ultra11y 5.5.2 → 5.5.4

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.5.2",
+      "version": "5.5.4",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.5.2",
+  "version": "5.5.4",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.5.2",
+  "version": "5.5.4",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.5.2";
+const ULTRA11Y_PLUGIN_VERSION = "5.5.4";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.5.2",
+  "version": "5.5.4",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.5.2";
+var VERSION = "5.5.4";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -57182,7 +57182,7 @@ function adjudicationText(sc, lang) {
 
 // src/adjudicate.ts
 var ADJUDICATE_MAX_EVIDENCE_CLASSES = 1200;
-var ALSO_AT_MAX = 8;
+var ALSO_AT_SHOWN = 8;
 function adjudicationContract() {
   return {
     verdicts: [...VERDICTS],
@@ -57225,7 +57225,7 @@ function collapse2(harvested) {
     return {
       ...rep.ev,
       ...group.length > 1 ? { occurrences: group.length } : {},
-      ...others.length ? { alsoAt: others.slice(0, ALSO_AT_MAX).map((x) => `${x.ev.file}:${x.ev.line}`) } : {},
+      ...others.length ? { alsoAt: others.map((x) => `${x.ev.file}:${x.ev.line}`) } : {},
       ...pages.length ? { pages } : {}
     };
   });
@@ -57288,6 +57288,35 @@ function buildAdjudicationWorklist(audit2, opts = {}) {
     (r) => blankItem(r.criteriaId, r.automatability, scTitle(r.criteriaId) ?? void 0, harvestSubjects(subjectsForSc(r.criteriaId), docs))
   );
 }
+function readCitation(c2) {
+  if (typeof c2 !== "string") return c2;
+  const at = c2.lastIndexOf(":");
+  if (at <= 0) return null;
+  const line = Number.parseInt(c2.slice(at + 1), 10);
+  if (!Number.isFinite(line)) return null;
+  return { file: c2.slice(0, at), line, selector: "", snippet: "" };
+}
+function auditFiles(audit2, cwd) {
+  const inputs = audit2.scope.inputs.filter((i2) => i2 !== "-" && i2 !== "<stdin>");
+  if (!inputs.length) return /* @__PURE__ */ new Set();
+  try {
+    void cwd;
+    return new Set(discover(inputs, {}).files);
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+var CITE_DRIFT = 10;
+function cites0(anchors, c2) {
+  for (const a of anchors) {
+    const at = a.lastIndexOf(":");
+    if (at < 0) continue;
+    if (a.slice(0, at) !== c2.file) continue;
+    const line = Number.parseInt(a.slice(at + 1), 10);
+    if (Number.isFinite(line) && Math.abs(line - c2.line) <= CITE_DRIFT) return true;
+  }
+  return false;
+}
 var NC_SEVERITY_DEFAULT = "majeur";
 var MANUAL_REASONS = /* @__PURE__ */ new Set(["needs-rendered-dom", "undecidable"]);
 var VERDICTS = ["C", "NC", "NA", "manual"];
@@ -57374,6 +57403,8 @@ function applyAdjudication(audit2, adj, opts = {}) {
     }
   }
   const groundInputs = /* @__PURE__ */ new Map();
+  let scopeCache;
+  const scopeFiles = () => scopeCache ??= auditFiles(audit2, opts.cwd);
   const toGround = (criteriaId, g) => {
     const list = groundInputs.get(criteriaId);
     if (list) list.push(g);
@@ -57385,7 +57416,7 @@ function applyAdjudication(audit2, adj, opts = {}) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
     } else if (v === "C" || v === "NA") {
       if (!it.justification || !it.justification.trim()) blame(it.criteriaId, `criterion ${it.criteriaId}: a ${v} verdict requires a justification`);
-      const cites = it.citations ?? [];
+      const cites = (it.citations ?? []).map(readCitation).filter((c2) => c2 !== null);
       if (v === "C" && it.evidenceComplete === false) {
         blame(
           it.criteriaId,
@@ -57399,15 +57430,15 @@ function applyAdjudication(audit2, adj, opts = {}) {
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion \u2014 record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`
           );
         }
-      } else if (cites.length === 0) {
+      } else if (cites.length === 0 && v === "C") {
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a ${v} verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
+          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
         );
-      } else {
-        const anchors = new Set(it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]));
+      } else if (cites.length > 0) {
+        const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]);
         for (const c2 of cites) {
-          if (!anchors.has(`${c2.file}:${c2.line}`)) {
+          if (!cites0(anchors, c2) && !scopeFiles().has(c2.file)) {
