diff --git a/.claude/agents/class-start-scout.md b/.claude/agents/class-start-scout.md
index b186f6dba..2482c49a7 100644
--- a/.claude/agents/class-start-scout.md
+++ b/.claude/agents/class-start-scout.md
@@ -1,13 +1,13 @@
 ---
 name: class-start-scout
-description: Mechanical diff-reporting and verification-sequence execution for epic #1295 (extending gitgalaxy/core/detector.py's _CLASS_START_NAMED_EXTRACTION_LANGS allowlist). Runs tests/tools/class_start_diff.py and the tree_sitter_accuracy_audit.py/crucible_check.py/audit_check.py verification sequence, reports structured results -- it does not judge whether an extra/missing name is a real bug, decide how to fix a regex, or edit the allowlist itself. Use before a per-language triage pass (to get one language's exact extra/missing name diff without reading language_standards.py cold) and after a regex fix + allowlist flip (to run the full verification sequence and report pass/fail).
+description: Mechanical diff-reporting and verification-sequence execution for epic #1295 (extending gitgalaxy/core/detector.py's _CLASS_START_NAMED_EXTRACTION_LANGS allowlist). Runs tests/tools/class_start_diff.py and the tree_sitter_accuracy_audit.py/crucible_check.py/audit_check.py verification sequence, reports structured results -- it does not judge whether an extra/missing name is a real bug, decide how to fix a regex, or edit the allowlist itself. Use before a per-language triage pass (to get one language's exact extra/missing name diff without reading language_standards/languages/<lang>.py cold) and after a regex fix + allowlist flip (to run the full verification sequence and report pass/fail).
 tools: Bash, Read
 model: haiku
 ---
 
 You run scripts and report their output cleanly. You do not judge whether a `class_start` regex
 is buggy, decide whether an extra/missing name is a real bug versus a ground-truth scope mismatch,
-or edit `gitgalaxy/core/detector.py`/`gitgalaxy/standards/language_standards.py` yourself -- that
+or edit `gitgalaxy/core/detector.py`/`gitgalaxy/standards/language_standards/` yourself -- that
 judgment belongs to whoever asked for the scout pass (the main conversation or a case-authoring
 subagent). If something looks ambiguous, report it plainly rather than guessing what it means.
 
diff --git a/.claude/agents/strict-signature-scout.md b/.claude/agents/strict-signature-scout.md
index e288fdad7..113d10672 100644
--- a/.claude/agents/strict-signature-scout.md
+++ b/.claude/agents/strict-signature-scout.md
@@ -1,6 +1,6 @@
 ---
 name: strict-signature-scout
-description: Mechanical gap-reporting and candidate-verification for epic #1069 (hardening tests/extraction/languages/test_<lang>_strict.py). Runs tests/extraction/tools/audit_strict_coverage.py and tests/extraction/tools/verify_candidates.py and reports structured results -- it does not draft test cases or judge realism, only executes scripts and formats their output. Use before a case-writing pass (to get one language's exact gap list without loading language_standards.py cold) and after drafting candidate cases (to batch-verify them against the real compiled regex before they're written into a test file).
+description: Mechanical gap-reporting and candidate-verification for epic #1069 (hardening tests/extraction/languages/test_<lang>_strict.py). Runs tests/extraction/tools/audit_strict_coverage.py and tests/extraction/tools/verify_candidates.py and reports structured results -- it does not draft test cases or judge realism, only executes scripts and formats their output. Use before a case-writing pass (to get one language's exact gap list without loading language_standards/languages/<lang>.py cold) and after drafting candidate cases (to batch-verify them against the real compiled regex before they're written into a test file).
 tools: Bash, Read
 model: haiku
 ---
diff --git a/.claude/skills/harden-language-extraction/SKILL.md b/.claude/skills/harden-language-extraction/SKILL.md
index 2cc721dcd..a54641333 100644
--- a/.claude/skills/harden-language-extraction/SKILL.md
+++ b/.claude/skills/harden-language-extraction/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: harden-language-extraction
-description: Deepen or fix a language's structural-extraction accuracy in gitgalaxy/standards/language_standards.py (func_start/args/class_start/_dependency_capture regexes) using the epic #813 methodology. Use when the user asks to "harden extraction for X", "add strict tests for language X", "find bugs in X's parsing", or similar per-language regex-correctness work -- not for adding a brand-new language from scratch (that's how_to_add_a_language.md's LLM generation prompt) and not for the broader ReDoS/boundary-correctness rules covered there either.
+description: Deepen or fix a language's structural-extraction accuracy in gitgalaxy/standards/language_standards/languages/<lang>.py (func_start/args/class_start/_dependency_capture regexes) using the epic #813 methodology. Use when the user asks to "harden extraction for X", "add strict tests for language X", "find bugs in X's parsing", or similar per-language regex-correctness work -- not for adding a brand-new language from scratch (that's how_to_add_a_language.md's LLM generation prompt) and not for the broader ReDoS/boundary-correctness rules covered there either.
 ---
 
 Source of truth is `tests/extraction/how_to_harden_extraction.md` -- read it directly, don't work
@@ -12,7 +12,8 @@ a language-specific quirk.
 
 ## Process (translating that doc's 5-stage pipeline to this tool's Agent tool)
 
-1. **Load the target.** Read the language's full `rules` dict from `language_standards.py` and its
+1. **Load the target.** Read the language's full `rules` dict from
+   `gitgalaxy/standards/language_standards/languages/<lang>.py` and its
    existing cases in `tests/extraction/languages/test_<lang>.py` (or the old monolithic
    `test_*_extraction_strict.py` files if it hasn't migrated yet). Work one language, all four
    gauntlets, in one sitting -- not gauntlet-by-gauntlet across languages.
@@ -30,7 +31,7 @@ a language-specific quirk.
    unrealistic payload), not an automatic fix.
 5. **Fix real bugs with the full discipline**: ReDoS scaling check on any quantifier change,
    `python tests/tools/audit_check.py` (add `--regenerate` for pure line-shifts), then
-   `pytest tests/extraction/languages/test_<lang>.py`. If the fix touches `language_standards.py`,
+   `pytest tests/extraction/languages/test_<lang>.py`. If the fix touches `language_standards/`,
    `detector.py`, or `prism.py`: `python tests/tools/crucible_check.py` -- confirm any real diff is
    confined to the language(s) actually changed (check `_dependency_capture` fixes for legitimate
    cross-language DAG ripple, per the doc's note) before `--update --yes`.
diff --git a/.github/workflows/tree-sitter-accuracy-audit.yml b/.github/workflows/tree-sitter-accuracy-audit.yml
index aa071304c..f2722c56f 100644
--- a/.github/workflows/tree-sitter-accuracy-audit.yml
+++ b/.github/workflows/tree-sitter-accuracy-audit.yml
@@ -18,7 +18,7 @@ on:
     paths:
       - "gitgalaxy/core/detector.py"
       - "gitgalaxy/core/prism.py"
-      - "gitgalaxy/standards/language_standards.py"
+      - "gitgalaxy/standards/language_standards/**"
       - "tests/tools/tree_sitter_accuracy_audit.py"
       - "tests/tree_sitter_accuracy_baseline_*.json"
       - ".github/workflows/tree-sitter-accuracy-audit.yml"
@@ -63,8 +63,8 @@ jobs:
         run: |
           cd gitgalaxy
           python tests/tools/tree_sitter_accuracy_audit.py --summary-table
-          if ! git diff --exit-code -- gitgalaxy/standards/language_standards.py; then
-            echo "::error::gitgalaxy/standards/language_standards.py's summary table is stale."
+          if ! git diff --exit-code -- gitgalaxy/standards/language_standards/__init__.py; then
+            echo "::error::gitgalaxy/standards/language_standards/__init__.py's summary table is stale."
             echo "Run 'python tests/tools/tree_sitter_accuracy_audit.py --summary-table' and commit the result."
             exit 1
           fi
diff --git a/.github/workflows/tree-sitter-accuracy-history.yml b/.github/workflows/tree-sitter-accuracy-history.yml
index 4c52a9e4f..429be57ab 100644
--- a/.github/workflows/tree-sitter-accuracy-history.yml
+++ b/.github/workflows/tree-sitter-accuracy-history.yml
@@ -10,7 +10,7 @@ name: Tree-sitter Accuracy History
 # baselined language again and append one row each to
 # docs/self_scan/tree_sitter_accuracy_history.csv (an accumulating time series, unlike the
 # gitignored self-scan DB -- this is meant to be graphed later), regenerate the Markdown
-# summary table embedded in language_standards.py's docstring so it can't drift from the
+# summary table embedded in language_standards/__init__.py's docstring so it can't drift from the
 # committed baselines between now and the next manual --summary-table run, and re-render
 # docs/self_scan/tree_sitter_accuracy_chart.svg (a small-multiples bar chart of the most
 # recent history batch -- always the one this same job just appended). Opens an auto-merged
@@ -19,7 +19,7 @@ name: Tree-sitter Accuracy History
 # protection), and why the loop guard below is load-bearing.
 #
 # Adaptive by design, not just by trigger path: the trigger below fires on any push touching
-# detector.py/prism.py/language_standards.py, but not every such push actually moves a
+# detector.py/prism.py/language_standards/, but not every such push actually moves a
 # language's measured accuracy. --history itself detects that (see
 # tree_sitter_accuracy_audit.py's `_batch_matches_measured`) and skips appending a row when the
 # fresh measurement is identical to the last recorded batch -- which means --chart re-renders
@@ -34,7 +34,7 @@ on:
     paths:
       - "gitgalaxy/core/detector.py"
       - "gitgalaxy/core/prism.py"
-      - "gitgalaxy/standards/language_standards.py"
+      - "gitgalaxy/standards/language_standards/**"
       - "tests/tools/tree_sitter_accuracy_audit.py"
       - "tests/tree_sitter_accuracy_baseline_*.json"
 
@@ -44,7 +44,7 @@ permissions:
 jobs:
   tree-sitter-accuracy-history:
     # Guards against the same infinite-loop shape documented in gitgalaxy.yml's
-    # full-report job: this workflow's own bot commit touches language_standards.py and
+    # full-report job: this workflow's own bot commit touches language_standards/__init__.py and
     # the baseline-adjacent history CSV, which are both in the trigger's `paths` filter,
     # so without this it would re-trigger itself on every merge of its own PR.
     if: |
@@ -114,7 +114,7 @@ jobs:
             ${{ steps.blurbs.outputs.blurbs }}
 
             - Appends one row per language to `docs/self_scan/tree_sitter_accuracy_history.csv`.
-            - Regenerates the summary table in `gitgalaxy/standards/language_standards.py`.
+            - Regenerates the summary table in `gitgalaxy/standards/language_standards/__init__.py`.
             - Re-renders `docs/self_scan/tree_sitter_accuracy_chart.svg` from that same batch.
 
             Never touches `tests/tree_sitter_accuracy_baseline_*.json` -- those stay
@@ -124,7 +124,7 @@ jobs:
           add-paths: |
             docs/self_scan/tree_sitter_accuracy_history.csv
             docs/self_scan/tree_sitter_accuracy_chart.svg
-            gitgalaxy/standards/language_standards.py
+            gitgalaxy/standards/language_standards/__init__.py
 
       # Same rationale as gitgalaxy.yml's "Merge the LLM Brief PR" step -- nothing else
       # gates this PR, so without an explicit merge it just sits mergeable-but-unmerged.
diff --git a/.github/workflows/tri-comparison-audit.yml b/.github/workflows/tri-comparison-audit.yml
index 58434bfa3..df025c2c1 100644
--- a/.github/workflows/tri-comparison-audit.yml
+++ b/.github/workflows/tri-comparison-audit.yml
@@ -24,7 +24,7 @@ on:
     paths:
       - "gitgalaxy/core/detector.py"
       - "gitgalaxy/core/prism.py"
-      - "gitgalaxy/standards/language_standards.py"
+      - "gitgalaxy/standards/language_standards/**"
       - "tests/tools/tri_comparison_chart.py"
       - "tests/tools/tri_comparison_gatherer.py"
       - "tests/tools/tri_comparison_reconcile.py"
diff --git a/.github/workflows/tri-comparison-history.yml b/.github/workflows/tri-comparison-history.yml
index 879463953..c83d8efb2 100644
--- a/.github/workflows/tri-comparison-history.yml
+++ b/.github/workflows/tri-comparison-history.yml
@@ -16,7 +16,7 @@ name: Tri-Comparison History
 # whatever actually changed -- same mechanism gitgalaxy.yml uses for the LLM architecture brief.
 #
 # Adaptive by design, not just by trigger path: the trigger below fires on any push touching
-# detector.py/prism.py/language_standards.py, but not every such push moves a language's measured
+# detector.py/prism.py/language_standards/, but not every such push moves a language's measured
 # numbers or an existing ledger entry's counts. Unlike the tree-sitter history CSV (an
 # append-only file that needs its own _batch_matches_measured dedup check to stay a no-op), the
 # three files here are overwritten in place -- "no diff" already IS the adaptivity, so
@@ -29,7 +29,7 @@ on:
     paths:
       - "gitgalaxy/core/detector.py"
       - "gitgalaxy/core/prism.py"
-      - "gitgalaxy/standards/language_standards.py"
+      - "gitgalaxy/standards/language_standards/**"
       - "tests/tools/tri_comparison_chart.py"
       - "tests/tools/tri_comparison_gatherer.py"
       - "tests/tools/tri_comparison_reconcile.py"
diff --git a/gitgalaxy/standards/README.md b/gitgalaxy/standards/README.md
index bbf9c0bdd..4acb08fec 100644
--- a/gitgalaxy/standards/README.md
+++ b/gitgalaxy/standards/README.md
@@ -45,7 +45,7 @@ Each file in this directory serves a distinct calibration purpose for the downst
 
 * **`gitgalaxy_config.py` (Global Ingestion Firewall):** Defines Zero-Trust ingestion boundaries. It houses the Supply Chain Firewall configurations (approved vs. blacklisted imports), global file denylists, X-Ray binary scanner bypasses, and physical file-size clamps.
 * **`language_lens.py` (Identity Classifier):** The Bayesian engine that assigns definitive "Identity Locks" to files. It defines the multi-tiered confidence hierarchy, resolving extension collisions by weighing exact filename matches against Contextual Baselines.
-* **`language_standards.py` (Structural Signature Registry):** The massive, highly optimized structural mapping registry for 50+ languages. It defines exactly how to slice a language into Branch Logic, State Flux, High-Risk Execution, and Object Declarations using ReDoS-proof regular expressions.
+* **`language_standards/` (Structural Signature Registry):** A package with one file per language under `languages/` (59 today), assembled by `__init__.py` into the `LANGUAGE_DEFINITIONS` registry every downstream engine imports. Each per-language file defines exactly how to slice that language into Branch Logic, State Flux, High-Risk Execution, and Object Declarations using ReDoS-proof regular expressions; cross-language shared pieces (`LENS_CONFIG`, `PRISM_CONFIG`, the `GLOBAL_*` debt/AI-SDK detectors, `PROJECT_OVERRIDES`) live in their own sibling modules. See `how_to_add_a_language.md` for the registration mechanics.
 * **`analysis_lens.py` (Mathematical Constants & Threat Policies):** The repository of Threat Policies, Sigmoid Curve tuning, and K-Means clustering medians. It dictates how raw structural signals are mathematically converted into normalized 0-100% risk exposure vectors.
 * **`how_to_add_a_language.md` (Extension Protocol):** Contains the strict prompt engineering protocols required to generate ReDoS-proof language dictionaries using advanced LLMs, bypassing the need for manual parser development.
 
diff --git a/gitgalaxy/standards/gitgalaxy_config.py b/gitgalaxy/standards/gitgalaxy_config.py
index c178b3e73..6c153c015 100644
--- a/gitgalaxy/standards/gitgalaxy_config.py
+++ b/gitgalaxy/standards/gitgalaxy_config.py
@@ -99,7 +99,7 @@
     "yarn.lock",
     "composer.lock",
     "gitgalaxy/core/aperture.py",
-    "gitgalaxy/standards/language_standards.py",
+    "gitgalaxy/standards/language_standards/",
     "gitgalaxy/security/security_lens.py",
     "gitgalaxy/tools/network_auditing/full_api_network_map.py",
     "gitgalaxy/tools/cobol_to_cobol/cobol_schema_forge.py",
diff --git a/gitgalaxy/standards/how_to_add_a_language.md b/gitgalaxy/standards/how_to_add_a_language.md
index b89bd1b1c..2cce3f365 100644
--- a/gitgalaxy/standards/how_to_add_a_language.md
+++ b/gitgalaxy/standards/how_to_add_a_language.md
@@ -14,16 +14,32 @@ To add a new language to the Language Classifier, you will use an advanced LLM (
 ---
 
 ### Step 1: Initialize the LLM Context
-Before asking the LLM to generate the new language signatures, upload the `gitgalaxy/standards/language_standards.py` file to the chat window. Issue this exact command:
-> *"Read this file to understand how the GitGalaxy Structural Signature Analysis Engine uses bounded regex to guarantee ReDoS immunity. Pay close attention to how C++ and Python are mapped to prevent Catastrophic Backtracking."*
+`gitgalaxy/standards/language_standards/` is a package with one file per language (each a
+`DEFINITION: dict[str, Any] = {...}` literal, assembled into the `LANGUAGE_DEFINITIONS` registry
+by `__init__.py`), not a single monolithic file. Before asking the LLM to generate new language
+signatures, upload `gitgalaxy/standards/language_standards/__init__.py` plus one or two
+representative per-language files (e.g. `languages/python.py` and `languages/cpp.py`) to the chat
+window. Issue this exact command:
+> *"Read these files to understand how the GitGalaxy Structural Signature Analysis Engine uses bounded regex to guarantee ReDoS immunity, and how each language's rules dict is registered in `__init__.py`. Pay close attention to how C++ and Python are mapped to prevent Catastrophic Backtracking."*
 
 ### Step 2: Inject the Structural Signature Prompt
 Copy the **Generation Prompt** below and paste it into the LLM. Replace `[TARGET LANGUAGE]` with the exact language you want to map.
 
 ### Step 3: Register the Signatures
-1. Open `gitgalaxy/standards/language_standards.py`.
-2. Locate the `LANGUAGE_DEFINITIONS` registry.
-3. Paste the generated Python dictionary directly into the registry to instantly grant the engine native support for the new language architecture.
+1. Create `gitgalaxy/standards/language_standards/languages/<lang>.py` containing
+   `DEFINITION: dict[str, Any] = {...}` with the generated dictionary as its value (see any
+   existing file in that directory for the exact shape — license header, `import re`, and a
+   `from .._shared_patterns import ...` line only if the rules reference one of the shared
+   `GLOBAL_*` cross-language constants).
+2. In `gitgalaxy/standards/language_standards/__init__.py`, add an
+   `from .languages import <lang> as _<lang>` import (isort-sorted alphabetically among the
+   others) and a `"<lang>": _<lang>.DEFINITION,` line inside the `LANGUAGE_DEFINITIONS` dict, in
+   the same position other entries follow (insertion order is preserved end-to-end, so add new
+   languages at the end unless you have a specific reason not to).
+3. If the language's key isn't a valid Python identifier (spaces, hyphens, etc. — the only
+   existing case is `"objective-c"`, whose module is `languages/objectivec.py`), the file's own
+   module name still needs to be identifier-safe even though the dict key itself doesn't; pick a
+   concatenated or underscored slug and keep the dict key exactly as the LLM/consumers expect it.
 
