paperlint 6.2.3 → 7.0.0

package/lib/paper-config.ts

@@ -141,6 +141,8 @@ export const SETTINGS_KEYS: Readonly<Record<string, string>> = Object.freeze({
   identity:
     "what identifies the authors — names, handles, emails, affiliations, own project names; a blind venue's PDF must not say any of them — anonymity/identity. The root's list and a paper's are joined",
   talk: 'how this paper is presented: { "mode": "remote-video", "dir"?, "files"?, "one_slide"? } — the talk/ rules. A paper\'s own; refused in the root file',
+  submission:
+    "which submission on the venue's portal is this paper's: { \"id\": <number> } — paperlint submission, with the preset's \"portal\". A paper's own; refused in the root file",
   scripts: "how skill prose names the scripts — consumer.mjs",
   timezone: "the zone deadline anchors are written in — consumer.mjs",
   contactEmail: "the polite-pool address for citation lookups — consumer.mjs",
@@ -150,7 +152,10 @@ export const SETTINGS_KEYS: Readonly<Record<string, string>> = Object.freeze({
 });
 
 /** The keys that only mean something for one paper: refused in the root `paperlint.json`. */
-export const PAPER_ONLY_KEYS: readonly string[] = Object.freeze(["talk"]);
+export const PAPER_ONLY_KEYS: readonly string[] = Object.freeze([
+  "talk",
+  "submission",
+]);
 
 /** The keys that only mean something for the whole project: refused in a paper's `paperlint.json`. */
 export const ROOT_ONLY_KEYS: readonly string[] = Object.freeze([

package/lib/skill-checks.d.mts

@@ -0,0 +1,7 @@
+/**
+ * Types for `skill-checks.mjs`, for the TypeScript tests that call it. Only what they call is
+ * declared; the module stays JavaScript.
+ */
+
+/** The shared per-skill checks for `skills/<name>/SKILL.md`; rejects naming every failure. */
+export function checkSkill(name: string): Promise<void>;

package/lib/skill-checks.mjs

@@ -22,6 +22,7 @@ import assert from "node:assert/strict";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { recordCheck } from "vigiles";
+import { presetsDir } from "#src/package-dirs";
 
 import { SKILLS_DIR, ROOT, load, commands, permits } from "./skill-corpus.mjs";
 
@@ -35,6 +36,16 @@ import {
 
 const PIPELINE = pipelineScripts(scriptsRoot({ env: {}, cwd: ROOT }));
 
+/** How a skill names a file of the package's presets directory. */
+const PRESETS_PREFIX = "presets/";
+
+/** The preset files a skill's text names in code spans (`presets/agenticdev.md`), placeholders left out. */
+export const presetRefs = (src) => [
+  ...new Set(
+    [...src.matchAll(/`(presets\/[A-Za-z0-9._-]+)`/g)].map((m) => m[1]),
+  ),
+];
+
 /**
  * Assert everything single-skill about `name`. Throws with EVERY finding, not the first.
  * Returns the number of skills checked (1) so a caller can report what it actually did.
@@ -145,6 +156,26 @@ export async function checkSkill(name) {
     }
   }
 
+  // ═══════════════════════════════════════════════════════════════════════════════════════════════
+  // 9. EVERY PRESET FILE the skill names exists in the package. Skills name a venue's card and preset
+  // as `presets/<name>.md` / `presets/<name>.jsonc` "in the package" — a path inside the package, the
+  // same in every install channel — and the cards once lived under a skill's `references/`, so a
+  // name that outlived a move would send the model to a file that is not there. Resolved against
+  // the package's presets directory (`#src/package-dirs`, the one module that knows where it is).
+  // Placeholders (`presets/<venue>.md`) are not names of a file and are left out.
+  // ═══════════════════════════════════════════════════════════════════════════════════════════════
+  for (const s of skills) {
+    for (const ref of presetRefs(s.src)) {
+      const abs = join(presetsDir(), ref.slice(PRESETS_PREFIX.length));
+      soft(() =>
+        assert.ok(
+          existsSync(abs),
+          `${s.name}: names \`${ref}\` in the package, and there is no such file (looked at ${abs}).`,
+        ),
+      );
+    }
+  }
+
   if (deferred.length) {
     const e = new Error(
       `${deferred.length} assertion(s) failed for skill "${name}":\n\n` +