             blame(it.criteriaId, `criterion ${it.criteriaId}: citation ${c2.file}:${c2.line} is not among this criterion's harvested evidence (fabricated?)`);
           }
           toGround(it.criteriaId, { file: c2.file, line: c2.line, selector: c2.selector, snippet: c2.snippet });
@@ -57593,6 +57624,7 @@ var T2 = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "sur",
+    alsoAt: "aussi en",
     incomplete: "LECTURE INCOMPL\xC8TE \u2014 un \xAB C \xBB sera refus\xE9 sur ce crit\xE8re",
     none: "(aucune \xE9vidence automatique \u2014 d\xE9cidez depuis la source, ou laissez `manual` avec une raison)",
     questions: "\xC0 v\xE9rifier manuellement",
@@ -57621,6 +57653,7 @@ var T2 = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "on",
+    alsoAt: "also at",
     incomplete: "INCOMPLETE READING \u2014 a C will be refused on this criterion",
     none: "(no automatic evidence \u2014 decide from source, or leave `manual` with a reason)",
     questions: "To verify manually",
@@ -57676,7 +57709,8 @@ function formatAdjudication(items, lang = "en", standard = CORE2, opts = {}) {
       for (const e of it.evidence) {
         const extra = [
           e.occurrences && e.occurrences > 1 ? `\xD7${e.occurrences}` : "",
-          e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "\u2026" : ""}` : ""
+          e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "\u2026" : ""}` : "",
+          e.alsoAt?.length ? `${s.alsoAt} ${e.alsoAt.slice(0, ALSO_AT_SHOWN).join(", ")}${e.alsoAt.length > ALSO_AT_SHOWN ? "\u2026" : ""}` : ""
         ].filter(Boolean).join(" ");
         out2.push(`- \`${e.file}:${e.line}\` (\`${e.selector}\`)${extra ? ` [${extra}]` : ""}${e.note ? ` \u2014 ${e.note}` : ""}`);
       }
@@ -57817,7 +57851,9 @@ function entriesFrom(adj, accepted, date) {
       verdict: it.verdict,
       ...it.justification?.trim() ? { justification: it.justification.trim() } : {},
       ...it.reason ? { reason: it.reason } : {},
-      ...it.citations?.length ? { citations: it.citations } : {},
+      // Normalised here too: a citation may have arrived as a bare "file:line" string, and a
+      // ledger entry has to hold the object form so a replay can re-anchor and re-ground it.
+      ...it.citations?.length ? { citations: it.citations.map(readCitation).filter((c2) => c2 !== null) } : {},
       ...it.findings?.length ? { findings: it.findings } : {},
       ...it.recommendations?.length ? { recommendations: it.recommendations } : {},
       evidenceFingerprint: evidenceFingerprint(it.evidence),

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.5.2
+  version: 5.5.4
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.5.2";
+var VERSION = "5.5.4";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -57182,7 +57182,7 @@ function adjudicationText(sc, lang) {
 
 // src/adjudicate.ts
 var ADJUDICATE_MAX_EVIDENCE_CLASSES = 1200;
-var ALSO_AT_MAX = 8;
+var ALSO_AT_SHOWN = 8;
 function adjudicationContract() {
   return {
     verdicts: [...VERDICTS],
@@ -57225,7 +57225,7 @@ function collapse2(harvested) {
     return {
       ...rep.ev,
       ...group.length > 1 ? { occurrences: group.length } : {},
-      ...others.length ? { alsoAt: others.slice(0, ALSO_AT_MAX).map((x) => `${x.ev.file}:${x.ev.line}`) } : {},
+      ...others.length ? { alsoAt: others.map((x) => `${x.ev.file}:${x.ev.line}`) } : {},
       ...pages.length ? { pages } : {}
     };
   });
@@ -57288,6 +57288,35 @@ function buildAdjudicationWorklist(audit2, opts = {}) {
     (r) => blankItem(r.criteriaId, r.automatability, scTitle(r.criteriaId) ?? void 0, harvestSubjects(subjectsForSc(r.criteriaId), docs))
   );
 }
+function readCitation(c2) {
+  if (typeof c2 !== "string") return c2;
+  const at = c2.lastIndexOf(":");
+  if (at <= 0) return null;
+  const line = Number.parseInt(c2.slice(at + 1), 10);
+  if (!Number.isFinite(line)) return null;
+  return { file: c2.slice(0, at), line, selector: "", snippet: "" };
+}
+function auditFiles(audit2, cwd) {
+  const inputs = audit2.scope.inputs.filter((i2) => i2 !== "-" && i2 !== "<stdin>");
+  if (!inputs.length) return /* @__PURE__ */ new Set();
+  try {
+    void cwd;
+    return new Set(discover(inputs, {}).files);
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+var CITE_DRIFT = 10;
+function cites0(anchors, c2) {
+  for (const a of anchors) {
+    const at = a.lastIndexOf(":");
+    if (at < 0) continue;
