paperlint 4.2.0 → 6.0.0

package/docs/e2e.md

@@ -84,17 +84,18 @@ findings for each rule it names (`[]` is "none"). One `describe` per fixture dir
 declared field into a test. A folder without `expect.json`, or with one the schema rejects, fails.
 A new venue fixture is a new folder: its paper, its `paperlint.json`, its `expect.json`.
 
-| fixture      | what it is there to prove                                                                                                                                                                                                                                                                        |
-| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| `acmart`     | a real `\documentclass{acmart}` source builds, and the PDF carries the class's **own** font families — not one family of the silent substitution                                                                                                                                                 |
-| `fallback`   | the same document with the fonts missing still **builds green**, and is **rejected** by the font check. The failure is in the artifact, not in the exit code                                                                                                                                     |
-| `cite`       | the bibtex path: the PDF shows `[1]`, not `[?]`, and no `??`. Its `build.sh` would leave a trace if run — it must not run, and the run must say it is ignored                                                                                                                                    |
-| `guards`     | `\input{paper-guards}` resolves with no configuration, because paperlint puts its own venues directory on `TEXINPUTS`                                                                                                                                                                            |
-| `unbalanced` | a two-column acmart paper whose last page comes out 621.5 / 264.8 pt builds **green** — the build does not judge the layout and rewrites nothing — while `_build/paper.facts.json` records both heights, and `paperlint lint` with `pdf/last-page-balance` turned on in `rules` reports the page |
-| `broken`     | a failing build names pdflatex and its exit code, quotes the error line and its `l.NNN` context, and deletes the stale `paper.pdf` planted before the run                                                                                                                                        |
-| `no-source`  | a paper with no `paper.tex` is named separately, and the run as a whole is a failure                                                                                                                                                                                                             |
-| `empty`      | a document with no pages: pdflatex exits 0 and writes no PDF, and that is a failure, not a green `paper.pdf`                                                                                                                                                                                     |
-| `aidc`       | a real `[conference,compsoc]{IEEEtran}` paper builds on paperlint's TeX Live in NimbusRomNo9L, `tex/template`, `tex/required-section` and the `pdf/*` rules find nothing, and `tex/venue-leftover` warns once, on its planted line                                                               |
+| fixture      | what it is there to prove                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `acmart`     | a real `\documentclass{acmart}` source builds, and the PDF carries the class's **own** font families — not one family of the silent substitution                                                                                                                                                                                                                                                                                                                                                       |
+| `fallback`   | the same document with the fonts missing still **builds green**, and is **rejected** by the font check. The failure is in the artifact, not in the exit code                                                                                                                                                                                                                                                                                                                                           |
+| `cite`       | the bibtex path: the PDF shows `[1]`, not `[?]`, and no `??`. Its `build.sh` would leave a trace if run — it must not run, and the run must say it is ignored                                                                                                                                                                                                                                                                                                                                          |
+| `guards`     | `\input{paper-guards}` resolves with no configuration, because paperlint puts its own venues directory on `TEXINPUTS`                                                                                                                                                                                                                                                                                                                                                                                  |
+| `unbalanced` | a two-column acmart paper whose last page comes out 621.5 / 264.8 pt builds **green** — the build does not judge the layout and rewrites nothing — while `_build/paper.facts.json` records both heights, and `paperlint lint` with `pdf/last-page-balance` turned on in `rules` reports the page                                                                                                                                                                                                       |
+| `broken`     | a failing build names pdflatex and its exit code, quotes the error line and its `l.NNN` context, and deletes the stale `paper.pdf` planted before the run                                                                                                                                                                                                                                                                                                                                              |
+| `no-source`  | a paper with no `paper.tex` is named separately, and the run as a whole is a failure                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| `empty`      | a document with no pages: pdflatex exits 0 and writes no PDF, and that is a failure, not a green `paper.pdf`                                                                                                                                                                                                                                                                                                                                                                                           |
+| `aidc`       | a real `[conference,compsoc]{IEEEtran}` paper builds on paperlint's TeX Live in NimbusRomNo9L, `tex/template`, `tex/required-section` and the `pdf/*` rules find nothing, and `tex/venue-leftover` warns once, on its planted line. It declares `identity` and names nobody, so `anonymity/identity` is silent on a real build, and `format/page-limit` finds the IEEEtran «References» heading                                                                                                        |
+| `anon-*`     | six AIDC papers, each planting the declared (invented) name on ONE path, and `anonymity/identity` reports exactly one finding naming where: `author` the author block · `ack` an acknowledgments paragraph · `bib` a self-citation, printed by `IEEEtran.bst` as «A. Example» · `pdfauthor` `\hypersetup{pdfauthor=…}`, on no page · `href` a link whose target is the author's account while its text is not (the anonymous mirror beside it is not reported) · `macro` the name behind `\newcommand` |
 
