ultra11y 5.9.1 → 5.10.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.9.1",
+      "version": "5.10.0",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.9.1",
+  "version": "5.10.0",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.9.1",
+  "version": "5.10.0",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.9.1";
+const ULTRA11Y_PLUGIN_VERSION = "5.10.0";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.9.1",
+  "version": "5.10.0",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.9.1";
+var VERSION = "5.10.0";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -39652,6 +39652,21 @@ var SUBJECTS = {
       (e) => h(d, e, `<html lang="${attr(e, "lang") ?? ""}"> \u2014 is it present, valid, and the language of the content?`, `doclang|${attr(e, "lang") ?? ""}`)
     )
   ),
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) => docs.flatMap(
+    (d) => elementsByTag(d, "iframe", "frame").map(
+      (e) => h(
+        d,
+        e,
+        `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" \u2014 un titre de cadre est-il pr\xE9sent, et d\xE9crit-il le contenu du cadre ?`,
+        `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`
+      )
+    )
+  ),
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) => docs.flatMap(
     (d) => elementsByTag(d, "title").map((e) => h(d, e, `page="${pageOfDoc(d.file) ?? "source"}" <title>${t(e, 80)}</title>`, `doctitle|${t(e, 80)}`))
@@ -39880,6 +39895,9 @@ var PACK_SUBJECTS = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -39960,7 +39978,7 @@ var PACK_SUBJECTS = {
     "13.11": ["pointerHandlers"]
   }
 };
-var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 var subjectsForSc = (sc) => SC_SUBJECTS[sc] ?? [];
 function subjectsForPackCriterion(standard, id, scs) {
   const own = PACK_SUBJECTS[standard]?.[id];
@@ -58189,10 +58207,12 @@ function writeAdjudication(items, outDir, opts) {
   }
   return { todoPath, mdPath, verdictsPath, itemsDir, count: items.length };
 }
+var PREFILLED_CITATIONS = 3;
 function slimAdjudicationItems(items) {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    return { ...rest, evidence: [] };
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...citations.length ? { citations } : {} };
   });
 }
 function hydrateAdjudication(adj, audit2, opts = {}) {
@@ -61397,6 +61417,9 @@ var S = {
     pagesClamped: (n) => `_Le d\xE9tail de ${n} page(s) a \xE9t\xE9 retir\xE9 de ce commentaire pour tenir dans la limite de GitHub \u2014 l'artefact les porte toutes._`,
     scoreboardClamped: (n) => `_${n} page(s) retir\xE9e(s) du tableau pour tenir dans la limite de GitHub \u2014 l'artefact les porte toutes._`,
     pageDefects: "D\xE9fauts",
+    fullGrid: "Grille compl\xE8te \u2014 chaque crit\xE8re du r\xE9f\xE9rentiel, page par page",
+    gridLegend: "`C` conforme \xB7 `NC` non conforme \xB7 `\u2014` non applicable \xB7 `?` \xE0 \xE9valuer",
+    gridDropped: "_La grille compl\xE8te ne tient pas dans un commentaire GitHub (64 Kio) \u2014 elle est dans la fiche par page du livrable._",
     pageMoreDefects: (n) => `_\u2026 et ${n} autre(s) d\xE9faut(s) distinct(s) sur cette page \u2014 voir la fiche de page dans l'artefact._`,
     noCriterionForFindings: (n) => `${n} constat(s) sur cette page ne rendent aucun crit\xE8re du r\xE9f\xE9rentiel non conforme : leur r\xE8gle sort du p\xE9rim\xE8tre d'application de chacun. Ils comptent dans les colonnes ci-dessus, et sont d\xE9taill\xE9s dans l'artefact.`
   },
@@ -61444,6 +61467,9 @@ var S = {
     pagesClamped: (n) => `_The detail of ${n} page(s) was dropped from this comment to fit GitHub's limit \u2014 the artifact carries them all._`,
     scoreboardClamped: (n) => `_${n} page(s) dropped from the table to fit GitHub's limit \u2014 the artifact carries them all._`,