 <br><br>
 
diff --git a/gitgalaxy/standards/language_standards.py b/gitgalaxy/standards/language_standards.py
deleted file mode 100644
index 751d21f85..000000000
--- a/gitgalaxy/standards/language_standards.py
+++ /dev/null
@@ -1,14587 +0,0 @@
-# ==============================================================================
-# GitGalaxy
-# Copyright (c) 2026 Joe Esquibel
-#
-# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
-# You may not use this file except in compliance with the License.
-# A copy of the license can be found in the LICENSE file in the root directory
-# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
-# ==============================================================================
-
-# galaxyscope:ignore sec_hardcoded_secrets, secrets_risk
-
-import re
-from typing import Any, TypedDict
-
-"""
-language_standards.py
-Phase 2 & 3: The Lexical Registry & Syntax Dictionaries.
-
-This file contains the compiled regular expressions, mechanical delimiters,
-and language-specific rules used to physically slice, parse, and identify
-source code across the repository.
-
-## Tree-sitter Accuracy Audit Summary
-This data is automatically generated by `tests/tools/tree_sitter_accuracy_audit.py --summary-table`
-from the committed `tests/tree_sitter_accuracy_baseline_<lang>.json` files -- do not hand-edit the
-table below, regenerate it instead (a stale table fails the tree-sitter-accuracy-audit CI check).
-The script analyzes the GitGalaxy regex engine's performance against the empirical AST
-ground truth provided by `tree_sitter_language_pack`, using the `language-crucible` corpus.
-Recall is calculated as (found / real). Precision is calculated as (found / (found + extra)).
-A language only appears once it has a committed baseline -- see docs/self_scan/tree_sitter_accuracy_history.csv
-for the same metrics tracked over time across pushes to main.
-
-<!-- TREE_SITTER_ACCURACY_TABLE:BEGIN -->
-| Language | Func Recall | Func Precision | Class Recall | Class Precision |
-| -------- | ----------- | -------------- | ------------ | --------------- |
-| Apex | 100.0% | 100.0% | 100.0% | 100.0% |
-| C | 100.0% | 99.5% | 100.0% | 100.0% |
-| Cpp | 100.0% | 100.0% | 100.0% | 100.0% |
-| Csharp | 100.0% | 100.0% | 100.0% | 100.0% |
-| Css | 100.0% | 100.0% | N/A | N/A |
-| Dart | 100.0% | 100.0% | 100.0% | 100.0% |
-| Fortran | 100.0% | 100.0% | 100.0% | 100.0% |
-| Go | 100.0% | 100.0% | 100.0% | 100.0% |
-| Groovy | N/A | 0.0% | N/A | N/A |
-| Haskell | 100.0% | 99.3% | 100.0% | 100.0% |
-| Html | 100.0% | 100.0% | N/A | N/A |
-| Java | 100.0% | 100.0% | 100.0% | 100.0% |
-| Javascript | 100.0% | 98.0% | 100.0% | 100.0% |
-| Kotlin | 100.0% | 100.0% | 100.0% | 100.0% |
-| Lua | 100.0% | 100.0% | N/A | 0.0% |
-| Makefile | 100.0% | 100.0% | N/A | N/A |
-| Matlab | 100.0% | 100.0% | N/A | N/A |
-| Objective-C | 100.0% | 99.4% | 100.0% | 100.0% |
-| Perl | 100.0% | 100.0% | 100.0% | 100.0% |
-| Php | 100.0% | 99.9% | 100.0% | 100.0% |
-| Powershell | 100.0% | 100.0% | 100.0% | 100.0% |
-| Python | 100.0% | 99.6% | 100.0% | 100.0% |
-| Ruby | 100.0% | 100.0% | 100.0% | 100.0% |
-| Rust | 100.0% | 100.0% | 100.0% | 100.0% |
-| Scala | 100.0% | 100.0% | 100.0% | 100.0% |
-| Shell | 99.8% | 97.0% | N/A | N/A |
-| Solidity | 100.0% | 94.3% | 100.0% | 100.0% |
-| Swift | 100.0% | 99.2% | 100.0% | 100.0% |
-| Tcl | 100.0% | 99.1% | N/A | N/A |
-| Typescript | 100.0% | 100.0% | 100.0% | 100.0% |
-| Zig | 100.0% | 100.0% | 100.0% | 100.0% |
-<!-- TREE_SITTER_ACCURACY_TABLE:END -->
-"""
-
-
-class LensConfig(TypedDict):
-    # LENS_CONFIG's mixed set/dict/list values were widening to
-    # Collection[object] under mypy, so every .get()/.items() call on it
-    # throughout language_lens.py errored (#431). HANDSHAKE_REGISTRY's
-    # inner dicts stay Dict[str, Any] rather than their own TypedDict --
-    # "pair" is None for two of the three current entries and a tuple for
-    # the third, and nothing here needs to type-check their contents,
-    # only LENS_CONFIG's own top-level shape.
-    COLLISION_FREQUENCIES: set[str]
-    PROSE_ANCHORS: set[str]
-    DISQUALIFIERS: dict[str, str]
-    HANDSHAKE_REGISTRY: list[dict[str, Any]]
-    THRESHOLDS: dict[str, float]
-
-
-# ------------------------------------------------------------------------------
-# 1. STRUCTURAL SIGNATURE CONFIGURATION (Language Identification & Disambiguation)
-# Consumed by: language_lens.py
-# ------------------------------------------------------------------------------
-LENS_CONFIG: LensConfig = {
-    "COLLISION_FREQUENCIES": {".inc", ".h", ".py", ".cshtml", ".c", ".y", ".m"},
-    "PROSE_ANCHORS": {
-        "README",
-        "LICENSE",
-        "LICENCE",
-        "CONTRIBUTING",
-        "CHANGELOG",
-        "AUTHORS",
-        "INSTALL",
-        "NOTICE",
-        "COPYING",
-        "TODO",
-        "FAQ",
-        "NOTES",
-        "CREDITS",
-        "HISTORY",
-        "MANIFEST",
-        "FILES",
-        "FILES2",
-        "ACKNOWLEDGEMENTS",
-        "AGREEMENT",
-        "CONTRIBUTORS",
-        "HACKING",
-        "HACKERS",
-        "AUTHOR",
-        "CHANGES",
-        "NEWS",
-        "RELEASE_NOTES",
-        "RELEASENOTES",
-        "UPGRADE",
-        "UPGRADING",
-        "VERSION",
-        "BUGS",
-        "FEATURES",
-        "ARCHITECTURE",
-        "DESIGN",
-        "GUIDE",
-        "USAGE",
-        "TUTORIAL",
-        "DOCS",
-        "CODE_OF_CONDUCT",
-        "SECURITY",
-        "SUPPORT",
-        "COPYRIGHT",
-        "PATENTS",
-        "LEGAL",
-        "THANKS",
-        "OWNERS",
-        "CODEOWNERS",
-        "MAINTAINERS",
-        "POSTAMBLE",
-        "README_BUFRLIB",
-    },
-    "DISQUALIFIERS": {
-        "single_line_only": r"(?:^\s*using\s+namespace\b|^\s*public\s+(?:class|interface)\b|<\?php)",
-        "column_sensitive": r"(?:^\s*(?:import|export)\s+\{|<html\b|<\?php|^\s*namespace\s+\w+)",
-        "c_style_comment": r"(?:<\?php|^\s*IDENTIFICATION\s*DIVISION\.)",
-        "recursive_c_style": r"(?:<\?php|<html\b|^\s*IDENTIFICATION\s*DIVISION\.)",
-        "multi_style_dash": r"(?:^\s*public\s+class\b|<\?php|<html\b)",
-        "embedded_syntax": r"^\s*IDENTIFICATION\s*DIVISION\.",
-    },
-    "HANDSHAKE_REGISTRY": [
-        {
-            "trigger": r"^[ \t]*<script\b",
-            "end": r"</script>",
-            "target": "javascript",
-            "pair": None,
-        },
-        {
-            "trigger": r"^[ \t]*<style\b",
-            "end": r"</style>",
-            "target": "css",
-            "pair": None,
-        },
-        {
-            # #1198: same drift #1183 fixed for <script>/<style> -- this
-            # was still unanchored, so a bare "asm!(" substring anywhere in
-            # a file (e.g. a Python string literal like 'asm!("nop")' in a
-            # Rust structural-signature test fixture) falsely triggered the
-            # embedded-language handshake and misrouted the rest of the
-            # file to assembly's rules. Line-anchoring it like the other
-            # two entries means real inline-asm usage (always its own
-            # statement, optionally indented) still matches while fixture
-            # data describing it as a string does not.
-            "trigger": r"^[ \t]*(?:asm!\s*\(|__asm__)",
-            "end": r"\)",
-            "target": "assembly",
-            "pair": ("(", ")"),
-        },
-    ],
-    "THRESHOLDS": {
-        "INTENSITY_FLOOR": 0.78,
-        "FLOOR_TIER_4": 0.92,
-        "PROSE_CONFIDENCE": 0.95,
-        "MIN_OUTLIER_MARGIN": 1.15,
-        "PROSE_BASELINE_SIGNAL": 3.0,
-        "HANDSHAKE_LOOKAHEAD_LIMIT": 50000,
-        "ECOSYSTEM_DOMINANCE_MIN": 0.70,
-        "TIER_4_MIN_LINES": 100,
-        "TIER_4_OUTLIER_MARGIN": 1.3,
-    },
-}
-
-
-class PrismConfigSchema(TypedDict):
-    # Same widening problem as LensConfig above: the mixed str/set/dict
-    # values were collapsing to Collection[str] under mypy, breaking every
-    # .get()/re.compile() call on PRISM_CONFIG throughout prism.py.
-    SHIELD_PATTERN: str
-    PYTHON_DOC_PATTERN: str
-    PHP_HEREDOC_PATTERN: str
-    POSITIONAL_ANCHORS: set[str]
-    THRESHOLDS: dict[str, int]
-
-
-# ------------------------------------------------------------------------------
-# 2. PRISM CONFIGURATION (Structural Refraction & String Shielding)
-# Consumed by: prism.py
-# ------------------------------------------------------------------------------
-PRISM_CONFIG: PrismConfigSchema = {
-    "SHIELD_PATTERN": r'((?<!\\)"(?:\\.|[^"\\])*"|(?<!\\)\'(?:\\.|[^\'\\])*\'|(?<!\\)`(?:\\.|[^`\\])*`)',
-    "PYTHON_DOC_PATTERN": r'(?m)^\s*(?:"""[\s\S]*?"""|\'\'\'[\s\S]*?\'\'\')',
-    "PHP_HEREDOC_PATTERN": r'<<<[ \t]*([\'"]?)([a-zA-Z_]\w*)\1[ \t]*\r?\n[\s\S]*?\n[ \t]*\2;?',
-    "POSITIONAL_ANCHORS": {"*", "C", "c", "/", "!"},
-    "THRESHOLDS": {"NESTED_PEEL_LIMIT": 500},
-}
-
-
-# ------------------------------------------------------------------------------
-# 3. UNIVERSAL DOMAIN SENSORS (Applied to ALL languages)
-# Consumed by: detector.py (LogicSplicer)
-# ------------------------------------------------------------------------------
-# ==============================================================================
-# GLOBAL LOCALIZATION DICTIONARIES (Cross-Cultural Tech Debt)
-# Consumed by: All languages in LANGUAGE_DEFINITIONS
-# ==============================================================================
-
-# --- 1. PLANNED DEBT (TODOs, WIPs, Promises) ---
-_SPACED_PLANNED = (
-    r"\b("
-    r"TODO|WIP|STUB|IMPLEMENT|@todo|"  # English
-    r"POR HACER|A IMPLEMENTAR|PENDIENTE|"  # Spanish
-    r"A FAZER|PENDENTE|TAREFA|"  # Portuguese
-    r"A FAIRE|A IMPLEMENTER|EN ATTENTE|"  # French
-    r"ZU ERLEDIGEN|MACHEN|OFFEN|IMPLEMENTIEREN|"  # German
-    r"СДЕЛАТЬ|ДОДЕЛАТЬ|ПЛАН|РЕАЛИЗОВАТЬ|"  # Russian
-    r"DA FARE|DA IMPLEMENTARE|"  # Italian
-    r"DO ZROBIENIA|DO POPRAWY|"  # Polish
-    r"TE DOEN|NOG DOEN|"  # Dutch
-    r"HARUS DIBUAT|UNTUK DIBUAT"  # Indonesian
-    r")\b"
-)
-_DENSE_PLANNED = (
-    r"(?:"
-    r"待办|未完成|将来做|需要优化|暂未实现|"  # Mandarin
-    r"後でやる|未実装|実装予定|"  # Japanese
-    r"할일|할 일|미구현|나중에|"  # Korean
-    r"करना है|बाद में|"  # Hindi (Devanagari)
-    r"للقيام به|لاحقا|يجب عمله"  # Arabic
-    r")"
-)
-GLOBAL_PLANNED_DEBT = re.compile(f"{_SPACED_PLANNED}|{_DENSE_PLANNED}", re.I)
-
-
-# --- 2. FRAGILE DEBT (Hacks, FIXMEs, Code Smells) ---
-_SPACED_FRAGILE = (
-    r"\b("
-    r"HACK|FIXME|XXX|BUG|KLUDGE|UGLY|WTF|"  # English
-    r"PARCHE|ARREGLAR|TRUCO|FEO|CHAPUZA|"  # Spanish (Chapuza = Shoddy fix)
-    r"GAMBIARRA|CONSERTAR|REPARAR|FEIO|REMENDO|"  # Portuguese (Gambiarra = Duct-tape hack)
-    r"BIDOUILLE|A CORRIGER|REPARER|MOCHE|"  # French (Bidouille = Hack)
-    r"KAPUTT|REPARIEREN|PFUSCH|MÜLL|"  # German (Pfusch = Botch job)
-    r"КОСТЫЛЬ|ИСПРАВИТЬ|УБРАТЬ|ФИКС|ГРЯЗНО|"  # Russian (Kostyl = Crutch/Workaround)
-    r"SISTEMARE|PEZZA|ORRIBILE|DA FIXARE|"  # Italian (Pezza = Patch)
-    r"OBEJŚCIE|TYMCZASOWE|NAPRAWIĆ|"  # Polish (Obejście = Workaround)
-    r"FIXEN|TIJDELIJK|LELIJK|OPLOSSING|"  # Dutch
-    r"PERBAIKI|SEMENTARA|JELEK"  # Indonesian
-    r")\b"
-)
-_DENSE_FRAGILE = (
-    r"(?:"
-    r"修复|临时代码|黑客做法|丑陋|坑|写死|硬编码|"  # Mandarin
-    r"修正|ハック|一時的|汚い|やばい|"  # Japanese
-    r"수정|임시|꼼수|버그|"  # Korean
-    r"जुगाड़|ठीक करना|अस्थाई|"  # Hindi (Jugaad = Hack/Workaround)
-    r"مؤقت|إصلاح|ترقيع"  # Arabic (Tarqie = Patching/Hacking)
-    r")"
-)
-GLOBAL_FRAGILE_DEBT = re.compile(f"{_SPACED_FRAGILE}|{_DENSE_FRAGILE}", re.I)
-
-
-# --- 3. AI / LLM & ML SDK DETECTION (split by SIGNAL_SCHEMA category) ---
-# Mirrors GLOBAL_PLANNED_DEBT/GLOBAL_FRAGILE_DEBT: compiled once here and
-# referenced identically by every language block that wants it, instead of
-# being hand-pasted per-language (see #322).
-_IMPORT_WRAPPER = r"\b(?:import|require|from)\b.*?(?:{names})\b"
-
-_LLM_API_NAMES = r"openai|anthropic"
-_LLM_ORCHESTRATOR_NAMES = r"langchain|llama_index"
-_LLM_VECTOR_STORE_NAMES = r"chromadb|pinecone"
-_ML_TRADITIONAL_NAMES = r"sklearn"
-_DL_FRAMEWORKS_NAMES = r"tensorflow|torch|keras"
-
-GLOBAL_LLM_API = re.compile(_IMPORT_WRAPPER.format(names=_LLM_API_NAMES))
-GLOBAL_LLM_ORCHESTRATOR = re.compile(_IMPORT_WRAPPER.format(names=_LLM_ORCHESTRATOR_NAMES))
-GLOBAL_LLM_VECTOR_STORE = re.compile(_IMPORT_WRAPPER.format(names=_LLM_VECTOR_STORE_NAMES))
-GLOBAL_ML_TRADITIONAL = re.compile(_IMPORT_WRAPPER.format(names=_ML_TRADITIONAL_NAMES))
-GLOBAL_DL_FRAMEWORKS = re.compile(_IMPORT_WRAPPER.format(names=_DL_FRAMEWORKS_NAMES))
-
-# A `<script>` whose `type` attribute is any of these carries NO executable logic
-# -- a browser treats every `type` outside the JS-MIME / `module` / bare set as an
-# inert data block and never runs it. Real corpus cases: reveal.js
-# `text/template` slide samples (literal `function` text shown as a code listing),
-# `x-shader/x-vertex` / `x-shader/x-fragment` GLSL sources, `math/tex` (MathJax),
-# JSON `application/ld+json`. GitGalaxy's polyglot detector must not descend into
-# them and its html `func_start` must not anchor a function-analog on them (#2492).
-# The list is the denylist complement of tree_sitter_accuracy_audit.py's own
-# `_EXECUTABLE_SCRIPT_TYPES` allowlist -- keep the two in sync.
-_HTML_NONEXECUTABLE_SCRIPT_TYPES = (
-    r"text/template|text/x-template|text/x-handlebars-template|text/html|"
-    r"application/json|application/ld\+json|x-shader/x-[a-z]+|math/tex"
-)
-# Matches a `<script ...>` OPEN TAG carrying a non-executable `type`. Used by
-# detector.py's Mode B slicer to drop such a match after `_build_brace_safe_stream`
-# has blanked the quoted `type` value out of the stream `func_start` is matched
-# against (so `func_start`'s own negative lookahead below can't see it there).
-# `[^>]*` stays inside the tag (Rule 5 negated class); one unbounded quantifier.
-HTML_NONEXECUTABLE_SCRIPT_TAG = re.compile(
-    r"<script\b[^>]*?\btype[ \t\n\r\f]*=[ \t\n\r\f]*[\"']?(?:" + _HTML_NONEXECUTABLE_SCRIPT_TYPES + r")",
-    re.IGNORECASE,
-)
-
-# ------------------------------------------------------------------------------
-# 4. LANGUAGE DEFINITIONS (The Structural Signature Matrix)
-# Consumed by: detector.py, language_lens.py, prism.py
-# ------------------------------------------------------------------------------
-LANGUAGE_DEFINITIONS: dict[str, Any] = {
-    "python": {
-        "_meta": {
-            "target_version": "Python 3.14",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "6.30",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy formats, typed stubs, Cython, and build-tooling dialects.
-        "extensions": [
-            ".py",
-            ".py3",
-            ".py2",
-            ".pyw",
-            ".pyi",
-            ".pyx",
-            ".pxd",
-            ".pxi",
-            ".pyz",
-            ".pyzw",
-            ".bzl",
-            ".gyp",
-            ".gypi",
-            ".vpython",
-            ".vpython3",
-            ".rpy",
-            ".smk",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": [
-            "setup.py",
-            "SConstruct",
-            "SConscript",
-            "BUCK",
-            "BUILD",
-            "wscript",
-            "Snakefile",
-        ],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
-        "discriminators": [
-            ".py",
-            "requirements.txt",
-            "pyproject.toml",
-            "Pipfile",
-            "Pipfile.lock",
-            "tox.ini",
-            "poetry.lock",
-            "setup.cfg",
-        ],
-        "internal_discriminator": re.compile(
-            r"^[ \t]*(?:import|from)\s+(?:subprocess|multiprocessing|threading|requests|pandas|numpy|django|flask|fastapi|sqlalchemy|boto3|httpx|matplotlib|scipy|tensorflow|torch)\b",
-            re.M,
-        ),
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["python", "python3", "python2", "pypy", "pypy3", "jython"],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Uses '#' for line-level literature; multi-line literature
-        # (docstrings) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Includes match/case (3.10+) and logical short-circuits. EXCLUDES exceptions.
-            "branch": re.compile(r"\b(if|elif|else|for|while|with|try|finally|match|case|and|or)\b"),
-            # 2. args (Parameters / Coupling)
-            # Signatures for def/lambda. Bounded generics and params [^)]*.
-            # RULE 11 FIX (epic #813/#818): the PEP 695 (3.12+) generic-parameter step-over was a
-            # flat `[^\]]*`, truncating at the FIRST `]` and breaking any type param with a
-            # nested-bracket bound (e.g. `def Foo[T: Sequence[int]](x: T) -> T:`, a realistic bounded
-            # generic). Widened to the established one-level-nesting idiom (square-bracket variant).
-            # #1199: the parameter list is now captured in its own group
-            # (group 1 for def/lambda-with-parens, group 2 for bare
-            # lambda params) instead of only ever being reachable via
-            # group(0), which used to include the "def name"/"lambda"
-            # keyword prefix -- that prefix supplied a spurious extra
-            # whitespace-split token that overcounted every zero/one-arg
-            # signature by +1 downstream in detector.py's args-counter.
-            # Group 1's body also steps over one level of nested parens
-            # (the same bounded one-level-nesting idiom RULE 11 already
-            # uses for square brackets above) so a default value that's
-            # itself a call, e.g. `def f(x=foo(1, 2), y=3):`, doesn't
-            # truncate the capture at the default's own closing paren and
-            # silently drop every parameter after it.
-            "args": re.compile(
-                r"(?:async[ \t]+)?def[ \t]+(\w+)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|"
-                r"\blambda\b[ \t]*([^:]*):|"
-                r"^[ \t]*cp?def[ \t]+(?!(?:class|struct|enum|union|extern|packed|fused)\b)"
-                r"(?:(?:inline|public|readonly|api)[ \t]+){0,3}"
-                r"(?:(?:[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*|\{\{[ \t]*[A-Za-z_]\w*[ \t]*\}\})[ \t]+){0,2}"
-                r"\*{0,2}[ \t]*(\w+)[ \t]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: _private (encapsulation) and Final (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(def|class|return|import|from|as|pass|continue|break|await|assert|del|global|nonlocal|type)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Anchors executable logic. Steps safely over decorators.
-            # RULE 11 FIX (epic #813/#818): see args' comment above -- same PEP 695 nested-bracket
-            # gap, same fix (widened generic-parameter step-over).
-            # tri-comparison-ledger-sweep (2026-08-20): second alternative adds Cython's
-            # `cdef`/`cpdef` module-level function definitions (`.pyx`/`.pxd`/`.pxi` are
-            # deliberately routed to "python" -- see `extensions` above -- for exactly this
-            # comprehensive-Cython-surface reason). These have no `def` keyword at all
-            # (`cdef int _allocate_buffer(array self) except -1:`), so the first alternative
-            # never saw them -- confirmed as a real, complete recall gap (68 real functions
-            # across `cython/MemoryView.pyx`/`.pxd` in the crucible corpus, ctags-corroborated,
-            # 0 found by GitGalaxy). Excludes `cdef class`/`struct`/`enum`/`union`/`extern`/
-            # `packed`/`fused` up front (declarations, not functions -- `class_start` above
-            # already owns `cdef class`) and tolerates up to 2 return-type words plus an
-            # optional pointer star before the name (`cdef char *pybuffer_index(...)`), mirroring
-            # the same bounded-repetition discipline as the decorator step-over rather than an
-            # unbounded quantifier. A bare `cdef`-prefixed variable/attribute declaration (no
-            # trailing `(` on the same line, e.g. `cdef bint broadcasting`) never matches either
-            # branch since both require the literal `(` to close the match.
-            # tri-comparison-ledger-sweep follow-up (2026-08-21): a return-type token can also be
-            # a Cython Tempita codegen placeholder (`cdef {{memviewslice_name}} *get_slice_from_
-            # memview(...)`, cython/MemoryView.pyx -- Cython's own source templates specialized
-            # copies of this file per element type). The plain-identifier alternative can't start
-            # with `{`, so this was the one remaining real function this rule missed on the
-            # crucible corpus. Added as a second, bounded alternative in the same repeated
-            # return-type group (`\{\{...\}\}`, one identifier only -- no nested unbounded
-            # quantifier, same ReDoS discipline as everything else in this rule).
-            "func_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}(?:async[ \t]+)?def[ \t]+\w+(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*\("
-                r"|"
-                r"^[ \t]*cp?def[ \t]+(?!(?:class|struct|enum|union|extern|packed|fused)\b)"
-                r"(?:(?:inline|public|readonly|api)[ \t]+){0,3}"
-                r"(?:(?:[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*|\{\{[ \t]*[A-Za-z_]\w*[ \t]*\}\})[ \t]+){0,2}"
-                r"\*{0,2}[ \t]*\w+[ \t]*\(",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # RULE 11 FIX (epic #813/#818): same PEP 695 nested-bracket gap as func_start/args above,
-            # here it silently dropped the base-class capture (group 2) rather than failing the whole
-            # match, since the class NAME (group 1) is captured before the generic step-over -- an
-            # easy miss for the same reason java's #816 class_start bug was (name looks fine,
-            # inheritance info silently vanishes).
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}(?:cdef[ \t]+|cpdef[ \t]+)?class[ \t]+([a-zA-Z_]\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?(?:[ \t]*\(([^)]*)\))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|except(?:\*)?|finally|assert|isinstance|issubclass|hasattr|getattr|dataclass|BaseModel|Field|TypeGuard|override)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Swallowed errors, wildcard imports, and Any bypasses.
-            "safety_bypasses": re.compile(
-                r"\bpass\b[ \t]*$|except\s*[:(]|except\s+(?:Base)?Exception|from\s+[\w.]+\s+import\s+\*|#\s*type:\s*ignore|\b(Any|cast)\b|=\s*\[\s*\]|=[ \t]*\{\s*\}",
-                re.M,
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and un-sanitized deserialization. EXCLUDES TODO/print.
-            "high_risk_execution": re.compile(
-                r"\b(eval|exec|subprocess\.(?:call|Popen|run)|os\.system|pickle\.loads?|yaml\.unsafe_load|shell=True)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(open|requests|httpx|aiohttp|boto3|os\.|sys\.|pathlib|socket|sqlalchemy|psycopg2?|asyncpg)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Implicit public defaults (undercased root definitions) + explicit __all__.
-            "api": re.compile(
-                r"^[ \t]*(?:async[ \t]+)?def\s+[^_]\w+|^[ \t]*class\s+[^_]\w+|^__all__[ \t]*=|@(?:app|router|blueprint)\.(?:get|post|put|delete)",
-                re.M,
-            ),
-            # 11. flux (State Mutation)
-            # State mutation. Includes Walrus operator and collection mutators.
-            "state_mutation": re.compile(
-                r"\bglobal\b|\bnonlocal\b|\b(?:self|cls)\.\w+[ \t]*=|:=|(?:\.\w+)?\.(?:append|extend|update|pop|remove|insert|clear)\s*\("
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"#[ \t]*(?:def|class|import|if|for|while|try|return)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(
-                r'"""|\'\'\'|:param|:return|:raises|:type|\b(?:Args|Returns|Yields|Raises|Attributes):\b'
-            ),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(r"\b(unittest|pytest|TestCase|fixture|patch)\b|def[ \t]+test_|\bassert\b|\bMock\b"),
-            # --- PHASE 3: SPECIALIZED SENSORS (Architecture & Hidden Complexity) ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|asyncio|threading|multiprocessing|ThreadPoolExecutor|TaskGroup|gather|create_task)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r"\b(streamlit|django\.shortcuts|flask\.render_template|gradio|dash|fasthtml|jinja2|render)\b"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"\blambda\b"),
-            # 18. globals (Global / Shared State)
-            # BUG FIX: `globals\(\)`/`locals\(\)` both end on `)`
-            # (non-word), so the shared trailing \b could never fire --
-            # whatever follows a function call (`;`, a newline, `.method`,
-            # end of string) is never a word character. Neither builtin
-            # ever matched in any real usage.
-            "globals": re.compile(r"\b(?:os\.environ|sys\.argv|sys\.path)\b|\bglobals\(\)|\blocals\(\)"),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"^[ \t]*@[\w.]+", re.M),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(
-                r"\b(List|Dict|Set|Tuple|Optional|Union|TypeVar|Generic|Any|Callable|Mapping)\b\[[^\]]*\]|\b(list|dict|set|tuple|type)\[[^\]]*\]|->"
-            ),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Was `\.(?:map|filter|reduce|...)\s*\(` -- JavaScript's Array-method
-            # idiom, copy-pasted in by mistake (that pattern correctly belongs
-            # to javascript/typescript's own comprehensions rule, not this
-            # one). Python doesn't have `.map(`/`.filter(` as builtin list
-            # methods; it has comprehension syntax (`[x for x in y]`,
-            # `{k: v for k, v in items}`, generator expressions). The old
-            # pattern never matched a single real Python comprehension and
-            # only fired incidentally on unrelated methods that happen to
-            # share a name (e.g. a Django queryset's `.filter(active=True)`).
-            # Matches embedded_python's (correct, already ReDoS-bounded)
-            # comprehension pattern.
-            "comprehensions": re.compile(
-                r"\[[^\]]{0,500}\bfor\b[^\]]{0,500}\]|\{[^}]{0,500}\bfor\b[^}]{0,500}\}|\([^)]{0,500}\bfor\b[^)]{0,500}\)"
-            ),
-            "scientific": re.compile(r"\b(?:import|require|from)\b.*?(?:numpy|pandas|scipy|matplotlib|opencv|cv2)\b"),
-            "hardware_bridge": re.compile(
-                r"\b(?:import|require|from)\b.*?(?:serialport|usb|bluetooth|socket\.io|websocket|printer|webgl)\b"
-            ),
-            "cryptography": re.compile(
-                r"\b(?:import|require|from)\b.*?(?:crypto|bcrypt|x509|tls|ssl|jsonwebtoken|argon2)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Metaprogramming and class-level binding.
-            "reflection_metaprogramming": re.compile(
-                r"__(?:getattr|setattr|del|call|new|metaclass|dict|dir|import)__|@(?:staticmethod|classmethod|property)|\b(?:getattr|setattr|inspect\.)\b"
-            ),
-            # --- AI & LLM SDK SENSORS (GLOBAL_, see #322) ---
-            "llm_api": GLOBAL_LLM_API,
-            "llm_orchestrator": GLOBAL_LLM_ORCHESTRATOR,
-            "llm_vector_store": GLOBAL_LLM_VECTOR_STORE,
-            "ml_traditional": GLOBAL_ML_TRADITIONAL,
-            "dl_frameworks": GLOBAL_DL_FRAMEWORKS,
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r"\b(?:from[ \t]+[a-zA-Z0-9_.]+[ \t]+import\b|import[ \t]+[a-zA-Z0-9_., \t]+|\b__import__[ \t]*\(|\bimportlib\.import_module[ \t]*\()",
-                re.M,
-            ),
-            "_dependency_capture": re.compile(
-                r"\bfrom[ \t]+([a-zA-Z0-9_.]+)[ \t]+import\b|"
-                r"\bimport[ \t]+([a-zA-Z0-9_.]+(?:[ \t]*,[ \t]*[a-zA-Z0-9_.]+)*)|"
-                r"\b(?:__import__|importlib\.import_module)\s*\(\s*['\"]([a-zA-Z0-9_.]+)['\"]",
-                re.M,
-            ),
-            "_named_token_capture": re.compile(r"^[ \t]*from\s+[\w.]+\s+import\s+([^({\n]+)", re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:__author__[ \t]*=|Author:|Created by:)\s*(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(render_template|HttpResponse|JSONResponse|TemplateResponse|WSGIApplication|ASGIApplication)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(
-                r"\b(Signal|receiver|post_save|pre_save|asyncio\.Event|EventDispatcher|emit|send|blinker)\b"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"\b(Depends|Provide|Inject|Container|dependency_injector|fastapi\.Depends)\b"
-            ),
-            # 34. macros
-            "macros": None,  # Python lacks a C-style preprocessor.
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": re.compile(r"\b(ctypes\.POINTER|c_void_p|byref)\b"),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": None,  # Managed by GC.
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(logging|logger|structlog|sentry_sdk|datadog|loguru)\.(?:info|error|warn|warning|debug|trace|log|exception|critical)\b"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(print|input)\s*\("),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\b(int|str|float|list|dict|set|tuple|bool|bytes|cast)\b\s*\("),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(raise|quit|exit|sys\.exit|abort)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(time\.sleep|asyncio\.sleep|Thread\.join)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(Lock|RLock|Semaphore|BoundedSemaphore|Event|Condition|Barrier)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(Final|frozenset|mappingproxy|immutable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(close|__exit__|del|shutdown|cleanup)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Captures protected/private members via underscore convention.
-            "encapsulation": re.compile(r"\b_[a-zA-Z_]\w*\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(on_event|add_listener|subscribe|callback|handler)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(pytest\.mark\.skip|unittest\.skip|mock\.|MagicMock)\b"),
-            # --- NEW: ADVANCED ALGORITHMIC SENSORS ---
-            "lazy_evaluation": re.compile(r"\b(yield|yield\s+from|Generator|AsyncGenerator|Iterator|AsyncIterator)\b"),
-            "vectorized_math": re.compile(
-                r"\b(einsum|matmul|tensordot|vdot|bmm)\b|\.dot\s*\(|(?<=[a-zA-Z0-9_\]\)])\s*@\s*(?=[a-zA-Z0-9_\[\(])"
-            ),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Python Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(pickle\.loads?|pickle\.Unpickler|marshal\.loads?|ast\.literal_eval)\b"
-            ),
-            "regex_execution": re.compile(r"\b(re\.compile|re\.search|re\.match|re\.sub|re\.findall|re\.split)\b"),
-            "time_date_logic": re.compile(r"\b(datetime\.datetime|timedelta|time\.sleep|time\.time|calendar)\b"),
-            "ipc_rpc_bridges": re.compile(r"\b(multiprocessing|subprocess|xmlrpc|socketserver)\b"),
-            # --- PHASE 4: APPSEC & AI SENSORS (Zero-Trust Pipelines) ---
-            "memory_scraping": re.compile(r"['\"]/proc/['\"]\s*\+\s*(?:str\([^)]*\)|f?['\"]\{[^}]*\})|/proc/\w+/mem"),
-            "exfiltration_camouflage": re.compile(
-                r"\b(requests\.post|urllib\.request|httpx\.post)\s*\([^)]*(?:checkmarx|telemetry|metrics|audit|log)\b",
-                re.I,
-            ),
-        },
-    },
-    "javascript": {
-        "_meta": {
-            "target_version": "ES2025 / React 19 / Node 22+",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy server-side formats, UI extensions, and embedded scripts.
-        "extensions": [
-            ".js",
-            ".mjs",
-            ".cjs",
-            ".jsx",
-            ".es6",
-            ".es",
-            ".pac",
-            ".sjs",
-            ".ssjs",
-            ".xsjs",
-            ".xsjslib",
-            ".jsm",
-            "._js",
-            ".bones",
-            ".gs",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": ["Jakefile"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