package/lib/skill-trigger-cases.mjs

@@ -304,6 +304,17 @@ const PACKAGE_CASES = [
     ],
     collides: ["submit-paper"],
   },
+  {
+    skill: "submission-portal",
+    why: "READ or CHANGE the submission on the HotCRP portal over its API, and prove the portal holds the latest build",
+    prompts: [
+      "replace the PDF on hotcrp with the new build",
+      "проверь, что статья на hotcrp правда в статусе Submitted",
+      "залей новый абстракт и пдф в hotcrp, дедлайн через час",
+      "какую версию pdf увидят рецензенты — ту, что я собрал сейчас?",
+    ],
+    collides: ["submit-paper", "osf-artifact-upload"],
+  },
   {
     skill: "paper-pipeline",
     why: "DRIVE the whole lifecycle — the conductor, when the ask is the whole arc not one step",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "paperlint",
-  "version": "6.2.3",
+  "version": "7.0.0",
   "description": "A linter for scientific papers written in LaTeX: catches mistakes before you submit to a conference or journal.",
   "type": "module",
   "license": "MIT",
@@ -33,7 +33,7 @@
     "ts-essentials": "^10.2.1",
     "typescript": "^6.0.3",
     "unpdf": "^1.8.1",
-    "vigiles": "^31.0.1",
+    "vigiles": "^32.1.0",
     "zod": "^4.6.5"
   },
   "devDependencies": {
@@ -49,6 +49,7 @@
     "eslint-plugin-boundaries": "^7.2.0",
     "eslint-plugin-functional": "^10.0.1",
     "eslint-plugin-n": "^18.3.0",
+    "eslint-plugin-project-structure": "^3.14.5",
     "eslint-plugin-sonarjs": "^4.2.1",
     "prettier": "^3.8.1",
     "semantic-release": "25.0.9",
@@ -132,6 +133,11 @@
       "types": "./dist/lib/*.d.ts",
       "default": "./dist/lib/*.js"
     },
+    "#src/*": {
+      "paperlint-source": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    },
     "#eslint-rules/*": {
       "paperlint-source": "./eslint-rules/*.ts",
       "types": "./dist/eslint-rules/*.d.ts",

package/presets/acm-sigconf.jsonc

@@ -6,7 +6,12 @@
 // the Conference Publishing author instructions for ACM (2026-08-25), which state ACM's own
 // requirements. A paper may extend this family directly for an ACM venue nobody has profiled:
 // page size, columns and fonts are checked; with no kinds, the page limit is not.
+//
+// Its card, in prose: `acm-sigconf.md` beside this file.
 {
+  // A template family: it names no venue, so no `name` and no `url` (the venues that extend it do).
+  "type": "family",
+
   // `tex/template` requires a paper's class to be acmart WITH `sigconf`: acmart's default format is
   // `manuscript`, a single-column layout no sigconf venue takes. Other options (review, anonymous,
   // screen, nonacm) are the paper's to add.

package/presets/acm-sigconf.md

@@ -0,0 +1,43 @@
+---
+title: "ACM acmart sigconf — template family card"
+---
+
+# ACM `acmart` sigconf
+
+The card of the template family `paperlint:acm-sigconf` ([`acm-sigconf.jsonc`](acm-sigconf.jsonc)).
+A family is what a publisher's template decides, whatever the venue: it names no venue and has no
+call for papers. A venue preset extends it and adds what its own call sets — the page limit of each
+kind of paper, and the rules its producer implies. The template is
+[acmart on CTAN](https://ctan.org/pkg/acmart).
+
+A paper for an ACM venue that has no preset may extend the family directly: page size, columns and
+fonts are then checked, and the page limit is not (a family has no kinds).
+
+## What the family encodes
+
+- **The class**: `\documentclass[sigconf]{acmart}` — `sigconf` is required, since acmart's default
+  format is a single-column manuscript no sigconf venue takes. `review`, `anonymous`, `screen` and
+  `nonacm` are the paper's to add.
+- **The page**: US letter, 8.5 × 11 in; a text block of at most 18 × 23.5 cm (7.087 × 9.252 in);
+  two columns.
+- **The fonts**: Libertine for the text, Biolinum for the title; body text at 9 pt, references from
+  7 to 9 pt (banal measures 0.3 pt high on every template, hence the 0.5 pt tolerance).
+- **TeX packages** on top of the base set: acmart and everything it loads itself — libertine,
+  inconsolata and newtx (if any one is missing, acmart silently falls back to Computer Modern), the
+  rest found by building and installing what was missing.
+
+The numbers were measured on acmart sigconf builds (banal and pdf.js, 2026-08-26) and quoted from
+the Conference Publishing author instructions for ACM (2026-08-25).
+
+## What the family resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from acm-sigconf.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:acm-sigconf`** — template family, no venue of its own · extended by `paperlint:agenticdev`, `paperlint:aisec`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/agenticdev.jsonc