     pageDefects: "Defects",
+    fullGrid: "Full grid \u2014 every criterion of the standard, page by page",
+    gridLegend: "`C` conforming \xB7 `NC` non-conforming \xB7 `\u2014` not applicable \xB7 `?` to assess",
+    gridDropped: "_The full grid does not fit in a GitHub comment (64 KiB) \u2014 it is in the deliverable's per-page sheet._",
     pageMoreDefects: (n) => `_\u2026 and ${n} more distinct defect(s) on this page \u2014 see its sheet in the artifact._`,
     noCriterionForFindings: (n) => `${n} finding(s) on this page make no criterion of the standard non-conforming: their rule falls outside every criterion's applicability. They are counted in the columns above, and detailed in the artifact.`
   }
@@ -61632,6 +61658,28 @@ function pageBlock(result, page, standard, lang, baseDir) {
   out2.push("", "</details>");
   return out2.join("\n");
 }
+function fullGridBlock(result, derived, standard, s, lang) {
+  const { rows, status } = pageGridModel(result, derived, standard, lang);
+  if (!rows.length || !derived.length) return [];
+  const cell = (v) => v.replace(/\|/g, "\\|");
+  const head = [s.criterion, ...derived.map((p) => `${cell(p.name)}${p.auth ? " \u{1F512}" : ""}`)];
+  const out2 = [
+    "<details>",
+    `<summary><b>${s.fullGrid}</b> \u2014 ${rows.length} \xD7 ${derived.length}</summary>`,
+    // GFM only renders Markdown inside <details> after a blank line.
+    "",
+    `> ${s.gridLegend}`,
+    "",
+    `| ${head.join(" | ")} |`,
+    `| ${head.map(() => "---").join(" | ")} |`
+  ];
+  for (const row of rows) {
+    out2.push(`| ${cell(row.label)} | ${derived.map((p) => GRID_MARK[status.get(row.id)?.get(p.id) ?? "manual"]).join(" | ")} |`);
+  }
+  out2.push("", "</details>");
+  return out2;
+}
+var GRID_MARK = { C: "C", NC: "NC", NA: "\u2014", manual: "?" };
 function pagesComment(result, opts = {}) {
   const standard = opts.standard ?? CORE2;
   const lang = opts.lang ?? "en";
@@ -61660,11 +61708,13 @@ function pagesComment(result, opts = {}) {
   const blocks = [...derived].sort(
     (a, b) => severityCount(b, "bloquant") - severityCount(a, "bloquant") || severityCount(b, "majeur") - severityCount(a, "majeur") || severityCount(b, "mineur") - severityCount(a, "mineur")
   ).map((p) => pageBlock(result, p, standard, lang, baseDir)).filter((b) => b !== void 0);
-  const assemble = (nBlocks2, nRows2) => {
+  const assemble = (nBlocks2, nRows2, withGrid = true) => {
     const body3 = [...scoreboardTable(result, derived.slice(0, nRows2), standard, s, lang), ""];
     if (nRows2 < derived.length) body3.push(s.scoreboardClamped(derived.length - nRows2), "");
     body3.push(...basisCaveats(result, derived, s, lang));
     if (redirected.length) body3.push(...renderRedirected(redirected, lang), "");
+    if (withGrid) body3.push(...fullGridBlock(result, derived, standard, s, lang), "");
+    else body3.push(s.gridDropped, "");
     if (blocks.length) {
       body3.push(`> ${s.pagesDetailNote}`, "");
       body3.push(...blocks.slice(0, nBlocks2).flatMap((b) => [b, ""]));
@@ -61674,9 +61724,10 @@ function pagesComment(result, opts = {}) {
   };
   let nBlocks = blocks.length;
   let nRows = derived.length;
-  while (nBlocks > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nBlocks--;
-  while (nRows > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nRows--;
-  return assemble(nBlocks, nRows);
+  if (assemble(nBlocks, nRows).length <= COMMENT_LIMIT) return assemble(nBlocks, nRows);
+  while (nBlocks > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nBlocks--;
+  while (nRows > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nRows--;
+  return assemble(nBlocks, nRows, false);
 }
 
