paperlint 6.3.0 → 7.0.0

package/presets/acm-sigconf.md

@@ -0,0 +1,43 @@
+---
+title: "ACM acmart sigconf — template family card"
+---
+
+# ACM `acmart` sigconf
+
+The card of the template family `paperlint:acm-sigconf` ([`acm-sigconf.jsonc`](acm-sigconf.jsonc)).
+A family is what a publisher's template decides, whatever the venue: it names no venue and has no
+call for papers. A venue preset extends it and adds what its own call sets — the page limit of each
+kind of paper, and the rules its producer implies. The template is
+[acmart on CTAN](https://ctan.org/pkg/acmart).
+
+A paper for an ACM venue that has no preset may extend the family directly: page size, columns and
+fonts are then checked, and the page limit is not (a family has no kinds).
+
+## What the family encodes
+
+- **The class**: `\documentclass[sigconf]{acmart}` — `sigconf` is required, since acmart's default
+  format is a single-column manuscript no sigconf venue takes. `review`, `anonymous`, `screen` and
+  `nonacm` are the paper's to add.
+- **The page**: US letter, 8.5 × 11 in; a text block of at most 18 × 23.5 cm (7.087 × 9.252 in);
+  two columns.
+- **The fonts**: Libertine for the text, Biolinum for the title; body text at 9 pt, references from
+  7 to 9 pt (banal measures 0.3 pt high on every template, hence the 0.5 pt tolerance).
+- **TeX packages** on top of the base set: acmart and everything it loads itself — libertine,
+  inconsolata and newtx (if any one is missing, acmart silently falls back to Computer Modern), the
+  rest found by building and installing what was missing.
+
+The numbers were measured on acmart sigconf builds (banal and pdf.js, 2026-08-26) and quoted from
+the Conference Publishing author instructions for ACM (2026-08-25).
+
+## What the family resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from acm-sigconf.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:acm-sigconf`** — template family, no venue of its own · extended by `paperlint:agenticdev`, `paperlint:aisec`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/agenticdev.jsonc

@@ -1,9 +1,14 @@
 // AgenticDev (an ASE workshop) — a VENUE preset over the ACM sigconf family. Prose about the venue
-// is in agenticdev.md nearby. Everything the ACM template decides (page size, columns, fonts, font
+// is in its card, agenticdev.md beside this file (every preset has one: `npm run lint` fails
+// without it, and the card's rules section is generated from this file). Everything the ACM template decides (page size, columns, fonts, font
 // sizes, TeX packages) comes from acm-sigconf.jsonc; this file adds what AgenticDev's call for
 // papers sets.
 // Source for the numbers: the Conference Publishing author instructions 2026-08-25.
 {
+  "type": "venue",
+  "name": "AgenticDev",
+  // The workshop's call for papers on the ASE 2026 site.
+  "url": "https://conf.researchr.org/home/ase-2026/agenticdev-2026",
   "extends": "paperlint:acm-sigconf",
 
   // What the venue is called in a paper's text (tex/venue-leftover). Its parent conference, ASE,
@@ -63,12 +68,28 @@
 
   // The proceedings are produced by Conference Publishing Consulting — agenticdev.md takes its
   // numbers from their author instructions — which require "balanced columns on the last page, if
-  // the page is not filled" and sent an accepted camera-ready back for it on 2026-08-29, the day
-  // after AgenticDev's camera-ready deadline ("Please correct the last page balancing"). So every
-  // AgenticDev paper gets the optional rule; a paper can still turn it off in its own
-  // paperlint.json. 120 pt is the rule's default, measured: the balanced build ended 2.7 pt apart,
-  // the returned one 321.4 pt apart (docs/optional-rules.md).
+  // the page is not filled", checked before the proceedings are produced: "problem papers are sent
+  // back to the authors". So every AgenticDev paper gets the optional rule; a paper can still turn
+  // it off in its own paperlint.json. 120 pt is the rule's default, measured: a balanced build ended
+  // 2.7 pt apart, an unbalanced one 321.4 pt apart (docs/optional-rules.md).
+  //
+  // The same vendor asks for headline style in the title and in every heading. Its help page
+  // (https://www.conference-publishing.com/Help.php) defines it: «Headline-Style Capitalization
+  // (according to the Chicago Manual of Style, Sections 8.157, 8.158, and 8.159)», with the word
+  // lists the rule's chicago-headline style judges by. Its instructions for an event
+  // (https://www.conference-publishing.com/Instructions.php?Event=ITICSE18) set both scopes:
+  // «The title should use headline-style capitalization (e.g., 'The Best POPL Paper of All Time')»
+  // and «All levels of headings use headline-style capitalization.» Its checklist names it, and
+  // papers that miss it are returned to their authors. The rule lives here and not in acm-sigconf: ACM's own
+  // pages and the other vendors that produce ACM proceedings were not read, and an error on a
+  // requirement nobody has seen would block correct papers. A venue whose author kit names the
+  // same authority adds the same line; one that names another (APA, IEEE, Springer) waits for that
+  // style (docs/rules/tex/heading-case.md, «Adding a style»).
   "rules": {
     "pdf/last-page-balance": ["error", { "tolerancePt": 120 }],
+    "tex/heading-case": [
+      "error",
+      { "title": "chicago-headline", "headings": "chicago-headline" },
+    ],
   },
 }