 The `fallback` row is the point of the whole file. `acmart.cls` checks for `libertine.sty`,
 `zi4.sty` and `newtxmath.sty`, and failing to find any of them sets `\@ACM@newfontsfalse` and
@@ -102,6 +103,26 @@ typesets the paper in Computer Modern. The build is green, the PDF looks fine, t
 and therefore so does the pagination. A submitted paper went out that way. **An exit code cannot
 see it, so the content of the artifact is what gets measured.**
 
+**Where the body ends, on real papers** (`test/e2e/tex/page-count.e2e.ts`). `format/page-limit`
+counts a body that ends at the references, and that count is checked on papers nobody here wrote:
+the accepted ACSAC papers in `fixtures/accepted-papers/` that carry a `page-count.json` (ACSAC is
+AIDC's parent venue, same IEEEtran template), built with figures replaced by blank boxes of the
+same size and the packages paperlint's TeX Live lacks vendored beside them. Each `page-count.json`
+holds the references page and the body count established by rendering the PDF and looking at it,
+with the evidence in words. `page-count-variants.json` derives papers from them, each changing ONE
+thing: the references forced to the top of a page, a `\subsection*{References}` or a table headed
+«References» in the body, the appendix moved before or after the bibliography, hyperref removed. The test
+builds all of them in one `build --all` and requires the detector's count to equal the recorded
+one, then lints two of them under AIDC's regular limit of 12: the 12-page body passes, the 13-page
+body is reported. Eleven builds, the lint runs included, took 95 s here.
+
+The same build carries `pdf/body-size` (`body-size.json` beside the papers): the four ACSAC papers
+and the ACM `agenticdev-acm26` must draw no finding, and three variants — the body in IEEEtran's
+`9pt`, the bibliography in `\scriptsize`, the bibliography in `\small` — exactly the recorded one.
+The sizes the build measured are compared with the recorded ones first, so a drift in banal shows as
+itself. The rule is linted once over all eight `paper.tex`, since a lint of a real paper takes
+10–25 s, nearly all of it in the prose rules.
+
 Beside the fixtures, one test proves the refusal with no TeX at all: PATH holds `node` alone, the
 cache directory is empty and `CI` is set, and `paperlint build` must exit 1 with one line naming
 `npx paperlint toolchain` and the venue's packages, print no plan and create no PDF and no cache.

package/docs/install.md

@@ -33,7 +33,7 @@ In order:
    on the defaults gets no config file at all.
 3. **Links each shipped skill** into `.claude/skills/<name>`, where Claude Code looks for skills.
 4. **Writes the hook commands** into `.claude/settings.json`, beside your own entries.
-5. **Offers a GitHub Actions workflow**, pinned to the release tag of the version you installed.
+5. **Offers a GitHub Actions workflow** that runs `npm ci`, then the action from `node_modules`.
 6. **Offers a first paper** (`paperlint new`) if the papers directory has none.
 7. **Offers TeX Live** for `paperlint build` (`paperlint toolchain`, ~270 MB, ~3 min, once), with
    the size in the question and NO as the default. Without a terminal it asks nothing and lists the
@@ -47,13 +47,13 @@ question (Ctrl+D) also takes the default.
 