-        "discriminators": [
-            ".js",
-            "package.json",
-            "package-lock.json",
-            "yarn.lock",
-            "pnpm-lock.yaml",
-            "bower.json",
-            ".eslintrc",
-            ".prettierrc",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["node", "nodejs", "deno", "bun", "zx", "phantomjs", "casperjs"],
-        # UPGRADED: Maps to Family 1 (Standard C)
-        # Rationale: Uses '//' for line-level literature; multi-line literature
-        # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES throw (bailout_hits).
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|while|do|catch|finally|continue|break|try)\b|&&|\|\||\?|\?\?"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks. Bounded to prevent ReDoS on massive positional/destructured sets.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE GHOST ARGS SHIELD (JAVASCRIPT) ]
-                # JS class methods (e.g., `TargetFunc(config) {`) lack the `function` keyword.
-                # Without an anchor, the engine hallucinated standard invocations as definitions.
-                # FIX 1 (Invocation Shield): Injected `(?=[ \t\n]*\{)` at the end of the class
-                # method branch, demanding structural proof that the signature opens a logic block.
-                # FIX 2 (Control Flow Shield): `while (i < 10) {` structurally mimics a method.
-                # Injected `(?!(?:if|for|while|switch|catch|return)\b)` to prevent reserve words
-                # from being mapped as method names.
-                # FIX 3 (Quadratic Blowup Shield): The arrow-function branch's identifier
-                # match used an unbounded `[\w$]*`. On a long line with no `=>` at all
-                # (e.g. a single massive minified/obfuscated line), the engine retried the
-                # greedy-then-backtrack identifier match at every starting position,
-                # producing O(n^2) time (empirically: ~3.5s at 20,000 chars, scaling
-                # quadratically from there). Bounded to {0,100} -- real identifiers don't
-                # get remotely that long -- per this doc's own "strict numeric clamps"
-                # rule; possessive quantifiers (`*+`) would be cleaner but aren't
-                # available until Python 3.11, and this package supports 3.9+.
-                # =====================================================================
-                # GENERATOR METHOD FIX (epic #813/#814): the class-method branch had no
-                # allowance for the leading `*` ES6 generator method shorthand uses
-                # (`*foo(a, b) {}`, `async *foo(a, b) {}`) -- same gap already fixed in
-                # func_start for this language. Deliberately NO whitespace tolerance
-                # between `*` and the name (unlike the other modifier gaps): a real
-                # generator method always hugs the star to the name with zero space
-                # (Prettier/every real formatter), and allowing whitespace there let a
-                # JSDoc comment continuation line (`* A (storage) buffer...` -- the `*`
-                # is the comment marker, "A" is prose) false-positive-match as a
-                # generator method named "A" -- caught empirically via crucible_check.py
-                # against real corpus code (threejs), not by any test case alone.
-                # #1209: parameter-list span wrapped in its own capture group
-                # in all three branches (was only reachable via group(0), the
-                # whole match including the "function"/"static"/name prefix)
-                # so detector.py's counter isolates just the real parameter
-                # text -- the whole-match fallback overcounted every zero/
-                # one-arg signature by +1 the same way Python's did (#1199).
-                # Name groups added to branches 1/3 too, purely so existing
-                # extraction tests keep passing.
-                r"(?:"
-                r"\b(?:async[ \t\n]+)?function[ \t\n]*\*?[ \t\n]*(\w*)[ \t\n]*(\([^)]*\))|"
-                r"(\([^)]*\)|[a-zA-Z_$][\w$]{0,100})[ \t\n]*=>|"
-                r"^[ \t]*(?:static[ \t\n]+)?(?:async[ \t\n]+)?(?:get[ \t\n]+|set[ \t\n]+)?\*?(?!(?:if|for|while|switch|catch|return)\b)(#?[a-zA-Z_$][\w$]*)[ \t\n]*(\([^)]*\))(?=[ \t\n]*\{)"
-                r")",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural declaration boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(let|var|import|export|return|class|extends|super|await|delete|yield)\b|=>"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Uses positive lookaheads (?=) to stop the match exactly at the identifier name.
-            # Captures standard functions, namespace assignments (foo.bar = function),
-            # object literal methods (foo: function), and ES6 methods.
-            "func_start": re.compile(
-                r"(?:"
-                r"\b(?:async\s+)?function\s*\*?\s+[a-zA-Z_$][\w$]*(?=\s*\()|"
-                # =====================================================================
-                # [ THE VERTICAL ASSIGNMENT SHIELD ] (Hard-learned lesson from Pathological Fuzzer)
-                # PURPOSE: JavaScript developers frequently format complex asynchronous
-                # fat-arrow functions across multiple lines (e.g., `export const \n foo \n = \n async () =>`).
-                # THE FIX: We replaced horizontal-only spaces `[ \t]*` with `[ \t\n]*`
-                # around the `=` and `:` assignment operators, as well as the `=>` arrow.
-                # This allows the lookahead to safely cross vertical line breaks without
-                # resorting to an unbounded `\s*` which causes ReDoS.
-                # =====================================================================
-                r"(?:^|(?<=[^<>(,\s]))[ \t\n]*(?<!\.\.\.)\b[a-zA-Z_$][\w$]*(?:\[[^\]\n]+\])?(?=[ \t\n]*=[ \t\n]*(?:async\s*)?(?:function(?:\s*\*)?\b|\([^)]*\)[ \t\n]*(?::[^=;]+)?[ \t\n]*=>|[a-zA-Z_$][\w$]*[ \t\n]*=>))|"
-                r"^[ \t]*(?:\[[^\]\n]+\]|[a-zA-Z_$][\w$]*)(?=[ \t\n]*:[ \t\n]*(?:async\s*)?(?:function(?:\s*\*)?\b|\([^)]*\)[ \t\n]*(?::[^=;]+)?[ \t\n]*=>|[a-zA-Z_$][\w$]*[ \t\n]*=>))|"
-                # GENERATOR METHOD FIX (epic #813/#814): class/object-literal generator
-                # methods (`*foo() {}`, `async *foo() {}`, `static *foo() {}`) were
-                # completely invisible -- this branch had no allowance for the leading
-                # `*` that ES6 generator method shorthand uses (unlike the plain
-                # `function*` declaration branch above, which already had `\*?`).
-                # Deliberately NO whitespace tolerance between `*` and the name: a real
-                # generator method always hugs the star to the name with zero space
-                # (every real formatter), and allowing whitespace there let a JSDoc
-                # comment continuation line (`* A (storage) buffer...` -- the `*` is the
-                # comment marker, "A" is prose) false-positive-match as a generator
-                # method named "A" -- caught empirically via crucible_check.py against
-                # real corpus code (threejs), not by any test case alone.
-                # #1221: the trailing lookahead used to be just `(?=\s*\()`
-                # -- proof a `(` follows, nothing more -- so any bare call
-                # statement starting a line (`next();`) false-positive-
-                # matched as a method definition, the exact defect class
-                # this file's own `args` regex already named and fixed for
-                # this identical branch shape ("Invocation Shield",
-                # `(?=[ \t\n]*\{)`). Mirrored here: now requires the
-                # (non-nested, same bound as `args`) parameter list to
-                # actually close and be followed by a real body opener.
-                # `(?:=>[ \t\n]*)?` before the `{` is NOT real JS method
-                # syntax (methods never have `=>` between params and body)
-                # -- it exists solely to keep matching the ALREADY-
-                # documented, deliberately-NOT-fixed harder ambiguity
-                # (`describe('x', () => {`-shaped call-with-inline-callback
-                # statements, see the known_limitation test right below)
-                # working the same as before; only a bare statement with
-                # neither `{` nor `=>` anywhere (e.g. `next();`) is newly
-                # rejected.
-                r"^[ \t]*(?:static[ \t\n]+)?(?:async[ \t\n]+)?(?:get\s+|set\s+)?\*?(?!(?:if|for|while|switch|catch|return|throw|new|typeof|jQuery|function)\b|\$)#?[a-zA-Z_$][\w$]*(?=[ \t\n]*\([^)(]*\)[ \t\n]*(?::[^{=;]+)?[ \t\n]*(?:=>[ \t\n]*)?\{)"
-                r")",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]+){0,5}(?:export[ \t]+)?(?:default[ \t]+)?class\s+([a-zA-Z_$][\w$]*)(?:\s+extends\s+([a-zA-Z_$][\w$.]*))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|typeof|instanceof|Array\.isArray|Number\.(?:isFinite|isNaN)|Object\.hasOwn)\b|===|!==|\?\?|\?\."
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Loose equality and bypasses. (?<![=!]) on the == branch: without
-            # it, `===`/`!==` (strict equality/inequality -- explicitly SAFE
-            # per this language's own `safety` rule) both still matched via
-            # their trailing `==` substring at a shifted offset.
-            "safety_bypasses": re.compile(r"(?<![=!])==(?!=)|!=(?!=)|\b(with|void)\b|eslint-disable|@ts-nocheck"),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Catastrophic vulnerabilities. EXCLUDES console.log (print_hits) and TODO (debt).
-            "high_risk_execution": re.compile(
-                r"\b(eval|document\.write|innerHTML|outerHTML|dangerouslySetInnerHTML|debugger|alert|process\.exit)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(fetch|axios|http|https|fs|path|database|sql|localStorage|sessionStorage|indexedDB|document\.cookie|XMLHttpRequest|child_process)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Exposure surface. Explicit exports + implicit architectural defaults.
-            "api": re.compile(r"\b(export|module\.exports|exports\.)\b|@(Controller|Resolver|Get|Post|Put|Delete)\b"),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES const (freeze_hits).
-            "state_mutation": re.compile(
-                r"\b(let|var|this\.|setState|mut|push|pop|shift|unshift|splice|sort|reverse|\.current[ \t]*=|\.set\(|\.delete\(|\.add\()\b"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"//[ \t]*(?:if|for|while|function|class|return|var|const|let|import)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"/\*\*|@param|@return|@throws|@deprecated|@typedef|@type|@template"),
-            # 14. test (Testing & Assertions)
-            # (?<!\.) on the it|test alternation: TypeScript's near-identical rule
-            # already carries this guard so `myRegex.test('x')` (a regex method
-            # call) isn't miscounted as a test-framework call -- JavaScript's own
-            # rule never got the same fix despite the identical ambiguity.
-            "test": re.compile(
-                r"\b(describe|expect|assert|beforeEach|afterEach|jest|mocha|vitest|cy\.)\b|(?<!\.)\b(?:it|test)\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|Promise|requestAnimationFrame|setImmediate|setTimeout|setInterval|queueMicrotask|Worker|postMessage)\b|\.then\(|\.catch\("
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r'<[A-Z]\w+|className=|use(?:State|Effect|Context|Reducer|Ref|Memo|Callback|Transition)|props\.|this\.state|document\.(?:getElementById|querySelector|addEventListener)|["\']use\s+(?:client|server)["\']'
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"=>[ \t]*\{|\(\)[ \t]*=>|function\s*\([^)]*\)[ \t]*\{"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(r"\b(window\.|global\.|process\.env|document\.|navigator\.|self\.|globalThis\.)\b"),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"@\w+"),
-            # 20. generics (Generics / Type Parameters)
-            # Simulated/JSDoc generics in JS.
-            "generics": re.compile(r"@template\s+\w+|/\*\*\s*@type\s*(?:\{|<\w+)"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(r"\.(?:map|filter|reduce|flatMap|some|every|find|forEach|groupBy)\s*\("),
-            "scientific": re.compile(r"\b(?:import|require|from)\b.*?(?:numpy|pandas|scipy|matplotlib|opencv|cv2)\b"),
-            "hardware_bridge": re.compile(
-                r"\b(?:import|require|from)\b.*?(?:serialport|usb|bluetooth|socket\.io|websocket|printer|webgl)\b"
-            ),
-            "cryptography": re.compile(
-                r"\b(?:import|require|from)\b.*?(?:crypto|bcrypt|x509|tls|ssl|jsonwebtoken|argon2)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            "reflection_metaprogramming": re.compile(
-                r"\b(arguments\.|prototype|__proto__|Object\.assign|Reflect|Proxy|Object\.defineProperty|\.bind\(|\.call\(|\.apply\()\b"
-            ),
-            # --- AI & LLM SDK SENSORS (GLOBAL_, see #322) ---
-            "llm_api": GLOBAL_LLM_API,
-            "llm_orchestrator": GLOBAL_LLM_ORCHESTRATOR,
-            "llm_vector_store": GLOBAL_LLM_VECTOR_STORE,
-            "ml_traditional": GLOBAL_ML_TRADITIONAL,
-            "dl_frameworks": GLOBAL_DL_FRAMEWORKS,
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r"\b(?:import|export)\b[^;]*?\bfrom\b|\brequire\s*\(|\bimport\s*\(",
-                re.M,
-            ),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (JAVASCRIPT) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
-                #
-                # HISTORICAL BUG: Originally, the `import` regex was anchored to the start of the
-                # line `^[ \t]*`. While this perfectly prevented the engine from hallucinating
-                # commented-out imports, it completely blinded the firewall to dynamic/inline execution.
-                # If an attacker tucked an import inside a function (e.g., `const payload = require('malware')`
-                # or `await import('trojan')`), it bypassed the sensors entirely.
-                #
-                # THE FIX: The `^` anchor has been stripped across both the counter and the capture regex.
-                # We now rely on the `\b` word boundary to find the keywords anywhere in the file.
-                # (Note: The engine's optical comment-stripper runs BEFORE this regex, naturally preventing
-                # the commented-out hallucination issue without needing strict line anchors).
-                #
-                # [ THE VERTICAL DESTRUCTURING SHIELD ]
-                # We enforce `[ \t\n]*` near the `from` and inside the `require()` parentheses to safely
-                # leap across vertical multi-line destructured imports (e.g., `import \n { \n Component \n } \n from`).
-                # =====================================================================
-                r"(?:import|export)\b[^;]*?\bfrom\s*['\"]([^'\"]+)['\"]|\b(?:require|import)\s*\(\s*['\"]([^'\"]+)['\"]",
-                re.M,
-            ),
-            "_named_token_capture": re.compile(r"(?:import|export)\s+\{([^}]+)\}", re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:@author|Created by)\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(getServerSideProps|getStaticProps|getInitialProps|renderToString|hydrateRoot)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(emit|on|once|off|dispatchEvent|EventEmitter|EventTarget)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(r"\b(Inject|Injectable|Container|resolve|register|inversify)\b"),
-            # 34. macros
-            "macros": None,
-            # 35. pointers
-            "pointers": None,
-            # 36. memory_alloc
-            "memory_alloc": re.compile(r"\bnew\s+[A-Z]\w*"),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(logger|winston|pino|morgan|datadog|prometheus|newrelic|sentry)\.(?:info|error|warn|debug|trace|log)\b"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\bconsole\.(?:log|warn|error|dir|trace|info|table|time)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\b(Number|String|Boolean|BigInt|Symbol|Array\.from)\b\s*\("),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|abort|process\.exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(sleep|delay|setTimeout|setInterval|Atomics\.wait)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>>?|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mutex|lock|synchronized|Semaphore|Atomics\.lock|Atomics\.wait)\b",
-                re.I,
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|readonly|final|Object\.freeze|Object\.seal)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(dispose|close|destroy|clearTimeout|clearInterval|removeEventListener|delete)\b"),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # JS private fields and keywords. `#` needed its own un-bounded
-            # branch: \b#\b can only match when `#` is directly sandwiched
-            # between two word characters with no separator (e.g. "x#y"),
-            # which never happens in real private-field syntax (`#foo` is
-            # always preceded by `{`, whitespace, or `.` -- never a bare word
-            # char) -- so the `#` alternative was completely unreachable.
-            "encapsulation": re.compile(r"\b(private|protected|internal)\b|#[a-zA-Z_$]"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(on|addEventListener|subscribe|watch|effect)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(test\.skip|it\.skip|describe\.skip|xit|xdescribe|mock|stub)\b"),
-            # --- NEW: ADVANCED ALGORITHMIC SENSORS ---
-            "lazy_evaluation": re.compile(r"\b(yield|yield\s*\*|function\s*\*)\b"),
-            "vectorized_math": re.compile(r"\b(matmul|dot|cross|multiply)\s*\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (JS/TS Specifics) ---
-            "serialization_parsing": re.compile(r"\b(JSON\.parse|JSON\.stringify)\b"),
-            "regex_execution": re.compile(r"\bnew\s+RegExp\b|\.(match|replace|search|split)\s*\("),
-            "time_date_logic": re.compile(
-                r"\b(Date\.now|new\s+Date|setTimeout|setInterval|clearTimeout|clearInterval|performance\.now)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(postMessage|Worker|MessageChannel|child_process|worker_threads|cluster)\b"
-            ),
-            # --- PHASE 4: APPSEC & AI SENSORS (Zero-Trust Pipelines) ---
-            "rce_funnel": re.compile(
-                r"child_process\.(?:spawn|exec|execSync)\s*\(\s*['\"](?:python|bash|sh|bun|node)\b"
-            ),
-            "exfiltration_camouflage": re.compile(
-                r"\b(fetch|axios\.post|https\.request)\s*\([^)]*(?:checkmarx|telemetry|metrics|audit|log)\b",
-                re.I,
-            ),
-        },
-    },
-    "typescript": {
-        "_meta": {
-            "target_version": "TypeScript 6.0 / ES2026",
-            "last_updated": "2026-03-12",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, JSX variants, and ambient declaration boundaries.
-        "extensions": [
-            ".ts",
-            ".tsx",
-            ".mts",
-            ".cts",
-            ".d.ts",
-            ".d.mts",
-            ".d.cts",  # Ambient declarations
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
-        "discriminators": [
-            ".ts",
-            "tsconfig.json",
-            "tslint.json",
-            "package.json",
-            "yarn.lock",
-            "pnpm-lock.yaml",
-            "deno.json",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["ts-node", "deno", "bun", "tsx"],
-        # UPGRADED: Maps to Family 1 (Standard C)
-        # Rationale: Uses '//' for line-level literature; multi-line literature
-        # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # EXCLUDES: Exceptions (throw). Includes control flow and logical short-circuits.
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|while|do|catch|finally|continue|break|try)\b|&&|\|\||\?|\?\?"
-            ),
-            # 2. args (Parameters / Coupling)
-            # CRITICAL FIX: Added negative lookahead for control flow, and `[^=;{]*` to support TypeScript return types.
-            # QUADRATIC BLOWUP FIX: the bare-identifier-before-arrow branch's
-            # `[\w$]*` was unbounded. On a long line with no `=>` at all, the
-            # engine retried the greedy-then-backtrack identifier match at
-            # every starting position -- O(n^2) (same bug found and fixed in
-            # javascript's near-identical args rule). Bounded to {0,100};
-            # real identifiers never get remotely that long.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # all four branches (was only reachable via group(0), the whole
-            # match including the "function"/modifier/name prefix, or for
-            # arrow functions nothing at all) so detector.py's counter
-            # isolates just the real parameter text -- the whole-match
-            # fallback overcounted every zero/one-arg signature by +1 the
-            # same way Python's did (#1199). Name groups added to branches
-            # 1/4 too, purely so existing extraction tests keep passing.
-            "args": re.compile(
-                r"function\s+(\w*)(?:[ \t\n]{0,50}<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|"
-                r"(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))[^=;{]*=>|"
-                r"([a-zA-Z_$][\w$]{0,100})[ \t]*=>|"
-                r"^[ \t]*(?:(?:public|private|protected|static|override|abstract|readonly)[ \t]+){0,4}(?:async[ \t]+)?(?:\*[ \t]*)?(?:get\s+|set[ \t]+)?(?!(?:if|for|while|switch|catch|return|throw|new|typeof|yield|await|void)\b)(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?:[ \t\n]{0,50}<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (public/private) and Immutability (const).
-            "structural_boundaries": re.compile(
-                r"\b(var|return|class|interface|type|enum|import|export|await|satisfies|using|namespace|module|implements|extends|declare)\b|=>"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Captures standard functions, assignments, object properties, and class methods.
-            # Safely steps over TypeScript Generics <T> and explicit return types in the lookaheads.
-            # BUG FIX (severe ReDoS, ~4x/doubling confirmed via scaling sweep,
-            # ~1.9s at n=32000): the trailing lookahead `\s*(?:<[^>]*>)?\s*\(`
-            # (shared by the `function` branch and the class-member branch)
-            # has two adjacent unbounded `\s*` quantifiers separated by an
-            # optional group -- on a long run of pure whitespace with no `(`
-            # ever appearing (e.g. a truncated/malformed source file), the
-            # engine can partition that whitespace between the two `\s*`
-            # instances in exponentially many ways before failing. Bounded
-            # both to `[ \t\n]{0,50}` (generous for real code). Also fixed a
-            # separate, unrelated pre-existing gap found while in here: the
-            # `function` branch's `\s*\*?\s+` required a whitespace char
-            # *after* the generator `*` even when one preceded it instead
-            # (`function *gen()`, less common than `function* gen()` but
-            # valid), and rejected the zero-space `function*gen()` form
-            # entirely. Replaced with `[ \t\n*]+` (one or more of
-            # whitespace-or-star), which still requires *some* separator so
-            # it can't false-positive-match an unrelated identifier like
-            # `functionFoo()`.
-            # BUG FIX (Rule 11, nested-delimiter coverage -- this is the
-            # issue's own flagged "func_start vs generics" known ambiguity
-            # pattern, already found in C#): the flat `[^>]*` generic
-            # step-over broke on even one level of nested angle brackets in
-            # a generic constraint (`function foo<T extends Array<number>>`),
-            # a common realistic TypeScript pattern -- func_start silently
-            # failed to match the WHOLE function, not just the generic part.
-            # Widened to tolerate one level of self-nesting (non-overlapping
-            # alternatives, so no new ReDoS risk per the doc's own Rule 11
-            # example).
-            # BUG FIX (epic #813/#815): the assignment-style alternative
-            # (2nd branch below) has no way to distinguish a real arrow-
-            # function assignment (`const Foo = (a: T): T => a;`) from a
-            # function-shaped TYPE ALIAS (`type Foo = (a: T) => R;`) --
-            # both share the identical `IDENT = (...) => ...` surface shape.
-            # A type alias only *describes* a function signature; it isn't
-            # one. Fixed with a fixed-width negative lookbehind for the
-            # single-space `type ` prefix (Python's `re` doesn't support
-            # variable-width lookbehind, and real-world/formatter-produced
-            # TypeScript uses exactly one space here in the overwhelming
-            # majority of cases -- same "practical reality over perfect
-            # accuracy" tradeoff used throughout this file).
-            # BUG FIX (epic #813/#815): the same alternative also required
-            # the identifier to be followed *directly* by `=`, missing the
-            "func_start": re.compile(
-                r"(?:"
-                # =====================================================================
-                # [ THE FLOATING GENERIC SHIELD ] (Hard-learned lesson from Pathological Fuzzer)
-                # PURPOSE: In TypeScript, a function name and its generic type `<T>`
-                # can be separated by a vertical newline (e.g., `function TargetFunc \n <T>`).
-                # THE FIX: Injected `\s*` immediately before the generic step-over `(?:<[^>]*>)?`
-                # across all branches. This explicitly permits vertical spacing between
-                # the isolated function name and the generic parameters.
-                # Note: We also migrated the JS Vertical Assignment fixes here (`[ \t\n]*`).
-                # =====================================================================
-                r"\b(?:async\s+)?function[ \t\n*]+(\[[^\]]+\]|[a-zA-Z_$][\w$]*)(?=[ \t\n]{0,50}(?:<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}\()|"
-                # BUG FIX (issue #1838, P2): a constructor parameter property
-                # (`constructor(private readonly interval: number, private
-                # readonly nowFn = () => Date.now())`) puts an
-                # `IDENT = arrow` default-value shape INSIDE the enclosing,
-                # still-open parameter list -- textually indistinguishable
-                # from a real top-level/class-field `IDENT = arrow`
-                # assignment without paren-depth tracking, which this
-                # single-pass regex doesn't have. `public`/`private`/
-                # `protected`/`readonly` immediately after `,` or `(` is
-                # UNIQUE to this TS parameter-property syntax though: no
-                # other valid TypeScript construct puts one of those four
-                # contextual keywords directly after a bare `,` or `(`
-                # (they're otherwise only legal as class-member modifiers,
-                # which are never comma/paren-adjacent). Python's `re`
-                # requires fixed-width lookbehind, so this enumerates the
-                # 7 valid modifier/modifier-pair combinations x 2 preceding
-                # delimiters as 14 separate fixed-width negative lookbehinds
-                # (each individually fixed-width; stdlib `re` rejects a
-                # single lookbehind with internally-variable-length
-                # alternation) rather than one general "are we inside an
-                # unclosed paren" check.
-                r"(?:^|(?<=[^<>(,\s]))[ \t\n]*(?<!\.\.\.)\b(?<!type )"
-                r"(?<!,\spublic\s)(?<!,\sprivate\s)(?<!,\sprotected\s)(?<!,\sreadonly\s)"
-                r"(?<!,\spublic\sreadonly\s)(?<!,\sprivate\sreadonly\s)(?<!,\sprotected\sreadonly\s)"
-                r"(?<!\(public\s)(?<!\(private\s)(?<!\(protected\s)(?<!\(readonly\s)"
-                r"(?<!\(public\sreadonly\s)(?<!\(private\sreadonly\s)(?<!\(protected\sreadonly\s)"
-                r"(\[[^\]]+\]|[a-zA-Z_$][\w$]*)(?:[ \t\n]*:[ \t\n]{0,50}(?:(?!\b(?:const|let|var|return|export|import|class|private|public|protected|readonly)\b)[^=;{}]|=>){0,200})?"
-                # BUG FIX (issue #1838, R2): the arrow-body terminator only
-                # accepted a body starting with `{`/`<`/`(`/end-of-line --
-                # missed the common point-free/FP-style shape where the body
-                # is a bare call or bare identifier reference (`=>
-                # pipe(fab, ap(fa))`, `=> scheduled`, `=> this.foo()`).
-                # Widened with two more alternatives: an identifier
-                # immediately followed by `(` (an unambiguous call shape --
-                # types never call anything, so this can't collide with a
-                # function-TYPE signature's return type), and a bare
-                # lowercase-leading identifier. The bare-identifier
-                # alternative is deliberately restricted to `[a-z_]` (never
-                # `[A-Z]`) since real custom TypeScript type names are
-                # conventionally PascalCase by community/compiler-team
-                # convention -- but TS's own BUILT-IN primitive/utility type
-                # keywords (`void`, `string`, `number`, ...) are lowercase
-                # too, so a member-signature's return type (`c: (x: T) =>
-                # void;`) would otherwise false-positive as if `void` were a
-                # real function value. Blacklisted the closed, small set of
-                # TS primitive/utility type keywords to close that gap
-                # without losing the general lowercase-identifier case.
-                #
-                # BUG FIX (issue #1840): the gap between a param-list's
-                # closing `)` and the eventual `=>` (`[^=;{]*`) was unbounded
-                # in WHAT it could contain, only in how much of it -- so it
-                # happily skipped straight over an entirely unrelated,
-                # already-closed method-chain call sitting between the two,
-                # landing on a LATER arrow that has nothing to do with the
-                # assigned identifier. Real example: `const deps = (await
-                # Promise.all([...])).flatMap(o => o);` -- the outer
-                # `(await Promise.all([...]))` is a real, fully-closed
-                # parenthesized expression (not `deps`'s own parameter
-                # list), but `[^=;{]*` cheerfully consumed `.flatMap(o `
-                # -- including its OWN unrelated open paren -- to reach the
-                # `flatMap` callback's `=>`, false-matching `deps` as if it
-                # were an arrow function. A real arrow's param-list-to-`=>`
-                # gap is just an optional return-type annotation, which
-                # never legitimately contains a bare, unbalanced `(` or `)`
-                # of its own -- excluding both from the gap (`[^=;{()]*`)
-                # closes this without narrowing any genuine case (return
-                # types use `<...>` for generics, not `(...)`).
-                # BUG FIX (issue #2231): the body-start alternation had no
-                # allowance for a bare unary `!` (`const predicate = (e: T) =>
-                # !e.newDocument;`), a common negation-shorthand arrow body --
-                # rejected outright since `!` isn't `{`/`<`/`(`/end-of-line nor
-                # an identifier. Added as its own literal alternative: `!` can
-                # never start a return-type annotation, so this can't collide
-                # with the function-TYPE-signature case the rest of this