@@ -1,9 +1,14 @@
 // AgenticDev (an ASE workshop) — a VENUE preset over the ACM sigconf family. Prose about the venue
-// is in agenticdev.md nearby. Everything the ACM template decides (page size, columns, fonts, font
+// is in its card, agenticdev.md beside this file (every preset has one: `npm run lint` fails
+// without it, and the card's rules section is generated from this file). Everything the ACM template decides (page size, columns, fonts, font
 // sizes, TeX packages) comes from acm-sigconf.jsonc; this file adds what AgenticDev's call for
 // papers sets.
 // Source for the numbers: the Conference Publishing author instructions 2026-08-25.
 {
+  "type": "venue",
+  "name": "AgenticDev",
+  // The workshop's call for papers on the ASE 2026 site.
+  "url": "https://conf.researchr.org/home/ase-2026/agenticdev-2026",
   "extends": "paperlint:acm-sigconf",
 
   // What the venue is called in a paper's text (tex/venue-leftover). Its parent conference, ASE,
@@ -63,12 +68,28 @@
 
   // The proceedings are produced by Conference Publishing Consulting — agenticdev.md takes its
   // numbers from their author instructions — which require "balanced columns on the last page, if
-  // the page is not filled" and sent an accepted camera-ready back for it on 2026-08-29, the day
-  // after AgenticDev's camera-ready deadline ("Please correct the last page balancing"). So every
-  // AgenticDev paper gets the optional rule; a paper can still turn it off in its own
-  // paperlint.json. 120 pt is the rule's default, measured: the balanced build ended 2.7 pt apart,
-  // the returned one 321.4 pt apart (docs/optional-rules.md).
+  // the page is not filled", checked before the proceedings are produced: "problem papers are sent
+  // back to the authors". So every AgenticDev paper gets the optional rule; a paper can still turn
+  // it off in its own paperlint.json. 120 pt is the rule's default, measured: a balanced build ended
+  // 2.7 pt apart, an unbalanced one 321.4 pt apart (docs/optional-rules.md).
+  //
+  // The same vendor asks for headline style in the title and in every heading. Its help page
+  // (https://www.conference-publishing.com/Help.php) defines it: «Headline-Style Capitalization
+  // (according to the Chicago Manual of Style, Sections 8.157, 8.158, and 8.159)», with the word
+  // lists the rule's chicago-headline style judges by. Its instructions for an event
+  // (https://www.conference-publishing.com/Instructions.php?Event=ITICSE18) set both scopes:
+  // «The title should use headline-style capitalization (e.g., 'The Best POPL Paper of All Time')»
+  // and «All levels of headings use headline-style capitalization.» Its checklist names it, and
+  // papers that miss it are returned to their authors. The rule lives here and not in acm-sigconf: ACM's own
+  // pages and the other vendors that produce ACM proceedings were not read, and an error on a
+  // requirement nobody has seen would block correct papers. A venue whose author kit names the
+  // same authority adds the same line; one that names another (APA, IEEE, Springer) waits for that
+  // style (docs/rules/tex/heading-case.md, «Adding a style»).
   "rules": {
     "pdf/last-page-balance": ["error", { "tolerancePt": 120 }],
+    "tex/heading-case": [
+      "error",
+      { "title": "chicago-headline", "headings": "chicago-headline" },
+    ],
   },
 }