+    if (a.slice(0, at) !== c2.file) continue;
+    const line = Number.parseInt(a.slice(at + 1), 10);
+    if (Number.isFinite(line) && Math.abs(line - c2.line) <= CITE_DRIFT) return true;
+  }
+  return false;
+}
 var NC_SEVERITY_DEFAULT = "majeur";
 var MANUAL_REASONS = /* @__PURE__ */ new Set(["needs-rendered-dom", "undecidable"]);
 var VERDICTS = ["C", "NC", "NA", "manual"];
@@ -57374,6 +57403,8 @@ function applyAdjudication(audit2, adj, opts = {}) {
     }
   }
   const groundInputs = /* @__PURE__ */ new Map();
+  let scopeCache;
+  const scopeFiles = () => scopeCache ??= auditFiles(audit2, opts.cwd);
   const toGround = (criteriaId, g) => {
     const list = groundInputs.get(criteriaId);
     if (list) list.push(g);
@@ -57385,7 +57416,7 @@ function applyAdjudication(audit2, adj, opts = {}) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
     } else if (v === "C" || v === "NA") {
       if (!it.justification || !it.justification.trim()) blame(it.criteriaId, `criterion ${it.criteriaId}: a ${v} verdict requires a justification`);
-      const cites = it.citations ?? [];
+      const cites = (it.citations ?? []).map(readCitation).filter((c2) => c2 !== null);
       if (v === "C" && it.evidenceComplete === false) {
         blame(
           it.criteriaId,
@@ -57399,15 +57430,15 @@ function applyAdjudication(audit2, adj, opts = {}) {
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion \u2014 record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`
           );
         }
-      } else if (cites.length === 0) {
+      } else if (cites.length === 0 && v === "C") {
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a ${v} verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
+          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
         );
-      } else {
-        const anchors = new Set(it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]));
+      } else if (cites.length > 0) {
+        const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]);
         for (const c2 of cites) {
-          if (!anchors.has(`${c2.file}:${c2.line}`)) {
+          if (!cites0(anchors, c2) && !scopeFiles().has(c2.file)) {
             blame(it.criteriaId, `criterion ${it.criteriaId}: citation ${c2.file}:${c2.line} is not among this criterion's harvested evidence (fabricated?)`);
           }
           toGround(it.criteriaId, { file: c2.file, line: c2.line, selector: c2.selector, snippet: c2.snippet });
@@ -57593,6 +57624,7 @@ var T2 = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "sur",
+    alsoAt: "aussi en",
     incomplete: "LECTURE INCOMPL\xC8TE \u2014 un \xAB C \xBB sera refus\xE9 sur ce crit\xE8re",
     none: "(aucune \xE9vidence automatique \u2014 d\xE9cidez depuis la source, ou laissez `manual` avec une raison)",
     questions: "\xC0 v\xE9rifier manuellement",
@@ -57621,6 +57653,7 @@ var T2 = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "on",
+    alsoAt: "also at",
     incomplete: "INCOMPLETE READING \u2014 a C will be refused on this criterion",
     none: "(no automatic evidence \u2014 decide from source, or leave `manual` with a reason)",
     questions: "To verify manually",
@@ -57676,7 +57709,8 @@ function formatAdjudication(items, lang = "en", standard = CORE2, opts = {}) {
       for (const e of it.evidence) {
         const extra = [
           e.occurrences && e.occurrences > 1 ? `\xD7${e.occurrences}` : "",
-          e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "\u2026" : ""}` : ""
+          e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "\u2026" : ""}` : "",
+          e.alsoAt?.length ? `${s.alsoAt} ${e.alsoAt.slice(0, ALSO_AT_SHOWN).join(", ")}${e.alsoAt.length > ALSO_AT_SHOWN ? "\u2026" : ""}` : ""
         ].filter(Boolean).join(" ");
         out2.push(`- \`${e.file}:${e.line}\` (\`${e.selector}\`)${extra ? ` [${extra}]` : ""}${e.note ? ` \u2014 ${e.note}` : ""}`);
       }
@@ -57817,7 +57851,9 @@ function entriesFrom(adj, accepted, date) {
       verdict: it.verdict,
       ...it.justification?.trim() ? { justification: it.justification.trim() } : {},
       ...it.reason ? { reason: it.reason } : {},
-      ...it.citations?.length ? { citations: it.citations } : {},
+      // Normalised here too: a citation may have arrived as a bare "file:line" string, and a
+      // ledger entry has to hold the object form so a replay can re-anchor and re-ground it.