-                # alternation is busy disambiguating against.
-                # #2464: in the `IDENT = arrow` (assignment) shape, the arrow's
-                # body is always a VALUE, never a type annotation -- so `undefined`
-                # / `null` (both legal bare-value bodies, `x = () => null`, common
-                # in conditional-reassignment blocks) are NOT blacklisted here,
-                # unlike the `:`-annotated branch below where they can be a real
-                # member-signature return type. The type keywords (`void`,
-                # `string`, ...) stay excluded: they are never valid bare arrow
-                # bodies in JS/TS in either context.
-                r"(?=[ \t\n]*=[ \t\n]*(?:async\s*)?(?:<(?:[^<>]|<[^<>]*>)*>\s*)?(?:function(?:\s*\*)?\b|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)(?:[^=;{()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint)\b)[a-z_][\w$]*)|[a-zA-Z_$][\w$]*[ \t\n]*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint)\b)[a-z_][\w$]*)))|"
-                r"(?:^[ \t]*|(?<=[,{])[ \t\n]*)(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?=[ \t\n]*:[ \t\n]*(?:async\s*)?(?:<(?:[^<>]|<[^<>]*>)*>\s*)?(?:function(?:\s*\*)?\b|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)(?:[^=;{()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint|undefined|null)\b)[a-z_][\w$]*)|[a-zA-Z_$][\w$]*[ \t\n]*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint|undefined|null)\b)[a-z_][\w$]*)))|"
-                # #1221: the trailing lookahead used to be just
-                # `(?=[ \t\n]{0,50}(?:<...>)?[ \t\n]{0,50}\()` -- proof a
-                # `(` follows, nothing more -- so any bare call statement
-                # starting a line (`next();`) false-positive-matched as a
-                # method definition, mirroring the identical javascript gap
-                # (see that file's own #1221 fix comment for the full
-                # writeup). A real call statement never carries a modifier
-                # (public/private/.../readonly), `async`, a generator `*`,
-                # or a `get`/`set` accessor keyword -- only a real
-                # signature can -- so this now splits into two mutually
-                # exclusive alternatives, mirroring java's/dart's/groovy's
-                # own #1221 fixes: (A) at least one of those prefix tokens
-                # is present -- keeps the ORIGINAL lenient bare-`(`
-                # lookahead unchanged (still needed: a legacy monolithic
-                # gauntlet, tests/extraction/test_function_extraction.py,
-                # has truncated-signature payloads like `public get
-                # TargetFunc()` that never reach a real terminator at all,
-                # the same leniency csharp/apex/groovy/dart's own
-                # zero-prefix branches still need); (B) no prefix token at
-                # all -- must fully close its (non-nested, same bound as
-                # `args`) parameter list and reach either an optional `:
-                # ReturnType` then an optional `=>` (kept only to preserve
-                # the ALREADY-documented, deliberately-NOT-fixed
-                # `describe('x', () => {` known-limitation ambiguity --
-                # see the test right below) then `{`, or a MANDATORY `:
-                # ReturnType` then `;` (interface/abstract method stubs,
-                # `TargetFunc(): void;`) -- `next();` has neither a prefix
-                # nor a reachable terminator, so it satisfies neither
-                # branch. A stub with NO explicit return type (`bar();` in
-                # an interface, valid but rarer/atypical TS style) is a
-                # known, accepted gap of this same trade-off --
-                # indistinguishable from `next();` without scope-awareness
-                # this engine doesn't have.
-                # NOT FIXED (issue #1838, P1 -- ruled out, left as-is on
-                # purpose): `protected abstract createReferencedObject(...): T;`
-                # has no implementation by TypeScript's own grammar (abstract
-                # methods can never carry a body), and tree-sitter itself
-                # parses it as a distinct `abstract_method_signature` node --
-                # not `method_definition`/`method_signature` -- so the
-                # tree-sitter-accuracy audit never counts it as ground truth,
-                # making this branch's match look like a false positive there.
-                # An earlier attempt excluded `abstract`-prefixed signatures
-                # from this branch entirely to chase that number, but
-                # `tests/extraction/languages/test_typescript.py`'s own
-                # `func_start` gauntlet has an explicit, intentional valid
-                # case for exactly this shape (`abstract TargetFunc(): void;`
-                # inside `abstract class Foo`) -- GitGalaxy's structural-
-                # signature counting is deliberately broader than tree-sitter's
-                # AST node taxonomy here (an abstract method declaration is
-                # still a real structural unit worth a branch/io/complexity
-                # signal, even with no body of its own), and the gauntlet is
-                # this file's authoritative correctness spec, not the
-                # tree-sitter diff. Fixing "for tree-sitter" would have broken
-                # a real, already-agreed-on test. Left unmatched-by-design;
-                # the audit's own extra_functions number for this case is a
-                # known, accepted tool-methodology mismatch, not a GitGalaxy bug.
-                # BUG FIX (Rule 14, ReDoS -- confirmed ~O(n^2), 4.1s at
-                # n=16000 pure trailing-whitespace payload): branch B's two
-                # `[ \t\n]*` after `\)` and after the optional `:Type`
-                # annotation are adjacent unbounded quantifiers separated
-                # only by an optional group that can match zero-width (the
-                # exact Rule 14 shape this file's own comment elsewhere
-                # warns about), so a payload with a huge trailing
-                # whitespace run and no real terminator lets the engine
-                # partition it between the two quantifiers in O(n^2) ways
-                # before failing. Bounded both (and the `=>`-tolerance
-                # group's own trailing run) to `{0,50}`, matching this
-                # same regex's existing bound for the generic-skip
-                # whitespace immediately to their left.
-                r"^[ \t]*(?:"
-                r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){1,4}(?:async[ \t\n]+)?(?:\*[ \t\n]*)?(?:get\s+|set\s+)?"
-                r"|"
-                r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){0,4}async[ \t\n]+(?:\*[ \t\n]*)?(?:get\s+|set\s+)?"
-                r"|"
-                r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){0,4}(?:async[ \t\n]+)?\*[ \t\n]*(?:get\s+|set\s+)?"
-                r"|"
-                r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){0,4}(?:async[ \t\n]+)?(?:\*[ \t\n]*)?(?:get\s+|set\s+)"
-                r")"
-                # BUG FIX (issue #2232): no allowance for TypeScript's optional-
-                # member `?` (`copy?(source: Uri): void;`) between the name and
-                # the parameter list -- `\??` inserted as the very first token
-                # of the lookahead, directly against the name capture with zero
-                # whitespace tolerance before it, so it only fires for the real
-                # zero-space `name?(` adjacency the syntax requires (a spaced
-                # ternary like `isEnabled ? (a + b)` can't satisfy it: the `?`
-                # isn't immediately adjacent to the name, so `\??` matches
-                # zero-width here and the mandatory `\(` lookahead then fails
-                # against the literal `?` still sitting in the way).
-                # BUG FIX (issue #2276): `catch`/`return`/`throw` used to be
-                # unconditionally excluded here to stop `} catch (e) {`
-                # control-flow blocks (and ordinary `return`/`throw`
-                # statements) from being misidentified as method
-                # definitions -- but that also permanently hid a REAL method
-                # or property legitimately named `catch`/`return`/`throw`
-                # (a Promise-like thenable's `catch<T>()`, an AsyncIterator
-                # protocol's `return()`). Moved to a CONDITIONAL exclusion:
-                # only excluded when immediately followed by whitespace then
-                # `(`/`<` -- idiomatic control-flow/statement syntax always
-                # has that shape (`catch (e)`, `return <expr`), while a real
-                # method/property definition never does (`catch<T>(...)`,
-                # `catch(...)`, `return: () => {...}`). Confirmed via direct
-                # testing that `} catch (e) {` still correctly does NOT
-                # match, while `catch<TResult = never>(...)` and
-                # `return: () => {...}` now do.
-                r"(?!(?:class|interface|enum|if|for|while|switch|new|typeof|jQuery|function|yield|await|void)\b|type\b(?![ \t\n]*\()|\$|(?:catch|return|throw)\b[ \t\n]+(?:\(|<))(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?=\??[ \t\n]{0,50}(?:<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}\()"
-                r"|"
-                # BUG FIX (R3): The arrow-value (Branch 5 / standalone value) branch
-                # is known to fail on mid-statement function values (e.g. `const a = b || () => {}`)
-                # because the `^[ \t]*` anchor enforces it must be the start of a line. We cannot
-                # easily fix this without massive ReDoS or losing precision.
-                # Mid-statement function values cannot be reliably matched without a full AST.
-                # BUG FIX (epic #1261 / issue #1630): the zero-prefix branch's
-                # parameter-list terminator used a FLAT `\([^)]*\)` character class,
-                # which cannot represent even one level of nested parens. Any
-                # callback-typed parameter (`onDisconnect: () => void`, `handler:
-                # (...args: any[]) => void`) has an inner `()`, so the class stopped
-                # at the first inner `)`, the terminator lookahead then failed to find
-                # its `{`/`;`/`:` anchor, and the WHOLE signature -- constructor or
-                # method -- silently stopped matching (regex-level non-match, not just a
-                # misrecord). Replaced with the bounded one-level-nesting form
-                # `\((?:[^()]|\([^()]*\))*\)` -- same Rule 11 shape the generic
-                # step-over already uses (`(?:[^<>]|<[^<>]*>)*`), linear because the
-                # two alternatives never match overlapping text.
-                # BUG FIX (issue #1838, R1): one level of nesting still wasn't
-                # enough -- a callback-typed parameter can itself contain a
-                # parenthesized sub-expression (nesting depth 2 from the outer
-                # list-paren), e.g. `appendPlaceholder(value: string | ((snippet:
-                # SnippetString) => any), number?: number): SnippetString;`
-                # (`vscode/vscode.d.ts:4180`). Recursed the same non-overlapping
-                # idiom one level deeper: `\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)`.
-                # Still linear (each level's alternatives don't overlap the level
-                # above it), same Rule 11 reasoning, just applied twice.
-                #
-                # NOTE: an earlier version of this fix ALSO added a `constructor`-
-                # specific bare-`;` terminator alternative here, on the theory that
-                # bodyless ambient/overload constructors (`constructor(...);` with
-                # no return-type annotation) were a real recall gap. That was
-                # wrong: `tests/tools/tree_sitter_accuracy_audit.py`'s own ground
-                # truth (search "Intentional drop of bodyless constructors")
-                # deliberately excludes exactly this node shape (`method_signature`/
-                # `function_signature` named "constructor") from what counts as a
-                # real function -- so matching it only manufactured new false
-                # positives across every `.d.ts`-style declaration file in the
-                # corpus (confirmed: reverting this addition alone dropped
-                # `extra_functions` by dozens on the pinned corpus). Left
-                # unmatched, on purpose -- see issue #1838's discussion for the
-                # full trace.
-                # BUG FIX (issue #2232): same `\??` insertion as Branch A above
-                # -- this zero-prefix branch is exactly where GitGalaxy misses
-                # `.d.ts`-style optional interface method signatures like
-                # `copy?(source: Uri): void;`, since interface members carry no
-                # public/private/etc. modifier to route them through Branch A
-                # instead. Same zero-whitespace-before-`?` placement, same
-                # ternary-collision reasoning.
-                # BUG FIX (issue #2279): Split the zero-prefix branch to safely
-                # allow bodyless constructors. If we make the return type
-                # optional for ALL identifiers here, it falsely matches bare
-                # function calls (like `next();`) because they also end in
-                # `;`. By strictly requiring `constructor` for the
-                # optional-return-type case, we match ambient
-                # `constructor(x: number);` without breaking function calls.
-                r"(?:^[ \t]*|(?<=[,{])[ \t\n]*)(\bconstructor\b)(?=\??[ \t\n]{0,50}(?:<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)[ \t\n]{0,50}(?:(?::[^{;]{0,200})?[ \t\n]{0,50}(?:=>[ \t\n]{0,50})?\{|[ \t\n]{0,50};))"
-                r"|"
-                # BUG FIX (issue #2276): same conditional-exclusion fix as
-                # Branch A above, mirrored here since this branch carries
-                # its own copy of the same reserved-keyword shield -- see
-                # that branch's comment for the full rationale. Combined
-                # with #2277's widened anchor and #2279's `constructor`
-                # split (above) during merge conflicts between all three --
-                # every change applies to the same branch, independently of
-                # the others, so `constructor` is added to this branch's own
-                # exclusion list (it's handled by its own alternative above)
-                # alongside the catch/return/throw conditional exclusion.
-                # #2464: the generic step-over here is `=>`-tolerant (`=>` and a
-                # lone `=` are explicit tokens, `>` closes only when not part of
-                # `=>`) so a bodyless overload signature whose type-parameter list
-                # itself contains a function type -- `createInstance<Ctor extends
-                # new (...args: any[]) => unknown, R extends InstanceType<Ctor>>
-                # (...): R;` (vscode/instantiationService.ts:117) -- is matched
-                # rather than truncated at the `>` of `=>`. Alternatives stay
-                # mutually exclusive on their first char (`=>` vs `=(?!>)` vs
-                # `[^<>=]` vs `<`), so still linear (Rule 11). The mandatory
-                # `:Type;` / `{` terminator below keeps a bare generic call
-                # statement (`useCallback<() => void>(cb);`) from matching.
-                r"(?:^[ \t]*|(?<=[,{])[ \t\n]*)(?!(?:class|interface|enum|if|for|while|switch|new|typeof|jQuery|function|yield|await|void|constructor)\b|type\b(?![ \t\n]*\()|\$|(?:catch|return|throw)\b[ \t\n]+(?:\(|<))(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?=\??[ \t\n]{0,50}(?:<(?:=>|=(?!>)|[^<>=]|<(?:=>|=(?!>)|[^<>=])*>)*>)?[ \t\n]{0,50}\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)[ \t\n]{0,50}(?:(?::[^{;]{0,200})?[ \t\n]{0,50}(?:=>[ \t\n]{0,50})?\{|:[^{;]{0,200}[ \t\n]{0,50};))"
-                r")",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # =====================================================================
-            # [ THE VERTICAL MODIFIER SHIELD (TYPESCRIPT) ]
-            # TypeScript allows modifiers like `export`, `default`, and `abstract`
-            # to appear in various orders and across multiple lines.
-            # FIX: Grouped the modifiers into a flexible, bounded set `(?:(?:export|default|abstract|declare)[ \t\n]+){0,4}`.
-            # Upgraded all internal spaces to `[ \t\n]+` to seamlessly leap over vertical gaps.
-            # =====================================================================
-            # BUG FIX: the extends/implements capture required whitespace
-            # immediately after the class-name capture, but a generic class
-            # declaration (`class Foo<T> extends Bar<T>`) has `<T>` there
-            # instead -- the optional extends/implements group silently never
-            # fired for any generic class, a very common TypeScript pattern.
-            # Added an optional `<...>` step-over between the name and the
-            # extends/implements check.
-            # BUG FIX (Rule 11, epic #813/#815): that step-over was flat
-            # (`<[^>]*>`), which truncates at the FIRST `>` -- a one-level-
-            # nested generic bound (`class Foo<T extends Comparable<T>>
-            # extends Bar {`, a common realistic pattern) left a stray `>`
-            # unconsumed right before the real `extends` clause, silently
-            # losing the entire extends/implements capture (group 2) even
-            # though the class NAME itself still matched fine. Widened to
-            # the established one-level-nesting idiom used elsewhere in
-            # this file.
-            # BUG FIX (#1348): the modifier group was missing `const`, so
-            # TypeScript's compile-time-only `const enum Foo {` / `export
-            # const enum Foo {` form (common in vscode/assemblyscript/the
-            # typescript compiler itself) never matched at all -- `const`
-            # isn't a recognized modifier and isn't the mandatory
-            # `class|enum|interface` keyword either, so the whole rule
-            # failed to fire. Adding `const` here can't introduce new false
-            # matches on unrelated `const x = ...` statements: the entity
-            # keyword is still mandatory immediately after the modifier
-            # run, so a plain `const` declaration (no literal `class`/
-            # `enum`/`interface` token following) still doesn't match.
-            "class_start": re.compile(
-                r"^[ \t]*(?:(?:export|default|abstract|declare|const)[ \t\n]+){0,4}(?:class|enum|interface)[ \t\n]+([a-zA-Z_$][\w$]*)(?:[ \t\n]*<(?:[^<>]|<[^<>]*>)*>)?(?:[ \t\n]+(?:extends|implements)[ \t\n]+([a-zA-Z_$][\w_$, \t\n]*))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|satisfies|unknown|never|void|Object\.freeze|z\.(?:string|object|parse)|v\.(?:string|parse))\b|\?\?|\?\.|\b(?:is|asserts)\s+\w+\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Force unwrapping, any, and linter bypasses.
-            "safety_bypasses": re.compile(
-                r"\b(any)\b|as\s+any|!\s*[;,\n)\]\.]|!\.|@ts-ignore|@ts-expect-error|@ts-nocheck|eslint-disable|as\s+unknown\s+as|<any>"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and catastrophic vulnerabilities. EXCLUDES TODO (debt) and console.log (print).
-            "high_risk_execution": re.compile(
-                r"\b(eval|document\.write|innerHTML|outerHTML|dangerouslySetInnerHTML|debugger|alert|process\.exit)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(fetch|axios|http|https|fs|path|database|sql|localStorage|sessionStorage|indexedDB|document\.cookie|XMLHttpRequest|child_process|fs/promises)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Captures explicit exports and public visibility.
-            "api": re.compile(
-                r"\b(export|public|module\.exports|exports\.)\b|@(Controller|Resolver|Get|Post|Put|Delete)\b"
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES const (freeze_hits).
-            # BUG FIX: `.current =`, `.set(`, `.delete(`, and `.add(` shared a
-            # trailing `\b` with word-ending siblings (push/pop/...), but all
-            # four end in `(` or `=` (non-word) -- `\b` right after can only
-            # fire if the next char happens to be a word character, never true
-            # for the realistic forms (`myRef.current = value` -- space after
-            # `=`; `myMap.set('key', v)` -- quote after `(`). These four are
-            # already self-delimited by their leading `.`, so pulled out of
-            # the shared boundary group entirely.
-            "state_mutation": re.compile(
-                r"\b(?:let|var|this\.|setState|push|pop|shift|unshift|splice|sort|reverse)\b"
-                r"|\.current[ \t]*=|\.set\(|\.delete\(|\.add\("
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # BUG FIX (Engine Rule 12, Comment-Style Completeness): typescript
-            # is `standard_block` (both `//` and `/* */` are real comment
-            # styles), but this only ever checked `//` -- a block-commented-out
-            # function/class (`/* function foo() {} */`) was invisible.
-            "dead_code": re.compile(r"(?://|/\*)[ \t]*(?:if|for|while|function|class|return|export|import)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"/\*\*|@param|@return|@throws|@deprecated|@typedef|@type|@template|@callback"),
-            # 14. test (Testing & Assertions)
-            # CRITICAL FIX: Negative lookbehind (?<!\.) prevents matching 'regex.test()' as an assertion.
-            "test": re.compile(
-                r"\b(?:describe|expect|beforeEach|afterEach|jest|vitest|playwright)\s*\(|(?<!\.)\b(?:it|test|assert)\s*\("
-            ),
-            # --- PHASE 3: SPECIALIZED SENSORS (Architecture & Hidden Complexity) ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|Promise|requestAnimationFrame|setImmediate|setTimeout|setInterval|Worker|postMessage|Observable|Subject|Subscription)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r'<[A-Z]\w+|className=|use(?:State|Effect|Context|Reducer|Ref|Memo|Callback|Transition|Id)|props\.|this\.state|@Component|@Injectable|document\.(?:getElementById|querySelector)|["\']use\s+(?:client|server)["\']'
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"=>[ \t]*\{|\(\)[ \t]*=>|function\s*\([^)]*\)[ \t]*\{"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(r"\b(window\.|global\.|process\.env|document\.|navigator\.|self\.|globalThis\.)\b"),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"@\w+(?:\([^)]*\))?"),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(
-                r"<\s*[A-Z][^>]*>|\b(?:keyof|infer|extends|Omit|Pick|Partial|Record|Required|Awaited|ReturnType|Parameters|NonNullable)\b"
-            ),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(r"\.(?:map|filter|reduce|flatMap|some|every|find|forEach|groupBy)\s*\("),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(Math\.|tf\.|THREE\.|d3\.|gl-matrix|random)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # BUG FIX: `.bind(`, `.call(`, `.apply(` shared a trailing `\b`
-            # with word-ending siblings, but end in a literal `(` -- broke
-            # on the truly-empty-argument call form (`foo.bind()`), where
-            # the next char after `(` is `)`, not a word char. Already
-            # self-delimited by their leading `.`; pulled out of the group.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:arguments\.|prototype|__proto__|Object\.assign|Reflect|Proxy|Object\.defineProperty)\b"
-                r"|\.bind\(|\.call\(|\.apply\("
-            ),
-            # --- AI & LLM SDK SENSORS (GLOBAL_, see #322) ---
-            "llm_api": GLOBAL_LLM_API,
-            "llm_orchestrator": GLOBAL_LLM_ORCHESTRATOR,
-            "llm_vector_store": GLOBAL_LLM_VECTOR_STORE,
-            "ml_traditional": GLOBAL_ML_TRADITIONAL,
-            "dl_frameworks": GLOBAL_DL_FRAMEWORKS,
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r"\b(?:import(?:\s+type)?|export(?:\s+type)?)\b[^;]*?\bfrom\b|\brequire\s*\(|\bimport\s*\(",
-                re.M,
-            ),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (TYPESCRIPT) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
-                #
-                # HISTORICAL BUG: Originally, this regex was anchored to the start of the
-                # line `^[ \t]*`. While this perfectly prevented the engine from hallucinating
-                # commented-out imports (`// import { x }`), it completely blinded the firewall
-                # to dynamic/inline execution. If an attacker tucked an import inside a function
-                # (e.g., `const payload = require('malware')` or `await import('trojan')`),
-                # it sailed right past the sensors.
-                #
-                # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
-                # boundary to find the keywords anywhere in the file. (Note: The engine's
-                # optical comment-stripper runs BEFORE this regex, naturally preventing the
-                # commented-out hallucination issue without needing strict line anchors).
-                #
-                # [ THE VERTICAL DESTRUCTURING SHIELD ]
-                # We retain `[ \t\n]+` to safely leap across massive vertical multi-line
-                # destructured imports: `import type \n { \n ASTNode \n } \n from`
-                #
-                # BUG FIX (epic #813/#815): side-effect-only imports
-                # (`import "./styles.css";`, extremely common for CSS/
-                # polyfill imports) have no `from` keyword and no parens at
-                # all -- neither of the two alternatives above matched them.
-                # Added a third alternative for bare `import "path";`.
-                # =====================================================================
-                r"\b(?:import(?:[ \t\n]+type)?|export(?:[ \t\n]+type)?)\b[^;]*?\bfrom[ \t\n]*['\"]([^'\"]+)['\"]|\b(?:require|import)[ \t\n]*\([ \t\n]*['\"]([^'\"]+)['\"]|\bimport[ \t\n]*['\"]([^'\"]+)['\"]",
-                re.M,
-            ),
-            "_named_token_capture": re.compile(
-                r"(?:import(?:[ \t\n]+type)?|export(?:[ \t\n]+type)?)\s+\{([^}]+)\}",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:@author|Created by)\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX: adjacent unbounded quantifiers with overlapping
-            # character sets (`\d+` next to `[^\]]*`) -- the same ReDoS
-            # shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, and scheme earlier in this
-            # epic. Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(getServerSideProps|getStaticProps|generateStaticParams|LoaderFunction|ActionFunction)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(emit|on|once|off|dispatchEvent|EventEmitter|EventTarget)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"\b(Inject|Injectable|Container|resolve|register|tsyringe|inversify)\b"
-            ),
-            # 34. macros
-            "macros": None,  # TypeScript uses transformer plugins/pre-processors, not standard inline macros.
-            # 35. pointers
-            "pointers": None,  # Managed memory environment.
-            # 36. memory_alloc
-            "memory_alloc": re.compile(r"\bnew\s+[A-Z]\w*"),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(logger|winston|pino|morgan|datadog|prometheus|newrelic|sentry)\.(?:info|error|warn|debug|trace|log)\b"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            "debug_prints": re.compile(r"\bconsole\.(?:log|warn|error|dir|trace|info|table|time)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\bas\s+[A-Z]\w*|<\s*[A-Z]\w*\s*>\s*[a-zA-Z_]"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|fatalError|abort|process\.exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(sleep|delay|setTimeout|setInterval|Atomics\.wait)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mutex|lock|synchronized|Semaphore|Atomics\.lock|Atomics\.wait)\b",
-                re.I,
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|readonly|final|Object\.freeze|Object\.seal)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(dispose|close|destroy|clearTimeout|clearInterval|removeEventListener|delete)\b"),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # `#` needed its own un-bounded branch: \b#\b can only match when
-            # `#` is directly sandwiched between two word characters with no
-            # separator (e.g. "x#y"), which never happens in real private-
-            # field syntax (`#foo` is always preceded by `{`, whitespace, or
-            # `.` -- never a bare word char) -- so the `#` alternative was
-            # completely unreachable, same bug as javascript's copy of this.
-            "encapsulation": re.compile(r"\b(private|protected|internal)\b|#[a-zA-Z_$]"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(on|addEventListener|subscribe|watch|effect)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(test\.skip|it\.skip|describe\.skip|xit|xdescribe|mock|stub)\b"),
-            # --- NEW: ADVANCED ALGORITHMIC SENSORS ---
-            # BUG FIX: `function\s*\*` shared a trailing `\b` with word-ending
-            # siblings, but ends in a literal `*` -- `\b` right after can only
-            # fire if the next char is a word character, never true for the
-            # canonical `function* foo()` generator syntax (space after the
-            # `*`). Unlike the co-located `yield\s*\*` (silently shadowed by
-            # the bare `yield` alternative earlier in the same group, so it
-            # happened to still "work"), nothing else in this pattern covers
-            # bare `function*` generator declarations -- a genuine, unmasked
-            # false negative. Pulled both out of the shared boundary group.
-            "lazy_evaluation": re.compile(
-                r"\byield\b|yield\s*\*|function\s*\*|\b(?:Generator|AsyncGenerator|Iterable|AsyncIterable)\b"
-            ),
-            "vectorized_math": re.compile(r"\b(matmul|dot|cross|multiply)\s*\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (JS/TS Specifics) ---
-            "serialization_parsing": re.compile(r"\b(JSON\.parse|JSON\.stringify)\b"),
-            "regex_execution": re.compile(r"\bnew\s+RegExp\b|\.(match|replace|search|split)\s*\("),
-            "time_date_logic": re.compile(
-                r"\b(Date\.now|new\s+Date|setTimeout|setInterval|clearTimeout|clearInterval|performance\.now)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(postMessage|Worker|MessageChannel|child_process|worker_threads|cluster)\b"
-            ),
-            # --- PHASE 4: APPSEC & AI SENSORS (Zero-Trust Pipelines) ---
-            "rce_funnel": re.compile(
-                r"child_process\.(?:spawn|exec|execSync)\s*\(\s*['\"](?:python|bash|sh|bun|node)\b"
-            ),
-            # BUG FIX (Rule 11, nested-delimiter coverage): the flat `[^)]*`
-            # broke on one level of nested parens before the camouflage
-            # keyword -- e.g. a URL built via a helper call
-            # (`fetch(buildUrl("x"), {telemetry: payload})`), a realistic
-            # evasion shape for exactly the kind of disguised-exfiltration
-            # traffic this security-relevant rule exists to catch. Widened
-            # to tolerate one level of self-nesting.
-            "exfiltration_camouflage": re.compile(
-                r"\b(fetch|axios\.post|https\.request)\s*\((?:[^()]|\([^()]*\))*(?:checkmarx|telemetry|metrics|audit|log)\b",
-                re.I,
-            ),
-        },
-    },
-    "java": {
-        "_meta": {