 ## What `paperlint init` writes
 
-| what                                                               | where                   | when                                                                                                                                                                              |
-| ------------------------------------------------------------------ | ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `{ "papersDir": … }` naming your papers directory                  | `paperlint.json`        | only when it is not the default `papers`                                                                                                                                          |
-| the three hook commands, merged in beside your own entries         | `.claude/settings.json` | by default. A human at a terminal is asked [Y/n]; an agent, CI or `--yes` gets YES; `--no-hooks` skips. Hand-wired under another spelling: nothing written, so nothing runs twice |
-| a GitHub Actions workflow, pinned to `@v<installed version>`       | `.github/workflows/`    | only if you say yes; it asks once, and only when a human is at a terminal (stdin and stdout, no `CI`, no `--yes`)                                                                 |
-| a first paper, via `paperlint new`                                 | `<papers>/<name>/`      | only when the papers directory holds none: asked of a human at a terminal, otherwise only with `--paper <name>`                                                                   |
-| one relative symlink per shipped skill, into the installed package | `.claude/skills/<name>` | always — except where that name is already taken (a directory, a file, a link elsewhere): that entry is left as it is and named in the report                                     |
+| what                                                                 | where                   | when                                                                                                                                                                              |
+| -------------------------------------------------------------------- | ----------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `{ "papersDir": … }` naming your papers directory                    | `paperlint.json`        | only when it is not the default `papers`                                                                                                                                          |
+| the three hook commands, merged in beside your own entries           | `.claude/settings.json` | by default. A human at a terminal is asked [Y/n]; an agent, CI or `--yes` gets YES; `--no-hooks` skips. Hand-wired under another spelling: nothing written, so nothing runs twice |
+| a GitHub Actions workflow: `npm ci`, then `./node_modules/paperlint` | `.github/workflows/`    | only if you say yes; it asks once, and only when a human is at a terminal (stdin and stdout, no `CI`, no `--yes`)                                                                 |
+| a first paper, via `paperlint new`                                   | `<papers>/<name>/`      | only when the papers directory holds none: asked of a human at a terminal, otherwise only with `--paper <name>`                                                                   |
+| one relative symlink per shipped skill, into the installed package   | `.claude/skills/<name>` | always — except where that name is already taken (a directory, a file, a link elsewhere): that entry is left as it is and named in the report                                     |
 
 It installs no software you did not say yes to, and touches nothing else. Commit `.claude/settings.json` so every clone
 gets the hooks; the hook commands run files inside `node_modules`, so a fresh clone needs

package/docs/prior-art/paper-folder-scaffolding.md

@@ -86,7 +86,6 @@ listed so nobody thinks the two are consistent.
 | `paper/stages` (error)              | `eslint-rules/paper-stages.mjs:91`, glob `src/cli.ts:126`         | front matter `stages[]`: `stage`, `date`, `pdf`, `bytes`; and lists `versions/*.pdf`                          |
 | `paper/source` (error)              | `eslint-rules/paper-stages.mjs:377`, `:415`, `:442`               | `stages[].source`, `sourceBytes`, `sourceLost`                                                                |
 | `paper/author-list` (warn)          | `eslint-rules/paper-stages.mjs:296`, marker `:325`                | `stages[]` + searches the scorecard **table cells** for the marker `bib-authors`                              |
-| `paper/research-question` (warn)    | `eslint-rules/paper-research-question.mjs:142`                    | reads the status file from disk while linting `paper.tex`/`paper.md`: `stages`, `researchQuestion`            |
 | `paper/typography` (warn)           | `src/cli.ts:118`                                                  | **not** the status file — its per-paper allowance lives in the ROOT key `typographyDebt`, keyed by paper path |
 | `pipeline-check.mjs` (skill script) | `skills/paper-pipeline/scripts/pipeline-check.mjs:231-321`        | the `Venue:` / `Deadline:` header line, the verdict line, the five section tables                             |
 | `paper-status-gates` hook           | `hooks/paper-status-gates.hook.mjs`                               | surfaces the verdict and unrun gates after an edit                                                            |
@@ -111,7 +110,6 @@ content of those files is reproduced here.)
 | ------------------------------------------------------------------------------- | --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | paper short name / title                                                        | **config**            | human, once — `rpp new` can prefill from the folder name                                                                                                                  |
 | venue, deadline, blind model (the `Venue:` header line)                         | **config**            | human; changes when the paper is re-targeted                                                                                                                              |
-| `researchQuestion`                                                              | **config**            | human, once                                                                                                                                                               |
 | format (`.tex` vs `.md`)                                                        | **derived**           | from which source file exists                                                                                                                                             |
 | venue profile, paper kind, pdf path (a separate `venue.json` in one real paper) | **config**            | human; already a per-paper file in practice                                                                                                                               |
 | typography allowance (`typographyDebt`)                                         | **config**            | human, but it sits in the root key keyed by path today                                                                                                                    |
@@ -202,7 +200,7 @@ written once at freeze time, then checked forever — and today a human types it
 - **Root (`package.json` key): the papers directory only.** Unchanged. It stays a scope, like
   Quarto's project dir or Astro's collection glob. No list of papers.
 - **Per paper: the paper folder's `PIPELINE-STATUS.md` front matter** holds that paper's config
-  (`researchQuestion`, and the venue/deadline fields that today live in a prose header line) and
+  (the venue/deadline fields that today live in a prose header line) and
   its stage records. Unchanged carrier, so every existing paper keeps working.
 - **Not recommended now: a separate `paper.yml`.** It would split config from the journal cleanly
   (the 1 300-line files are 98% journal), but it moves every rule's input and every consumer's
@@ -214,9 +212,8 @@ written once at freeze time, then checked forever — and today a human types it
 **`rpp new <name> [--format tex|md]`** — creates `<papers>/<name>/` with:
 