package/presets/agenticdev.md

@@ -0,0 +1,151 @@
+---
+title: "AgenticDev @ ASE — venue card"
+---
+
+# AgenticDev @ ASE
+
+The card of the venue preset `paperlint:agenticdev` ([`agenticdev.jsonc`](agenticdev.jsonc)): what
+the venue asks for, in prose. The numbers a machine checks live in the preset; the section at the
+end is generated from it. The `submit-paper` skill reads this card for the venue's specifics.
+
+**Re-verify the call for papers every year**
+([conf.researchr.org/home/ase-2026/agenticdev-2026](https://conf.researchr.org/home/ase-2026/agenticdev-2026)):
+dates, limits and tracks change between editions.
+
+## The venue (2026 edition)
+
+- **Venue**: Workshop on Agentic AI for Next-Generation Software Development, co-located with
+  **ASE** (Automated Software Engineering), Munich, October 2026.
+- **Portal**: HotCRP, `https://agenticdev2026.hotcrp.com/paper/new`.
+- **Deadline**: July 15, 2026, AoE. Notification August 21, camera-ready August 28.
+- **Format**: ACM `\documentclass[sigconf,review,anonymous]{acmart}` → **double-blind**. Build with
+  `pdflatex; bibtex; pdflatex; pdflatex`; add `\microtypesetup{expansion=false}` (the most common
+  acmart crash).
+- **No supplementary-material field** on the HotCRP form (Title, Submission, Abstract, Authors, ACM
+  corresponding, Contacts, PC conflicts). Host the artifact externally (an anonymized view-only
+  link) and `\url{}` it in the paper's Availability section; see `submit-paper` §2.
+- **Archival**: accepted papers go into the **ASE workshop proceedings**, with a DOI; selected
+  papers are invited to a journal special issue. ASE's publisher **alternates by year** — ASEW '24
+  ACM (`10.1145/3691621.*`), ASE 2025 Workshops IEEE (`csdl/proceedings/asew/2025`), the main track
+  likewise ('22 ACM, '23 IEEE, '24 ACM, '25 IEEE). There is no dual ACM DL / IEEE Xplore
+  publication; the `10.5555` prefix in the ACM DL is a Guide catalog entry, not an ACM
+  publication. Confirm the year's publisher with the chairs before paying an article processing
+  charge.
+
+## Paper kinds and limits
+
+The preset's `format.kinds`; a paper names its own in its `paperlint.json` (`kind`).
+
+| kind    | body pages | extra pages of references | what it is            |
+| ------- | ---------: | ------------------------: | --------------------- |
+| `full`  |         10 |                         2 | mature work           |
+| `short` |          5 |                         2 | WIP, vision, position |
+| `demo`  |          5 |                         2 | demo or tool          |
+
+At camera-ready the limits stay the same: a sixth page taken by the bibliography of a short paper
+still counts within them.
+
+## What else the preset encodes
+
+- **The ACM template**, through `extends: paperlint:acm-sigconf`: letter paper, two columns,
+  Libertine at 9 pt, acmart's TeX packages ([`acm-sigconf.md`](acm-sigconf.md)).
+- **Balanced columns on the last page** (`pdf/last-page-balance`, 120 pt tolerance). The proceedings
+  are produced by Conference Publishing Consulting, whose author instructions require "balanced
+  columns on the last page, if the page is not filled"; problem papers are sent back.
+- **Headline-style capitalization** in the title and every heading (`tex/heading-case`, the
+  `chicago-headline` style). The same producer's instructions: «The title should use headline-style
+  capitalization» and «All levels of headings use headline-style capitalization», defined on its
+  help page as Chicago Manual of Style §§8.157–8.159.
+- **Names**: `AgenticDev` is what `tex/venue-leftover` looks for in another venue's paper; ASE is
+  left out on purpose — a three-letter acronym too many sentences use for other things.
+- **The talk** (`talk`): remote presentation by video only, with the numbers below.
+
+## Naming the venue correctly
+
+AgenticDev is a workshop of ASE 2026, listed on ASE's own co-located events page; it is **not** the
+ASE main track, which has its own program, committee and selectivity.
+
+| write                                                 | do not write                         |
+| ----------------------------------------------------- | ------------------------------------ |
+| "accepted at AgenticDev 2026, a workshop of ASE 2026" | "accepted at ASE 2026"               |
+| "workshop paper, ASE 2026 workshop proceedings"       | "published at a CORE A\* conference" |
+| "ASE is CORE A\*; AgenticDev is one of its workshops" | "this paper is CORE A\*"             |