package/presets/agenticdev.md

@@ -0,0 +1,151 @@
+---
+title: "AgenticDev @ ASE — venue card"
+---
+
+# AgenticDev @ ASE
+
+The card of the venue preset `paperlint:agenticdev` ([`agenticdev.jsonc`](agenticdev.jsonc)): what
+the venue asks for, in prose. The numbers a machine checks live in the preset; the section at the
+end is generated from it. The `submit-paper` skill reads this card for the venue's specifics.
+
+**Re-verify the call for papers every year**
+([conf.researchr.org/home/ase-2026/agenticdev-2026](https://conf.researchr.org/home/ase-2026/agenticdev-2026)):
+dates, limits and tracks change between editions.
+
+## The venue (2026 edition)
+
+- **Venue**: Workshop on Agentic AI for Next-Generation Software Development, co-located with
+  **ASE** (Automated Software Engineering), Munich, October 2026.
+- **Portal**: HotCRP, `https://agenticdev2026.hotcrp.com/paper/new`.
+- **Deadline**: July 15, 2026, AoE. Notification August 21, camera-ready August 28.
+- **Format**: ACM `\documentclass[sigconf,review,anonymous]{acmart}` → **double-blind**. Build with
+  `pdflatex; bibtex; pdflatex; pdflatex`; add `\microtypesetup{expansion=false}` (the most common
+  acmart crash).
+- **No supplementary-material field** on the HotCRP form (Title, Submission, Abstract, Authors, ACM
+  corresponding, Contacts, PC conflicts). Host the artifact externally (an anonymized view-only
+  link) and `\url{}` it in the paper's Availability section; see `submit-paper` §2.
+- **Archival**: accepted papers go into the **ASE workshop proceedings**, with a DOI; selected
+  papers are invited to a journal special issue. ASE's publisher **alternates by year** — ASEW '24
+  ACM (`10.1145/3691621.*`), ASE 2025 Workshops IEEE (`csdl/proceedings/asew/2025`), the main track
+  likewise ('22 ACM, '23 IEEE, '24 ACM, '25 IEEE). There is no dual ACM DL / IEEE Xplore
+  publication; the `10.5555` prefix in the ACM DL is a Guide catalog entry, not an ACM
+  publication. Confirm the year's publisher with the chairs before paying an article processing
+  charge.
+
+## Paper kinds and limits
+
+The preset's `format.kinds`; a paper names its own in its `paperlint.json` (`kind`).
+
+| kind    | body pages | extra pages of references | what it is            |
+| ------- | ---------: | ------------------------: | --------------------- |
+| `full`  |         10 |                         2 | mature work           |
+| `short` |          5 |                         2 | WIP, vision, position |
+| `demo`  |          5 |                         2 | demo or tool          |
+
+At camera-ready the limits stay the same: a sixth page taken by the bibliography of a short paper
+still counts within them.
+
+## What else the preset encodes
+
+- **The ACM template**, through `extends: paperlint:acm-sigconf`: letter paper, two columns,
+  Libertine at 9 pt, acmart's TeX packages ([`acm-sigconf.md`](acm-sigconf.md)).
+- **Balanced columns on the last page** (`pdf/last-page-balance`, 120 pt tolerance). The proceedings
+  are produced by Conference Publishing Consulting, whose author instructions require "balanced
+  columns on the last page, if the page is not filled"; problem papers are sent back.
+- **Headline-style capitalization** in the title and every heading (`tex/heading-case`, the
+  `chicago-headline` style). The same producer's instructions: «The title should use headline-style
+  capitalization» and «All levels of headings use headline-style capitalization», defined on its
+  help page as Chicago Manual of Style §§8.157–8.159.
+- **Names**: `AgenticDev` is what `tex/venue-leftover` looks for in another venue's paper; ASE is
+  left out on purpose — a three-letter acronym too many sentences use for other things.
+- **The talk** (`talk`): remote presentation by video only, with the numbers below.
+
+## Naming the venue correctly
+
+AgenticDev is a workshop of ASE 2026, listed on ASE's own co-located events page; it is **not** the
+ASE main track, which has its own program, committee and selectivity.
+
+| write                                                 | do not write                         |
+| ----------------------------------------------------- | ------------------------------------ |
+| "accepted at AgenticDev 2026, a workshop of ASE 2026" | "accepted at ASE 2026"               |
+| "workshop paper, ASE 2026 workshop proceedings"       | "published at a CORE A\* conference" |
+| "ASE is CORE A\*; AgenticDev is one of its workshops" | "this paper is CORE A\*"             |