 - `paper.tex` or `paper.md` (a minimal stub; `--format` defaults to `tex` — ask when interactive);
-- `PIPELINE-STATUS.md` from a **template file** shipped in the package, with the name filled in,
-  `researchQuestion` present but empty and commented, and **no** `stages` field (a new paper has
-  shipped nothing — `paper-stages.mjs:24`).
+- `PIPELINE-STATUS.md` from a **template file** shipped in the package, with the name filled in and
+  **no** `stages` field (a new paper has shipped nothing — `paper-stages.mjs:24`).
 
 Rules for it, each taken from a tool above:
 
@@ -251,7 +248,7 @@ the skills tell agents to update them.
 | ------------------------------------------ | ------------------------- | ----------------------------------------------------------------------- |
 | the folder and source stub                 | human                     | `rpp new`                                                               |
 | `PIPELINE-STATUS.md` skeleton              | human copies a code fence | `rpp new`                                                               |
-| `researchQuestion`, venue, deadline        | human                     | human (unchanged)                                                       |
+| venue, deadline                            | human                     | human (unchanged)                                                       |
 | `stages` records, bytes, the frozen copies | human types byte counts   | still human; `rpp freeze` is the later step that takes it over          |
 | `sourceLost` exceptions                    | human                     | human (unchanged)                                                       |
 | `State:`, `Updated:`, `Requires` cells     | human                     | still human; **derivable** — candidates to drop from the template later |