+      ...it.citations?.length ? { citations: it.citations.map(readCitation).filter((c2) => c2 !== null) } : {},
       ...it.findings?.length ? { findings: it.findings } : {},
       ...it.recommendations?.length ? { recommendations: it.recommendations } : {},
       evidenceFingerprint: evidenceFingerprint(it.evidence),

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.5.2
+  version: 5.5.4
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.5.2";
+var VERSION = "5.5.4";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -57182,7 +57182,7 @@ function adjudicationText(sc, lang) {
 
 // src/adjudicate.ts
 var ADJUDICATE_MAX_EVIDENCE_CLASSES = 1200;
-var ALSO_AT_MAX = 8;
+var ALSO_AT_SHOWN = 8;
 function adjudicationContract() {
   return {
     verdicts: [...VERDICTS],
@@ -57225,7 +57225,7 @@ function collapse2(harvested) {
     return {
       ...rep.ev,
       ...group.length > 1 ? { occurrences: group.length } : {},
-      ...others.length ? { alsoAt: others.slice(0, ALSO_AT_MAX).map((x) => `${x.ev.file}:${x.ev.line}`) } : {},
+      ...others.length ? { alsoAt: others.map((x) => `${x.ev.file}:${x.ev.line}`) } : {},
       ...pages.length ? { pages } : {}
     };
   });
@@ -57288,6 +57288,35 @@ function buildAdjudicationWorklist(audit2, opts = {}) {
     (r) => blankItem(r.criteriaId, r.automatability, scTitle(r.criteriaId) ?? void 0, harvestSubjects(subjectsForSc(r.criteriaId), docs))
   );
 }
+function readCitation(c2) {
+  if (typeof c2 !== "string") return c2;
+  const at = c2.lastIndexOf(":");
+  if (at <= 0) return null;
+  const line = Number.parseInt(c2.slice(at + 1), 10);
+  if (!Number.isFinite(line)) return null;
+  return { file: c2.slice(0, at), line, selector: "", snippet: "" };
+}
+function auditFiles(audit2, cwd) {
+  const inputs = audit2.scope.inputs.filter((i2) => i2 !== "-" && i2 !== "<stdin>");
+  if (!inputs.length) return /* @__PURE__ */ new Set();
+  try {
+    void cwd;
+    return new Set(discover(inputs, {}).files);
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+var CITE_DRIFT = 10;
+function cites0(anchors, c2) {
+  for (const a of anchors) {
+    const at = a.lastIndexOf(":");
+    if (at < 0) continue;
+    if (a.slice(0, at) !== c2.file) continue;
+    const line = Number.parseInt(a.slice(at + 1), 10);
+    if (Number.isFinite(line) && Math.abs(line - c2.line) <= CITE_DRIFT) return true;
+  }
+  return false;
+}
 var NC_SEVERITY_DEFAULT = "majeur";
 var MANUAL_REASONS = /* @__PURE__ */ new Set(["needs-rendered-dom", "undecidable"]);
 var VERDICTS = ["C", "NC", "NA", "manual"];
@@ -57374,6 +57403,8 @@ function applyAdjudication(audit2, adj, opts = {}) {
     }
   }
   const groundInputs = /* @__PURE__ */ new Map();
+  let scopeCache;
+  const scopeFiles = () => scopeCache ??= auditFiles(audit2, opts.cwd);
   const toGround = (criteriaId, g) => {
     const list = groundInputs.get(criteriaId);
     if (list) list.push(g);
@@ -57385,7 +57416,7 @@ function applyAdjudication(audit2, adj, opts = {}) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
     } else if (v === "C" || v === "NA") {
       if (!it.justification || !it.justification.trim()) blame(it.criteriaId, `criterion ${it.criteriaId}: a ${v} verdict requires a justification`);
-      const cites = it.citations ?? [];
+      const cites = (it.citations ?? []).map(readCitation).filter((c2) => c2 !== null);
       if (v === "C" && it.evidenceComplete === false) {
         blame(
           it.criteriaId,
@@ -57399,15 +57430,15 @@ function applyAdjudication(audit2, adj, opts = {}) {