 // src/evidence.ts

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.9.1
+  version: 5.10.0
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.9.1";
+var VERSION = "5.10.0";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -39652,6 +39652,21 @@ var SUBJECTS = {
       (e) => h(d, e, `<html lang="${attr(e, "lang") ?? ""}"> \u2014 is it present, valid, and the language of the content?`, `doclang|${attr(e, "lang") ?? ""}`)
     )
   ),
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) => docs.flatMap(
+    (d) => elementsByTag(d, "iframe", "frame").map(
+      (e) => h(
+        d,
+        e,
+        `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" \u2014 un titre de cadre est-il pr\xE9sent, et d\xE9crit-il le contenu du cadre ?`,
+        `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`
+      )
+    )
+  ),
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) => docs.flatMap(
     (d) => elementsByTag(d, "title").map((e) => h(d, e, `page="${pageOfDoc(d.file) ?? "source"}" <title>${t(e, 80)}</title>`, `doctitle|${t(e, 80)}`))
@@ -39880,6 +39895,9 @@ var PACK_SUBJECTS = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -39960,7 +39978,7 @@ var PACK_SUBJECTS = {
     "13.11": ["pointerHandlers"]
   }
 };
-var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 var subjectsForSc = (sc) => SC_SUBJECTS[sc] ?? [];
 function subjectsForPackCriterion(standard, id, scs) {
   const own = PACK_SUBJECTS[standard]?.[id];
@@ -58189,10 +58207,12 @@ function writeAdjudication(items, outDir, opts) {
   }
   return { todoPath, mdPath, verdictsPath, itemsDir, count: items.length };
 }
+var PREFILLED_CITATIONS = 3;
 function slimAdjudicationItems(items) {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    return { ...rest, evidence: [] };
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...citations.length ? { citations } : {} };
   });
 }
 function hydrateAdjudication(adj, audit2, opts = {}) {
@@ -61397,6 +61417,9 @@ var S = {
     pagesClamped: (n) => `_Le d\xE9tail de ${n} page(s) a \xE9t\xE9 retir\xE9 de ce commentaire pour tenir dans la limite de GitHub \u2014 l'artefact les porte toutes._`,
     scoreboardClamped: (n) => `_${n} page(s) retir\xE9e(s) du tableau pour tenir dans la limite de GitHub \u2014 l'artefact les porte toutes._`,
     pageDefects: "D\xE9fauts",
+    fullGrid: "Grille compl\xE8te \u2014 chaque crit\xE8re du r\xE9f\xE9rentiel, page par page",
+    gridLegend: "`C` conforme \xB7 `NC` non conforme \xB7 `\u2014` non applicable \xB7 `?` \xE0 \xE9valuer",
+    gridDropped: "_La grille compl\xE8te ne tient pas dans un commentaire GitHub (64 Kio) \u2014 elle est dans la fiche par page du livrable._",
     pageMoreDefects: (n) => `_\u2026 et ${n} autre(s) d\xE9faut(s) distinct(s) sur cette page \u2014 voir la fiche de page dans l'artefact._`,
     noCriterionForFindings: (n) => `${n} constat(s) sur cette page ne rendent aucun crit\xE8re du r\xE9f\xE9rentiel non conforme : leur r\xE8gle sort du p\xE9rim\xE8tre d'application de chacun. Ils comptent dans les colonnes ci-dessus, et sont d\xE9taill\xE9s dans l'artefact.`
   },
@@ -61444,6 +61467,9 @@ var S = {
     pagesClamped: (n) => `_The detail of ${n} page(s) was dropped from this comment to fit GitHub's limit \u2014 the artifact carries them all._`,
     scoreboardClamped: (n) => `_${n} page(s) dropped from the table to fit GitHub's limit \u2014 the artifact carries them all._`,
     pageDefects: "Defects",
+    fullGrid: "Full grid \u2014 every criterion of the standard, page by page",
+    gridLegend: "`C` conforming \xB7 `NC` non-conforming \xB7 `\u2014` not applicable \xB7 `?` to assess",
+    gridDropped: "_The full grid does not fit in a GitHub comment (64 KiB) \u2014 it is in the deliverable's per-page sheet._",
     pageMoreDefects: (n) => `_\u2026 and ${n} more distinct defect(s) on this page \u2014 see its sheet in the artifact._`,
     noCriterionForFindings: (n) => `${n} finding(s) on this page make no criterion of the standard non-conforming: their rule falls outside every criterion's applicability. They are counted in the columns above, and detailed in the artifact.`
   }
@@ -61632,6 +61658,28 @@ function pageBlock(result, page, standard, lang, baseDir) {
   out2.push("", "</details>");
   return out2.join("\n");
 }
+function fullGridBlock(result, derived, standard, s, lang) {
+  const { rows, status } = pageGridModel(result, derived, standard, lang);
+  if (!rows.length || !derived.length) return [];
+  const cell = (v) => v.replace(/\|/g, "\\|");
+  const head = [s.criterion, ...derived.map((p) => `${cell(p.name)}${p.auth ? " \u{1F512}" : ""}`)];
+  const out2 = [
+    "<details>",
+    `<summary><b>${s.fullGrid}</b> \u2014 ${rows.length} \xD7 ${derived.length}</summary>`,
+    // GFM only renders Markdown inside <details> after a blank line.
+    "",
+    `> ${s.gridLegend}`,
+    "",
+    `| ${head.join(" | ")} |`,
+    `| ${head.map(() => "---").join(" | ")} |`
+  ];
+  for (const row of rows) {
+    out2.push(`| ${cell(row.label)} | ${derived.map((p) => GRID_MARK[status.get(row.id)?.get(p.id) ?? "manual"]).join(" | ")} |`);
+  }
+  out2.push("", "</details>");
+  return out2;
+}
+var GRID_MARK = { C: "C", NC: "NC", NA: "\u2014", manual: "?" };
 function pagesComment(result, opts = {}) {
   const standard = opts.standard ?? CORE2;
   const lang = opts.lang ?? "en";
@@ -61660,11 +61708,13 @@ function pagesComment(result, opts = {}) {
   const blocks = [...derived].sort(
     (a, b) => severityCount(b, "bloquant") - severityCount(a, "bloquant") || severityCount(b, "majeur") - severityCount(a, "majeur") || severityCount(b, "mineur") - severityCount(a, "mineur")
   ).map((p) => pageBlock(result, p, standard, lang, baseDir)).filter((b) => b !== void 0);
-  const assemble = (nBlocks2, nRows2) => {
+  const assemble = (nBlocks2, nRows2, withGrid = true) => {
     const body3 = [...scoreboardTable(result, derived.slice(0, nRows2), standard, s, lang), ""];
     if (nRows2 < derived.length) body3.push(s.scoreboardClamped(derived.length - nRows2), "");
     body3.push(...basisCaveats(result, derived, s, lang));
     if (redirected.length) body3.push(...renderRedirected(redirected, lang), "");
+    if (withGrid) body3.push(...fullGridBlock(result, derived, standard, s, lang), "");
+    else body3.push(s.gridDropped, "");
     if (blocks.length) {
       body3.push(`> ${s.pagesDetailNote}`, "");
       body3.push(...blocks.slice(0, nBlocks2).flatMap((b) => [b, ""]));
@@ -61674,9 +61724,10 @@ function pagesComment(result, opts = {}) {
   };
   let nBlocks = blocks.length;
   let nRows = derived.length;
-  while (nBlocks > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nBlocks--;
-  while (nRows > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nRows--;
-  return assemble(nBlocks, nRows);
+  if (assemble(nBlocks, nRows).length <= COMMENT_LIMIT) return assemble(nBlocks, nRows);
+  while (nBlocks > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nBlocks--;
+  while (nRows > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nRows--;
+  return assemble(nBlocks, nRows, false);
 }
 