-            "target_version": "Java 25 (Project Loom, Panama, Amber) / Spring Boot 3.4+",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, server-side templates, and embedded scripting formats.
-        "extensions": [".java", ".jav", ".jsp", ".jspf", ".jspx", ".jws", ".bsh"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
-        "discriminators": [
-            ".java",
-            "pom.xml",
-            "build.gradle",
-            "build.gradle.kts",
-            "settings.gradle",
-            "build.xml",
-            "mvnw",
-            "gradlew",
-            ".classpath",
-            ".project",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["java", "jshell"],
-        # UPGRADED: Maps to Family 1 (Standard C)
-        # Rationale: Uses '//' for line-level literature; multi-line literature
-        # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Includes modern switch expressions (yield) and pattern guards (when).
-            # EXCLUDES: Exceptions (throw) - moved to bailout_hits.
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|while|do|catch|finally|continue|break|yield|try|when)\b|\?|:"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Captures method/constructor params and lambdas. Bounded to prevent ReDoS.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE GHOST ARGS SHIELD (JAVA) ]
-                # Same architectural fix as C#. Demands structural proof to separate
-                # definitions from invocations.
-                # Branch 1: Standard Methods MUST have a return type.
-                # Branch 2: Constructors MUST be anchored to `{` or `throws`.
-                # Branch 3: Standard lambdas and method references `::`.
-                # QUADRATIC BLOWUP FIX: Branch 3's bare-identifier lambda form
-                # (`[a-zA-Z_$][\w_$]*` with no \b anchor, unlike Branches 1/2
-                # which are `^`-anchored) got retried at every position in a
-                # long `->`-less line, backtracking O(n) per position for
-                # O(n^2) total (same bug found and fixed in javascript's args).
-                # Bounded to {0,100}; real identifiers don't get that long.
-                # RULE 11 FIX (epic #813/#816): Branch 1's generic-bound modifier
-                # alternative was a flat `<[^>]*>`, truncating at the first `>` and
-                # breaking any single-line one-level-nested generic bound (e.g.
-                # `public static <T, U extends Comparable<U>> T Foo(T a, U b) {` --
-                # the same Rule 11 shape already fixed elsewhere; see
-                # how_to_add_a_language.md). Widened to the established
-                # one-level-nesting idiom `<(?:[^<>]|<[^<>]*>)*>`.
-                # =====================================================================
-                # #1209: parameter-list span wrapped in its own capture group
-                # in branches 1/2/3 (was only reachable via group(0), the
-                # whole match including the annotation/modifier/return-type/
-                # name prefix, or for lambdas nothing at all) so detector.py's
-                # counter isolates just the real parameter text -- the
-                # whole-match fallback overcounted every zero/one-arg
-                # signature by +1 the same way Python's did (#1199). Name
-                # groups added to branches 1/2 too, purely so existing
-                # extraction tests keep passing. The bare `::` method-
-                # reference alternative is left alone -- it has no name or
-                # parameter list to capture at all.
-                r"(?:"
-                # 1. Standard Methods
-                # #2091 (sibling gap to #1486/#1489): the modifier-repeat group
-                # only allowed annotations at the very start (before any
-                # modifier), not interleaved between a generic type parameter
-                # and the return type -- but JSpecify/Checker Framework
-                # return-type annotations (`private <T> @Nullable T foo(...)`,
-                # common in modern Spring code) sit exactly there. func_start's
-                # own equivalent modifier group already got this exact fix in
-                # #1486/#1489 (`@[\w.]+(?:\(...\))?` as one of its repeated
-                # alternatives); args' Branch 1 never got the matching fix, so
-                # a signature
-                # with an interleaved annotation failed this whole branch and
-                # fell through to Branch 3, incidentally matching an unrelated
-                # lambda inside the function's own BODY and misattributing its
-                # tiny arg count as the function's real parameter count
-                # (confirmed: `Binder.java`'s `handleBindResult`, 6 real params,
-                # measured 1 -- borrowed from a `(dataObjectBinder) ->` lambda
-                # three lines into the body).
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,5}(?!(?:new|return|throw|if|else|while|for|switch|catch)\b)(?:(?:public|protected|private|static|final|abstract|synchronized|native|default|strictfp|<(?:[^<>]|<[^<>]*>)*>|@[\w.]+(?:\([^)]*\))?)[ \t\n]+){0,5}(?:[\w<>\[\]?.,]+[ \t\n]+)(\w+)[ \t\n]*(\([^)]*\))|"
-                # 2. Constructors
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,5}(?!(?:new|return|throw|if|else|while|for|switch|catch)\b)(?:(?:public|protected|private|static)[ \t\n]+)?([A-Z]\w*)[ \t\n]*(\([^)]*\))[ \t\n]*(?:throws[ \t\n]+[\w., \t\n]+)?[{]|"
-                # 3. Lambdas & Method Refs
-                r"(\([^)]*\)|[a-zA-Z_$][\w_$]{0,100})[ \t\n]*->|::"
-                r")",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and final (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(void|return|import|package|class|interface|enum|record|extends|implements|var|sealed|non-sealed|permits|new|throws|module|requires|exports|opens|provides|uses)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks. EXCLUDES classes/interfaces. Steps over annotations.
-            "func_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,10}"
-                # =====================================================================
-                # [THE EXECUTION SHIELD]: AST-FREE HALLUCINATION PREVENTION
-                # Previously, the "Instantiation Shield" only stopped `new`. However,
-                # execution verbs like `return TargetFunc();` or `throw TargetFunc();`
-                # were being blindly swallowed by the return-type matcher, treating
-                # 'return' as the data type and 'TargetFunc' as the function name!
-                # FIX: Expanded the shield to explicitly abort on ALL control flow and
-                # execution keywords at the start of the sequence.
-                # =====================================================================
-                r"(?!(?:new|return|throw|if|else|while|for|switch|catch)\b)"
-                # RULE 11 FIX (epic #813/#816): the generic-bound modifier
-                # alternative was a flat `<[^>]*>`, truncating at the first `>` and
-                # breaking any single-line one-level-nested generic bound (e.g.
-                # `public static <T, U extends Comparable<U>> T Foo(T a, U b) {`).
-                # Widened to the established one-level-nesting idiom.
-                r"(?:(?:public|protected|private|static|final|abstract|synchronized|native|default|<(?:[^<>]|<[^<>]*>)*>|@[\w.]+(?:\([^)]*\))?)[ \t\n]+){0,5}"
-                # #1221: the return-type group used to be `{0,5}` (zero
-                # allowed) with the trailing lookahead accepting EITHER `{`
-                # OR `;` (the latter for abstract/interface method stubs,
-                # `abstract Foo bar();`) -- but a bare call statement
-                # (`next();`) has zero modifiers AND zero return-type
-                # tokens too, and satisfies that same `;`-terminated shape,
-                # so it false-positive-matched as a method. A real Java
-                # method always has an explicit return type (even `void`)
-                # UNLESS it's the constructor-shape branch this same regex
-                # also intentionally matches (`public TargetFunc(int x) {`,
-                # no return type but ends in `{`, never `;` -- constructors
-                # can't be abstract/have no body). Split into two mutually
-                # exclusive alternatives instead of making the return-type
-                # group conditional on itself (a `(?(name)...)` conditional
-                # would need to capture it, which shifts every downstream
-                # group's number and breaks callers/tests indexing the
-                # identifier capture positionally): return-type present
-                # allows `;` (stub) or `{` (body); return-type absent (bare
-                # call OR constructor shape) requires `{` only, since only
-                # a constructor legitimately reaches this branch with no
-                # return type, and constructors always have a body.
-                r"(?:"
-                r"(?:[a-zA-Z_$][\w<>$\[\]?.,]*[ \t\n]+){1,5}"
-                r"(?!(?:if|for|while|switch|catch|new|return|class|interface|enum|record)\b)([A-Za-z_$][\w_$]*)\s*\((?=[^)]*\)[ \t\n]*(?:throws[ \t\n]+[\w., \t\n]+)?[{;])"
-                r"|"
-                r"(?!(?:if|for|while|switch|catch|new|return|class|interface|enum|record)\b)([A-Za-z_$][\w_$]*)\s*\((?=[^)]*\)[ \t\n]*\{)"
-                r")",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # RULE 11 FIX (epic #813/#816): there was no generic-parameter
-            # step-over between the class name and the extends/implements
-            # check at all, so ANY generic class declaration (e.g.
-            # `class Foo<T> extends Base<T> {`, `class Foo<T extends
-            # Comparable<T>> implements Serializable {`) left the class's own
-            # `<...>` unconsumed right before `extends`/`implements`, silently
-            # losing the entire inheritance capture (group 2) even though the
-            # class name (group 1) still matched fine.
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]*){0,5}(?:(?:public|protected|private|static|final|sealed|non-sealed|abstract|strictfp)[ \t]+){0,5}(?:class|interface|enum|record)\s+([A-Za-z_$][\w_$]*)(?:\s*<(?:[^<>]|<[^<>]*>)*>)?(?:\s+(?:extends|implements)\s+([A-Za-z_$][\w_$, \t<>\?]*))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|assert|Optional|Objects\.requireNonNull|instanceof)\b|@(Valid|Validated|NotNull|NonNull|NotBlank|Immutable|Transactional)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            "safety_bypasses": re.compile(
-                r"\b(null)\b|return\s+null|\([A-Z]\w+\)\s*(?!->)[a-zA-Z_$]|catch\s*\(\s*(?:Exception|Throwable)\b|@SuppressWarnings|@SneakyThrows|\.get\(\)"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and raw memory/execution risks. EXCLUDES prints (Phase 5).
-            "high_risk_execution": re.compile(
-                r"\b(Runtime\.getRuntime\(\)\.exec|ProcessBuilder|System\.exit|Thread\.stop|Unsafe)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(File|InputStream|OutputStream|Reader|Writer|Scanner|Files\.|Path|Socket|RestTemplate|WebClient|RestClient|HttpClient|Connection|ResultSet|Statement|EntityManager|DataSource|Repository)\b"
-            ),
-            # 10. api (Public Surface Area)
-            "api": re.compile(
-                r"\b(public|protected)\b|@(RestController|Controller|Service|Component|Bean|Produces|Consumes|RequestMapping|GetMapping|PostMapping|PutMapping|DeleteMapping|PatchMapping|Endpoint|WebFilter)\b"
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES final (freeze_hits).
-            # BUG FIX (ReDoS): confirmed genuine O(n^2) scaling (0.045s/
-            # 0.18s/0.71s/2.85s/11.2s for n=5k/10k/20k/40k/80k, ~4x per
-            # doubling) against a long run of plain word characters with
-            # no `.`/`(` anywhere: the unanchored `(?:\w+\.)?` before the
-            # method-name keywords greedily consumes the whole remaining
-            # run, fails to find the `.`, and backtracks one character at
-            # a time -- O(n) work at each of the O(n) positions re.search
-            # retries this unanchored alternative at. Bounded to
-            # `\w{0,100}`, matching the fix shape used throughout this
-            # sweep.
-            "state_mutation": re.compile(
-                r"\b(volatile|Atomic\w+)\b|^[ \t]*(?:this\.)?\w+[ \t]*=|@(?:Setter|Data)\b"
-                r"|(?:\w{0,100}\.)?(?:set[A-Z]\w+|add|put|remove|clear|addAll|replace|computeIfAbsent)\s*\("
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"//[ \t]*(?:public|private|protected|class|void|if|for|while|return|import)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(
-                r"/\*\*|@param|@return|@throws|@deprecated|@see|@since|@apiNote|@implSpec|@Operation|@Schema"
-            ),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r"@(?:Test|ParameterizedTest|Before|After|BeforeEach|AfterEach|Mock|InjectMocks)|assert[A-Za-z0-9_]*\s*\(|\b(?:verify|expect|given|when)\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(synchronized|Thread|Runnable|Future|CompletableFuture|ExecutorService|Semaphore|Atomic\w+|VirtualThread|StructuredTaskScope|ScopedValue|Mono|Flux|Publisher)\b|@(?:Async|Scheduled)"
-            ),
-            # 16. ui_framework (UI / View Components)
-            # BUG FIX: `@ModelAttribute` starts with `@` (non-word), so the
-            # shared leading \b could only fire when a word char
-            # immediately preceded it -- never true for how annotations are
-            # actually written (preceded by whitespace or a line start).
-            # Never matched at all.
-            "ui_framework": re.compile(
-                r"\b(?:SwingUtilities|JFrame|JPanel|javafx\.|ModelAndView|ModelMap|Model|VaadinSession|FacesContext|UIComponent)\b"
-                r"|@ModelAttribute"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"->|::"),
-            # 18. globals (Global / Shared State)
-            # BUG FIX: the `public static final ... =` alternative ends on
-            # `=` (non-word), so the shared trailing \b could never fire --
-            # whatever follows the `=` in a real declaration (a space, then
-            # the value) is never a word character. This extremely common
-            # Java constant-declaration idiom never matched at all.
-            "globals": re.compile(
-                r"\b(?:System\.getProperty|System\.getenv|ThreadLocal|ScopedValue)\b"
-                r"|public\s+static\s+(?:final[ \t]+)?\w+\s+[A-Z_0-9]+[ \t]*="
-                r"|@(?:Value|ConfigurationProperties)"
-            ),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"^[ \t]*@[\w.]+(?:\([^)]*\))?", re.M),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"<\s*[A-Z?][^>]*>"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(
-                r"\.(?:stream|parallelStream|map|filter|reduce|collect|flatMap|forEach|anyMatch|noneMatch|gather)\("
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(Math\.|BigDecimal|BigInteger|Random|SecureRandom|StrictMath|VectorSpecies|FloatVector|IntVector)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Reflection and dynamic proxies.
-            "reflection_metaprogramming": re.compile(
-                r"\b(reflect\.|native|Class\.forName|Method\.invoke|Field\.setAccessible|Proxy\.newProxyInstance|ClassLoader|MethodHandles|VarHandle|Linker\.nativeLinker)\b|@SneakyThrows"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*import\s+(?:static[ \t]+)?[\w.]+;", re.M),
-            "_dependency_capture": re.compile(r"^[ \t]*import[ \t\n]+(?:static[ \t\n]+)?([\w.*]+)[ \t\n]*;", re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"@author\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            # BUG FIX: `@ResponseBody`/`@ResponseStatus` both start with `@`
-            # (non-word) -- same leading-\b bug as ui_framework above.
-            "ssr_boundaries": re.compile(
-                r"\b(?:ModelAndView|FacesServlet|HttpServletRequest|HttpServletResponse|JspWriter|ThymeleafViewResolver)\b"
-                r"|@ResponseBody|@ResponseStatus"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # BUG FIX: `@EventListener`/`@KafkaListener`/`@RabbitListener`/
-            # `@JmsListener` all start with `@` -- same bug.
-            "events": re.compile(
-                r"\b(?:ApplicationEvent|ApplicationEventPublisher|ApplicationListener|EventObject|publishEvent)\b"
-                r"|@EventListener|@KafkaListener|@RabbitListener|@JmsListener"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # BUG FIX: 10 of the 12 alternatives are `@`-prefixed Spring/
-            # Guice annotations -- same bug, at scale.
-            "dependency_injection": re.compile(
-                r"\b(?:ApplicationContext|BeanFactory)\b"
-                r"|@Autowired|@Inject|@Qualifier|@Primary|@Component|@Service|@Repository|@Bean|@Configuration|@Provides"
-            ),
-            # 34. macros
-            "macros": None,  # Java lacks preprocessor macros.
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Project Panama (Java 22+) bridging to native memory.
-            "pointers": re.compile(r"\b(MemorySegment|MemoryLayout|ValueLayout|AddressLayout|SymbolLookup)\b"),
-            # 36. memory_alloc
-            "memory_alloc": re.compile(
-                r"\b(Arena\.ofConfined|Arena\.ofShared|Arena\.ofAuto|Arena\.global|SegmentAllocator|allocateFrom|ByteBuffer\.allocateDirect)\b"
-            ),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(log|logger|LOGGER|LoggerFactory|LogManager|MDC|Tracer|Span)\.(?:info|error|warn|warning|debug|trace|log)\b|@Slf4j|@Log4j2"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            # BUG FIX: `\.printStackTrace\(\)` ends on `)` (non-word), so
-            # the shared trailing \b could never fire. Never matched.
-            "debug_prints": re.compile(
-                r"\b(?:System\.out\.(?:print|println|printf)|System\.err\.(?:print|println|printf))\b"
-                r"|\.printStackTrace\(\)"
-            ),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\(\s*(?:int|long|short|byte|char|float|double|boolean|[A-Z][A-Za-z0-9_]*)\s*\)\s*[a-zA-Z_$]"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|abort|System\.exit|halt)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(Thread\.sleep|TimeUnit\.[A-Z_]+\.sleep|delay|CountDownLatch\.await)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>>?|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mutex|lock|synchronized|Semaphore|ReentrantLock|ReadWriteLock|Condition)\b",
-                re.I,
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(final|immutable|unmodifiable[A-Z]\w*|Object\.freeze)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(close|dispose|shutdown|free|release|cleaner\.register)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b(private|protected|internal)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            # BUG FIX: `@KafkaListener`/`@RabbitListener` start with `@` --
-            # same leading-\b bug as dependency_injection above.
-            "listeners": re.compile(r"\b(?:on[A-Z]\w*|addEventListener|subscribe)\b|@KafkaListener|@RabbitListener"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"@(?:Ignore|Disabled)|test\.skip\(|mock\(|spy\(|verifyZeroInteractions"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Java Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(ObjectMapper|readValue|readTree|fromJson|ObjectInputStream|DocumentBuilder|SAXParser)\b"
-            ),
-            "regex_execution": re.compile(r"\b(Pattern\.compile|Matcher\.find|\.matches\()\b"),
-            "time_date_logic": re.compile(
-                r"\b(LocalDate(?:Time)?|ZonedDateTime|Instant|Duration|System\.currentTimeMillis|Calendar\.getInstance)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(r"\b(ProcessBuilder|KafkaTemplate|RabbitTemplate|JmsTemplate|java\.rmi)\b"),
-        },
-    },
-    "csharp": {
-        "_meta": {
-            "target_version": "C# 14 / .NET 10 / Modern ASP.NET Core & Blazor",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy ASP.NET, and build-tooling formats.
-        "extensions": [
-            ".cs",
-            ".csx",
-            ".razor",
-            ".cshtml",
-            ".cake",
-            ".linq",
-            ".ashx",
-            ".asmx",
-            ".ascx",
-            ".svc",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": ["build.cake"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
-        "discriminators": [
-            ".cs",
-            ".csproj",
-            ".sln",
-            "packages.config",
-            "nuget.config",
-            "global.json",
-            "App.config",
-            "Web.config",
-            "project.json",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["dotnet-script", "csi"],
-        # UPGRADED: Maps to Family 1 (Standard C)
-        # Rationale: Uses '//' for line-level literature; multi-line literature
-        # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES throw (bailout_hits).
-            # Includes pattern matching (and, or, not) and null-coalescing.
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|foreach|while|do|catch|finally|continue|break|goto|try|yield\s+return|yield\s+break|and|or|not)\b|\?\?|\?\.|(?<=\s)\?(?=\s)"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks for methods, primary constructors, and lambdas.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE GHOST ARGS SHIELD (C#) ]
-                # To prevent hallucinating standard function invocations, we demand structural proof.
-                # Branch 1: Standard Methods MUST have a return type (e.g., `Task<T> Foo(...)`).
-                # Branch 2: Constructors lack return types, so they MUST be anchored to `:` or `{`.
-                # Branch 3: Standard fat-arrow lambdas.
-                # Upgraded all spaces to `[ \t\n]+` to support Pathological vertical parameters.
-                # QUADRATIC BLOWUP FIX: Branch 3's bare-identifier lambda form
-                # (`[a-zA-Z_$][\w_$]*` with no \b anchor, unlike Branches 1/2
-                # which are `^`-anchored) got retried at every position in a
-                # long `=>`-less line, backtracking O(n) per position for
-                # O(n^2) total (same bug found and fixed in javascript's args).
-                # Bounded to {0,100}; real identifiers don't get that long.
-                # =====================================================================
-                # #1209: parameter-list span wrapped in its own capture group
-                # in all three branches (was only reachable via group(0), the
-                # whole match including the attribute/modifier/return-type/
-                # name prefix, or for lambdas nothing at all) so detector.py's
-                # counter isolates just the real parameter text -- the
-                # whole-match fallback overcounted every zero/one-arg
-                # signature by +1 the same way Python's did (#1199). Name
-                # groups added to branches 1/2 too, purely so existing
-                # extraction tests keep passing.
-                r"(?:"
-                # 1. Standard Methods
-                r"^[ \t]*(?:\[[^\]]*\][ \t\n]*){0,5}(?:(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|scoped|readonly)[ \t\n]+){0,5}(?:(?!(?:new|if|for|while|switch|return|yield|delegate|event)\b)(?:[\w<>\[\]?,.*]|\([^()]{0,100}\))+[ \t\n]{1,200}){1,10}(operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|(?!(?:new|if|for|while|switch|return|yield|delegate|event)\b)\w+)(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|"
-                # 2. Constructors
-                r"^[ \t]*(?:(?:public|private|protected|internal|static|unsafe)[ \t\n]+)?([A-Z]\w*)(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))[ \t\n]*(?::[ \t\n]*(?:base|this)|[{])|"
-                # 3. Lambdas
-                r"(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)|[a-zA-Z_$][\w_$]{0,100})[ \t\n]*=>"
-                r")",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const/readonly (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(var|return|class|interface|struct|record|enum|using|namespace|yield|await|delegate|event|init|required|field|implements|extends|declare)\b|=>"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks. EXCLUDES types/classes.
-            #
-            # =====================================================================
-            # [ CONTEXT: C# "IRON WALL" FUNCTION EXTRACTOR & REDOS SHIELD ]
-            # PURPOSE: Anchors executable logic blocks (methods) in C# up to C# 14.
-            # VULNERABILITY: C# allows massive return types (e.g., nested tuples),
-            #   generics, and explicit interface implementations. If spaces are allowed
-            #   freely inside unbounded quantifiers, massive Roslyn test strings cause
-            #   Catastrophic Backtracking, locking the Python GIL at the C-level.
-            # THE FIX: Strict character exclusion, numeric bounding, and mutual
-            #   exclusivity between word characters and spaces.
-            #
-            # [ THE VERTICAL IRON WALL UPDATE ] (Hard-learned from Pathological Fuzzer):
-            #   Developers often place attributes, modifiers, return types, and names
-            #   on completely separate lines. We replaced horizontal spaces `[ \t]+`
-            #   with strictly bounded multi-line spaces `[ \t\n]+`. We EXPLICITLY DO NOT
-            #   use `\s+` because unbounded wildcards with newlines trigger ReDoS.
-            # =====================================================================
-            "func_start": re.compile(
-                # 1. THE HORIZONTAL ANCHOR & ATTRIBUTE SHIELD
-                # Anchors to the line start. Steps over C# attributes [Obsolete], [Fact], etc.
-                # [REDOS ARMOR]: `[^\]]{0,250}` prevents a missing closing bracket from spiraling
-                # across the entire file. `{0,5}` caps the max number of stacked attributes.
-                # [VERTICAL FIX]: `[ \t\n]*` allows attributes to sit on lines above the function.
-                r"^[ \t]*(?:\[[^\]]{0,250}\][ \t\n]*){0,5}"
-                # =====================================================================
-                # [THE INSTANTIATION SHIELD]: AST-FREE HALLUCINATION PREVENTION
-                # If an object instantiation `new TargetFunc()` is poorly indented against
-                # the left margin, the engine will hallucinate it as a constructor definition
-                # (because constructors naturally lack return types).
-                # FIX: Forcefully abort matching if the sequence begins with the 'new' keyword
-                # followed immediately by an identifier and an opening parenthesis.
-                # =====================================================================
-                r"(?!new[ \t\n]+[@A-Za-z_$][\w_$.]*(?:<[^>]{0,100}>)?[ \t\n]*\()"
-                r"(?:"
-                # 2. MODIFIERS (Linkage, Storage, & Access)
-                # Matches `public async`, `protected internal static`, etc.
-                # [VERTICAL FIX]: `[ \t\n]+` allows modifiers to wrap across newlines.
-                r"(?:(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly)[ \t\n]+){1,5}"
-                # 3. THE "IRON WALL" RETURN TYPE
-                # Safely captures complex modern C# return types before the function name.
-                # Supports: standard types `int`, arrays `int[]`, generics `List<T>`,
-                # namespaces `System.Threading.Tasks.Task`, tuples `(int, string)`, and nullables `string?`.
-                # [REDOS ARMOR 1]: `(?![ \t]*#)` prevents the engine from crossing into a #region or #if block.
-                # [REDOS ARMOR 2]: The character class `[...]+` STRICTLY FORBIDS spaces/tabs. The `[ \t\n]+`
-                # follows it outside the group. This mutual exclusivity guarantees O(N) parsing.
-                # [REDOS ARMOR 3]: Explicitly prevents return types from eating modifiers during a backtrack,
-                # sealing the overlapping permutation leak that caused Catastrophic Backtracking.
-                # BUG FIX (Rule 14): this loop's trailing `[ \t\n]+` and the
-                # final `[ \t\n]*\(` before the opening paren (item 5 below)
-                # are two effectively-adjacent unbounded whitespace
-                # quantifiers -- once a real method never follows (no `(`
-                # anywhere), the engine must retry every possible split of
-                # the same trailing whitespace run across both gaps, O(n^2).
-                # Confirmed ~4x/doubling, 1.5s at n=32000 on a bare
-                # `"int foo" + " "*n` payload. Bounded both to `{1,200}`/
-                # `{0,200}`, same fix shape already applied in cpp.
-                # #1314: this per-token exclusion only banned MODIFIER keywords, so a statement
-                # header preceding a call expression -- `foreach (var x in someList.Method())`,
-                # `for (...)`, `using (...)` -- could get silently swallowed token-by-token as
-                # fake "return type" tokens, letting the walk land on the call's own receiver+
-                # method (e.g. `someList.Method`) as if it were a real function name (group 1's
-                # `[\w_$.]*` already permits dots, meant for explicit interface implementations
-                # like `IFoo.DoWork`, but that also legalizes `receiver.Method` as a shape).
-                # Added the same statement/control-flow keyword set item 4 already excludes at
-                # the FINAL identifier position, plus the contextual keywords item 4 also gained
-                # below (`var`/`in`/`when`/`or`/`and`/`not`/`is`) since those can equally start a
-                # parenthesized non-function construct (`var (a, b) = ...`, `... in expr(...)`)
-                # mid-walk, not just at position zero. Confirmed via language-crucible/data/
-                # csharp/roslyn/{CSharpCompilation,Workspace}.cs (real, mainstream Roslyn source).
-                # #2054: (1) a bare comma in this token class let the walk absorb comma-separated
-                # CALL ARGUMENTS (`ref mdName,`/`SpecialType.None,` inside a multi-line call) as if
-                # they were return-type tokens, landing on the call's own target identifier as a
-                # phantom function name. A real return type never has a bare top-level comma outside
-                # a tuple's own parens, a generic's own angle brackets, or an array's own brackets --
-                # moved comma-tolerance into explicit `<...>`/`[...]` single-token alternatives
-                # (tuple commas already had `\([^()]{0,80}\)`) instead of allowing it bare. Confirmed
-                # via a full corpus diff this also retroactively closes ~190 previously-unknown
-                # phantom occurrences of the identical shape (`this.EatToken`, `this.ParseXxx`,
-                # `_syntaxFactory.Xxx`, etc. -- every one confirmed to have zero real declaration
-                # anywhere in the file, only call sites) that were never in scope for #1314/#2035's
-                # own fixes but shared this exact root cause.
-                # (2) `(?!\?)` at each token's start rejects a token beginning with `?` -- closes a
-                # ternary operator (`\n ? expr`) being consumed as if it were a nullable-type marker
-                # (`string?`, where the `?` never STARTS a token, it ends the preceding one).
-                # The `<...>` alternative itself tolerates ONE level of nesting inside the outer
-                # angle brackets (mirrors the pre-existing groovy pattern at this file's Java/Groovy
-                # rule) -- needed for real multi-generic return types like `ImmutableSegmentedDictionary
