles and removal.",
+      "exceptions": [
+        "Products without invitations or roles apply only the guard requirement."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Draw an invitation awaiting acceptance on the ground with an Invited plate, its role and sent date; hover only while sending. Replace an action a person may not take (removing the last owner, demoting yourself out of the last admin role) with the reason in words, and enforce the same guard on the server.",
+      "verification": [
+        "build/checks/members-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-BILLING-001",
+      "title": "Usage is a reading, a plan change is reviewed with its cost, and a downgrade lists what's lost",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Billing pages with usage limits and plan changes.",
+      "exceptions": [
+        "Prices and proration are the billing service's; the interface shows what the service quotes and never computes a charge itself."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "wcag22",
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Draw each quota as a Meter with its state in words, never Progress; mark the rest of the cycle as projected; review a plan change with the quoted proration as a sentence before confirming, and claim it only after the service confirms; list what a downgrade removes and name its button by the outcome.",
+      "verification": [
+        "build/checks/billing-pattern.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#error-prevention-legal-financial-data"
+      ],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-AUTH-001",
+      "title": "Auth copy reveals nothing, fields carry autocomplete tokens, and nothing is submitted for the person",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Sign-in, sign-up, verification, two-factor and reset screens.",
+      "exceptions": [
+        "Products that delegate authentication to a hosted provider apply this to the parts they render."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "owasp-auth",
+        "wcag22"
+      ],
+      "repair": "Use responses that hold whether or not the account exists; state rate limits with the wait; give every field its autocomplete token and allow paste; keep Verify and Sign in as buttons the person presses; keep the email across steps; offer a path that isn't a cognitive test.",
+      "verification": [
+        "build/checks/auth-pattern.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#accessible-authentication-minimum",
+        "https://www.w3.org/TR/WCAG22/#identify-input-purpose"
+      ],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-AUDIT-001",
+      "title": "Audit entries are flush sentences that expand to their change, and export is a job",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Audit logs and activity feeds.",
+      "exceptions": [
+        "Entries that link somewhere may lift when pointed at; nothing else does."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Render each entry as a flush row that reads as one sentence with its actor, exact time and origin; expand it to the before and after; keep the workspace log and a record's feed apart; run export as a task with progress, then offer the download and log the export.",
+      "verification": [
+        "build/checks/audit-log-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-IMPORT-001",
+      "title": "Mapping shows what's left, invalid cells sink with their problem, and the import ends with a receipt",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "File imports with mapping and row validation.",
+      "exceptions": [
+        "Imports with a fixed format skip mapping; the fix, review and receipt still apply."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Give each source column a Select that fills when mapped and list unmapped required fields in words; show invalid cells as trenches with their problem in the cell's description and announce the count as it changes; review in one sentence of consequences; run the import as a job with progress, cancellation where supported, and a receipt of imported, skipped and failed rows.",
+      "verification": [
+        "build/checks/import-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-SYNC-001",
+      "title": "Nothing is saved until the server says so, queued work is visible, and no edit is dropped silently",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "application-integration",
+      "applicability": "Autosaving, optimistic and local-first work, and expiring sessions.",
+      "exceptions": [
+        "Automatic merges need no prompt; only conflicts the merge strategy can't resolve ask the person."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "task-review",
+        "wcag22"
+      ],
+      "repair": "Keep each change pending until acknowledged and say Saved only when the queue is empty; show offline changes as waiting with a count; show unresolved conflicts with both versions, the other in its author's presence colour and name, and say where the version not kept went; warn before a session expires, offer to extend it and keep drafts across re-authentication.",
+      "verification": [
+        "build/checks/sync-pattern.mjs"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#timing-adjustable"
+      ],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-DEV-001",
+      "title": "A secret is shown once behind an acknowledgement, listed masked, and its roll or revocation says what happens",
+      "authority": "contextual-pattern",
+      "diagnosticClass": "contextual-review",
+      "applicability": "API keys, signing secrets and integrations.",
+      "exceptions": [
+        "Products that deliberately allow revealing a stored secret offer it on demand, masked by default."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "task-review"
+      ],
+      "repair": "Show a new secret in full once, in a dialog that closes only after the person confirms they saved it; list secrets masked with their last use; say a roll's overlap window before and after; name what breaks before revoking or disconnecting; show a retry as a pending write with its attempt.",
+      "verification": [
+        "build/checks/developer-settings-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-AGENT-001",
+      "title": "Each agent state is one reading, approval scales with consequence, and changes keep their provenance",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Embedded agents that act on someone's behalf.",
+      "exceptions": [