+
+## Registration
+
+Registration of at least one author is a condition of appearing in the proceedings, not only of
+attending. 2026: article processing charge $350 (ACM is fully open access since 2026-01-01), and
+workshop-day registration (non-member) €350 until 08-31, €410 until 09-20, €460 on site.
+
+## PC members (the "PC conflicts" field) — 2026
+
+Andrea Rosani (Free U Bozen/Bolzano) · Giuseppe Di Fatta (Free U Bozen/Bolzano) · Jean Marie Mottu
+(Nantes U) · Paolo Papotti (Eurecom) · Simos Gerasimou (Cyprus U of Technology). The list changes
+every year — read the current PC page.
+
+## Topic fit
+
+Trustworthiness, verification and validation of AI agents; benchmarking and empirical evaluation;
+integration into developer workflows; agent-based coding and testing.
+
+## Camera-ready (2026 edition)
+
+The ACM mechanics are the same for every ACM venue and live one level up, in the `submit-paper`
+skill's `references/publishers/acm.md` (eRights first, the preamble, the copyright block, CCS
+concepts, source files). AgenticDev's own:
+
+- **Deadline**: August 28, 2026, 2 PM AoE.
+- **ACM ISBN**: `979-8-4007-2985-0/26/10`.
+- **Copyright block**: `AgenticDev '26, October 12–16, 2026, Munich, Germany`.
+- **No longer double-blind**: the `review` and `anonymous` class options come off for the final.
+- **Title changes are allowed** — the portal asks for the title "exactly as it should appear in the
+  ACM DL". Decide before eRights.
+
+## The talk (2026 edition)
+
+**The deadline and the upload channel come from the parent conference's not-in-person page, not
+from this card** — look it up again for each edition.
+
+Remote presentation is allowed, but there is no live slot: the workshop adopts ASE 2026's
+[Not-in-Person Presentations](https://conf.researchr.org/track/ase-2026/ase-2026-not-in-person-presentations)
+policy:
+
+> ASE 2026 does not provide presentation slots for papers that are not presented in-person by one
+> of the authors.
+
+The author sends instead:
+
+| artifact  | what the page says                                                                                                                | deadline (2026)   |
+| --------- | --------------------------------------------------------------------------------------------------------------------------------- | ----------------- |
+| video     | "made available via a dedicated page on the conference website (recommendation: 10 min duration, mp4 file format, HD resolution)" | 2026-10-08        |
+| one-slide | "shown during one of the conference sessions"; no size or format stated                                                           | same as the video |
+| poster    | optional for the workshop; ASE prints it                                                                                          | 2026-09-21        |
+
+**Where to upload**: "find the submission link on the submission page for your paper (see
+author-kit e-mail from Conference Publishing Consulting)" — the same personal page as the
+camera-ready, block "Optional Archive/Appendix/Video/Picture Submissions … Submit Material to ACM".
+"All submitted material will be published in the ACM DL if the publishing-rights agreement gives
+permission for this", so tick permission for auxiliary material in eRights.
+
+**The slot**: per the chairs' email to all authors (2026-09-29), a short paper gets 10 minutes in
+total, approximately 6–7 for the presentation and 3–4 for questions. The full-paper slot was not
+stated, so the preset gives `talk` numbers for `short` only. No source requires a live answer to
+questions; put a contact address on the video's last slide and on the one-slide.
+
+The `talk/*` rules check the finished files against these numbers: `docs/talk.md`.
+
+## What the preset resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from agenticdev.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:agenticdev`** — venue preset for AgenticDev · call for papers: <https://conf.researchr.org/home/ase-2026/agenticdev-2026> · extends `paperlint:acm-sigconf`
+
+| rule | severity | options | set in |
+| --- | --- | --- | --- |
+| [`pdf/last-page-balance`](../docs/rules.md) | error | `{"tolerancePt":120}` | this preset |
+| [`tex/heading-case`](../docs/rules/tex/heading-case.md) | error | `{"title":"chicago-headline","headings":"chicago-headline"}` | this preset |
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/aidc.jsonc