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion \u2014 record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`
           );
         }
-      } else if (cites.length === 0) {
+      } else if (cites.length === 0 && v === "C") {
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a ${v} verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
+          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
         );
-      } else {
-        const anchors = new Set(it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]));
+      } else if (cites.length > 0) {
+        const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]);
         for (const c2 of cites) {
-          if (!anchors.has(`${c2.file}:${c2.line}`)) {
+          if (!cites0(anchors, c2) && !scopeFiles().has(c2.file)) {
             blame(it.criteriaId, `criterion ${it.criteriaId}: citation ${c2.file}:${c2.line} is not among this criterion's harvested evidence (fabricated?)`);
           }
           toGround(it.criteriaId, { file: c2.file, line: c2.line, selector: c2.selector, snippet: c2.snippet });
@@ -57593,6 +57624,7 @@ var T2 = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "sur",
+    alsoAt: "aussi en",
     incomplete: "LECTURE INCOMPL\xC8TE \u2014 un \xAB C \xBB sera refus\xE9 sur ce crit\xE8re",
     none: "(aucune \xE9vidence automatique \u2014 d\xE9cidez depuis la source, ou laissez `manual` avec une raison)",
     questions: "\xC0 v\xE9rifier manuellement",
@@ -57621,6 +57653,7 @@ var T2 = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "on",
+    alsoAt: "also at",
     incomplete: "INCOMPLETE READING \u2014 a C will be refused on this criterion",
     none: "(no automatic evidence \u2014 decide from source, or leave `manual` with a reason)",
     questions: "To verify manually",
@@ -57676,7 +57709,8 @@ function formatAdjudication(items, lang = "en", standard = CORE2, opts = {}) {
       for (const e of it.evidence) {
         const extra = [
           e.occurrences && e.occurrences > 1 ? `\xD7${e.occurrences}` : "",
-          e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "\u2026" : ""}` : ""
+          e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "\u2026" : ""}` : "",
+          e.alsoAt?.length ? `${s.alsoAt} ${e.alsoAt.slice(0, ALSO_AT_SHOWN).join(", ")}${e.alsoAt.length > ALSO_AT_SHOWN ? "\u2026" : ""}` : ""
         ].filter(Boolean).join(" ");
         out2.push(`- \`${e.file}:${e.line}\` (\`${e.selector}\`)${extra ? ` [${extra}]` : ""}${e.note ? ` \u2014 ${e.note}` : ""}`);
       }
@@ -57817,7 +57851,9 @@ function entriesFrom(adj, accepted, date) {
       verdict: it.verdict,
       ...it.justification?.trim() ? { justification: it.justification.trim() } : {},
       ...it.reason ? { reason: it.reason } : {},
-      ...it.citations?.length ? { citations: it.citations } : {},
+      // Normalised here too: a citation may have arrived as a bare "file:line" string, and a
+      // ledger entry has to hold the object form so a replay can re-anchor and re-ground it.
+      ...it.citations?.length ? { citations: it.citations.map(readCitation).filter((c2) => c2 !== null) } : {},
       ...it.findings?.length ? { findings: it.findings } : {},
       ...it.recommendations?.length ? { recommendations: it.recommendations } : {},
       evidenceFingerprint: evidenceFingerprint(it.evidence),

package/src/adjudicate.ts

@@ -60,9 +60,11 @@ export const ADJUDICATE_MAX_EVIDENCE_CLASSES = 1200;
 // especially confusing one, since nothing about the code got worse. Refusing to conclude is
 // honest only when something really was not looked at.