+        "Steps with a real undo may run without approval; the application decides which."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Draw a proposal as raised and asking, never pending; hover only once approved and executing; land on the runtime's confirmation; sink failures with Retry; require a Confirmation for external or irreversible steps and a hold or stationary dialog for the most severe; put an AI label and the approver on every change; announce step changes politely and never token by token.",
+      "verification": [
+        "build/checks/agent-action-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-ONBOARD-001",
+      "title": "Setup tasks are stamped when they happen, progress is a reading, and tours wait to be asked",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "First-run setup, empty states, tours and release notes.",
+      "exceptions": [
+        "A tour may be offered once after a change to existing UI; it still never starts on every visit."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Stamp a setup task done from the application event, not a click on the item; show progress as a Meter; open each empty region with its one action; offer tours rather than starting them, keep them short and never dim the page; count only unseen changes; make every onboarding surface dismissible and re-findable from Help.",
+      "verification": [
+        "build/checks/onboarding-pattern.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-LAYOUT-001",
+      "title": "A screen's frame is chosen from its task, with one lead and one primary action named first",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Any new screen or app: its frame, what leads and where the primary action sits.",
+      "exceptions": [
+        "An existing product keeps its navigation frame; the view inside it still names its task and lead."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review"
+      ],
+      "repair": "Write down the task, the one thing that leads, the one primary action and what comes next; choose the frame from the task (records, list and detail, focused editor, guided flow, decision, report) instead of the sidebar-and-cards default; put the lead first after the title and make it the largest region; then check that every stated choice is visible on the screen.",
+      "verification": [
+        "build/checks/screen-layout-pattern.mjs",
+        "build/checks/render-tells.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-CONVO-001",
+      "title": "A conversation never loses the person's words, completes only when the stream does, and says each failure in words",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Conversations with an assistant: chat, copilots, agent conversations.",
+      "exceptions": [
+        "What persists across reloads, and for how long, is the application's decision."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-elevation",
+        "task-review",
+        "wcag22"
+      ],
+      "repair": "Guard against double submits; ignore events from a superseded turn; keep the partial answer on Stop as \"Stopped\"; settle an answer only when the stream says it's complete and show an unfinished one after a reload as \"Interrupted\" with Retry; keep the message when sending fails; say offline, rate limited (with when), context full, refused and outage as distinct states with what to do; announce each answer once, never token by token.",
+      "verification": [
+        "build/checks/assistant-conversation-pattern.mjs",
+        "build/checks/pattern-workflows.mjs"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-10-30",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-SEM-002",
+      "title": "Links, buttons, fields, images and headings name what they are",
+      "authority": "normative-standard",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Every link, button (including icon-only ones), form field, informative image and heading in a view.",
+      "exceptions": [
+        "A decorative image takes an empty alt and needs no name.",
+        "Repeated links in a list (\"Edit\") are acceptable when their accessible name adds the object (\"Edit invoice 1043\")."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "wcag22",
+        "altitude-fundamentals"
+      ],
+      "repair": "Name links by destination, not \"Learn more\" or \"Click here\"; name buttons by verb and object; give every field a visible label, never a placeholder alone; describe what an image shows or mark it decorative; make each heading describe its section, with one h1 per view, no skipped levels, and header, nav and main landmarks.",
+      "verification": [
+        "build/checks/tells-lint.mjs",
+        "manual: read the view's links, buttons and headings out of context with a screen reader's rotor or list"
+      ],
+      "criteria": [
+        "https://www.w3.org/TR/WCAG22/#link-purpose-in-context",
+        "https://www.w3.org/TR/WCAG22/#headings-and-labels",
+        "https://www.w3.org/TR/WCAG22/#label-in-name",
+        "https://www.w3.org/TR/WCAG22/#non-text-content",
+        "https://www.w3.org/TR/WCAG22/#labels-or-instructions",
+        "https://www.w3.org/TR/WCAG22/#info-and-relationships"
+      ],
+      "reviewedAt": "2026-11-01",
+      "owner": "Altitude maintainers"
+    },
+    {
+      "id": "ALT-HONEST-001",
+      "title": "Emphasis serves the person's task: no false urgency, hidden terms, pre-selected costs or traps",
+      "authority": "altitude-policy",
+      "diagnosticClass": "contextual-review",
+      "applicability": "Sign-up, subscription, upgrade, checkout, discount, newsletter, consent and cancellation flows, and any overlay that asks for a decision.",
+      "exceptions": [
+        "A real deadline (a trial end, a session timeout) is stated with its time.",
+        "A recommendation is shown as a plate or a sentence, not with extra height or size."
+      ],
+      "maturity": "provisional",
+      "evidenceStatus": "requires-application-validation",
+      "sources": [
+        "altitude-fundamentals",
+        "altitude-elevation",
+        "deceptive-patterns-llm"
+      ],
+      "repair": "Remove countdowns and scarcity claims with no real limit; in offers the product makes, make declining at least a secondary button, as findable as accepting, named plainly and never shaming; pre-select nothing that costs money, shares data or subscribes; let every overlay close with Escape, and give anything that blocks the page a visible close or Cancel; put prices and terms beside their action at body size; let people leave in no more steps than they joined; show only real reviews and counts, saying how they were chosen.",
+      "verification": [
+        "manual: review revenue, retention and data-collection flows for each deceptive pattern type, comparing the steps to accept and to decline"
+      ],
+      "criteria": [],
+      "reviewedAt": "2026-11-01",
+      "owner": "Altitude maintainers"
+    }
+  ]
+}