+
+## Registration
+
+Registration of at least one author is a condition of appearing in the proceedings, not only of
+attending. 2026: article processing charge $350 (ACM is fully open access since 2026-01-01), and
+workshop-day registration (non-member) €350 until 08-31, €410 until 09-20, €460 on site.
+
+## PC members (the "PC conflicts" field) — 2026
+
+Andrea Rosani (Free U Bozen/Bolzano) · Giuseppe Di Fatta (Free U Bozen/Bolzano) · Jean Marie Mottu
+(Nantes U) · Paolo Papotti (Eurecom) · Simos Gerasimou (Cyprus U of Technology). The list changes
+every year — read the current PC page.
+
+## Topic fit
+
+Trustworthiness, verification and validation of AI agents; benchmarking and empirical evaluation;
+integration into developer workflows; agent-based coding and testing.
+
+## Camera-ready (2026 edition)
+
+The ACM mechanics are the same for every ACM venue and live one level up, in the `submit-paper`
+skill's `references/publishers/acm.md` (eRights first, the preamble, the copyright block, CCS
+concepts, source files). AgenticDev's own:
+
+- **Deadline**: August 28, 2026, 2 PM AoE.
+- **ACM ISBN**: `979-8-4007-2985-0/26/10`.
+- **Copyright block**: `AgenticDev '26, October 12–16, 2026, Munich, Germany`.
+- **No longer double-blind**: the `review` and `anonymous` class options come off for the final.
+- **Title changes are allowed** — the portal asks for the title "exactly as it should appear in the
+  ACM DL". Decide before eRights.
+
+## The talk (2026 edition)
+
+**The deadline and the upload channel come from the parent conference's not-in-person page, not
+from this card** — look it up again for each edition.
+
+Remote presentation is allowed, but there is no live slot: the workshop adopts ASE 2026's
+[Not-in-Person Presentations](https://conf.researchr.org/track/ase-2026/ase-2026-not-in-person-presentations)
+policy:
+
+> ASE 2026 does not provide presentation slots for papers that are not presented in-person by one
+> of the authors.
+
+The author sends instead:
+
+| artifact  | what the page says                                                                                                                | deadline (2026)   |
+| --------- | --------------------------------------------------------------------------------------------------------------------------------- | ----------------- |
+| video     | "made available via a dedicated page on the conference website (recommendation: 10 min duration, mp4 file format, HD resolution)" | 2026-10-08        |
+| one-slide | "shown during one of the conference sessions"; no size or format stated                                                           | same as the video |
+| poster    | optional for the workshop; ASE prints it                                                                                          | 2026-09-21        |
+
+**Where to upload**: "find the submission link on the submission page for your paper (see
+author-kit e-mail from Conference Publishing Consulting)" — the same personal page as the
+camera-ready, block "Optional Archive/Appendix/Video/Picture Submissions … Submit Material to ACM".
+"All submitted material will be published in the ACM DL if the publishing-rights agreement gives
+permission for this", so tick permission for auxiliary material in eRights.
+
+**The slot**: per the chairs' email to all authors (2026-09-29), a short paper gets 10 minutes in
+total, approximately 6–7 for the presentation and 3–4 for questions. The full-paper slot was not
+stated, so the preset gives `talk` numbers for `short` only. No source requires a live answer to
+questions; put a contact address on the video's last slide and on the one-slide.
+
+The `talk/*` rules check the finished files against these numbers: `docs/talk.md`.
+
+## What the preset resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from agenticdev.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:agenticdev`** — venue preset for AgenticDev · call for papers: <https://conf.researchr.org/home/ase-2026/agenticdev-2026> · extends `paperlint:acm-sigconf`
+
+| rule | severity | options | set in |
+| --- | --- | --- | --- |
+| [`pdf/last-page-balance`](../docs/rules.md) | error | `{"tolerancePt":120}` | this preset |
+| [`tex/heading-case`](../docs/rules/tex/heading-case.md) | error | `{"title":"chicago-headline","headings":"chicago-headline"}` | this preset |
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/aidc.jsonc