@@ -19,7 +19,13 @@
 // what refuses the upload.
 //
 // THE REVIEW IS DOUBLE-BLIND: `"blind":true` in the same portal data, and the call above.
+//
+// Its card, in prose: `aidc.md` beside this file.
 {
+  "type": "venue",
+  "name": "AIDC",
+  // The call quoted above.
+  "url": "https://aidcworkshop.github.io/",
   "extends": "paperlint:ieee-conference",
 
   // «Submissions must be properly anonymized for double-blind review.» (the call above), and

package/presets/aidc.md

@@ -0,0 +1,75 @@
+---
+title: "AIDC @ IEEE ACSAC — venue card"
+---
+
+# AIDC @ IEEE ACSAC
+
+The card of the venue preset `paperlint:aidc` ([`aidc.jsonc`](aidc.jsonc)): what the venue asks
+for, in prose. The numbers a machine checks live in the preset; the section at the end is generated
+from it. The `submit-paper` skill reads this card for the venue's specifics.
+
+**Re-verify the call for papers every year** ([aidcworkshop.github.io](https://aidcworkshop.github.io/)).
+
+## The venue (2026 edition, the first)
+
+- **Venue**: Workshop on Agentic AI in Offensive and Defensive Cyber Operations, held at
+  **IEEE ACSAC 2026** (Annual Computer Security Applications Conference).
+- **Format**, verbatim from the call: «All submitted papers must be prepared in US Letter size, not
+  A4, using the double-column IEEE conference format. This requirement will be strictly enforced.»
+  and «LaTeX submissions must use the IEEEtran.cls version 1.8b template with the
+  \documentclass[conference,compsoc]{IEEEtran} document class option.»
+- **Double-blind**: «Submissions must be properly anonymized for double-blind review.», and
+  `"blind":true` in the portal's data.
+- **Portal**: HotCRP at `https://aidc.submit.acsac.org`.
+- 🔴 **The deadline people get wrong**: the HotCRP portal closes 2026-10-02 11:59:59 UTC
+  (`"sub":1790942399` on `https://aidc.submit.acsac.org/deadlines`), while the workshop page says
+  «October 2, 2026 (Anywhere-on-Earth, AoE)» — a day later. The portal is what refuses the upload.
+
+## Paper kinds and limits
+
+| kind      | body pages | what it is                                                                                                    |
+| --------- | ---------: | ------------------------------------------------------------------------------------------------------------- |
+| `regular` |         12 | «Regular technical papers: Up to 12 pages excluding references and appendices.»                               |
+| `short`   |          6 | «Short position papers or work-in-progress (WIP) papers: Up to 6 pages, excluding references and appendices.» |
+
+References, appendices and the LLM Usage Statement are unlimited. 🔴 **The body is counted up to
+where the references start** (`format.body_ends_at: "references"`), not by banal's count: banal
+calls any page with non-bibliography text body, so an LLM Usage Statement or an appendix placed
+before the references would push a paper whose body ends at the foot of page 12 to «body 13».
+See `docs/rules/format/page-limit.md`.
+
+## What else the preset encodes
+
+- **The IEEE template**, through `extends: paperlint:ieee-conference` — letter paper, two columns,
+  Times at 10 pt, IEEEtran's TeX packages ([`ieee-conference.md`](ieee-conference.md)) — with the
+  `compsoc` option required in the class line (`tex/template`) and compsoc's text block,
+  7.00 × 9.02 in.
+- **The LLM Usage Statement** (`required_sections`). The call: «Authors must follow the ACSAC AI
+  Usage Policy for all workshop submissions.» The policy (`https://www.acsac.org/2026/submissions/ai/`):
+  «If LLMs are used, authors must include a separate, clearly marked section titled "LLM Usage
+  Statement" at the end of the paper. This section does not count towards the page limit.» and
+  «Failure to comply with these requirements is grounds for desk rejection without further
+  review.» `tex/required-section` cannot know whether LLMs were used, so it requires the section
+  always — an author who used none says so in it. A bold paragraph is not a section with this
+  title and does not count.
+- **Double-blind review** (`blind`), so `anonymity/identity` checks the PDF against the paper's
+  declared `identity`.
+- **Where submissions go** (`portal`): `paperlint submission` reads and updates a paper's
+  submission through HotCRP's API on that site.
+- **Names**: `AIDC` and `ACSAC`, what `tex/venue-leftover` looks for in another venue's paper.
+- **The register of the body** (`register`): the workshop's first edition has no accepted papers,
+  so the bands of `tex/contrast-frames`, `tex/claim-emphasis` and `tex/relation-markers` are set by
+  five accepted ACSAC papers on the same template, in `fixtures/accepted-papers/`.
+
+## What the preset resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from aidc.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:aidc`** — venue preset for AIDC · call for papers: <https://aidcworkshop.github.io/> · extends `paperlint:ieee-conference`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/aisec.jsonc