package/docs/rules/anonymity/identity.md

@@ -0,0 +1,111 @@
+# anonymity/identity
+
+**Level:** error · **Reads:** `paper.tex` → `paperlint.json`, the preset it extends, and
+`_build/paper.facts.json` (what `paperlint build` read from the PDF)
+
+## What it catches
+
+For a venue that reviews double-blind — its preset says `"blind": true` — two things:
+
+- the paper declares no `identity`, so there is nothing to check the PDF against;
+- a string from `identity` appears in the built PDF: on a page, in its metadata (the Info
+  dictionary and the XMP packet: `Author`, `Title`, `Keywords`, …), or in the target of a link.
+
+A rule cannot know who wrote a paper, so the authors say it once, in `paperlint.json`. Given that
+list, finding it is mechanical. A missing list is an error, not a pass: a check with no input and a
+check that found nothing would otherwise look the same.
+
+The PDF is what reviewers get, so the PDF is what is read — not the source. A name reached through
+a macro (`\newcommand\me{Ada Example}`), a self-citation's author list from the `.bib`, a
+`\hypersetup{pdfauthor=…}` that is in no page's text, a `\href` whose visible text differs from its
+target: each ends up in the PDF, and each is found there.
+
+## Why
+
+> Submissions must be properly anonymized for double-blind review.
+
+— AIDC's call for papers, and most double-blind venues say the same. A paper that names its authors
+is desk-rejected, and the ways a name gets in are mostly invisible when reading the PDF: metadata
+the class copies from `\author`, a link to your own GitHub account, a name in a figure.
+
+## How a name is matched
+
+PDF text is not the source text; the same name comes out spelled several ways, and each is matched:
+
+| in the PDF                               | matched as                                           |
+| ---------------------------------------- | ---------------------------------------------------- |
+| `ADA EXAMPLE` (small caps), `ада пример` | Unicode case folding, no locale — Cyrillic folds too |
+| `fi` ligature                             | NFKC on both sides                                   |
+| `Ex` `ample` (two items, kerning)        | the page's items are joined without a space          |
+| `A d a  E x a m p l e` (letter-spaced)   | whitespace may stand between any two characters      |
+| `Exam-` ⏎ `ple`, `Ada` ⏎ `Example`       | so may a hyphen or a line break                      |
+| `AdaExample`, `Ada-Example`              | a token's own spaces and hyphens are optional        |
+
+Only the ends of a token are anchored: `Ada` does not match inside `Canada`, `MIT` not inside
+`submitted`. Two tokens that find the same text in the same place are one finding.
+
+Anonymous hosting needs no exception: an `osf.io/…?view_only=…` or `anonymous.4open.science` link
+names nobody, so nothing in `identity` matches it.
+
+## Examples
+
+```json
+{
+  "extends": "paperlint:aidc",
+  "kind": "regular",
+  "identity": [
+    "Ada Example",
+    "adaexample",
+    "ada@example.org",
+    "Example University",
+    "exampletool"
+  ]
+}
+```
+
+Findings:
+
+> PDF, page 1: «Ada Example» matches «Ada Example» in `identity`, and aidc reviews double-blind —
+> remove it, or refer to your own work in the third person
+
+> PDF metadata: Author: «Ada Example» matches «Ada Example» in `identity`, …
+
+> link target on page 4 (https://github.com/adaexample/exampletool): «adaexample» matches …
+
+With no `identity`:
+
+> aidc reviews double-blind, and this paper declares no `identity`, so nothing in the PDF can be
+> checked against the authors. Declare it in paperlint.json (the root's for every paper, or this
+> paper's): "identity": ["Your Name", "your-handle", "you@example.org", "Your University", "your-project"]
+
+## Options / preset fields
+
+No rule options.
+
+- `identity` in `paperlint.json` — a list of strings, each with a letter or digit. The root file's
+  list and the paper's own are **joined**: a paper adds its co-authors to the project's author and
+  cannot drop them by accident. Put in everything that identifies you: every spelling of every
+  author's name, handles, emails, affiliations, your own tools' and repositories' names.
+- `blind` in the preset — `true` where the venue's call says the review is double-blind. Shipped:
+  `paperlint:aidc`. A venue that is not blind: the rule is silent, `identity` or not.
+
+## What it does not check
+
+- **Text inside raster images.** A screenshot with your name, a logo, a scanned figure: text
+  extraction reads text, not pixels, so a name there is not seen. Look at the figures yourself.
+- **What you did not declare.** A co-author missing from `identity`, a nickname, an old handle.
+- **Self-citation in the third person** is allowed by most double-blind venues, and a cited name is
+  still a declared name: the rule reports it. Check the venue's policy; if it allows the citation,
+  cite in the third person and keep the finding in mind, or drop that token for this paper.
+- **A name split by hyphenation inside a token** that the PDF does not mark (a hyphen is matched,
+  a missing space between two lines of a hyphenated compound is).
+- **Words that are also names.** `identity` entries match as whole words anywhere; a common word
+  used as a handle will be found in ordinary prose.
+- **The source.** Comments, `\iffalse` blocks and files not in the build are not read — they are
+  not in the PDF reviewers get. Supplementary material uploaded separately is not read either.
+
+## How to fix
+
+Remove the name from where the message says: the author block, the acknowledgments (for review),
+`\hypersetup{pdfauthor=…}` / `pdfusetitle`, a link to your account (use an anonymous mirror), a
+self-citation in the first person. Rebuild (`paperlint build`) and lint again.