 // src/evidence.ts

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.9.1
+  version: 5.10.0
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.9.1";
+var VERSION = "5.10.0";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -39652,6 +39652,21 @@ var SUBJECTS = {
       (e) => h(d, e, `<html lang="${attr(e, "lang") ?? ""}"> \u2014 is it present, valid, and the language of the content?`, `doclang|${attr(e, "lang") ?? ""}`)
     )
   ),
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) => docs.flatMap(
+    (d) => elementsByTag(d, "iframe", "frame").map(
+      (e) => h(
+        d,
+        e,
+        `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" \u2014 un titre de cadre est-il pr\xE9sent, et d\xE9crit-il le contenu du cadre ?`,
+        `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`
+      )
+    )
+  ),
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) => docs.flatMap(
     (d) => elementsByTag(d, "title").map((e) => h(d, e, `page="${pageOfDoc(d.file) ?? "source"}" <title>${t(e, 80)}</title>`, `doctitle|${t(e, 80)}`))
@@ -39880,6 +39895,9 @@ var PACK_SUBJECTS = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -39960,7 +39978,7 @@ var PACK_SUBJECTS = {
     "13.11": ["pointerHandlers"]
   }
 };
-var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 var subjectsForSc = (sc) => SC_SUBJECTS[sc] ?? [];
 function subjectsForPackCriterion(standard, id, scs) {
   const own = PACK_SUBJECTS[standard]?.[id];
@@ -58189,10 +58207,12 @@ function writeAdjudication(items, outDir, opts) {
   }
   return { todoPath, mdPath, verdictsPath, itemsDir, count: items.length };
 }
+var PREFILLED_CITATIONS = 3;
 function slimAdjudicationItems(items) {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    return { ...rest, evidence: [] };
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...citations.length ? { citations } : {} };
   });
 }
 function hydrateAdjudication(adj, audit2, opts = {}) {
@@ -61397,6 +61417,9 @@ var S = {
     pagesClamped: (n) => `_Le d\xE9tail de ${n} page(s) a \xE9t\xE9 retir\xE9 de ce commentaire pour tenir dans la limite de GitHub \u2014 l'artefact les porte toutes._`,
     scoreboardClamped: (n) => `_${n} page(s) retir\xE9e(s) du tableau pour tenir dans la limite de GitHub \u2014 l'artefact les porte toutes._`,
     pageDefects: "D\xE9fauts",
+    fullGrid: "Grille compl\xE8te \u2014 chaque crit\xE8re du r\xE9f\xE9rentiel, page par page",
+    gridLegend: "`C` conforme \xB7 `NC` non conforme \xB7 `\u2014` non applicable \xB7 `?` \xE0 \xE9valuer",
+    gridDropped: "_La grille compl\xE8te ne tient pas dans un commentaire GitHub (64 Kio) \u2014 elle est dans la fiche par page du livrable._",
     pageMoreDefects: (n) => `_\u2026 et ${n} autre(s) d\xE9faut(s) distinct(s) sur cette page \u2014 voir la fiche de page dans l'artefact._`,
     noCriterionForFindings: (n) => `${n} constat(s) sur cette page ne rendent aucun crit\xE8re du r\xE9f\xE9rentiel non conforme : leur r\xE8gle sort du p\xE9rim\xE8tre d'application de chacun. Ils comptent dans les colonnes ci-dessus, et sont d\xE9taill\xE9s dans l'artefact.`
   },
@@ -61444,6 +61467,9 @@ var S = {
     pagesClamped: (n) => `_The detail of ${n} page(s) was dropped from this comment to fit GitHub's limit \u2014 the artifact carries them all._`,
     scoreboardClamped: (n) => `_${n} page(s) dropped from the table to fit GitHub's limit \u2014 the artifact carries them all._`,
     pageDefects: "Defects",
+    fullGrid: "Full grid \u2014 every criterion of the standard, page by page",