@@ -19,13 +19,25 @@
 // what refuses the upload.
 //
 // THE REVIEW IS DOUBLE-BLIND: `"blind":true` in the same portal data, and the call above.
+//
+// Its card, in prose: `aidc.md` beside this file.
 {
+  "type": "venue",
+  "name": "AIDC",
+  // The call quoted above.
+  "url": "https://aidcworkshop.github.io/",
   "extends": "paperlint:ieee-conference",
 
   // «Submissions must be properly anonymized for double-blind review.» (the call above), and
   // `"blind":true` in the portal's data. anonymity/identity then requires the paper's `identity`.
   "blind": true,
 
+  // Where submissions go: the HotCRP site named in the deadline note above. `paperlint submission`
+  // reads and updates a paper's submission there through HotCRP's API (`/api/paper`). Recorded
+  // 2026-10-03: `/api/whoami` on this site answers 401 "Missing credentials" without a token —
+  // the HotCRP API, there.
+  "portal": { "kind": "hotcrp", "url": "https://aidc.submit.acsac.org" },
+
   // What the venue is called in a paper's text (tex/venue-leftover): the workshop, and the
   // conference it is held at.
   "aliases": ["AIDC", "ACSAC"],

package/presets/aidc.md

@@ -0,0 +1,75 @@
+---
+title: "AIDC @ IEEE ACSAC — venue card"
+---
+
+# AIDC @ IEEE ACSAC
+
+The card of the venue preset `paperlint:aidc` ([`aidc.jsonc`](aidc.jsonc)): what the venue asks
+for, in prose. The numbers a machine checks live in the preset; the section at the end is generated
+from it. The `submit-paper` skill reads this card for the venue's specifics.
+
+**Re-verify the call for papers every year** ([aidcworkshop.github.io](https://aidcworkshop.github.io/)).
+
+## The venue (2026 edition, the first)
+
+- **Venue**: Workshop on Agentic AI in Offensive and Defensive Cyber Operations, held at
+  **IEEE ACSAC 2026** (Annual Computer Security Applications Conference).
+- **Format**, verbatim from the call: «All submitted papers must be prepared in US Letter size, not
+  A4, using the double-column IEEE conference format. This requirement will be strictly enforced.»
+  and «LaTeX submissions must use the IEEEtran.cls version 1.8b template with the
+  \documentclass[conference,compsoc]{IEEEtran} document class option.»
+- **Double-blind**: «Submissions must be properly anonymized for double-blind review.», and
+  `"blind":true` in the portal's data.
+- **Portal**: HotCRP at `https://aidc.submit.acsac.org`.
+- 🔴 **The deadline people get wrong**: the HotCRP portal closes 2026-10-02 11:59:59 UTC
+  (`"sub":1790942399` on `https://aidc.submit.acsac.org/deadlines`), while the workshop page says
+  «October 2, 2026 (Anywhere-on-Earth, AoE)» — a day later. The portal is what refuses the upload.
+
+## Paper kinds and limits
+
+| kind      | body pages | what it is                                                                                                    |
+| --------- | ---------: | ------------------------------------------------------------------------------------------------------------- |
+| `regular` |         12 | «Regular technical papers: Up to 12 pages excluding references and appendices.»                               |
+| `short`   |          6 | «Short position papers or work-in-progress (WIP) papers: Up to 6 pages, excluding references and appendices.» |
+
+References, appendices and the LLM Usage Statement are unlimited. 🔴 **The body is counted up to
+where the references start** (`format.body_ends_at: "references"`), not by banal's count: banal
+calls any page with non-bibliography text body, so an LLM Usage Statement or an appendix placed
+before the references would push a paper whose body ends at the foot of page 12 to «body 13».
+See `docs/rules/format/page-limit.md`.
+
+## What else the preset encodes
+
+- **The IEEE template**, through `extends: paperlint:ieee-conference` — letter paper, two columns,
+  Times at 10 pt, IEEEtran's TeX packages ([`ieee-conference.md`](ieee-conference.md)) — with the
+  `compsoc` option required in the class line (`tex/template`) and compsoc's text block,
+  7.00 × 9.02 in.
+- **The LLM Usage Statement** (`required_sections`). The call: «Authors must follow the ACSAC AI
+  Usage Policy for all workshop submissions.» The policy (`https://www.acsac.org/2026/submissions/ai/`):
+  «If LLMs are used, authors must include a separate, clearly marked section titled "LLM Usage
+  Statement" at the end of the paper. This section does not count towards the page limit.» and
+  «Failure to comply with these requirements is grounds for desk rejection without further
+  review.» `tex/required-section` cannot know whether LLMs were used, so it requires the section
+  always — an author who used none says so in it. A bold paragraph is not a section with this
+  title and does not count.
+- **Double-blind review** (`blind`), so `anonymity/identity` checks the PDF against the paper's
+  declared `identity`.
+- **Where submissions go** (`portal`): `paperlint submission` reads and updates a paper's
+  submission through HotCRP's API on that site.
+- **Names**: `AIDC` and `ACSAC`, what `tex/venue-leftover` looks for in another venue's paper.
+- **The register of the body** (`register`): the workshop's first edition has no accepted papers,
+  so the bands of `tex/contrast-frames`, `tex/claim-emphasis` and `tex/relation-markers` are set by
+  five accepted ACSAC papers on the same template, in `fixtures/accepted-papers/`.
+
+## What the preset resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from aidc.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:aidc`** — venue preset for AIDC · call for papers: <https://aidcworkshop.github.io/> · extends `paperlint:ieee-conference`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/aisec.jsonc