package/docs/rules/format/layout-override.md

@@ -0,0 +1,61 @@
+# format/layout-override
+
+**Level:** error · **Reads:** `paper.tex` and the files it includes, and the preset its
+`paperlint.json` extends
+
+## What it catches
+
+A command that changes the page layout the venue's template sets for the whole document:
+
+| command                                                                                                                                                                                | changes          |
+| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- |
+| `\usepackage{geometry}` (alone or in a list), `\geometry{…}`, `\newgeometry{…}`                                                                                                        | the margins      |
+| `\setlength` / `\addtolength` on `\textheight`, `\textwidth`, `\topmargin`, `\oddsidemargin`, `\evensidemargin`, `\columnsep`, `\headsep`, `\headheight`, `\footskip`, `\baselineskip` | the text block   |
+| `\linespread{…}`, `\renewcommand{\baselinestretch}{…}`                                                                                                                                 | the line spacing |
+
+It reads the parse tree, not the text: a command in a comment is not a command, and a `comment`
+environment is skipped. A macro definition is read: `\newcommand{\tall}{\setlength{\textheight}{10in}}`
+sets the length wherever it is used, so it is reported where it is defined.
+
+It is silent for a paper whose `paperlint.json` names no preset, or a preset that names no
+`template` — there is no mandated layout to compare against.
+
+## Why
+
+Venues set the page through their template and reject papers that change it: IEEE and ACM venues
+run format checks, and a shrunken margin or a tightened line spacing is a classic desk reject.
+AIDC: «LaTeX submissions must use the IEEEtran.cls version 1.8b template». The page-limit and
+geometry checks see the result only in the built PDF; this rule points at the line that does it.
+
+## Examples
+
+```latex
+\usepackage[margin=0.7in]{geometry}      % reported
+\setlength{\textheight}{9.6in}           % reported
+\linespread{0.95}                        % reported
+\setlength{\parindent}{0pt}              % not reported: not a layout length
+Text.\vspace{-2mm}                       % not reported: local space, not the template's layout
+```
+
+> `\usepackage{geometry}` changes the page layout aidc's template sets
+> (`\documentclass[conference,compsoc]{IEEEtran}`) — a desk-reject reason at venues that check the
+> format. Remove it; if the venue allows it, disable this line with a comment saying so
+
+## Options / preset fields
+
+No rule options. It reads the preset's `template`.
+
+## What it does not check
+
+- Local spacing: a negative `\vspace`, `\vspace*` or `\vskip` around a float or a heading. It
+  changes one spot, not the layout the template sets, and no venue's call names it.
+- Font size changes (`\small` body text, `\fontsize`), `\baselineskip` changed by `\fontsize`,
+  `\enlargethispage`, `\looseness`, or float spacing lengths (`\textfloatsep`, `\abovecaptionskip`).
+- Conditionals are not evaluated: a command inside an `\iffalse … \fi` block in the preamble is
+  still reported.
+- Layout lengths set with plain TeX assignment (`\textheight=9in`).
+
+## How to fix
+
+Remove the command and let the template set the page. If the venue explicitly allows it, keep it
+with `% eslint-disable-next-line format/layout-override -- <the venue's words>`.