 
-/** Sibling anchors listed per class. Bounded for readability; `occurrences` carries the true
- *  count, and the citation gate accepts any anchor of the class, listed or not. */
-const ALSO_AT_MAX = 8;
+/** Sibling anchors RENDERED per class. The data keeps them all — the citation gate reads that
+ *  list to decide whether an anchor belongs to the criterion, so a bound here would make the
+ *  gate refuse real occurrences for being ninth. Measured on a real run: 31 of 37 refusals
+ *  were citations of elements the criterion genuinely carried. Only the reading is bounded. */
+const ALSO_AT_SHOWN = 8;
 
 /** How much there actually was to look at, so a reader can tell a complete reading from a
  *  glance at the first few. */
@@ -84,7 +86,9 @@ export interface Evidence {
   /** Anchors sharing this content class — the same header link on 38 pages is one decision,
    *  not 38. Absent when the class has a single anchor. */
   occurrences?: number;
-  /** Some of the other anchors of this class, as `file:line`. Bounded (see ALSO_AT_MAX). */
+  /** Every other anchor of this class, as `file:line`. Complete on purpose: the citation gate
+   *  reads it to decide membership, so a bound here would refuse real occurrences. The
+   *  worklist renders only the first few (ALSO_AT_SHOWN). */
   alsoAt?: string[];
   /** Page ids this class appears on, when it was harvested from rendered captures. */
   pages?: string[];
@@ -135,7 +139,10 @@ export interface AdjudicationItem {
   // is what turns "cite something real" into "cite the evidence you were shown". When the
   // harvester found no evidence at all there is nothing to clear, and the honest verdicts
   // are `manual` or `NA`, never `C`.
-  citations?: Evidence[];
+  // Objects are what the contract asks for; a bare `"file:line"` string is accepted too,
+  // because that is the shape the worklist's own `alsoAt` uses and a real run reached for it.
+  // See `readCitation` — the gate is identical either way, a string just carries no snippet.
+  citations?: (Evidence | string)[];
   // Non-normative good practices the agent noted on this criterion — folded back into the
   // audit as ADVISORY findings (grounded exactly like an NC finding, but never affecting
   // status: they cannot flip the criterion to NC nor enter conformancePct). Optional.
@@ -240,7 +247,7 @@ function collapse(harvested: Harvested[]): { evidence: Evidence[]; population: E
     return {
       ...rep.ev,
       ...(group.length > 1 ? { occurrences: group.length } : {}),
-      ...(others.length ? { alsoAt: others.slice(0, ALSO_AT_MAX).map((x) => `${x.ev.file}:${x.ev.line}`) } : {}),
+      ...(others.length ? { alsoAt: others.map((x) => `${x.ev.file}:${x.ev.line}`) } : {}),
       ...(pages.length ? { pages } : {}),
     };
   });
@@ -330,6 +337,63 @@ export function buildAdjudicationWorklist(audit: AuditResult, opts: { cwd?: stri
   );
 }
 
+/** Read a citation whichever way it was written.
+ *
+ *  The contract asks for `{file, line, …}`, and a real run wrote `"src/Foo.tsx:15"` instead —
+ *  63 verdicts refused for a shape, not for a claim. It is an unambiguous form and the
+ *  worklist itself is full of it (`alsoAt` is exactly `file:line`), so an adjudicator
+ *  reaching for it is being consistent, not careless.
+ *
+ *  Nothing about the gate moves: membership and grounding run on the result either way. A
+ *  string simply carries no snippet, so grounding falls back to its selector/line checks —
+ *  weaker evidence, and the reason the object form stays what the contract asks for. */
+export function readCitation(c: Evidence | string): Evidence | null {
+  if (typeof c !== "string") return c;
+  const at = c.lastIndexOf(":");
+  if (at <= 0) return null;
+  const line = Number.parseInt(c.slice(at + 1), 10);
+  if (!Number.isFinite(line)) return null;
+  return { file: c.slice(0, at), line, selector: "", snippet: "" };
+}
+
+/** The files this audit actually read. Computed from the audit's own scope inputs, so it is
+ *  the same set the harvest walked — `discover` only globs, it does not parse, so this costs
+ *  little and is memoised per fold. */
+function auditFiles(audit: AuditResult, cwd?: string): Set<string> {
+  const inputs = audit.scope.inputs.filter((i) => i !== "-" && i !== "<stdin>");
+  if (!inputs.length) return new Set();
+  try {
+    void cwd; // `discover` returns the same repo-relative paths the harvest anchors use
+    return new Set(discover(inputs, {}).files);
+  } catch {
+    return new Set();
+  }
+}
+
+/** Does this citation name evidence the criterion actually carries?