@@ -1,6 +1,6 @@
 // AISec @ ACM CCS — a VENUE preset over the ACM sigconf family. Data for the `pdf/*` rules over
 // `_build/paper.facts.json`.
-// Prose about the venue and tracks is in `aisec.md` nearby.
+// Prose about the venue and tracks is in its card, `aisec.md` beside this file.
 //
 // PAGE LIMITS — verbatim from https://aisec.cc/ (verified 2026-08-26, not from memory):
 //   «Submitted papers must be at most 10 pages long in double-column ACM format---excluding
@@ -23,6 +23,10 @@
 // but that is the main conference). Turn pdf/last-page-balance on in the paper's paperlint.json if
 // the camera-ready instructions ask for it.
 {
+  "type": "venue",
+  "name": "AISec",
+  // The call quoted above.
+  "url": "https://aisec.cc/",
   "extends": "paperlint:acm-sigconf",
 
   // What the venue is called in a paper's text (tex/venue-leftover): the workshop, and the

package/presets/aisec.md

@@ -0,0 +1,117 @@
+---
+title: "AISec @ ACM CCS — venue card"
+---
+
+# AISec @ ACM CCS
+
+The card of the venue preset `paperlint:aisec` ([`aisec.jsonc`](aisec.jsonc)): what the venue asks
+for, in prose. The numbers a machine checks live in the preset; the section at the end is generated
+from it. The `submit-paper` skill reads this card for the venue's specifics.
+
+**Re-verify the call for papers every year** ([aisec.cc](https://aisec.cc/)) — deadline, page limit
+and tracks shift between editions.
+
+## The bar
+
+AISec is the long-running AI-security workshop of **ACM CCS**, a top security conference — not a
+first-edition workshop. Mature threat modelling, honest evaluation and sound ethics are expected,
+not rewarded: a security committee rejects on soundness and ethics grounds that a software
+engineering workshop would wave through.
+
+## The venue (2026 edition)
+
+- **Venue**: ACM Workshop on Artificial Intelligence and Security (**AISec**), co-located with
+  **ACM CCS** (Computer and Communications Security).
+- **Deadline**: 24 July 2026 (check the AoE cutoff on the call each cycle).
+- **Tracks**: full research papers; **benchmark papers** (new evaluation frameworks or datasets
+  **with artifact sharing** — a track of its own); position and SoK (systematization of knowledge)
+  papers. Pitch to the bar of the chosen track.
+- **Format**: ACM double-column (`sigconf`). Build with `pdflatex; bibtex; pdflatex; pdflatex`; add
+  `\microtypesetup{expansion=false}` (the most common acmart crash).
+- **Blind model**: **double-blind** — `\documentclass[sigconf,review,anonymous]{acmart}`, author
+  `Anonymous Author(s)`. See `submit-paper` §0/§4.
+- **Archival**: accepted papers go into the CCS workshop proceedings in the ACM Digital Library,
+  with a DOI.
+- **No supplementary-material field** on the form: host the artifact externally, anonymized (a
+  view-only link), and `\url{}` it in the Availability section. See `submit-paper` §2 and
+  `paper-pipeline/references/anonymization.md`.
+
+## Paper kinds and limits
+
+Verbatim from the call: «Submitted papers must be at most 10 pages long in double-column ACM
+format---excluding bibliography and well-marked appendices, for which up to two additional pages
+can be used (hence, the paper's overall length must be of 12 pages at most).»
+
+The limits are the same for every track; the preset keeps one kind per track so a paper's
+`paperlint.json` says which track it was submitted under.
+
+| kind        | body pages | pages of bibliography and appendices |
+| ----------- | ---------: | -----------------------------------: |
+| `research`  |         10 |                                    2 |
+| `benchmark` |         10 |                                    2 |