@@ -1,6 +1,6 @@
 // AISec @ ACM CCS — a VENUE preset over the ACM sigconf family. Data for the `pdf/*` rules over
 // `_build/paper.facts.json`.
-// Prose about the venue and tracks is in `aisec.md` nearby.
+// Prose about the venue and tracks is in its card, `aisec.md` beside this file.
 //
 // PAGE LIMITS — verbatim from https://aisec.cc/ (verified 2026-08-26, not from memory):
 //   «Submitted papers must be at most 10 pages long in double-column ACM format---excluding
@@ -23,6 +23,10 @@
 // but that is the main conference). Turn pdf/last-page-balance on in the paper's paperlint.json if
 // the camera-ready instructions ask for it.
 {
+  "type": "venue",
+  "name": "AISec",
+  // The call quoted above.
+  "url": "https://aisec.cc/",
   "extends": "paperlint:acm-sigconf",
 
   // What the venue is called in a paper's text (tex/venue-leftover): the workshop, and the

package/presets/aisec.md

@@ -0,0 +1,117 @@
+---
+title: "AISec @ ACM CCS — venue card"
+---
+
+# AISec @ ACM CCS
+
+The card of the venue preset `paperlint:aisec` ([`aisec.jsonc`](aisec.jsonc)): what the venue asks
+for, in prose. The numbers a machine checks live in the preset; the section at the end is generated
+from it. The `submit-paper` skill reads this card for the venue's specifics.
+
+**Re-verify the call for papers every year** ([aisec.cc](https://aisec.cc/)) — deadline, page limit
+and tracks shift between editions.
+
+## The bar
+
+AISec is the long-running AI-security workshop of **ACM CCS**, a top security conference — not a
+first-edition workshop. Mature threat modelling, honest evaluation and sound ethics are expected,
+not rewarded: a security committee rejects on soundness and ethics grounds that a software
+engineering workshop would wave through.
+
+## The venue (2026 edition)
+
+- **Venue**: ACM Workshop on Artificial Intelligence and Security (**AISec**), co-located with
+  **ACM CCS** (Computer and Communications Security).
+- **Deadline**: 24 July 2026 (check the AoE cutoff on the call each cycle).
+- **Tracks**: full research papers; **benchmark papers** (new evaluation frameworks or datasets
+  **with artifact sharing** — a track of its own); position and SoK (systematization of knowledge)
+  papers. Pitch to the bar of the chosen track.
+- **Format**: ACM double-column (`sigconf`). Build with `pdflatex; bibtex; pdflatex; pdflatex`; add
+  `\microtypesetup{expansion=false}` (the most common acmart crash).
+- **Blind model**: **double-blind** — `\documentclass[sigconf,review,anonymous]{acmart}`, author
+  `Anonymous Author(s)`. See `submit-paper` §0/§4.
+- **Archival**: accepted papers go into the CCS workshop proceedings in the ACM Digital Library,
+  with a DOI.
+- **No supplementary-material field** on the form: host the artifact externally, anonymized (a
+  view-only link), and `\url{}` it in the Availability section. See `submit-paper` §2 and
+  `paper-pipeline/references/anonymization.md`.
+
+## Paper kinds and limits
+
+Verbatim from the call: «Submitted papers must be at most 10 pages long in double-column ACM
+format---excluding bibliography and well-marked appendices, for which up to two additional pages
+can be used (hence, the paper's overall length must be of 12 pages at most).»
+
+The limits are the same for every track; the preset keeps one kind per track so a paper's
+`paperlint.json` says which track it was submitted under.
+
+| kind        | body pages | pages of bibliography and appendices |
+| ----------- | ---------: | -----------------------------------: |
+| `research`  |         10 |                                    2 |
+| `benchmark` |         10 |                                    2 |