+    gridLegend: "`C` conforming \xB7 `NC` non-conforming \xB7 `\u2014` not applicable \xB7 `?` to assess",
+    gridDropped: "_The full grid does not fit in a GitHub comment (64 KiB) \u2014 it is in the deliverable's per-page sheet._",
     pageMoreDefects: (n) => `_\u2026 and ${n} more distinct defect(s) on this page \u2014 see its sheet in the artifact._`,
     noCriterionForFindings: (n) => `${n} finding(s) on this page make no criterion of the standard non-conforming: their rule falls outside every criterion's applicability. They are counted in the columns above, and detailed in the artifact.`
   }
@@ -61632,6 +61658,28 @@ function pageBlock(result, page, standard, lang, baseDir) {
   out2.push("", "</details>");
   return out2.join("\n");
 }
+function fullGridBlock(result, derived, standard, s, lang) {
+  const { rows, status } = pageGridModel(result, derived, standard, lang);
+  if (!rows.length || !derived.length) return [];
+  const cell = (v) => v.replace(/\|/g, "\\|");
+  const head = [s.criterion, ...derived.map((p) => `${cell(p.name)}${p.auth ? " \u{1F512}" : ""}`)];
+  const out2 = [
+    "<details>",
+    `<summary><b>${s.fullGrid}</b> \u2014 ${rows.length} \xD7 ${derived.length}</summary>`,
+    // GFM only renders Markdown inside <details> after a blank line.
+    "",
+    `> ${s.gridLegend}`,
+    "",
+    `| ${head.join(" | ")} |`,
+    `| ${head.map(() => "---").join(" | ")} |`
+  ];
+  for (const row of rows) {
+    out2.push(`| ${cell(row.label)} | ${derived.map((p) => GRID_MARK[status.get(row.id)?.get(p.id) ?? "manual"]).join(" | ")} |`);
+  }
+  out2.push("", "</details>");
+  return out2;
+}
+var GRID_MARK = { C: "C", NC: "NC", NA: "\u2014", manual: "?" };
 function pagesComment(result, opts = {}) {
   const standard = opts.standard ?? CORE2;
   const lang = opts.lang ?? "en";
@@ -61660,11 +61708,13 @@ function pagesComment(result, opts = {}) {
   const blocks = [...derived].sort(
     (a, b) => severityCount(b, "bloquant") - severityCount(a, "bloquant") || severityCount(b, "majeur") - severityCount(a, "majeur") || severityCount(b, "mineur") - severityCount(a, "mineur")
   ).map((p) => pageBlock(result, p, standard, lang, baseDir)).filter((b) => b !== void 0);
-  const assemble = (nBlocks2, nRows2) => {
+  const assemble = (nBlocks2, nRows2, withGrid = true) => {
     const body3 = [...scoreboardTable(result, derived.slice(0, nRows2), standard, s, lang), ""];
     if (nRows2 < derived.length) body3.push(s.scoreboardClamped(derived.length - nRows2), "");
     body3.push(...basisCaveats(result, derived, s, lang));
     if (redirected.length) body3.push(...renderRedirected(redirected, lang), "");
+    if (withGrid) body3.push(...fullGridBlock(result, derived, standard, s, lang), "");
+    else body3.push(s.gridDropped, "");
     if (blocks.length) {
       body3.push(`> ${s.pagesDetailNote}`, "");
       body3.push(...blocks.slice(0, nBlocks2).flatMap((b) => [b, ""]));
@@ -61674,9 +61724,10 @@ function pagesComment(result, opts = {}) {
   };
   let nBlocks = blocks.length;
   let nRows = derived.length;
-  while (nBlocks > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nBlocks--;
-  while (nRows > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nRows--;
-  return assemble(nBlocks, nRows);
+  if (assemble(nBlocks, nRows).length <= COMMENT_LIMIT) return assemble(nBlocks, nRows);
+  while (nBlocks > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nBlocks--;
+  while (nRows > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nRows--;
+  return assemble(nBlocks, nRows, false);
 }
 