-                # <ReadOnlyMemory<byte>, OneOrMany<SyntaxTree>>` (roslyn/CSharpCompilation.cs), which a
-                # flat `<[^>]{0,100}>` can't span since it stops at the FIRST inner `>`. Bounded to 5
-                # nested pairs per outer token -- 3+ levels of nesting (`List<Foo<Bar<Baz>>>`) is a
-                # real, accepted gap, not attempted, since it wasn't found in the corpus.
-                r"(?:(?![ \t]*#)(?!(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly|delegate|event|if|for|foreach|while|switch|catch|using|lock|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|var|in|when|or|and|not|is)\b)(?!\?)(?:[a-zA-Z0-9_<>\[\]?.*]|\([^()]{0,80}\)|<[^<>]{0,100}(?:<[^<>]{0,100}>[^<>]{0,100}){0,5}>|\[[^\]]{0,80}\])+[ \t\n]{1,200}){0,10}"
-                # 4. THE "NOT A FUNCTION" SHIELD
-                # Negative lookahead ensuring we don't accidentally capture control flow,
-                # primitive type keywords, or object instantiations as function names.
-                # #1314: also excludes the contextual keywords that can directly precede a `(` in
-                # non-function constructs -- `static (args) => ...` (a static lambda, C# 9+),
-                # `var (a, b) = Method(...)` (tuple deconstruction), `catch (Ex e) when (...)`
-                # (exception filter), and the pattern-combinator keywords `or`/`and`/`not`/`is`
-                # (`x is Foo or Bar`, C# 9+ pattern matching) -- each of which was previously
-                # captured whole as a phantom function literally named "static"/"var"/"when"/"or"
-                # etc. when no preceding modifier/type tokens were consumed. Confirmed via the
-                # same Roslyn corpus files as item 3's fix above.
-                r"(?!(?:if|for|foreach|while|switch|catch|using|lock|new|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|delegate|event|var|in|when|or|and|not|is|static)\b)"
-                # 5. THE IDENTIFIER CAPTURE (GROUP 1) & GENERIC STEPPER
-                # Captures the actual satellite name:
-                # - `[@A-Za-z_$]` supports C# verbatim identifiers (e.g., `@class`).
-                # - `[\w_$.]*` supports explicit interface implementations (e.g., `IMyInterface.DoWork`).
-                # - `(?:[ \t\n]*<[^>]{0,100}>)?` safely steps over method-level generic definitions
-                #   like `<T, U>` BEFORE hitting the opening parenthesis.
-                # [VERTICAL FIX]: Removed `\n` exclusion from the generic stepper to support multi-line generics.
-                r"((?:operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|[@A-Za-z_$][\w_$.]*))(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]{0,200}\("
-                r"|"
-                # Branch B: Has return type (no modifier)
-                r"(?:(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly)[ \t\n]+){0,5}"
-                # #2054: same fix as Branch A's identical token loop above -- see its comment for
-                # full rationale (bare comma let call-argument lists be absorbed as return-type
-                # tokens; `(?!\?)` closes a ternary `?` being consumed as a nullable-type marker).
-                r"(?:(?![ \t]*#)(?!(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly|delegate|event|if|for|foreach|while|switch|catch|using|lock|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|var|in|when|or|and|not|is)\b)(?!\?)(?:[a-zA-Z0-9_<>\[\]?.*]|\([^()]{0,80}\)|<[^<>]{0,100}(?:<[^<>]{0,100}>[^<>]{0,100}){0,5}>|\[[^\]]{0,80}\])+[ \t\n]{1,200}){1,10}"
-                r"(?!(?:if|for|foreach|while|switch|catch|using|lock|new|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|delegate|event|var|in|when|or|and|not|is|static)\b)"
-                r"((?:operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|[@A-Za-z_$][\w_$.]*))(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]{0,200}\("
-                r"|"
-                # Branch C: Zero-prefix (No modifier, No return type)
-                # #1418: The zero-prefix branch matches ordinary multi-line bare call statements if their
-                # argument list spans multiple lines and ends in a bare ';' with no '{'. We apply an
-                # "Invocation Shield" (similar to dart #1221 / rust #1319 / csharp's own args shield) to
-                # only allow the bare-';' tolerance on branches that matched a modifier or return type
-                # (which a real abstract/interface method declaration has). For this zero-prefix path, we
-                # require the signature to actually open a block (`{` or `=>`).
-                r"(?!(?:if|for|foreach|while|switch|catch|using|lock|new|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|delegate|event|var|in|when|or|and|not|is|static)\b)"
-                r"((?:operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|[@A-Za-z_$][\w_$.]*))(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]{0,200}\("
-                r"(?=[ \t\n]*(?:[^)]|\([^)]*\))*[ \t\n]*\)[ \t\n]*(?:\{|=>))"
-                r")",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # RULE 11 FIX (epic #813/#820): there was no generic-parameter step-over between the
-            # class/interface/etc. name and the base-list `:` check, so ANY generic type with a base
-            # list (`class Foo<T> : Base<T> {`, extremely common) left the class's own `<...>`
-            # unconsumed right before `:`, silently losing the entire base-list capture (group 2)
-            # even though the name (group 1) still matched fine -- same failure shape as java's
-            # #816 class_start bug. Also added a primary-constructor parameter-list step-over
-            # (`record Foo<T>(T Value) : Base<T>`, C# 9+ records / C# 12 primary constructors on
-            # classes/structs, mainstream and common) for the same reason -- the `(...)` between the
-            # generics and the `:` was equally unconsumed.
-            # #1708: modifier alternation was missing `readonly`/`ref` -- C# 7.2+
-            # `readonly struct`, `ref struct`, and `readonly ref struct` declarations
-            # (mainstream in modern codebases, e.g. Roslyn's own parser) structurally failed to
-            # match, a pure class_recall gap. Verified via roslyn/CSharpCompilation.cs
-            # (`readonly struct ImportInfo`) and roslyn/LanguageParser.cs
-            # (`readonly ref struct ParserSyntaxContextResetter`): found_classes 22 -> 24,
-            # class recall 91.7% -> 100%, zero precision cost (extra_classes still 0).
-            "class_start": re.compile(
-                r"^[ \t]*(?:\[[^\]]*\][ \t]*){0,5}(?:(?:public|internal|private|protected|static|sealed|abstract|partial|file|unsafe|new|readonly|ref)[ \t]+){0,5}(?:class|interface|struct|record(?:[ \t]+(?:struct|class))?|enum)\s+([A-Za-z_$][\w_$]*)(?:\s*<(?:[^<>]|<[^<>]*>)*>)?(?:\s*\((?:[^()]|\([^()]*\))*\))?(?:\s*:\s*([A-Za-z_$][\w_$, \t<>\?]*))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|checked|is|as|nameof|required|ArgumentNullException|ThrowIfNull|ThrowIfNullOrWhiteSpace)\b|\[(?:Required|NotNull|Authorize)\]|\?\?|\?\."
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Null-forgiving operator, dynamic, and unsafe bypasses.
-            "safety_bypasses": re.compile(
-                r"!\.|\bnull!|#pragma\s+warning\s+disable|\.Result\b|\.Wait\(\)|\b(dynamic)\b"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Extreme tech debt/vulnerabilities. EXCLUDES TODO (debt) and Console (print).
-            "high_risk_execution": re.compile(
-                r"\b(Thread\.Abort|Process\.Start|Environment\.FailFast|Environment\.Exit|goto)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(File|Directory|Stream|HttpClient|Path|SqlConnection|SqlCommand|DbContext|DbSet|HttpRequest|HttpResponse)\b\.|\[Table\("
-            ),
-            # 10. api (Public Surface Area)
-            # Public exposure surface. Explicit visibility + Controller mapping.
-            "api": re.compile(
-                r"\b(public|internal)\b|\[(?:HttpGet|HttpPost|HttpPut|HttpDelete|Route|ApiController|HubMethodName)\]|\bapp\.Map(?:Get|Post|Put|Delete|Group)\b"
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES const/readonly (freeze_hits).
-            # BUG FIX (Rule 13): `^[ \t]*(?:this\.)?\w+[ \t]*=` requires
-            # `re.M` for the `^` to anchor per-line -- without it, `^` only
-            # matches true string-start, so this alternative (the plain
-            # `field = value;` assignment form, arguably the most common
-            # state-mutation shape in any real C# file) could only ever
-            # fire if the assignment happened to be the first line of the
-            # entire scanned content.
-            "state_mutation": re.compile(
-                r"\b(set|field)\s*[{;]|volatile|ref\s|out\s|^[ \t]*(?:this\.)?\w+[ \t]*=|(?:\w+\.)?(?:Add|Remove|Clear|Insert|Push|Pop|Update)\s*\(",
-                re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # BUG FIX (Rule 12): only checked `//` line comments, entirely
-            # missing `/* */` block comments despite csharp being a
-            # `standard_block` language where both styles are equally
-            # idiomatic (`/* if (x) foo(); */`).
-            "dead_code": re.compile(
-                r"(?://|/\*)[ \t]*(?:public|private|protected|internal|class|void|if|for|foreach|while|return|using)\b"
-            ),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"///|///\s*<summary>|///\s*<param|///\s*<returns>|///\s*<remarks>"),
-            # 14. test (Testing & Assertions)
-            # BUG FIX: `Should\(\)` (FluentAssertions) ends on `)`
-            # (non-word), so the shared trailing \b could never fire --
-            # the fluent form is always immediately chained with another
-            # `.method(...)`, never followed by a word character. Never
-            # matched.
-            "test": re.compile(
-                r"\[(?:Test|Fact|Theory|TestMethod|TestClass|SetUp|TearDown)\]"
-                r"|\b(?:Assert\.|Mock\.|Substitute\.For)\b|Should\(\)"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|Task|ValueTask|Thread|Parallel|SemaphoreSlim|Mutex|Channel|IAsyncEnumerable|Interlocked)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r"\b(ControllerBase|IActionResult|Binding|ObservableCollection|DependencyProperty|ComponentBase|RenderFragment|MonoBehaviour)\b"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"=>|delegate[ \t]*\{"),
-            # 18. globals (Global / Shared State)
-            # BUG FIX (Rule 9): the `public static ... = ` alternative ends
-            # in `=` (non-word) but shared a trailing `\b` with word-ending
-            # siblings -- only fired when the assignment had zero
-            # whitespace around `=` (`X=5;`), breaking on the idiomatic
-            # spaced form (`MAX_VALUE = 100;`) that's the dominant real C#
-            # style.
-            "globals": re.compile(
-                r"\b(?:ConfigurationManager|AsyncLocal)\b|\bEnvironment\.|"
-                r"\bpublic\s+static\s+(?:readonly[ \t]+)?[\w<>]+\s+[A-Z_0-9]+[ \t]*=|\[ThreadStatic\]"
-            ),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"^[ \t]*\[[A-Za-z_][^\]]*\]", re.M),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"<\s*[A-Z][^>]*>|\bwhere\s+\w+\s*:"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(
-                r"\.(?:Select|Where|OrderBy|GroupBy|Aggregate|Any|All|ToList|ToArray|SelectMany)\(|^[ \t]*from\s+\w+\s+in\s+",
-                re.M,
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(Math\.|MathF\.|Vector[234]|Matrix4x4|Random|Complex|Tensor|TensorPrimitives)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Reflection and dynamic Emit.
-            "reflection_metaprogramming": re.compile(
-                r"\b(System\.Reflection|DllImport|LibraryImport|MethodInfo|Activator|Marshal\.|Emit|ILGenerator)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*(?:global[ \t]+)?using\s+(?:static[ \t]+)?[\w.]+;", re.M),
-            # ALIAS DIRECTIVE FIX (epic #813/#820): `using Alias = Target.Namespace;` (a using-alias
-            # directive, common for shortening long generic types or disambiguating identical type
-            # names from different namespaces) didn't match AT ALL -- there was no allowance for the
-            # `IDENT =` prefix before the actual target, so the whole statement produced zero
-            # dependency-graph edges. Added an optional alias-prefix skip-over so the capture lands
-            # on the real target (`Target.Namespace`), not the local alias name. Also added an
-            # optional generic-suffix step-over after the target capture: an alias directive's
-            # target is very commonly a CLOSED generic type (`using StringList =
-            # System.Collections.Generic.List<string>;` -- the primary real-world reason alias
-            # directives exist, to shorten long generics), and the required trailing `;` check
-            # failed on the unconsumed `<...>` without it.
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:global[ \t\n]+)?using[ \t\n]+(?:static[ \t\n]+)?(?:[\w]+[ \t\n]*=[ \t\n]*)?([\w.]+)(?:[ \t\n]*<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]*;",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:<author>|Author:|Created by)\s*(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust,
-            # c, and cpp earlier in this epic (the 10th hit). Bounded both
-            # quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (The Blazor/Razor Horizon)
-            "ssr_boundaries": re.compile(
-                r"@(?:page|rendermode|code|layout)|\[(?:Route|CascadingParameter)\]|\b(RenderFragment|ComponentBase|IViewComponentResult)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # BUG FIX: `+=`/`-=` (event subscribe/unsubscribe operators) used
-            # to be inside the \b(...)\b wrapper. \b requires a word/non-word
-            # transition; since neither `+`/`=` nor `-`/`=` is a word
-            # character, `\b+=\s*\b` could only match with no surrounding
-            # whitespace at either edge (e.g. "x+=y"), never idiomatic C#
-            # like "MyEvent += handler" (spaced on both sides). Split out
-            # unguarded, same fix shape as #621's dash/hash families.
-            "events": re.compile(
-                r"\b(event\s+[\w<>]+\s+\w+|EventHandler|Invoke|Raise|MediatR|INotification|IRequest|Publish)\b|\+=\s*|-=\s*"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"\b(IServiceCollection|AddTransient|AddScoped|AddSingleton|AddKeyed|\[Inject\]|FromServices|IServiceProvider)\b"
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"^[ \t]*#(?:define|undef|if|elif|else|endif|region|endregion|pragma|warning|error)\b",
-                re.M,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Native pointers and modern memory structures (Span/Memory).
-            "pointers": re.compile(r"\b(?:fixed|stackalloc|Unsafe\.AsPointer|IntPtr|UIntPtr|nint|nuint)\b|->"),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(
-                r"\b(Marshal\.AllocHGlobal|GC\.AllocateArray|MemoryPool|ArrayPool<[^>]*>\.Shared\.Rent|ref\s+struct|scoped\s+ref)\b"
-            ),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:ILogger|_logger|Log|TelemetryClient|ActivitySource)\.(?:LogInformation|LogError|LogWarning|LogDebug|StartActivity|TrackEvent)\b|\[LoggerMessage"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            "debug_prints": re.compile(r"\b(Console\.(?:Write|WriteLine|Error)|Debug\.(?:Write|WriteLine|Print))\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\bas\s+[A-Z]\w*|\(\s*(?:int|long|short|byte|char|float|double|decimal|bool|string|[A-Z][A-Za-z0-9_]*)\s*\)\s*[a-zA-Z_$]"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|abort|FailFast|Environment\.Exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            # BUG FIX: `Wait\(\)` ends on `)` (non-word), so the shared
-            # trailing \b could never fire (`task.Wait();` -- the next
-            # char is always `;`, a newline, or another `.method`, never a
-            # word character). Never matched.
-            "thread_sleeps": re.compile(r"\b(?:sleep|delay|Task\.Delay|Thread\.Sleep)\b|\bWait\(\)"),
-            # 43. bitwise_ops (Bitwise Operations)
-            # Low-level byte manipulation. Safely maps to C# bitwise operators without overlapping language-specific pipelines.
-            "bitwise_ops": re.compile(r"<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mutex|lock|Monitor|Semaphore|Interlocked|SpinLock|ReaderWriterLockSlim)\b",
-                re.I,
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|readonly|init|Immutable[A-Z]\w*)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # BUG FIX (grammar mismatch): this was entirely case-sensitive
-            # and only matched lowercase `dispose(`/`close(`/etc -- but
-            # idiomatic C# always PascalCases public members
-            # (`.Dispose()`, `.Close()`), so the realistic form never
-            # matched at all; only a non-idiomatic lowercase call would.
-            "cleanup": re.compile(r"\b(dispose|close|free|delete|GC\.Collect|GC\.SuppressFinalize)\b\s*\(", re.I),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b(private|protected|internal|file)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            # BUG FIX (grammar mismatch): case-sensitive lowercase
-            # `subscribe`/`on` never matched idiomatic C# PascalCase
-            # (Rx.NET's `.Subscribe(...)`, SignalR's `.On<T>(...)`) --
-            # same shape as the `cleanup` fix above.
-            "listeners": re.compile(r"\b(on|addEventListener|subscribe|EventHandler)\b|\+=", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX (real coverage gap): missing xUnit's `[Fact(Skip =
-            # "...")]` / `[Theory(Skip = "...")]` form entirely -- the
-            # dominant real xUnit skip idiom (NUnit/MSTest use a standalone
-            # `[Ignore]` attribute instead, which was already covered).
-            "test_skip": re.compile(
-                r"\[(?:Ignore|Skipped)\]|\[(?:Fact|Theory)\([^)]*Skip\s*=|test\.skip\(|mock\(|stub\(|Substitute\.For"
-            ),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (C# Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(JsonSerializer\.Deserialize|JsonConvert\.DeserializeObject|XmlSerializer|BinaryFormatter)\b"
-            ),
-            "regex_execution": re.compile(r"\b(Regex\.Match(?:es)?|Regex\.Replace|Regex\.IsMatch|new\s+Regex)\b"),
-            "time_date_logic": re.compile(
-                r"\b(DateTime\.Now|DateTime\.UtcNow|DateTimeOffset|TimeSpan|Stopwatch\.StartNew)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(r"\b(Process\.Start|NamedPipeServerStream|ChannelFactory|GrpcChannel)\b"),
-        },
-    },
-    "go": {
-        "_meta": {
-            "target_version": "Go 1.22+ (Generics, Slog, Workspace paradigms)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        "extensions": [".go"],
-        "exact_matches": [],
-        "discriminators": [
-            ".go",
-            "go.mod",
-            "go.sum",
-            "go.work",
-            "Gopkg.toml",
-            "Gopkg.lock",
-            "glide.yaml",
-            "vendor/modules.txt",
-        ],
-        "shebangs": ["go", "gorun", "yaegi"],
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Includes select/case and range-based loops. EXCLUDES panic (bailout_hits).
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|range|select|goto|break|continue|fallthrough)\b|&&|\|\|"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks for functions and methods. Bounded generics [^\]]* and params [^)]*.
-            # #1209: parameter-list span wrapped in its own capture group (was
-            # only reachable via group(0), the whole match including the
-            # "func"/receiver/name prefix) so detector.py's counter isolates
-            # just "(...)" -- the whole-match fallback overcounted every
-            # zero/one-arg signature by +1 the same way Python's did (#1199).
-            # Name group added too, purely so existing extraction tests (which
-            # check the captured name) keep passing.
-            "args": re.compile(
-                r"func[ \t\n]+(?:\([^)]*\)[ \t\n]+)?(\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t\n]*(\((?:[^()]|\([^()]*\))*\))",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: const/var (freeze_hits) and Capitalization (encapsulation).
-            "structural_boundaries": re.compile(r"\b(package|import|return|type|go|defer|chan|map|interface|struct)\b"),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks.
-            # Bypasses the 'func' keyword, skips optional method receivers (e.g. (s *Server)),
-            # and strictly captures the actual identifier name. Ignores anonymous functions.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL RECEIVER SHIELD ]
-                # Go developers occasionally format complex struct receivers across multiple lines.
-                # FIX: Replaced horizontal spaces `[ \t]+` with `[ \t\n]+` around the `func`
-                # keyword, receiver block, and function name to safely leap across vertical gaps.
-                # GENERIC FUNCTION FIX (epic #813/#817): a top-level generic function's own
-                # type-parameter list (`func Foo[T constraints.Ordered](a, b T) T {`, Go 1.18+,
-                # mainstream since 2022) went straight from the captured name to `[ \t\n]*\(` with
-                # no allowance for a `[...]` list in between, so the whole function was invisible
-                # to the engine. (Generic *methods* with a receiver already matched by accident --
-                # the receiver's own `[^)]+` char class doesn't care about brackets -- and
-                # class_start/args already had this exact step-over; func_start was the outlier.)
-                # Added the same bounded, already-proven-safe `(?:[ \t\n]*\[[^\]]*\])?` step-over.
-                # =====================================================================
-                r"^[ \t]*func(?:[ \t\n]+\([^)]+\))?[ \t\n]+([A-Za-z_$][\w_$]*)(?:[ \t\n]*\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t\n]*\(",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # =====================================================================
-            # [ THE VERTICAL GENERICS SHIELD (GO) ]
-            # Go 1.18+ introduces generic type parameters `[T any]` which can be
-            # vertically formatted before the `struct` or `interface` keyword.
-            # FIX: Injected a capture group `([a-zA-Z_]\w*)` for exact entity name
-            # extraction. Upgraded the `\s+` to explicitly bounded `[ \t\n]+` and
-            # decoupled the generic stepper `(?:[ \t\n]*\[[^\]]*\])?` to safely
-            # leap across vertical boundaries.
-            # =====================================================================
-            "class_start": re.compile(
-                r"^[ \t]*type[ \t\n]+([a-zA-Z_]\w*)(?:[ \t\n]*\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t\n]+(?:struct|interface)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # BUG FIX: `recover\(\)` ends on `)` (non-word), so the shared
-            # trailing \b could never fire -- the classic
-            # `defer func() { recover() }()` idiom never matched.
-            "safety": re.compile(
-                r"err\s*!=\s*nil|\b(?:errors\.(?:Is|As|New|Join)|sync\.(?:Once|WaitGroup)|context\.Context)\b|\brecover\(\)"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Explicitly ignoring errors via blank identifier.
-            "safety_bypasses": re.compile(r'_\s*,\s*err[ \t]*=|_[ \t]*=\s*\w+|\bimport\s+(?:\.[ \t]+)?"'),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process-killing commands and direct syscalls. EXCLUDES TODO (debt) and fmt.Print (print_hits).
-            "high_risk_execution": re.compile(r"\b(os\.Exit|syscall\.Kill|syscall\.RawSyscall|log\.Fatal(?:f|ln)?)\b"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(os\.(?:Open|Create|ReadFile)|io\.(?:Reader|Writer|Copy)|net/http|database/sql|bufio\.|grpc\.|sqlx\.|pgx\.)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Implicit Public Reality: Capitalized top-level identifiers in Go are public.
-            # BUG FIX: `^[ \t]*` allowed arbitrary leading whitespace, so
-            # the original (no-prefix) form matched ANY indented line
-            # starting with a capitalized word -- including a bare call to
-            # an exported function inside a function body
-            # (`    DoSomething()`), which is not a declaration at all.
-            # Column-0-only anchoring alone overcorrects: Go's grouped
-            # `var (...)`/`const (...)` blocks legitimately indent their
-            # member declarations (e.g. `const (\n\tBurstReplicas = 500\n)`
-            # in real k8s source), and those ARE top-level/exported. So:
-            # explicit `func`/`type`/`var`/`const` keyword forms stay
-            # anchored to column 0 (gofmt never indents these), while the
-            # no-prefix fallback (for grouped members) keeps indentation
-            # tolerance but requires it (a bare col-0 identifier isn't
-            # valid Go outside a group) and excludes anything immediately
-            # followed by `(` -- a grouped member is `Name = value` or
-            # `Name Type`, never `Name(`, which is what a real function
-            # CALL statement looks like. The trailing `\b` before the
-            # lookahead is required: without it, greedy `\w+` can
-            # backtrack one character short of the real identifier end
-            # purely to dodge the `(?!\()` check (matching `DoSomethin`
-            # instead of `DoSomething` to sidestep the `(` in
-            # `DoSomething(`) -- `\b` forces the lookahead to apply at the
-            # true word boundary, where backtracking can't produce a
-            # second valid stopping point.
-            "api": re.compile(
-                r"^func\s+(?:\([^)]*\)[ \t]+)?[A-Z]\w+|^(?:type|var|const)\s+[A-Z]\w+|^[ \t]+\b[A-Z]\w+\b(?!\()",
-                re.M,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. Reassignment and channel sends.
-            "state_mutation": re.compile(r":=|(?<![=!<>])=(?![=])|<-|\bappend\(|\batomic\.(?:Add|Store|Swap)"),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"//[ \t]*(?:func|type|var|const|import|if|for|switch|select|return)\b"),
-            # 13. doc (Structured Documentation)
-            # GoDoc standard: comments immediately preceding a declaration.
-            "doc": re.compile(r"^[ \t]*//\s+[A-Z][a-zA-Z0-9_]+\s+.*|^[ \t]*//\s*Package\s+", re.M),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(r"\b(?:Test|Benchmark|Fuzz)[A-Z]\w*\b|t\.Run\b|\b(?:assert|require|mock)\.\w+\("),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # BUG FIX: `select[ \t]*\{` ends on `{` (non-word), so the
-            # shared trailing \b only fired when a word char immediately
-            # followed the brace -- never true in real Go, where a `select`
-            # block's body always starts on the next line (or at least
-            # with whitespace) after the opening brace. This core
-            # concurrency primitive never matched at all, spaced or not.
-            "concurrency": re.compile(
-                r"\b(?:go\s+func|go\s+\w+|chan\s+|context\.(?:WithTimeout|WithCancel)|errgroup\.Group)\b"
-                r"|select[ \t]*\{"
-            ),
-            # 16. ui_framework (UI / View Components)
-            # Go is primarily backend; targets templates and web handlers.
-            "ui_framework": re.compile(
-                r"\b(html/template|text/template|http\.HandleFunc|ServeHTTP|gin\.|echo\.|fiber\.)\b"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            # BUG FIX (ReDoS): confirmed genuine O(n^2) scaling (0.32s/
-            # 1.27s/5.12s/20.6s for n=2k/4k/8k/16k, ~4x per doubling; 68.6s
-            # observed at n=30k) against an adversarial payload with two
-            # large whitespace runs (`func` + huge ws + `(recv)` + huge ws
-            # + unclosed name) that ultimately fails to complete a match --
-            # the three unbounded `\s*` occurrences plus the two unbounded
-            # `[^)]*`/`[^\]]*` classes force exhaustive backtracking across
-            # every combination of how much each could consume. Bounded
-            # every quantifier, and replaced the two narrowly-specific
-            # optional groups (generics brackets, multi-return parens) with
-            # one bounded `[^{]{0,80}` gap -- this also fixes a real,
-            # separate gap: a bare (non-parenthesized) single return type
-            # (`func(x int) int {`) never matched either shape.
-            "closures": re.compile(r"func[ \t\n]{0,80}\([^)]{0,300}\)[^{]{0,80}\{"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"^[ \t]*var\s+[a-zA-Z_]\w*\s*(?:[a-zA-Z_]\w*\s*)?=|os\.Getenv|os\.Environ",
-                re.M,
-            ),
-            # 19. decorators (Decorators / Annotations)
-            # Go lacks @decorators; uses Struct Tags and Build Tags.
-            "decorators": re.compile(r'`[^`]*?(?:json|xml|yaml|gorm|db|bson):"[^"]*"[^`]*?`|//go:build|//\s*\+build'),
-            # 20. generics (Generics / Type Parameters)
-            # BUG FIX: `~[a-zA-Z_]\w*` (the Go 1.18+ approximation-element
-            # constraint, e.g. `~int`) starts with `~` (non-word), so the
-            # shared leading \b could only fire when a word char
-            # immediately preceded the `~` -- never true for how this
-            # constraint is actually written (always preceded by a space
-            # or `|` inside the type-parameter brackets). Never matched.
-            "generics": re.compile(
-                r"\[(?:[^\[\]]|\[[^\[\]]*\])*(?:\b(?:any|comparable)\b|~[a-zA-Z_]\w*\b)(?:[^\[\]]|\[[^\[\]]*\])*\]|\bany\b"
-            ),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Functional iteration helpers from the slices/maps packages.
-            "comprehensions": re.compile(r"\b(slices\.(?:Delete|Filter|Sort|Compact)|maps\.(?:Keys|Values))\b"),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(math\.|math/cmplx\.|math/rand\.|crypto/rand\.|gonum\.)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Reflection, CGO, and Unsafe triggers.
-            "reflection_metaprogramming": re.compile(r'import\s+"C"|\b(reflect\.|unsafe\.|cgo|go:linkname)\b'),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r'^[ \t]*import\s*(?:\(|"[^"]+")', re.M),
-            # ---> THE FIX: Strictly bounded to valid Go import path characters <---
-            # Prevents raw HTTP string literals in test files from being hallucinated as packages.
-            "_dependency_capture": re.compile(
-                r'^[ \t]*(?:import\s+)?(?:\(\s*)?(?:[a-zA-Z0-9_.]+\s+)?["`]([a-zA-Z0-9_.\-/]+)["`]',
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"(?://|#|/\*)\s*(?:Author|Maintainer|Created by|Owner):?\s+([a-zA-Z0-9_ -]+)",
-                re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(html/template|ExecuteTemplate|http\.ResponseWriter|Render|gin\.Context)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(EventBus|Publish|Subscribe|kafka\.|rabbitmq\.|Emit|OnEvent)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"\b(wire\.Build|wire\.NewSet|fx\.New|fx\.Provide|fx\.Invoke|dig\.Provide|do\.Provide)\b"
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            # Go lacks a preprocessor; //go: directives act as compile-time hooks.
-            "macros": re.compile(r"^//go:(?:generate|build|noinline|nosplit|noescape|linkname)\b", re.M),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Explicit pointer addressing and dereferencing.
-            "pointers": re.compile(
-                r"\b(?:uintptr|unsafe\.Pointer)\b|&\w+|\*(?:[A-Z]\w*|int\d*|uint\d*|float\d*|byte|rune|string|bool)\b"