+| `position`  |         10 |                                    2 |
+| `sok`       |         10 |                                    2 |
+
+⚠️ The venue tolerates a 13th page that holds **only** the generative-AI paragraph («Too many pages:
+the limit is 12 pages, found 13» is then acceptable). `format/page-limit` does not know this
+exception and reports the 13th page; a person clears that case by eye.
+
+## What else the preset encodes
+
+- **The ACM template**, through `extends: paperlint:acm-sigconf` — AISec points to the main ACM
+  CCS formatting instructions and publishes no numbers of its own ([`acm-sigconf.md`](acm-sigconf.md)).
+- **Names**: `AISec` and `ACM CCS`, what `tex/venue-leftover` looks for in another venue's paper.
+- **No rules of its own**: nothing says who produces the AISec proceedings or whether they require
+  a balanced last page. A paper turns `pdf/last-page-balance` on in its own `paperlint.json` if the
+  camera-ready instructions ask for it.
+
+## What decides acceptance at a security venue
+
+1. **Threat-model soundness.** Name the attacker and their capabilities (what they observe and
+   control, their goal, their budget), and separate accidental failure from an adaptive adversary
+   — conflating the two is the classic reject. The threat model goes up front.
+2. **Ethics and responsible disclosure — a hard reject vector.**
+   - Anonymize studied third parties too: aggregate statistics and use anonymized IDs for the
+     entities studied, rather than naming maintainers or projects.
+   - Disclose findings to affected parties **before** any de-anonymized release; the paper states
+     the disclosure timeline and the release gate that holds de-anonymized data back until then.
+   - The anonymized artifact must itself be leak-free — the released files, not just the PDF. A
+     named entity in the artifact is invisible to a paper-only read.
+3. **Dual use.** A paper that publishes an evasion or attack technique publishes its fix with it.
+4. **Generative-AI disclosure.** ACM and CCS require stating how generative AI was used in the
+   work (writing, code, experiments).
+
+## Track fit
+
+Adversarial ML, ML for security and security for ML, LLM and agent safety and security, evaluation
+and benchmarking of AI-security defenses, poisoning, evasion and extraction, and rigorous
+measurement of whether a claimed safety mechanism holds. A measurement paper that ships a reusable
+evaluation framework and an anonymized artifact fits the benchmark track; name the track in the
+abstract.
+
+## Compose with
+
+- `submit-paper` — the mechanics: HotCRP form, anonymous artifact hosting, "ready for review".
+- `camera-ready` — de-anonymization and the release gate after acceptance.
+- `pc-panel-review` — its ethics lens and artifact-runner lens (plant a leak, confirm it is caught).
+- `paper-pipeline/references/artifact-checklist.md` and `paper-pipeline/references/anonymization.md`.
+
+## Camera-ready
+
+AISec is an ACM venue, so the final's mechanics are the ACM ones in the `submit-paper` skill's
+`references/publishers/acm.md`: eRights first (it needs the final title), the preamble out of
+submission mode, source files beside the PDF, CCS concepts from the 2012 CCS browser. AISec's own
+DOI, ISBN, copyright line and dates are added here when the venue publishes them.
+
+## What the preset resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from aisec.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:aisec`** — venue preset for AISec · call for papers: <https://aisec.cc/> · extends `paperlint:acm-sigconf`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/ieee-conference.jsonc