 // src/evidence.ts

package/src/adjudicate-subjects.ts

@@ -496,6 +496,23 @@ export const SUBJECTS: Record<string, Subject> = {
       ),
     ),
 
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) =>
+    docs.flatMap((d) =>
+      elementsByTag(d, "iframe", "frame").map((e) =>
+        h(
+          d,
+          e,
+          `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" — un titre de cadre est-il présent, et décrit-il le contenu du cadre ?`,
+          `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`,
+        ),
+      ),
+    ),
+
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) =>
     docs.flatMap((d) =>
@@ -790,6 +807,9 @@ export const PACK_SUBJECTS: Record<string, Record<string, string[]>> = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -907,7 +927,7 @@ export const PACK_SUBJECTS: Record<string, Record<string, string[]>> = {
 // hand-written applicability predicates in src/audit.ts, which are more careful than any
 // subject here and which win outright where they exist. The pack criteria that map onto them
 // inherit the NA through the derivation, so nothing is lost by leaving them out.
-export const EXISTENCE_SUBJECTS: ReadonlySet<string> = new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+export const EXISTENCE_SUBJECTS: ReadonlySet<string> = new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 
 /** The subjects that decide a success criterion. Empty ⇒ the criterion has none declared,
  *  which `tests/harvest-coverage.test.ts` refuses for any criterion the engine hands over. */