package/docs/rules/format/page-limit.md

@@ -0,0 +1,108 @@
+# format/page-limit
+
+**Level:** error · **Reads:** `paper.tex` → `paperlint.json` (the venue preset and the paper's
+`kind`) and `_build/paper.facts.json` (what `paperlint build` measured in the PDF)
+
+## What it catches
+
+A PDF longer than its venue allows for the paper's kind: more body pages than `body_pages_max`, or
+more reference pages than `ref_pages_max`.
+
+How the body is counted depends on the preset:
+
+- **By default**, body and reference pages are banal's count: a page holding any text that is not
+  bibliography is a body page.
+- **With `"body_ends_at": "references"`** (AIDC), the body is every page up to where it ends: at
+  the references or at the appendix, whichever comes first — «excluding references and
+  appendices» excludes an appendix wherever it sits. What follows is not counted. The page the body
+  ends on counts as body when body text stands above the heading there: a body that runs half a
+  page past the limit is over the limit.
+
+## How it finds where the body ends
+
+Each end is found by a structural signal first, then its heading line on that page.
+
+**The references.**
+
+1. **hyperref's first bibliography entry.** hyperref writes a destination named `cite.<key>` for
+   every `\bibitem`; the lowest page any of them is on is where the bibliography is. The build
+   records it as `bib_anchor_page`.
+2. **The heading.** A line that reads `References` or `Bibliography` — any case, spaces ignored
+   (IEEEtran prints `REFERENCES` in small capitals, which the PDF may give as `R EFERENCES`),
+   optionally numbered (`7 References`, `VII. REFERENCES`). A heading whose next line opens the
+   first entry, `[1]`, is **confirmed**.
+
+With the anchor, the references start on its page, at the confirmed heading there, else at the last
+heading line on that page. Without hyperref: at the first confirmed heading, else at the first
+heading line.
+
+**The appendix.** hyperref's destination for the appendix's first section (`appendix.A` in the
+standard classes) or the first bookmark titled «Appendix…» (IEEEtran's `\appendices`) gives its
+page, recorded as `appendix_anchor_page`; on that page, the line reading `Appendix A.`,
+`APPENDIX` or `Appendices`. Without hyperref the appendix is not looked for: a sentence can end on
+a line reading «Appendix A.», and nothing would tell it from the heading.
+
+On the page the body ends on, the lines above the heading decide: a line with a letter in it is
+body text, unless it is a running header or footer — the same line, digits aside, on at least three
+pages and a third of them. A page number is not body text either.
+
+A line reading «References» that is not the bibliography's heading — a `\subsection*{References}`,
+a table column headed «References» — is not taken for it: the anchor names another page, or the
+line is not followed by `[1]`. When a structural signal and the text disagree — a `cite.<key>` page
+with no heading on it, a confirmed heading on another page, an appendix page with no «Appendix»
+line — the count is not made, and the rule says so (`unclear`).
+
+## Why
+
+AIDC limits the paper to 12 pages «excluding references and appendices», and places the LLM Usage
+Statement after the references, where it «does not count towards the page limit». banal counts any
+page with non-bibliography text as body, so a statement or appendix after the bibliography would
+fail a correct paper. A body that runs onto the references page, even by a few lines, is a
+thirteenth page — the desk-reject case this rule exists to catch.
+
+## Examples
+
+A 12-page AIDC paper whose conclusion ends at the foot of page 12, «References» at the top of page
+13: body 12 pages, passes.
+
+The same paper with the conclusion running four lines onto page 13, «References» below them:
+
+> body pages (up to the references on page 13): 13, over the limit 12 for aidc/regular — a desk
+> reject; cut the text
+
+An accepted ACSAC paper that places its appendix tables before the bibliography: the appendix starts
+at the top of page 12, the references on page 15. The body is 11 pages.
+
+When a structural signal and the text disagree, the count is not made and the rule says so:
+
+> could not tell where the body ends, so it was NOT counted against aidc's limit: the first
+> bibliography entry is on page 14 (hyperref's destination), and no line on page 14 reads
+> «References». Check the headings of the bibliography and the appendix, and that nothing before
+> them reads «References» above a [1]
+
+## Options / preset fields
+
+No rule options. It reads, from the preset, `format.kinds.<kind>.body_pages_max`,
+`format.kinds.<kind>.ref_pages_max` and `format.body_ends_at`; from the paper's `paperlint.json`,
+`kind`. A preset with no kinds, or a kind with no limits, has nothing to check.
+
+## What it does not check
+
+- **An appendix before the references, without hyperref**, is counted as body: nothing structural
+  says where it starts. With hyperref it ends the body.
+- **An appendix whose heading does not read «Appendix…»** (the standard classes print `A` and the
+  title) is reported as `unclear` when hyperref anchors it.
+- **A bibliography that is not numbered and not linked by hyperref** has no confirmed heading and no
+  anchor; the first line reading «References» is then taken, and a body line reading exactly that
+  would be taken for it.
+- **A running header that repeats on fewer than three pages** (a two-page paper) counts as body
+  text above a heading at the top of a page.
+- Whether the venue counts pages the same way for other kinds of material (supplementary files,
+  artifact appendices).
+
+## How to fix
+
+Cut the body until it ends within the limit. With `body_ends_at`, check where the body ends on the
+rendered PDF: body text above the heading on that page counts that page. For `unclear`, give the
+bibliography its heading (`\bibliography`, `thebibliography`) and the appendix one reading
+«Appendix», and make sure no line before them reads «References» above a `[1]`.