+ *
+ *  Same file, and within the drift `groundFinding` already tolerates. Exact line equality was
+ *  too literal to be useful: the harvest anchors a <table> at line 19, the agent cites the
+ *  <caption> at line 20 — which is the very thing RGAA 5.4 asks about, inside the element it
+ *  was shown — and the gate called it fabricated. Measured on a real run, that class of
+ *  refusal cost more criteria than every other cause combined.
+ *
+ *  What the check still catches is what it was written for: a citation pointing at a file the
+ *  criterion was never given. And it is only half the gate — `groundFinding` still has to find
+ *  the cited content in the real source, so a plausible-looking file:line in the right
+ *  neighbourhood proves nothing on its own. */
+const CITE_DRIFT = 10;
+function cites0(anchors: string[], c: { file: string; line: number }): boolean {
+  for (const a of anchors) {
+    const at = a.lastIndexOf(":");
+    if (at < 0) continue;
+    if (a.slice(0, at) !== c.file) continue;
+    const line = Number.parseInt(a.slice(at + 1), 10);
+    if (Number.isFinite(line) && Math.abs(line - c.line) <= CITE_DRIFT) return true;
+  }
+  return false;
+}
+
 export interface ApplyAdjudicationResult {
   ok: boolean;
   audit: AuditResult;
@@ -521,6 +585,9 @@ export function applyAdjudication(
   // flat list) for the same reason as `blame`: a failed citation has to condemn its own
   // criterion and no other.
   const groundInputs = new Map<string, { file: string; line: number; selector?: string; snippet?: string }[]>();
+  // Memoised: only a citation that missed its criterion's own anchors ever asks for it.
+  let scopeCache: Set<string> | undefined;
+  const scopeFiles = (): Set<string> => (scopeCache ??= auditFiles(audit, opts.cwd));
   const toGround = (criteriaId: string, g: { file: string; line: number; selector?: string; snippet?: string }) => {
     const list = groundInputs.get(criteriaId);
     if (list) list.push(g);
@@ -535,7 +602,7 @@ export function applyAdjudication(
       // A clearing verdict is gated exactly like an accusing one. Before this, the only
       // check was "the justification is a non-empty string", so `"x"` cleared a criterion —
       // and a model answering C to everything published a conformance nobody had assessed.
-      const cites = it.citations ?? [];
+      const cites = (it.citations ?? []).map(readCitation).filter((c): c is Evidence => c !== null);
       // An INCOMPLETE reading may report a failure it saw; it may never clear what it never
       // looked at. Before class-based harvesting the evidence was a 30-anchor sample of a
       // population that ran to thousands, so a `C` was routinely a conformity claim over
@@ -557,12 +624,21 @@ export function applyAdjudication(
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion — record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`,
           );
         }
-      } else if (cites.length === 0) {
+      } else if (cites.length === 0 && v === "C") {
+        // Only a `C` must cite. A `C` says "everything here conforms", so it has to name what
+        // it cleared; an `NA` says "none of this is what the criterion is about", and there is
+        // nothing to clear — asking it to cite the very elements it just ruled out of scope is
+        // a contradiction, and one the engine does not hold ITSELF to: an engine-proved NA
+        // (src/audit.ts subjectMatterReason) carries a justification naming what was searched
+        // for, and no citations at all. Measured on a real run, six criteria were refused for
+        // this alone, each of them an honest NA.
+        //
+        // The justification is what keeps an NA falsifiable, and it is still required above.
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a ${v} verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, …}])`,
+          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, …}])`,
         );
-      } else {
+      } else if (cites.length > 0) {
         // Each citation must name evidence THIS item carried. Grounding alone would only
         // prove the anchor exists somewhere in the tree; the pairing proves the agent ruled
         // on what it was actually given.
@@ -576,9 +652,22 @@ export function applyAdjudication(
         // exactly how RGAA 5.8, 9.2 and 11.1 were refused. Membership was the defect;
         // grounding — which proves the citation resolves against real source — is unchanged
         // and still runs on every one of them.