package/src/adjudicate.ts

@@ -1446,12 +1446,33 @@ export function writeAdjudication(
  *  bulk it only has to READ. Every field the fold requires — verdict, justification, reason,
  *  findings, citations, recommendations — is kept, so a filled slim file carries a complete
  *  decision. The evidence comes back at fold time via `hydrateAdjudication`. */
+/** Representatives pre-cited in the skeleton. Three is enough to show the shape and to stand
+ *  for the population; the whole set is in the brief, and `occurrences` travels with each. */
+const PREFILLED_CITATIONS = 3;
+
 export function slimAdjudicationItems(items: AdjudicationItem[]): AdjudicationItem[] {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    // `population` and `evidenceComplete` are kept: they are two numbers, not bulk, and they
-    // tell the adjudicator how much of the subject it is actually looking at.
-    return { ...rest, evidence: [] } as AdjudicationItem;
+    // THE CITATIONS ARRIVE FILLED IN.
+    //
+    // This file is the only one a CI adjudicator writes, and it used to arrive with no evidence
+    // and no citations: clearing a criterion meant authoring
+    // `citations: [{file, line, selector, snippet}]` from scratch, by hand, cross-referencing a
+    // separate brief, once per criterion. Measured on a real run: thirty criteria came back `C`
+    // with a considered justification and no citations at all, and the fold refused every one
+    // — « a C verdict must cite at least one of the N evidence item(s) it was shown ». The
+    // agent had read the evidence. It had simply not copied an anchor into a second file.
+    //
+    // Pre-filling decides nothing. The verdict and the justification are still the agent's, and
+    // a `C` still has to survive grounding, the coverage check and the complete-evidence rule.
+    // What it removes is a transcription step that was costing correct verdicts — the same
+    // failure, one level up, as an adjudicator retyping a snippet instead of copying it.
+    //
+    // `population` and `evidenceComplete` are kept for the same reason they always were: they
+    // are two numbers, not bulk, and they tell the adjudicator how much of the subject it is
+    // actually looking at.
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...(citations.length ? { citations } : {}) } as AdjudicationItem;
   });
 }
 

package/src/annotate.ts

@@ -23,7 +23,7 @@ import { resolveMessage, resolveRemediation } from "./messages.js";
 import { findingsForStandard, packCriteriaForFinding } from "./standards/derive.js";
 import { CORE, type StandardId, isCore, loadPack } from "./standards/index.js";
 import { packReportGroups, reportCoverage, reportGroups } from "./report.js";
-import type { AuditResult, Finding, Lang, PageResult, Severity } from "./types.js";
+import type { AuditResult, Finding, Lang, PageResult, Severity, Status } from "./types.js";
 import { isUrlPath, repoRelative } from "./util.js";
 import {
   agentMarkNote,
@@ -32,6 +32,7 @@ import {
   derivePages,
   formatRate,
   pageBasisWarning,
+  pageGridModel,
   pagesOf,
   renderRedirected,
   unattributedFindings,
@@ -142,6 +143,9 @@ const S = {
       `_Le détail de ${n} page(s) a été retiré de ce commentaire pour tenir dans la limite de GitHub — l'artefact les porte toutes._`,
     scoreboardClamped: (n: number) => `_${n} page(s) retirée(s) du tableau pour tenir dans la limite de GitHub — l'artefact les porte toutes._`,
     pageDefects: "Défauts",
+    fullGrid: "Grille complète — chaque critère du référentiel, page par page",
+    gridLegend: "`C` conforme · `NC` non conforme · `—` non applicable · `?` à évaluer",
+    gridDropped: "_La grille complète ne tient pas dans un commentaire GitHub (64 Kio) — elle est dans la fiche par page du livrable._",
     pageMoreDefects: (n: number) => `_… et ${n} autre(s) défaut(s) distinct(s) sur cette page — voir la fiche de page dans l'artefact._`,
     noCriterionForFindings: (n: number) =>
       `${n} constat(s) sur cette page ne rendent aucun critère du référentiel non conforme : leur règle sort du périmètre d'application de chacun. Ils comptent dans les colonnes ci-dessus, et sont détaillés dans l'artefact.`,
@@ -196,6 +200,9 @@ const S = {
     pagesClamped: (n: number) => `_The detail of ${n} page(s) was dropped from this comment to fit GitHub's limit — the artifact carries them all._`,
     scoreboardClamped: (n: number) => `_${n} page(s) dropped from the table to fit GitHub's limit — the artifact carries them all._`,
     pageDefects: "Defects",
+    fullGrid: "Full grid — every criterion of the standard, page by page",
+    gridLegend: "`C` conforming · `NC` non-conforming · `—` not applicable · `?` to assess",
+    gridDropped: "_The full grid does not fit in a GitHub comment (64 KiB) — it is in the deliverable's per-page sheet._",
     pageMoreDefects: (n: number) => `_… and ${n} more distinct defect(s) on this page — see its sheet in the artifact._`,
     noCriterionForFindings: (n: number) =>
       `${n} finding(s) on this page make no criterion of the standard non-conforming: their rule falls outside every criterion's applicability. They are counted in the columns above, and detailed in the artifact.`,
@@ -525,6 +532,41 @@ function pageBlock(result: AuditResult, page: PageResult, standard: StandardId,
   return out.join("\n");
 }
 