package/docs/rules/pdf/body-size.md

@@ -0,0 +1,87 @@
+# pdf/body-size
+
+**Level:** error · **Reads:** `paper.tex` → `paperlint.json` (the venue preset) and
+`_build/paper.facts.json` (what `paperlint build` measured in the PDF)
+
+## What it catches
+
+A PDF set in another size than its venue's template:
+
+- the body font size more than `body_pt_tol` off the preset's `body_pt` (`body`);
+- the reference font size outside the preset's `ref_pt_min`–`ref_pt_max`, widened by `body_pt_tol`
+  on both sides (`refPt`);
+- a build that measured no body size at all (`bodyMissing`) — rebuild.
+
+Both sizes are what banal measures on the rendered pages: the most common size of the body text,
+and of the first bibliography page. It is not the size the source declares, so a
+`\documentclass[9pt]`, a `\fontsize` in the preamble or a bibliography wrapped in `\scriptsize` are
+all seen, whatever macro did it.
+
+## Why
+
+A call for papers that fixes a template fixes its font size, and shrinking the text is the usual
+way a paper is made to fit the page limit. A reviewer or a production editor who notices returns
+the paper; a page limit checked on a shrunk paper checks nothing.
+
+It is an error because it was measured to be exact on real papers, not assumed. On five accepted
+papers, built (`fixtures/accepted-papers/body-size.json`, `test/e2e/tex/page-count.e2e.ts`):
+
+| paper                          | declared               | rendered (pdf.js)                          | measured (banal) | finding |
+| ------------------------------ | ---------------------- | ------------------------------------------ | ---------------- | ------- |
+| four ACSAC papers, IEEEtran    | 10 pt, references 8 pt | 10.00 / 8.00 (9.96 / 7.97 without compsoc) | 10.3 / 8.3       | none    |
+| AgenticDev '26, acmart sigconf | 9 pt, references 7 pt  | 8.97 / 6.97                                | 9.3 / 7.3        | none    |
+| an ACSAC paper with `9pt`      | 9 pt                   | 9.00 / 8.00                                | 9.3 / 8.3        | `body`  |
+| references in `\scriptsize`    | 7 pt                   | 10.00 / 7.00                               | 10.3 / 7.3       | `refPt` |
+| references in `\small`         | 9 pt                   | 9.96 / 8.97                                | 10.3 / 9.3       | `refPt` |
+
+banal reads every size 0.3 pt above the size the glyphs are set in, on both templates, and
+`body_pt_tol` of 0.5 absorbs that. Because of that offset the margins are not symmetric: every accepted body, and every IEEE bibliography (a single size, 8 pt), lands 0.2 pt inside the upper edge, a paper one size smaller (9 pt body, 7 pt
+references) 0.2 pt outside the lower edge, and one size larger 0.8 pt outside the upper one. The
+offset was exactly 0.3 on all eight builds; a template on which banal reads differently would need
+its own measurement. A change of half a point (IEEEtran's 9pt `\small` is 8.5 pt) can pass
+unreported.
+
+## Examples
+
+An IEEEtran paper built with `\documentclass[9pt,conference,compsoc]{IEEEtran}`:
+
+> the body font size measures 9.3 pt against 10 ± 0.5 pt for ieee-conference. The measurement is
+> the mode of the rendered text, not the declared size — check \documentclass and its options
+
+The same paper with `{\let\footnotesize\scriptsize\bibliography{refs}}`:
+
+> the reference font size is 7.3 pt, outside 8 pt for ieee-conference (allowing ±0.5 pt for the
+> measuring drift) — fix the bibliography's font size
+
+The paper as the template sets it, `\documentclass[conference,compsoc]{IEEEtran}` and a plain
+`\bibliography{refs}`, passes.
+
+## Options / preset fields
+
+No rule options. From the preset's `format`: `body_pt` and `body_pt_tol` (both needed for the body
+check), `ref_pt_min` and `ref_pt_max` (both needed for the reference check). A preset without them
+does not check that size. The shipped presets:
+
+| preset                                    | `body_pt` ± `body_pt_tol` | references |
+| ----------------------------------------- | ------------------------- | ---------- |
+| `ieee-conference` (and `aidc`)            | 10 ± 0.5                  | 8          |
+| `acm-sigconf` (and `agenticdev`, `aisec`) | 9 ± 0.5                   | 7–9        |
+| `realm`                                   | 11 ± 0.5                  | 9–11       |
+
+## What it does not check
+
+- **The size of anything but the body and the first bibliography page**: captions, footnotes,
+  tables, the title and the appendix are not measured. A table set in `\tiny` passes.
+- **A paper that is not built.** Without `_build/paper.facts.json`, or without banal, the rule is
+  silent and `pdf/measured` says why.
+- **The `realm` preset** has not been checked on built accepted papers of its venue: its body size
+  is ACL's stated 11 pt, and its reference range was set from a single measurement.
+- A paper with no bibliography has no reference size, and only the body is judged.
+
+## How to fix
+
+Use the template's size: remove the size option from `\documentclass` and any `\fontsize`,
+`\small` or `\footnotesize` around the body; for the references, remove what wraps
+`\bibliography` or changes `\bibfont`. Rebuild (`paperlint build`) and lint again. If the venue
+really allows another size, override the preset's `format` in your own preset, or set the rule to
+`"off"` in `paperlint.json`.