-        const anchors = new Set(it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...(e.alsoAt ?? [])]));
+        const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...(e.alsoAt ?? [])]);
         for (const c of cites) {
-          if (!anchors.has(`${c.file}:${c.line}`)) {
+          // Two ways to belong, and the second one is what a good adjudicator does.
+          //
+          // The harvest anchors a rendered page (`.ultra11y/pages/<id>/dom.html`) because that
+          // is what proves the browser's output — but the place a reader goes to FIX it is the
+          // component that produced it, and that is what the agent naturally cites. Measured
+          // on a real run: 15 of the 16 citations still refused after the drift tolerance were
+          // in files this audit had read, pointing at the source behind the evidence. Refusing
+          // them called correct work fabricated.
+          //
+          // So a citation also belongs when it lands in a file the audit read. That is a real
+          // bound — a file outside the audited scope is still refused — and it is not the last
+          // one: `groundFinding` below still has to find the cited content at that file:line in
+          // the real source, which is what "not fabricated" actually means.
+          if (!cites0(anchors, c) && !scopeFiles().has(c.file)) {
             blame(it.criteriaId, `criterion ${it.criteriaId}: citation ${c.file}:${c.line} is not among this criterion's harvested evidence (fabricated?)`);
           }
           toGround(it.criteriaId, { file: c.file, line: c.line, selector: c.selector, snippet: c.snippet });
@@ -829,6 +918,7 @@ const T = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "sur",
+    alsoAt: "aussi en",
     incomplete: "LECTURE INCOMPLÈTE — un « C » sera refusé sur ce critère",
     none: "(aucune évidence automatique — décidez depuis la source, ou laissez `manual` avec une raison)",
     questions: "À vérifier manuellement",
@@ -858,6 +948,7 @@ const T = {
     occurrences: "occurrences",
     pagesWord: "page(s)",
     on: "on",
+    alsoAt: "also at",
     incomplete: "INCOMPLETE READING — a C will be refused on this criterion",
     none: "(no automatic evidence — decide from source, or leave `manual` with a reason)",
     questions: "To verify manually",
@@ -1003,6 +1094,7 @@ export function formatAdjudication(items: AdjudicationItem[], lang: Lang = "en",
         const extra = [
           e.occurrences && e.occurrences > 1 ? `×${e.occurrences}` : "",
           e.pages?.length ? `${s.on} ${e.pages.slice(0, 4).join(", ")}${e.pages.length > 4 ? "…" : ""}` : "",
+          e.alsoAt?.length ? `${s.alsoAt} ${e.alsoAt.slice(0, ALSO_AT_SHOWN).join(", ")}${e.alsoAt.length > ALSO_AT_SHOWN ? "…" : ""}` : "",
         ]
           .filter(Boolean)
           .join(" ");

package/src/ledger.ts

@@ -30,7 +30,7 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
-import { type AdjudicationFile, type AdjudicationItem, type AgentFinding, buildAdjudicationWorklist, type Evidence } from "./adjudicate.js";
+import { type AdjudicationFile, type AdjudicationItem, type AgentFinding, buildAdjudicationWorklist, type Evidence, readCitation } from "./adjudicate.js";
 import { CORE, type StandardId } from "./standards/index.js";
 import type { AuditResult } from "./types.js";
 import { SCHEMA_VERSION } from "./types.js";
@@ -148,7 +148,9 @@ export function entriesFrom(adj: AdjudicationFile, accepted: ReadonlySet<string>
       verdict: it.verdict,
       ...(it.justification?.trim() ? { justification: it.justification.trim() } : {}),
       ...(it.reason ? { reason: it.reason } : {}),
-      ...(it.citations?.length ? { citations: it.citations } : {}),
+      // Normalised here too: a citation may have arrived as a bare "file:line" string, and a
+      // ledger entry has to hold the object form so a replay can re-anchor and re-ground it.
+      ...(it.citations?.length ? { citations: it.citations.map(readCitation).filter((c): c is Evidence => c !== null) } : {}),
       ...(it.findings?.length ? { findings: it.findings } : {}),
       ...(it.recommendations?.length ? { recommendations: it.recommendations } : {}),
       evidenceFingerprint: evidenceFingerprint(it.evidence),

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.5.2";
+export const VERSION = "5.5.4";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,