-            ),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(r"\b(make|new)\s*\(|sync\.Pool\b"),
-            # 37. inline_asm
-            "inline_asm": None,  # Go handles ASM in separate .s files.
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(slog|logrus|zap|zerolog|log)\.(?:Info|Warn|Error|Debug|Trace)(?:f|ln)?\b|\btrace\.Span\b"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(fmt\.Print|fmt\.Println|fmt\.Printf|println|print)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            # Type assertions and conversions.
-            "explicit_casts": re.compile(
-                r"\.\([a-zA-Z_]\w*\)|\b(?:int|int8|int16|int32|int64|uint|uint8|uint16|uint32|uint64|float32|float64|byte|rune|uintptr|string)\s*\("
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(panic|os\.Exit|log\.Fatal)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(time\.Sleep|time\.After|runtime\.Gosched)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|\^|&\^"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(Mutex|RWMutex|Lock|Unlock|RLock|RUnlock|atomic\.|sync\.Map|sync\.Pool)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\bconst\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(defer|Close|Unlock|RUnlock|Stop|Cleanup)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Unexported identifiers (lowercase) in Go are private/internal.
-            # BUG FIX (two layered issues):
-            # 1. `^[ \t]*` allowed arbitrary leading whitespace, so this
-            #    matched ANY indented line starting with a lowercase word
-            #    -- effectively every statement in Go (`if`, `for`,
-            #    `return`, a bare function call, ...), since almost all
-            #    keywords and local identifiers are lowercase. gofmt never
-            #    indents real package-level declarations (always column
-            #    0), so anchored to `^` with no whitespace tolerance,
-            #    matching the same fix applied to `api` above.
-            # 2. Even after that fix, the `func` prefix in alt 1 was
-            #    OPTIONAL, so on a line like `func Foo() {` the engine
-            #    could skip matching "func" as the prefix and instead
-            #    fall through to matching the literal word "func" itself
-            #    via the bare `[a-z]\w+` fallback (since "func" is itself
-            #    lowercase) -- misclassifying an exported, PUBLIC function
-            #    as private. `type`/`var`/`const` don't have this problem
-            #    in alt 2 since consuming the keyword is mandatory there.
-            #    Made the `func` prefix mandatory in alt 1 too (Go has no
-            #    top-level declaration form other than these 4 keywords,
-            #    so there's no real case an optional prefix was needed for).
-            # 3. Column-0-only anchoring alone overcorrects: Go's grouped
-            #    `var (...)`/`const (...)` blocks legitimately indent their
-            #    member declarations, and an unexported member of one of
-            #    those groups IS still a private top-level identifier. The
-            #    no-prefix fallback keeps indentation tolerance for this
-            #    case, but requires it (bare col-0 identifiers aren't valid
-            #    Go outside a group) and explicitly excludes Go's
-            #    lowercase reserved keywords (which is what let `if`/`for`/
-            #    `return`/etc. through in the first place) and anything
-            #    immediately followed by `(` (a real function CALL
-            #    statement, not a `Name = value`/`Name Type` group member).
-            #    The trailing `\b` before the lookahead is required for
-            #    the same reason as in `api` above: without it, greedy
-            #    `\w+` can backtrack one character short of the real
-            #    identifier end purely to dodge the `(?!\()` check.
-            "encapsulation": re.compile(
-                r"^func\s+(?:\([^)]*\)[ \t]+)?[a-z]\w+|^(?:type|var|const)\s+[a-z]\w+"
-                r"|^[ \t]+(?!(?:if|else|for|switch|case|default|break|continue|goto|fallthrough"
-                r"|return|go|defer|select|range|func|type|var|const|package|import|struct"
-                r"|interface|map|chan|make|new|nil|true|false|iota)\b)\b[a-z]\w+\b(?!\()",
-                re.M,
-            ),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"<-chan\b|\.On\(|\.Subscribe\("),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\bt\.Skip(?:f|Now)?\(|mock\.|gomock\."),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Go Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(json\.Unmarshal|json\.Marshal|xml\.Unmarshal|xml\.Marshal|gob\.NewEncoder)\b"
-            ),
-            "regex_execution": re.compile(r"\b(regexp\.Compile|regexp\.MustCompile|\.MatchString)\b"),
-            # BUG FIX: `time\.Now\(\)` ends on `)` (non-word), so the
-            # shared trailing \b could never fire (whatever follows a
-            # function call -- `;`, a newline, another `.method()`, or end
-            # of string -- is never a word character). Go's single most
-            # common time-related call never matched in any real usage.
-            "time_date_logic": re.compile(r"\b(?:time\.Parse|time\.Duration|time\.Sleep|time\.Since)\b|time\.Now\(\)"),
-            "ipc_rpc_bridges": re.compile(r"\b(net/rpc|grpc\.Dial|grpc\.NewServer|exec\.Command|syscall)\b"),
-        },
-    },
-    "rust": {
-        "_meta": {
-            "target_version": "Rust 1.93.1 / Edition 2024 / Modern Async & Macro Stacks",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, libraries, and metadata formats.
-        "extensions": [".rs", ".rlib", ".rmeta"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": ["build.rs"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
-        "discriminators": [
-            ".rs",
-            "Cargo.toml",
-            "Cargo.lock",
-            "rust-toolchain",
-            "rust-toolchain.toml",
-            "rustfmt.toml",
-            "clippy.toml",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["rustc", "cargo", "rust-script", "cargo-script", "evcxr"],
-        # UPGRADED: Maps to Family 2 (Nested C)
-        # Rationale: Rust explicitly allows nested block comments (/* /* */ */),
-        # unlike standard C/C++. Standard C parsing would prematurely terminate here.
-        "lexical_family": "recursive_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES panic!/throw (bailout_hits).
-            "branch": re.compile(
-                r"(?<!r#)(?<!')\b(if|else|match|for|while|loop|break|continue)\b|(?<=[a-zA-Z0-9_)\]}])\?(?!Sized\b)|&&|\|\|"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks of functions and closures. Bounded to prevent ReDoS on complex types.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL NESTING SHIELD (RUST) ]
-                # Rust closures `impl FnOnce(i32)` introduce nested parentheses inside the
-                # parameter block, instantly breaking `[^)]*`.
-                # FIX: Replaced `[^)]*` with `(?:[^)(]|\([^)]*\))*` to swallow 1-level deep
-                # closures and strictly removed the `+` to mathematically prevent ReDoS
-                # on deeply nested Bevy ECS queries.
-                # RULE 11 FIX (epic #813/#819): the generic step-over was still the flat
-                # `<[^>]*>`, unlike func_start's own two-level-nesting idiom below (fixed earlier)
-                # -- broke on any nested trait bound (`fn foo<T: Into<String>>(x: T) {`), a
-                # realistic, common Rust pattern. Widened to match func_start's already-proven
-                # two-level idiom.
-                # =====================================================================
-                # #1209: parameter-list span wrapped in its own capture group
-                # in all three alternatives (was only reachable via group(0),
-                # the whole match including the "fn"/"move"/name prefix) so
-                # detector.py's counter isolates just the real parameter text
-                # -- the whole-match fallback overcounted every zero/one-arg
-                # signature by +1 the same way Python's did (#1199), including
-                # a genuinely empty closure `|| ...`. Name group added to the
-                # first alternative too, purely so existing extraction tests
-                # keep passing.
-                r"\bfn[ \t\n]+([a-zA-Z_]\w*)(?:[ \t\n]*<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->){0,100}>){0,100}>){0,100}>)?[ \t\n]*(\((?:[^)(]|\([^)]*\))*\))|\bmove[ \t\n]*\|([^|]*)\||(?:^|[=(,\[{<>;:])[ \t\n]*\|([^|]*)\|",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (pub) and Immutability (const/static).
-            "structural_boundaries": re.compile(
-                r"(?<!r#)(?<!')\b(let|struct|enum|union|trait|impl|use|mod|type|yield|await|where|mut|ref|move|return)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks. EXCLUDES structs/traits to prevent False Positives.
-            # BUG FIX (Rule 11, nested-delimiter coverage): the flat `[^>]*`
-            # generic step-over broke on nested angle brackets in a trait
-            # bound (`fn foo<T: Into<String>>` -- one level -- and
-            # `fn foo<T: Clone + Into<Vec<u8>>>` -- two levels), both common
-            # realistic Rust patterns -- func_start silently failed to match
-            # the WHOLE function. Widened to tolerate two levels of
-            # self-nesting (still non-overlapping alternatives, no new ReDoS
-            # risk per the doc's own Rule 11 example).
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL MACRO & GENERICS SHIELD ]
-                # Rust functions can be preceded by multiple attribute macros (#[inline])
-                # and have decoupled generics `<T>`.
-                # FIX: Injected the Macro Shield `(?:#\[[^\]]*\][ \t\n]*){0,5}`, upgraded
-                # modifier spaces to `[ \t\n]+`, and detached the generic stepper `(?:[ \t\n]*<[^>]*>)?`
-                # so the parser can trace the name through massive vertical formatting.
-                # =====================================================================
-                r"^[ \t]*(?:#\[[^\]]*\][ \t\n]*){0,5}"
-                r"(?:pub(?:\([^)]*\))?[ \t\n]+){0,3}"
-                r"(?:(?:const|async|unsafe|extern(?:[ \t\n]+\"[^\"]*\")?)[ \t\n]+){0,3}"
-                r"fn[ \t\n]+(?:r#)?([a-zA-Z_]\w*)(?:[ \t\n]*<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->){0,100}>){0,100}>){0,100}>)?[ \t\n]*(?=\()",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            "class_start": re.compile(
-                r"^[ \t]*(?:pub(?:\([^)]*\))?[ \t]+){0,3}(?:unsafe[ \t]+)?(?:auto[ \t]+)?(?:struct|enum|union|trait)\s+(?:r#)?([a-zA-Z_]\w*)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(Option|Result|Mutex|RwLock|Arc|Rc|Box|RefCell|match|if\s+let|while\s+let|let\s+else|Ok|Err|Some|None)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Actively bypasses type safety (unwraps and forced expectations).
-            "safety_bypasses": re.compile(r"\b(unwrap|expect|unwrap_err|unwrap_unchecked)\b"),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process-killing commands. EXCLUDES TODO (debt) and println! (print_hits).
-            # BUG FIX: `panic!`/`todo!`/`unimplemented!` shared a trailing `\b`
-            # with word-ending siblings, but all three end in `!` -- Rust
-            # macro-invocation syntax is always immediately followed by `(` or
-            # whitespace, both non-word, so `\b` could never fire. None of
-            # these three -- among the most common constructs in any real Rust
-            # file -- ever matched. Pulled out of the shared boundary group.
-            "high_risk_execution": re.compile(r"panic!|todo!|unimplemented!|\b(?:process::exit|abort)\b"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(std::fs|File::|std::net|tokio::net|tokio::fs|reqwest|std::io|hyper::|sqlx::|diesel::|sea_orm::)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Code exposed to the outside world.
-            "api": re.compile(r"\bpub(?:\([^)]*\))?\b"),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES const (freeze_hits).
-            "state_mutation": re.compile(r"\bmut\b|\.borrow_mut\(\)|\.write\(\)|Cell::|RefCell::|Atomic[A-Za-z0-9]+"),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # BUG FIX (Engine Rule 12, Comment-Style Completeness): rust is
-            # `recursive_block` (both `//` and nested `/* */` are real
-            # comment styles), but this only ever checked `//` -- a block-
-            # commented-out function/struct (`/* fn foo() {} */`) was
-            # invisible.
-            "dead_code": re.compile(r"(?://|/\*)[ \t]*(?:fn|let|struct|impl|mod|use|match|for|while|loop|if|return)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"///|//!|#!?\[doc\b[^\]]*\]"),
-            # 14. test (Testing & Assertions)
-            # Triggers indicating internal verification. Anchors standard testing macros and prevents prose collisions for BDD frameworks (rstest/spec).
-            # BUG FIX: `assert!`/`assert_eq!`/`assert_ne!` shared a trailing
-            # `\b` with the word-ending `describe`/`it`/`test` group -- all
-            # three end in `!`, always followed by `(` in real usage (never a
-            # word char), so none of these extremely common assertion macros
-            # ever matched.
-            "test": re.compile(
-                r"#\[(?:tokio::)?test\]|#\[cfg\(test\)\]|assert!|assert_eq!|assert_ne!|\b(?:describe|it|test)\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|std::thread|spawn|tokio::spawn|mpsc::|async_trait|Future|Stream|Send|Sync)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            # BUG FIX: `html!`/`rsx!`/`view!` shared a trailing `\b` with
-            # word-ending siblings, but all three end in `!` -- these macro
-            # invocations are always followed by `{`/`(`, never a word char,
-            # so none of them -- Yew's/Dioxus's/Leptos's canonical templating
-            # macros -- ever matched.
-            "ui_framework": re.compile(r"\b(?:yew::|dioxus::|iced::|slint|leptos::|tauri::)\b|html!|rsx!|view!"),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"\|[^|]*\|[ \t]*\{"),
-            # 18. globals (Global / Shared State)
-            # BUG FIX: `lazy_static!` shared a trailing `\b` with word-ending
-            # siblings, but ends in `!` -- always followed by whitespace/`{`
-            # in real usage (`lazy_static! { ... }`), never a word char.
-            "globals": re.compile(r"\bstatic\s+mut\b|lazy_static!|\b(?:OnceCell|OnceLock|LazyLock|std::env::var)\b"),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"^[ \t]*#!?\[[^\]]*\]", re.M),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"<\s*[A-Z\'][^>]*>|\bwhere\b|\'[a-z]+\b|\bimpl\s+[A-Z]\w+"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(
-                r"\.(?:map|filter|fold|collect|flat_map|any|all|reduce|for_each|find|zip)\s*\("
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(ndarray::|nalgebra::|num::|f32|f64|std::simd)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Metaprogramming and memory transmutation.
-            # BUG FIX: `macro_rules!` shared a trailing `\b` with word-ending
-            # siblings, but ends in `!` -- always followed by whitespace/`{`
-            # in real usage (`macro_rules! foo { ... }`), never a word char.
-            "reflection_metaprogramming": re.compile(
-                r"macro_rules!|\b(?:std::mem::transmute|Pin::|PhantomData|UnsafeCell)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"\b(?:pub[ \t]+)?use\s+[^;]+;", re.M),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (RUST) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
-                #
-                # HISTORICAL BUG: Originally, this regex was anchored to the start of the
-                # line `^[ \t]*`. While Rust doesn't evaluate dependencies dynamically at
-                # runtime like scripting languages, it heavily utilizes locally scoped imports
-                # inside functions or trait implementations (e.g., `fn do_work() { use std::fs; }`).
-                # The anchored regex completely missed these localized dependencies.
-                #
-                # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
-                # boundary to locate the `use` keyword anywhere in the file.
-                #
-                # [ THE COMMA-SEPARATED DESTRUCTURING SHIELD ]
-                # Previously, `_dependency_capture` stopped at the first non-word character,
-                # which meant for `use std::collections::{HashMap, HashSet};` it only captured
-                # `std::collections`. The expanded capture group `([a-zA-Z0-9_:{},\s]+)` now
-                # explicitly swallows the entire comma-separated bracket block up to the semicolon.
-                # NOTE: The downstream parser MUST flatten and split this string on commas and
-                # brackets to accurately register the individual nodes.
-                # GLOB IMPORT FIX (epic #813/#819): the character class was missing `*`, so a glob
-                # import (`use std::io::*;`, extremely common Rust for re-exporting a module's
-                # entire public surface) didn't match at all -- the whole `use` statement was
-                # invisible to the dependency graph.
-                # =====================================================================
-                r"\b(?:pub[ \t]+)?use\s+([a-zA-Z0-9_:{},*\s]+);",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"//\s*(?:Author|Maintainer|Copyright):\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX: adjacent unbounded quantifiers with overlapping
-            # character sets (`\d+` next to `[^\]]*`) -- the same ReDoS
-            # shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, and typescript
-            # earlier in this epic. Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(actix_web|axum|rocket|HttpResponse|Responder|IntoResponse|Html|askama::|tera::)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(tokio::sync::broadcast|std::sync::mpsc|crossbeam_channel|Sender|Receiver)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"\b(axum::extract::State|actix_web::web::Data|Extension|Provider|shaku::)\b"
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            # BUG FIX: same `macro_rules!` trailing-`\b`-after-`!` defect as
-            # reflection_metaprogramming's copy above.
-            "macros": re.compile(r"macro_rules!|\b(?:proc_macro|proc_macro_derive|proc_macro_attribute)\b"),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Raw memory addressing. Shielded from standard multiplication by explicitly mapping to native Rust unsafe pointer primitives and dereferencing.
-            "pointers": re.compile(r"\*const\b|\*mut\b|\bNonNull\b|\bstd::ptr\b|->"),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(
-                r"\b(Box::new|Rc::new|Arc::new|Vec::with_capacity|String::with_capacity|alloc::|GlobalAlloc)\b"
-            ),
-            # 37. inline_asm (The Bare Metal)
-            # BUG FIX: all four alternatives end in `!` (Rust macro-invocation
-            # syntax), but shared a trailing `\b` -- `asm!(...)` is always
-            # followed by `(`, never a word char, so none of these -- the
-            # ONLY way to write inline assembly in Rust -- ever matched.
-            "inline_asm": re.compile(r"\bcore::arch::asm!|\bstd::arch::asm!|\basm!|\bglobal_asm!"),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            # BUG FIX: `info!`/`warn!`/`error!`/`debug!`/`trace!`/`span!` all
-            # end in `!` but shared a trailing `\b` with `instrument` -- Rust
-            # macro-invocation syntax is always followed by `(`, never a word
-            # char, so none of the tracing/log macros ever matched.
-            "telemetry": re.compile(r"\b(?:log::|tracing::)?(?:info|warn|error|debug|trace|span)!|\binstrument\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            # BUG FIX: all five alternatives end in `!` but shared a trailing
-            # `\b` -- `println!("...")` is always followed by `(`, never a
-            # word char, so none of these -- arguably the single most common
-            # construct in any real Rust codebase -- ever matched.
-            "debug_prints": re.compile(r"\b(?:println|print|eprintln|eprint|dbg)!"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            # Forceful type coercion bypassing the safety engine. Enforces strict mapping to the `as` keyword followed by standard primitive types.
-            "explicit_casts": re.compile(
-                r"\bas\s+(?:i8|i16|i32|i64|i128|isize|u8|u16|u32|u64|u128|usize|f32|f64|bool|char)\b"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # BUG FIX: same `panic!` trailing-`\b`-after-`!` defect as
-            # high_risk_execution's copy above.
-            "panics_and_aborts": re.compile(r"panic!|\b(?:abort|process::exit|fatalError)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(std::thread::sleep|tokio::time::sleep|Duration::from)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            # Low-level byte manipulation. CRITICAL: Removed the pipe '|' (used for closures `|x| x+1` and patterns), ampersand '&' (used for references), and exclamation '!' (used for macros and logical NOT).
-            "bitwise_ops": re.compile(r"<<|>>|\^"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(Mutex|RwLock|lock|barrier|atomic|Semaphore)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|static|immutable|readonly)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(drop|free|delete|close|shutdown)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Visibility variant tracking.
-            "encapsulation": re.compile(r"\bpub(?:\(crate\)|\(super\)|\(self\))?\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\.subscribe\(|\.on\(|addEventListener"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"#\[ignore\]|test\.skip\(|mock\(|fake\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Rust Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(serde_json::from_str|serde_json::to_string|serde_json::from_slice|bincode::deserialize|toml::from_str)\b"
-            ),
-            "regex_execution": re.compile(r"\b(Regex::new)\b"),
-            "time_date_logic": re.compile(
-                r"\b(std::time::Duration|std::time::Instant|std::time::SystemTime|chrono::Utc::now|chrono::Local::now)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(std::process::Command|tokio::process|tonic::transport::Server|mpsc::channel)\b"
-            ),
-        },
-    },
-    "cpp": {
-        "_meta": {
-            "target_version": "C++23 (Modules, Concepts, Coroutines, Ranges, std::print)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources, headers, template implementations, inline implementations, and legacy UNIX casing conventions.
-        "extensions": [
-            ".cpp",
-            ".cc",
-            ".cxx",
-            ".c++",
-            ".hpp",
-            ".hh",
-            ".hxx",
-            ".h++",
-            ".tpp",
-            ".inc",
-            ".inl",
-            ".ipp",
-            ".cp",
-            ".C",
-            ".H",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files (like .h or .inc).
-        "discriminators": [
-            ".cpp",
-            ".cc",
-            ".cxx",
-            "CMakeLists.txt",
-            "conanfile.txt",
-            "vcpkg.json",
-            "Makefile",
-            "BUILD.bazel",
-            "WORKSPACE",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["cling", "cint"],
-        # UPGRADED: Maps to Family 1 (Standard C)
-        # Rationale: Uses '//' for line-level literature; multi-line literature
-        # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "standard_block",
-        "rules": {
-            # 1. branch (Control Flow / Branching)
-            # Control flow jumps. Includes modern coroutine jumps (co_yield, co_await).
-            # EXCLUDES exceptions (bailout_hits).
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|while|do|catch|break|continue|goto|co_yield|co_await)\b|&&|\|\||\?"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks of functions and lambdas. Bounded to prevent ReDoS on massive signatures.
-            # OUT-OF-LINE OPERATOR + RULE 11 FIX (epic #813/#821): same gaps as func_start -- no
-            # allowance for a class-qualified operator name (`TargetClass::operator=`) at all, and
-            # the method's own template-argument step-over was the flat `<[^>]*>`, breaking a
-            # nested type arg (`Foo::Bar<Baz<int>>(...)`, an explicit template specialization).
-            # #1209: parameter-list span wrapped in its own capture group (was
-            # only ever reachable via group(0), the whole match including the
-            # name/template/return-type-keyword prefix) so detector.py's
-            # counter isolates just "(...)" -- the whole-match fallback
-            # overcounted every zero/one-arg signature by +1 the same way
-            # Python's did (#1199), including a genuinely empty lambda
-            # `[]()`. A name group (group 1) is added too, ahead of the
-            # args-list groups, purely so the existing extraction tests
-            # (which check the captured name) keep passing -- detector.py
-            # already picks the highest-numbered participating group via
-            # `lastindex`, so it still resolves to the args group either way.
-            # #1883: the first-parameter type gate also accepts leading-underscore
-            # Windows SAL annotation macros (`_In_`, `_Out_`, `_Inout_`,
-            # `_In_opt_`, `_In_reads_(n)`, ...) as an optional, repeatable prefix
-            # ahead of the real type, the same way `const`/`volatile` already are
-            # -- a real SAL-annotated signature (`f(_In_ int nCode, ...)`)
-            # otherwise failed the whole `search()` because `_In_` matched none
-            # of the type alternatives. `_[A-Z][A-Za-z0-9_]*_` (required trailing
-            # `_`, uppercase first letter) is narrow enough not to catch `_t`
-            # types or `__attribute__`/`__cdecl`; the `\([^()]{0,64}\)` tail
-            # covers the sized forms.
-            "args": re.compile(
-                r"\b(?!(?:if|for|while|switch|catch)\b)((?:[a-zA-Z_]\w*::)*(?:[a-zA-Z_]\w*|operator[ \t]*[^a-zA-Z_\s(]+|operator[ \t]+(?:new|delete)(?:\[\])?))(?:<(?:[^<>]|<[^<>]*>)*>)?\s*(\(\s*(?:(?:const|volatile|_[A-Z][A-Za-z0-9_]*_(?:\([^()]{0,64}\))?)\s+)*(?:int|char|void|float|double|bool|long|short|unsigned|signed|struct|class|auto|std::|[A-Z]\w*|[a-z_]\w*_t)\b[^)]*\))|\[[^\]]*\]\s*(\([^)]*\))"
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(namespace|using|class|struct|enum|union|template|typename|concept|requires|auto|return|void|inline|virtual|explicit|friend|module|export|import|typedef)\b"
-            ),
-            "func_start": re.compile(
-                # =====================================================================
-                # [ CONTEXT: C++ FUNCTION AST EXTRACTOR & REDOS SHIELD]
-                # PURPOSE: Anchors executable logic blocks (methods/functions) in C++.
-                # VULNERABILITY: C++ allows multi-line function signatures and complex
-                #   return types (e.g., `std::vector<int> \n myFunc()`). In files with
-                #   massive macro lists (like hardware register maps), the `[ \t\n]+`
-                #   allowances cause catastrophic backtracking (ReDoS).
-                # THE "IRON WALL" FIX: `(?![ \t]*#)` is a negative lookahead injected at
-                #   high-risk multi-line boundaries. It explicitly forbids the regex engine
-                #   from crossing into preprocessor directives, capping the permutation tree.
-                # =====================================================================
-                r"^[ \t]*"
-                # BUG FIX (false-positive correctness): the return-type loop
-                # (item 4) never excluded control-flow keywords from being
-                # consumed as a generic return-type word -- only the later
-                # identifier-capture shield (item 5) excluded them from
-                # being the FUNCTION NAME itself. This let a two-word
-                # control-flow form slip through: `if constexpr (x) {}`
-                # falsely matched with "constexpr" captured as the function
-                # name ("if" consumed by the loop, "constexpr" landing in
-                # the identifier position, which the shield doesn't reject).
-                # Rejects any line starting with one of these keywords
-                # outright, before the loop even starts.
-                r"(?!(?:if|for|while|switch|catch|else)\b)"
-                r"(?:template[ \t\n]*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>[ \t\n]*)?"
-                # 2. LINKAGE & STORAGE MODIFIERS (Now supports vertical formatting)
-                r"(?:(?:static|inline|extern|virtual|_Noreturn|constexpr|consteval|constinit|__inline__|__forceinline)[ \t\n]+){0,5}"
-                # 3. COMPILER ATTRIBUTES PRE-TYPE (Includes C23 [[...]])
-                # #2460: also a SAL / entry-point annotation macro -- a `__`- or
-                # `_Uppercase`-prefixed identifier optionally taking a bracketed
-                # argument (`__control_entrypoint(DllExport)`, `_Ret_maybenull_`,
-                # `_Check_return_`). Bounded to that naming shape so it can't eat
-                # an ordinary lowercase function call as a phantom prefix.
-                r"(?:(?:__attribute__[ \t]*\((?:[^)(]|\([^)]*\))*\)|\[\[[^\]]*\]\]|__declspec[ \t]*\([^)]*\)|(?:__[a-z]\w*|_[A-Z][A-Za-z0-9]*_)(?:[ \t]*\((?:[^)(]|\([^)]*\))*\))?)[ \t\n]*){0,5}"
-                # 4. THE RETURN TYPE (Pointers/references explicitly bound)
-                # [IRON WALL]: Prevents the engine from reading a `#define` on the next line as a return type.
-                # [POINTER AMBIGUITY FIX]: Strictly enforces sequential evaluation of pointers and spaces.
-                r"(?:(?:struct|union|enum)[ \t\n]+)?"
-                # BUG FIX (Rule 11): the return-type's flat `<[^>]*>` broke
-                # on any nested template argument (`std::vector<std::pair<
-                # int,int>>`, `std::map<K, std::vector<V>>`) -- extremely
-                # common in real C++ -- causing the whole rule to never
-                # match at all (no fallback path exists once the return
-                # type fails to consume correctly). Extended to a bounded
-                # 2-level nesting tolerance.
-                # BUG FIX (Rule 14): this loop's trailing `[ \t\n]+` and the
-                # parameter block's leading `[ \t\n]*` (item 7 below) are
-                # two effectively-adjacent unbounded whitespace quantifiers
-                # -- once a real function never follows (no `(` anywhere),
-                # the engine must retry every possible split of the same
-                # trailing whitespace run across both gaps, O(n^2).
-                # Confirmed ~4x/doubling, 2.8s at n=32000 on a bare
-                # `"int foo" + " "*n` payload. Bounded both to `{1,200}`.
-                # BUG FIX (#1263): `[*&]*[ \t\n]{1,200}` demanded the pointer/
-                # reference symbol sit glued to the type with MANDATORY
-                # trailing whitespace before the name -- matching only the
-                # `Type* name()` style. Real-world C++ (including large chunks
-                # of the language-crucible corpus, e.g. Godot's `Type
-                # *name()` / `Type * name()`) overwhelmingly puts the space
-                # BEFORE the star instead, with the star landing glued to the
-                # name (no trailing whitespace at all left to consume) --