@@ -24,7 +24,12 @@
 // aidc.jsonc). The planted defects fail as they should, measured on the same compsoc paper:
 //   `a4paper` added to the options        → page 8.264 x 11.694 in: pdf/geometry
 //   Computer Modern (`\rmdefault{cmr}`)   → fonts CMR10, CMBX12, …: pdf/fonts, no NimbusRomNo9L
+//
+// Its card, in prose: `ieee-conference.md` beside this file.
 {
+  // A template family: it names no venue, so no `name` and no `url` (the venues that extend it do).
+  "type": "family",
+
   "template": "\\documentclass[conference]{IEEEtran}",
 
   // TeX Live packages the IEEEtran template needs ON TOP OF tex-base.jsonc, each with the files that

package/presets/ieee-conference.md

@@ -0,0 +1,38 @@
+---
+title: "IEEE IEEEtran conference — template family card"
+---
+
+# IEEE `IEEEtran` conference
+
+The card of the template family `paperlint:ieee-conference`
+([`ieee-conference.jsonc`](ieee-conference.jsonc)). A family is what a publisher's template
+decides, whatever the venue: it names no venue and has no call for papers. A venue preset extends
+it and adds what its own call sets — the class options it names, the page limit of each kind of
+paper, the sections it requires. The template is [IEEEtran on CTAN](https://ctan.org/pkg/ieeetran).
+
+## What the family encodes
+
+- **The class**: `\documentclass[conference]{IEEEtran}`. A venue that requires `compsoc` names it
+  in its own template and its own text block (as `aidc` does).
+- **The page**: US letter, 8.5 × 11 in; the text block of `[conference]`, 7.14 × 9.30 in; two
+  columns.
+- **The fonts**: Times (the URW clone the PDF names NimbusRomNo9L) for text, headings and title;
+  body at 10 pt, the bibliography at 8 pt (IEEEtran sets it in `\footnotesize`).
+- **TeX packages** on top of the base set: ieeetran, cite, psnfss and times.
+
+The numbers are measured, not copied: IEEE's own template files (`bare_conf.tex`,
+`bare_conf_compsoc.tex`) and a 13-page paper built on each with IEEEtran.cls V1.8b, on two TeX Live
+versions. `compsoc` changes the text block and the headings, and nothing the `pdf/*` rules judge.
+
+## What the family resolves to
+
+<!-- paperlint:preset-rules -->
+<!-- prettier-ignore-start -->
+<!-- Generated from ieee-conference.jsonc by `npx eslint --fix` (rule preset/card-rules). Edit the preset, not this section. -->
+
+**`paperlint:ieee-conference`** — template family, no venue of its own · extended by `paperlint:aidc`
+
+No preset of this chain sets a rule: under it, every rule keeps paperlint's default.
+
+<!-- prettier-ignore-end -->
+<!-- /paperlint:preset-rules -->

package/presets/realm.jsonc

@@ -1,5 +1,5 @@
-// REALM @ EMNLP 2026 format profile — ACL family, NOT ACM. Prose is in `realm.md` nearby,
-// the family's shared rules are in `paper-pipeline/references/acl-venue-rules.md`.
+// REALM @ EMNLP 2026 format profile — ACL family, NOT ACM. Prose is in its card, `realm.md`
+// beside this file; the family's shared rules are in `paper-pipeline/references/acl-venue-rules.md`.
 //
 // 🔴 THE GEOMETRY NUMBERS ARE MEASURED, NOT COPIED. banal run against our own build
 // (`repro/build-submission.sh` → `build/acl_latex.pdf`, 2026-08-26):
@@ -8,6 +8,11 @@
 // acmart (letter 8.5x11, size 9, Libertine) shares NOTHING with this — copying the numbers from
 // `agenticdev.jsonc` would give a gate that reddens on a correct paper.
 {
+  "type": "venue",
+  "name": "REALM",
+  // The workshop's call for papers, which the page limits below are quoted from.
+  "url": "https://realm-workshop.github.io/call_for_papers",
+
   // ACL's template is not a class: `acl_latex.tex` opens with `\documentclass[11pt]{article}` and
   // loads `acl.sty` as a package (https://github.com/acl-org/acl-style-files, checked 2026-09-27).
   // So the class `tex/template` compares against is article, at 11pt.