+| `position`  |         10 |                                    2 |
+| `sok`       |         10 |                                    2 |
+
+⚠️ The venue tolerates a 13th page that holds **only** the generative-AI paragraph («Too many pages:
+the limit is 12 pages, found 13» is then acceptable). `format/page-limit` does not know this
+exception and reports the 13th page; a person clears that case by eye.
+
+## What else the preset encodes
+
+- **The ACM template**, through `extends: paperlint:acm-sigconf` — AISec points to the main ACM
+  CCS formatting instructions and publishes no numbers of its own ([`acm-sigconf.md`](acm-sigconf.md)).
+- **Names**: `AISec` and `ACM CCS`, what `tex/venue-leftover` looks for in another venue's paper.
+- **No rules of its own**: nothing says who produces the AISec proceedings or whether they require
+  a balanced last page. A paper turns `pdf/last-page-balance` on in its own `paperlint.json` if the
+  camera-ready instructions ask for it.
+
+## What decides acceptance at a security venue
+
+1. **Threat-model soundness.** Name the attacker and their capabilities (what they observe and
+   control, their goal, their budget), and separate accidental failure from an adaptive adversary
+   — conflating the two is the classic reject. The threat model goes up front.
+2. **Ethics and responsible disclosure — a hard reject vector.**
+   - Anonymize studied third parties too: aggregate statistics and use anonymized IDs for the
+     entities studied, rather than naming maintainers or projects.
+   - Disclose findings to affected parties **before** any de-anonymized release; the paper states
+     the disclosure timeline and the release gate that holds de-anonymized data back until then.
+   - The anonymized artifact must itself be leak-free — the released files, not just the PDF. A
+     named entity in the artifact is invisible to a paper-only read.
+3. **Dual use.** A paper that publishes an evasion or attack technique publishes its fix with it.
+4. **Generative-AI disclosure.** ACM and CCS require stating how generative AI was used in the
+   work (writing, code, experiments).
+
+## Track fit
+
+Adversarial ML, ML for security and security for ML, LLM and agent safety and security, evaluation
+and benchmarking of AI-security defenses, poisoning, evasion and extraction, and rigorous
+measurement of whether a claimed safety mechanism holds. A measurement paper that ships a reusable
+evaluation framework and an anonymized artifact fits the benchmark track; name the track in the
+abstract.
+
+## Compose with
+
+- `submit-paper` — the mechanics: HotCRP form, anonymous artifact hosting, "ready for review".
+- `camera-ready` — de-anonymization and the release gate after acceptance.
+- `pc-panel-review` — its ethics lens and artifact-runner lens (plant a leak, confirm it is caught).
+- `paper-pipeline/references/artifact-checklist.md` and `paper-pipeline/references/anonymization.md`.
+
+## Camera-ready
+
+AISec is an ACM venue, so the final's mechanics are the ACM ones in the `submit-paper` skill's
+`references/publishers/acm.md`: eRights first (it needs the final title), the preamble out of
+submission mode, source files beside the PDF, CCS concepts from the 2012 CCS browser. AISec's own
+DOI, ISBN, copyright line and dates are added here when the venue publishes them.
+
+## What the preset resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from aisec.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:aisec`** — venue preset for AISec · call for papers: <https://aisec.cc/> · extends `paperlint:acm-sigconf`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->