+/** The whole criterion × page grid, collapsed — every criterion of the standard, and where
+ *  each page stands on it.
+ *
+ *  The scoreboard says HOW MANY criteria a page conforms to and the per-page blocks say which
+ *  ones it FAILS; between the two, the criteria a page CONFORMS to were never named. Under a
+ *  per-page norm that is most of the deliverable, and a reviewer asking « which of the 106 does
+ *  this page pass? » had to download the artifact to find out.
+ *
+ *  Drawn from `pageGridModel`, the same projection the artifact and the HTML use. A surface
+ *  that recomputes a status is a surface that will eventually disagree with the report. */
+function fullGridBlock(result: AuditResult, derived: PageResult[], standard: StandardId, s: (typeof S)[Lang], lang: Lang): string[] {
+  const { rows, status } = pageGridModel(result, derived, standard, lang);
+  if (!rows.length || !derived.length) return [];
+  const cell = (v: string): string => v.replace(/\|/g, "\\|");
+  const head = [s.criterion, ...derived.map((p) => `${cell(p.name)}${p.auth ? " 🔒" : ""}`)];
+  const out: string[] = [
+    "<details>",
+    `<summary><b>${s.fullGrid}</b> — ${rows.length} × ${derived.length}</summary>`,
+    // GFM only renders Markdown inside <details> after a blank line.
+    "",
+    `> ${s.gridLegend}`,
+    "",
+    `| ${head.join(" | ")} |`,
+    `| ${head.map(() => "---").join(" | ")} |`,
+  ];
+  for (const row of rows) {
+    out.push(`| ${cell(row.label)} | ${derived.map((p) => GRID_MARK[status.get(row.id)?.get(p.id) ?? "manual"]).join(" | ")} |`);
+  }
+  out.push("", "</details>");
+  return out;
+}
+
+/** The marks the grid draws. Same vocabulary as the per-page sheet's. */
+const GRID_MARK: Record<Status, string> = { C: "C", NC: "NC", NA: "—", manual: "?" };
+
 /** The PAGE-BY-PAGE pull-request comment.
  *
  *  A second document under a second marker, for a second tier. The digest above answers
@@ -584,11 +626,16 @@ export function pagesComment(result: AuditResult, opts: AnnotateOptions & { runU
   // document at a byte offset lands mid-row and GFM then renders a broken table. The detail
   // goes first because the scoreboard is the half that cannot be reconstructed from the
   // artifact link alone.
-  const assemble = (nBlocks: number, nRows: number): string => {
+  const assemble = (nBlocks: number, nRows: number, withGrid = true): string => {
     const body: string[] = [...scoreboardTable(result, derived.slice(0, nRows), standard, s, lang), ""];
     if (nRows < derived.length) body.push(s.scoreboardClamped(derived.length - nRows), "");
     body.push(...basisCaveats(result, derived, s, lang));
     if (redirected.length) body.push(...renderRedirected(redirected, lang), "");
+    // The full grid, folded away so the scoreboard stays what a reviewer reads first. It is
+    // the biggest thing in the document — 106 criteria × 35 pages — so it is also the first
+    // thing the size clamp gives up, WHOLE and with a line saying where to find it.
+    if (withGrid) body.push(...fullGridBlock(result, derived, standard, s, lang), "");
+    else body.push(s.gridDropped, "");
     if (blocks.length) {
       body.push(`> ${s.pagesDetailNote}`, "");
       body.push(...blocks.slice(0, nBlocks).flatMap((b) => [b, ""]));
@@ -599,7 +646,10 @@ export function pagesComment(result: AuditResult, opts: AnnotateOptions & { runU
 
   let nBlocks = blocks.length;
   let nRows = derived.length;
-  while (nBlocks > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nBlocks--;
-  while (nRows > 0 && assemble(nBlocks, nRows).length > COMMENT_LIMIT) nRows--;
-  return assemble(nBlocks, nRows);
+  // The grid goes first when it does not fit: it is the one part that is reproducible in full
+  // from the artifact, while the scoreboard and the defect blocks are not.
+  if (assemble(nBlocks, nRows).length <= COMMENT_LIMIT) return assemble(nBlocks, nRows);
+  while (nBlocks > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nBlocks--;
+  while (nRows > 0 && assemble(nBlocks, nRows, false).length > COMMENT_LIMIT) nRows--;
+  return assemble(nBlocks, nRows, false);
 }

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.9.1";
+export const VERSION = "5.10.0";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,