-                # that shape couldn't complete this loop iteration, so the
-                # entire rule failed to match and the whole function
-                # definition was invisible, not just misclassified. Split
-                # into two bounded alternatives: one or more pointer/
-                # reference symbols (with optional bounded whitespace on
-                # EITHER side of the run, covering `Type*name`, `Type* name`,
-                # `Type *name`, and `Type * name` alike), or -- when no
-                # pointer/reference symbol is present at all -- the original
-                # mandatory whitespace run (still the only valid separator
-                # between two bare words like `void foo`). The two
-                # alternatives never both match the same span (one requires a
-                # literal `[*&]`, the other forbids consuming past the first
-                # non-whitespace char), so this doesn't reopen the Rule 14
-                # backtracking gap the surrounding bounds were built to close.
-                r"(?:(?![ \t]*#)(?!(?:[a-zA-Z_]\w*::)*operator\b)[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*"
-                r"(?:<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?"
-                r"(?:[ \t]{0,20}[*&]{1,5}[ \t\n]{0,200}|[ \t\n]{1,200})){0,5}"
-                # 5. THE "NOT A FUNCTION" SHIELD
-                # Prevents control flow (if, while) and primitive types from being captured as function names.
-                r"(?!(?:if|for|while|switch|return|catch|else|elif|sizeof|new|delete|ARGS\d+|NOARGS|int|float|double|char|void|long|short|unsigned|signed|bool|INTEGER|LOGICAL|real|__attribute__|__declspec|__asm__)\b)"
-                # 6. THE IDENTIFIER CAPTURE (FUNCTION IDENTIFIER - GROUP 1)
-                # [IRON WALL]: Ensures the actual function/operator name isn't hijacked by a macro definition.
-                # OUT-OF-LINE OPERATOR FIX (epic #813/#821): the operator alternatives had no
-                # allowance for a preceding class-qualifier (`TargetClass::operator=`, `TargetClass::
-                # operator==`), unlike the plain-identifier alternative which already supports
-                # `(?:[a-zA-Z_]\w*::)*`. Out-of-line operator overload definitions (defined in a
-                # .cpp file, declared in the header) are mainstream, common C++ -- completely
-                # invisible to func_start before this fix.
-                r"(?![ \t]*#)((?:[a-zA-Z_]\w*::)*operator[ \t]*\(\)|(?:[a-zA-Z_]\w*::)*operator[ \t]+(?:::)?[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*(?:<(?:[^<>]|<[^<>]*>)*>)?(?:[ \t]*[*&]+)?|(?:[a-zA-Z_]\w*::)*operator[ \t]*[^a-zA-Z_\s(]+|(?:[a-zA-Z_]\w*::)*operator[ \t]+(?:new|delete)(?:\[\])?|(?:[a-zA-Z_]\w*::)*[~a-zA-Z_]\w*)"
-                # 7. THE PARAMETER BLOCK (Supports vertical gap)
-                # [NESTED PARENTHESIS FIX]: Uses 1-Level Nesting Trick to swallow function pointers without ReDoS.
-                # [LAMBDA-ARGUMENT SHIELD] (#2013): a lambda passed as a constructor argument or
-                # member-initializer-list entry (`m_draggingState([this]() { ... }),`,
-                # `std::thread([...]() { ... }).detach();`) balances its own parens just fine, but
-                # nothing AFTER the closing `)` distinguishes "this was a real function's own
-                # parameter list" from "this was a call passing a lambda" -- the very next
-                # non-whitespace token legitimately IS `{` either way (a real function body, or,
-                # for the initializer-list case, the ENCLOSING constructor's own body), so stage 10
-                # can't tell them apart. The one reliable, local signal: a real C++ parameter list
-                # can never syntactically START with a bare `[` -- only a lambda's capture-list
-                # does that (`[this]`, `[=]`, `[&x]`, `[]`); the sole exception is a parameter-level
-                # `[[attribute]]`, which always has a literal DOUBLE bracket. Confirmed via direct
-                # testing: FancyZones.cpp's `m_draggingState`/`std::thread` false positives are both
-                # this exact shape, and every `[[attribute]] Type param` case in the existing
-                # extraction gauntlet still matches (the lookahead only excludes a single `[` NOT
-                # immediately followed by a second one).
-                r"[ \t\n]{0,200}(?:ARGS\d+\s*\([^)]*\)|\((?![ \t\n]{0,20}\[(?!\[))(?:[^)(]|\([^)]*\))*\)|NOARGS)"
-                # 8. POST-PARAMETER MODIFIERS & TRAILING RETURN TYPES
-                # [OVERLAP PREVENTION]: Removed ambiguous \s* inside attribute matcher.
-                r"(?:[ \t\n]+(?:const|volatile|noexcept|override|final|&{1,2}|__attribute__\((?:[^)(]|\([^)]*\))*\)|\[\[[^\]]*\]\])){0,10}"
-                r"(?:[ \t\n]*->[ \t]*[a-zA-Z_:\w*<>]+)?"
-                # 9. THE K&R C AND C++ CONSTRUCTOR GAP (ReDoS mitigated via Strict Bounding)
-                # Handles C++ initializer lists (e.g., `MyClass() : a(1) {`) and legacy K&R declarations.
-                # [IRON WALL - CATASTROPHIC BACKTRACKING FIX]:
-                # We enforce strict numeric bounds (`{0,500}` and `{0,100}`) instead of `+` or `*`.
-                # This caps the permutation tree instantly.
-                r"(?:[ \t\n]*(?![ \t]*#):[^{;]{0,2000}|(?:[ \t\n]+(?![ \t]*#)[a-zA-Z_][^(){};]{0,100};){1,20})?"
-                # 10. THE IGNITION (The opening brace confirming it is a definition, not a declaration)
-                r"[ \t\n]*\{",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # =====================================================================
-            # [ THE C++ ATTRIBUTE & TEMPLATE SHIELD ]
-            # C++ entity declarations can be preceded by massive, multi-line templates
-            # and C++20 `[[attributes]]` wedged directly before the class name.
-            # FIX 1 (Negative Test): Dropped standard C-style `enum` to avoid hallucinating
-            # minor constants; restricted to strongly-typed `enum class` / `enum struct`.
-            # FIX 2 (Pathological): Injected `(?:\[\[[^\]]*\]\][ \t\n]*){0,5}` to step
-            # over attributes, converted `\s*` to `[ \t\n]*` for the template wrapper,
-            # and added the exact capture group `([a-zA-Z_]\w*)`.
-            # =====================================================================
-            # BUG FIX (Rule 11): the template-skip's flat `<[^>]*>` broke on
-            # any nested default template argument (`template<typename T =
-            # std::vector<int>> class Foo`), truncating at the inner `>` and
-            # failing to match at all on the (very common) single-line form
-            # -- the multi-line form appeared to "work" only because the
-            # optional template group could be skipped entirely via
-            # backtracking, re-anchoring on a later line's bare `class Foo`.
-            # Extended to the same bounded 2-level nesting tolerance used in
-            # func_start's return type.
-            "class_start": re.compile(
-                r"^[ \t]*(?:export[ \t\n]+)?"
-                r"(?:template[ \t\n]*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>[ \t\n]*)?"
-                r"(?:class|struct|union|enum[ \t\n]+class|enum[ \t\n]+struct)[ \t\n]+(?:(?:\[\[[^\]]*\]\]|__attribute__[ \t]*\((?:[^)(]|\([^)]*\))*\))[ \t\n]*){0,5}([a-zA-Z_]\w*(?:<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|std::unique_ptr|std::shared_ptr|std::weak_ptr|override|final|noexcept|static_assert|assert|std::optional|std::expected|std::span|std::variant|std::lock_guard|std::atomic)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Swallowing errors or bypassing types. EXCLUDES standard casting (Phase 5).
-            # BUG FIX (Rule 9): `void\s*\*` ends in `*` (non-word) but shared
-            # a trailing `\b` with word-ending `std::any` -- the boundary
-            # could only fire if a word character immediately followed the
-            # `*` with zero whitespace (`void *p`), breaking on the equally
-            # common `void* p`/`void * p` forms and any non-identifier
-            # continuation (`(void*)src`). Pulled out with only a leading
-            # `\b`.
-            "safety_bypasses": re.compile(r"\bstd::any\b|\bvoid\s*\*|catch\s*\(\s*\.\.\.\s*\)"),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and low-level blits. EXCLUDES prints (Phase 5).
-            "high_risk_execution": re.compile(r"\b(system|memcpy|memset|abort|exit|std::terminate|longjmp|setjmp)\b"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(std::fstream|std::ifstream|std::ofstream|std::filesystem|fopen|fclose|fread|fwrite|socket|recv|send|asio::|curl_easy_perform|std::cin)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Code exposed to the world. Explicit visibility and module exports.
-            # BUG FIX (Rule 9): `public:`, `__declspec(dllexport)`, and
-            # `__attribute__((visibility("default")))` all end in non-word
-            # characters (`:`/`)`) but shared a trailing `\b` with
-            # word-ending `export module`/`export import`/`export class` --
-            # the boundary could never fire for the realistic forms
-            # (whitespace/newline follows `public:`; nothing but whitespace
-            # follows the closing `)`). Pulled all three out with only a
-            # leading `\b`.
-            "api": re.compile(
-                r"\b(?:export\s+module|export\s+import|export\s+class)\b|"
-                r'\bpublic:|__declspec\(dllexport\)|__attribute__\(\(visibility\("default"\)\)\)|'
-                r"^[ \t]*export\b(?!\s*module)",
-                re.M,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. Includes moves and increments.
-            "state_mutation": re.compile(
-                r"\b(mutable|std::move|std::exchange|std::swap|std::atomic)\b|(?<![=!<>])=(?![=])|&(?!\s*const)|\+\+|--|(?:\+=|-=|\*=|/=|%=|<<=|>>=|&=|\|=|\^=)"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out execution logic indicating dead features. MUST enforce that the structural keyword immediately follows the comment token.
-            # BUG FIX (Rule 12): only checked `//` line comments, entirely
-            # missing `/* */` block comments despite cpp being a
-            # `standard_block` language where both styles are equally
-            # idiomatic (`/* if (x) foo(); */`).
-            "dead_code": re.compile(
-                r"(?://|/\*)[ \t]*(?:if|for|while|auto|class|struct|std::cout|std::print|printf|void|int|return)\b"
-            ),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(
-                r"///|/\*\*|@param|@return|@brief|@details|@tparam|\\param|\\return|\\brief|\\details|\\tparam"
-            ),
-            # 14. test (Testing & Assertions)
-            # Triggers indicating internal verification. Anchors explicit GTest/Catch2 macros and prevents prose collisions.
-            "test": re.compile(
-                r"\b(?:TEST|TEST_F|TEST_CASE|SECTION|REQUIRE|CHECK|EXPECT_[A-Z_]+|ASSERT_[A-Z_]+|Catch::|GTest)\b"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(std::thread|std::jthread|std::mutex|std::future|std::promise|std::async|std::latch|std::barrier|std::condition_variable|std::semaphore|co_await|std::coroutine_handle)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            # BUG FIX (Rule 9): `slots:`/`signals:` end in `:` (non-word) but
-            # shared a trailing `\b` with word-ending siblings -- broke on
-            # the realistic Qt form (`signals:` followed by a newline, never
-            # a word character). `ImGui::` also ends in non-word (`::`) but
-            # verified self-healing: real usage is always immediately
-            # followed by an identifier (`ImGui::Begin(...)`), so left as-is.
-            "ui_framework": re.compile(r"\b(?:Q_OBJECT|QWidget|wxFrame|ImGui::|Fl_Window)\b|\bslots:|\bsignals:"),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(
-                r"\[[^\]]*\]\s*(?:<[^>]*>\s*)?(?:\([^)]*\))?\s*(?:(?:mutable|constexpr|consteval|noexcept)\s+)*(?:mutable|constexpr|consteval|noexcept)?\s*(?:->\s*[\w:<>_]+)?[ \t]*\{"
-            ),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"\b(extern|static(?!\s*assert)|thread_local|inline\s+constexpr)\b|^[ \t]*(?:static|extern)\s+[\w:<>_]+\s+[a-zA-Z_]\w*[ \t]*=",
-                re.M,
-            ),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"\[\[\s*[a-zA-Z_:][^\]]*\]\]"),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"\btemplate\s*<[^>]*>|\b(?:concept|requires)\b"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Range pipelines acting as functional mappers.
-            "comprehensions": re.compile(
-                r"\b(std::ranges::|std::views::|views::|std::transform|std::accumulate|std::reduce|std::for_each|std::filter)\b|\|\s*std::views::"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(std::cmath|std::complex|std::linalg|std::mdspan|Eigen::|blaze::|std::simd|__m128|__m256|__m512|std::numbers::)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # SFINAE, compile-time reflection, and macros.
-            # BUG FIX (Rule 9): `sizeof...` ends in `.` (non-word) but shared
-            # a trailing `\b` with word-ending siblings -- the realistic
-            # form (`sizeof...(Args)`) is immediately followed by `(`, also
-            # non-word, so no boundary transition ever occurs and this
-            # alternative could never fire. Pulled out with only a leading
-            # `\b`.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:if\s+constexpr|if\s+consteval|std::enable_if|std::is_same|std::any_cast|std::bit_cast|decltype)\b|\bsizeof\.\.\.|#define\s+[a-zA-Z_]"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r'^[ \t]*(?:#include\s*[<"][^>"]+[>"]|import\s+[a-zA-Z_][\w.:]*\s*;|export\s+import\s+[a-zA-Z_][\w.:]*\s*;)',
-                re.M,
-            ),
-            "_dependency_capture": re.compile(
-                r'^[ \t]*(?:#\s*include\s*[<"]([^>"]+)[>"]|(?:export\s+)?import\s+([a-zA-Z_][\w.:]*)\s*;)',
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:@author|\\author|Author:|Created by:|Copyright)\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust,
-            # and c earlier in this epic (the 9th hit). Bounded both
-            # quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(r"\b(FCGI_Accept|render_template|Inja::|ctemplate::)\b"),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(emit|signal|slot|notify|publish|subscribe|boost::signals2)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(r"\b(boost\.di|fruit::|[I]nject|IServiceCollection)\b"),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"^[ \t]*#(?:define|undef|if|elif|else|endif|pragma|warning|error)\b",
-                re.M,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Raw memory addressing and pointer manipulation. CRITICAL: Uses lookbehinds `(?<=[=\s,(])` to strictly capture pointer dereferences `*ptr` and memory addresses `&var` without flagging standard multiplication `a * b` or logical AND `a & b`.
-            "pointers": re.compile(
-                r"->|\b(?:uintptr_t|intptr_t|ptrdiff_t|size_t)\b|(?<=[=\s,(])&\w+|(?<=[=\s,(])\*(?:\s*const\s*)?\w+"
-            ),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(r"\b(new|malloc|calloc|realloc|aligned_alloc|mmap|alloca)\b"),
-            # 37. inline_asm (The Bare Metal)
-            "inline_asm": re.compile(
-                r"\b(?:__asm__|asm|__asm)\b(?:\s+(?:volatile|__volatile__))?\s*\(|\b(?:__asm__|asm|__asm)\b[ \t]*\{"
-            ),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(r"\b(log|logger|LOGGER|spdlog|glog|syslog)\.(?:info|error|warn|debug|trace)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(
-                r"\b(std::cout|std::cerr|std::clog|printf|fprintf|vprintf|puts|putchar|std::print|std::println)\b"
-            ),
-            # # 40. explicit_casts (Explicit Type Casting)
-            # Forceful type coercion bypassing the safety engine. Captures modern explicitly named casts and strict C-style groupings.
-            # BUG FIX (false-positive correctness): the bare `<\s*[A-Za-z_]
-            # \w*\s*>` alternative had no requirement that this actually be
-            # used as a cast -- it fired on ANY single-identifier template
-            # instantiation (`std::vector<int>`, `std::unique_ptr<Foo>`,
-            # `Container<T>`), which is an ordinary declaration, not a cast.
-            # Since every modern C++ file is full of these, this alternative
-            # was a major over-broad false-positive source. Restricted to
-            # require a functional-cast-style identifier prefix and a call
-            # immediately after the closing `>` (`narrow_cast<int>(x)`,
-            # `gsl::narrow_cast<T>(x)`), which is structurally distinct from
-            # a plain declaration (identifier follows, not `(`).
-            # Also fixed: the C-style-cast alternative required a bare
-            # `(int)` with no asterisk, so it never matched C++'s equally
-            # valid, common C-style POINTER cast (`(int*)ptr`) -- the exact
-            # overlap the issue asked to check against C's `explicit_casts`/
-            # `pointers` ambiguity. Extended to allow pointer asterisks
-            # (O(1) alternation per the same fix already applied in C).
-            "explicit_casts": re.compile(
-                r"\b(?:static_cast|dynamic_cast|reinterpret_cast|const_cast|bit_cast)\b|"
-                r"\b[a-zA-Z_]\w*<\s*[A-Za-z_]\w*\s*>\s*\(|"
-                r"\(\s*(?:int|float|double|char|bool|long|short|unsigned|signed|void)[ \t\n]*(?:\*[ \t\n]*)*\)\s*[a-zA-Z_]"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|abort|exit|_Exit|quick_exit|std::terminate|longjmp)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            # Admission of race conditions or lazy polling.
-            "thread_sleeps": re.compile(r"\b(sleep|delay|usleep|nanosleep|std::this_thread::sleep_for)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            # Low-level byte manipulation. CRITICAL: Removed bare `<<` and `>>` to prevent catastrophic false positives on `std::cout` and `std::cin` streams. Explicit bitwise assignments (`<<=`, `&=`) are retained as they are unambiguous.
-            "bitwise_ops": re.compile(r"\^|(?<![=!])~|<<=|>>=|&=|\|=|\^="),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mutex|lock|synchronized|Semaphore|std::lock_guard|std::scoped_lock|std::unique_lock|mtx_lock)\b",
-                re.I,
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|constexpr|consteval|constinit|final|readonly|Immutable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(delete|free|close|fclose|dispose|shutdown|std::destroy|reset)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # BUG FIX (Rule 9): all three alternatives end in `:` (non-word)
-            # and the group had NO word-ending sibling at all -- the
-            # trailing `\b` could never fire against the realistic form
-            # (`private:` always followed by whitespace/newline, never a
-            # word character), meaning this rule never matched anything.
-            # Removed the trailing `\b`; the literal `:` is already
-            # unambiguous.
-            "encapsulation": re.compile(r"\b(?:private|protected|internal):"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(on|addEventListener|subscribe|connect|handler|callback)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX (Rule 10): `mock\(`/`fake\(` end in a literal `(` but
-            # shared a trailing `\b` with word-ending siblings -- broke on
-            # the truly-empty-argument call form (`mock()`), same shape
-            # already found and fixed in C (#773).
-            "test_skip": re.compile(r"\b(?:GTEST_SKIP|test\.skip|it\.skip)\b|mock\(|fake\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (C++ Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(nlohmann::json|rapidjson|boost::archive|ParseFromString|SerializeToString)\b"
-            ),
-            "regex_execution": re.compile(r"\b(std::regex|std::regex_match|std::regex_search|std::regex_replace)\b"),
-            "time_date_logic": re.compile(
-                r"\b(std::chrono::(?:system_clock|steady_clock|duration)|std::time_t|std::localtime)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(r"\b(boost::interprocess|mmap|shm_open|pipe|fork|grpc::ServerBuilder)\b"),
-        },
-    },
-    "c": {
-        "_meta": {
-            "target_version": "C23 (ISO/IEC 9899:2024 - constexpr, #embed, [[attributes]], nullptr, typeof)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources, headers, OpenCL kernels, Yacc grammars, and C-like scripting/ATS language files.
-        # THE FIX: Added .dts and .dtsi (Device Tree Source) to parse hardware maps.
-        "extensions": [
-            ".c",
-            ".h",
-            ".cl",
-            ".inc",
-            ".y",
-            ".idc",
-            ".cats",
-            ".dts",
-            ".dtsi",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files (like .h or .inc).
-        "discriminators": [
-            ".c",
-            "Makefile",
-            "configure.ac",
-            "configure.in",
-            "configure",
-            "CMakeLists.txt",
-            "Kconfig",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["tcc", "picoc", "cscript"],
-        # UPGRADED: Maps to Family 1 (Standard C)
-        # Rationale: Uses '//' for line-level literature; multi-line literature
-        # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and jumps. EXCLUDES exit/abort (bailout_hits).
-            "branch": re.compile(r"\b(if|else|switch|case|default|for|while|do|break|continue|goto)\b|&&|\|\||\?"),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks. Bounded negation [^)]* to prevent ReDoS on massive param lists.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE NESTED POINTER SHIELD (C) ]
-                # Standard parameter capture `[^)]*` fails instantly on function pointers
-                # like `void (*cb)(int)`.
-                # FIX: Replaced `[^)]*` with the 1-Level Nesting Trick `(?:[^)(]+|\([^)]*\))*`
-                # to safely swallow function pointer parameters without triggering ReDoS.
-                # Upgraded horizontal `[ \t*]*` to `[ \t\n*]*` to support vertical signatures.
-                # =====================================================================
-                # #1209: parameter-list span wrapped in its own capture group
-                # (was the whole match, "name(...)") so detector.py's counter
-                # isolates just "(...)" instead of falling back to whitespace-
-                # splitting the name-plus-parens text, which overcounted every
-                # zero/one-arg signature by +1 the same way Python's did (#1199).
-                # BUG FIX (#1282): the typed-parameter-list requirement only ever
-                # recognized C's builtin primitive keywords -- a parameter typed
-                # as a custom typedef/struct name (`PyThreadState *tstate`,
-                # `FILE *fp`, `size_t n`; the overwhelming majority of real-world C
-                # signatures, confirmed against cpython/ceval.c) never matched at
-                # all, so `_calculate_block_metrics` fell through to args_count's
-                # 0 default for functions with real, nonzero arity. cpp's own args
-                # rule already carries this exact fallback (`[A-Z]\w*` for
-                # PascalCase/typedef'd types, `[a-z_]\w*_t` for the `_t` typedef
-                # convention); mirrored here, plus `_*` ahead of the PascalCase
-                # branch for C's leading-underscore "reserved identifier"
-                # convention (`_PyStackRef`, `_Bool`, ...), extremely common in
-                # cpython internals and not covered by cpp's own version of this
-                # fallback.
-                r"(?!(?:if|for|while|switch|return|sizeof|typeof|_Alignof|__typeof__|__builtin_[a-zA-Z0-9_]+)\b)\b([a-zA-Z_]\w*)[ \t\n*]*(\(\s*(?:const\s+|volatile\s+)?(?:int|char|void|float|double|long|short|unsigned|signed|struct|enum|_*[A-Z]\w*|[a-z_]\w*_t|[a-z_]\w*\s+[*&]*\s*[a-zA-Z_]\w*)\b(?:[^)(]|\([^)]*\))*\))",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(struct|union|enum|typedef|return|void|restrict|auto|bool|true|false|_BitInt|alignas|alignof)\b"
-            ),
-            "func_start": re.compile(
-                # =====================================================================
-                # [ CRITICAL ROADMAP FOR FUTURE LLMs & MAINTAINERS: THE REDOS IRON WALL ]
-                # PURPOSE: Anchors executable logic blocks (functions) in C.
-                #
-                # 1. THE K&R AMBIGUITY TRAP (The Original Fix):
-                #    The engine was consuming `BEGIN` as a parameter type (e.g. `BEGIN i;`).
-                #    When it failed to find a semicolon, it backtracked through 15 loops of
-                #    whitespace combinations causing 34-second ReDoS hangs.
-                #    RULE: The K&R gap MUST use `(?!(?:BEGIN...)\b)[a-zA-Z_]` to instantly reject.
-                #    RULE: NO OVERLAPPING WHITESPACE: `\s+` exclusively owns all spaces.
-                #
-                # 2. [ THE COMPILER ATTRIBUTE SHIELD ] (Hard-learned from Pathological Fuzzer):
-                #    Kernel and embedded C code frequently stack `__attribute__((...))`
-                #    definitions across multiple vertical lines before the function signature.
-                #    FIX: Injected a dedicated, bounded `__attribute__` scanner `(?:__attribute__\s*\([^)]*\)\s*){0,5}`
-                #    at the start of the pipeline. This explicitly permits multi-line `\s*` traversal
-                #    without triggering Catastrophic Backtracking against the modifiers.
-                # =====================================================================
-                # 1. The Horizontal Anchor
-                r"^[ \t]*"
-                # [ THE COMPILER ATTRIBUTE SHIELD ]: Safely consumes GCC/Clang attributes across newlines.
-                # #2460: also a SAL / entry-point annotation macro before the return type
-                # (`__control_entrypoint(DllExport) STDAPI Foo()`, `_Ret_maybenull_`) --
-                # a `__`- or `_Uppercase`-prefixed identifier, optionally with a bracketed
-                # argument. Naming-shape bounded so it can't eat an ordinary function call.
-                r"(?:(?:__attribute__\s*\((?:[^)(]|\((?:[^)(]|\([^)]*\))*\))*\)|(?:__[a-z]\w*|_[A-Z][A-Za-z0-9]*_)(?:\s*\((?:[^)(]|\([^)]*\))*\))?)\s*){0,5}"
-                # 2. Modifiers (Strictly bounded)
-                r"(?:(?:static|inline|extern|_Noreturn|__inline__|__forceinline|constexpr)\s+){0,3}"
-                # 3. Complex types
-                r"(?:(?:struct|union|enum)\s+)?"
-                # 4. Return type (Strictly linear)
-                r"(?:[a-zA-Z_]\w+\s+){0,3}[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)"
-                # [ MACRO SHIELD ]: Support macros between return type and function name (e.g. PyAPI_FUNC(int) or _Py_HOT_FUNCTION)
-                r"(?:[a-zA-Z_]\w+(?:\s*\([^)]*\))?\s+){0,5}"
-                # 5. The "Not a Function" Shield
-                r"(?!(?:if|for|while|switch|return|sizeof)\b)"
-                # 6. The Identifier Capture (Satellite Name - Group 1)
-                r"([a-zA-Z_]\w*)"
-                # [NESTED PARENTHESIS FIX]: Uses 1-Level Nesting Trick to swallow function pointers and macros without ReDoS.
-                r"\s*\((?:[^)(]|\([^)]*\))*\)"
-                # 8. The K&R C Parameter Gap (Legacy support for DOOM/MS-DOS)
-                # [IRON WALL FIX]: Forces instant failure if it encounters BEGIN or control flow.
-                r"(?:\s+(?!(?:BEGIN|if|for|while|switch|return)\b)[a-zA-Z_][^;{]{0,150};){0,15}"
-                # 9. The Ignition (Includes the MS-DOS 'BEGIN' macro)
-                r"\s*(?:\{|BEGIN\b)",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # C uses structs/unions/enums as the primary entity entities.
-            # BUG FIX (epic #813/#822): the tag name was mandatory, so anonymous typedef'd structs
-            # (`typedef struct { ... } MyStruct;`, an extremely common real C idiom) never matched
-            # at all -- undercounting this structural signature. Made the tag name optional.
-            # NOTE: a trailing-`{` requirement was tried and reverted -- it would have "fixed" this
-            # rule matching bare variable declarations of an existing struct type
-            # (`struct foo_ops ops;`), but test_c_intentional_double_classification_sweep
-            # (tests/extraction/languages/test_c_strict.py) documents that co-firing as DELIBERATE: it's how
-            # the `_ops`-vtable-style dependency_injection heuristic pairs with class_start for
-            # exactly this shape. Any future change here must keep that test passing.
-            "class_start": re.compile(r"^[ \t]*(?:typedef[ \t]+)?(?:struct|union|enum)\b(?:\s+([a-zA-Z_]\w*))?", re.M),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(assert|static_assert|_Static_assert|size_t|snprintf|strncat|strncpy|calloc|nullptr|unreachable|ckd_add|ckd_sub|ckd_mul)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Dangerous legacy functions and raw void manipulation.
-            "safety_bypasses": re.compile(
-                r"\b(strcpy|strcat|sprintf|gets|alloca)\b|\([a-zA-Z_]\w*\s*\*\)\s*[a-zA-Z_]\w*"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and context switches. EXCLUDES prints (Phase 5).
-            "high_risk_execution": re.compile(r"\b(system|popen|execl|execv|fork|longjmp|setjmp)\b"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(fopen|fclose|fread|fwrite|fscanf|sscanf|socket|recv|send|open|read|write|close|stat|fseek|remove|rename)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Linker-visible global exports.
-            "api": re.compile(
-                # =====================================================================
-                # [ROADMAP: AMBIGUITY OVERLAP AVOIDANCE]
-                # Previously used `[ \t*]+` between words. If a string failed to match,
-                # the engine backtracked to see if it should assign spaces to the left
-                # word, right word, or the wildcard.
-                # FIX: We now use strict O(1) alternation `(?:\s*[*&]+\s*|\s+)` which
-                # forces the engine to choose exactly one path and never backtrack.
-                # =====================================================================
-                # BUG FIX (Rule 9): `__declspec(dllexport)` and
-                # `__attribute__((visibility("default")))` both end in `)`
-                # (non-word) but shared a trailing `\b` with word-ending
-                # `extern` -- `\b` right after can only fire if the next char
-                # is a word character, never true for the realistic form
-                # (whitespace/newline before the return type follows). Pulled
-                # both out of the shared boundary group.
-                r"\bextern\b|__declspec\(dllexport\)|"
-                r'__attribute__\(\(visibility\("default"\)\)\)|'
-                r"^[ \t]*(?!static\b)[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)[a-zA-Z_]\w*(?:\[[^\]]*\])?\s*=?|"
-                r"^[ \t]*[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)[a-zA-Z_]\w*\s*\([^)]*\)\s*;",
-                re.M,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES const/constexpr (freeze_hits).
-            "state_mutation": re.compile(r"(?<![=!<>])=(?![=])|\*(?!\s*const)\w+[ \t]*=|(?:\+\+|--)"),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"(?://|/\*)[ \t]*(?:if|for|while|struct|union|enum|void|int|return)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"///|/\*\*|@param|@return|@brief|@details|\\param|\\return|\\brief|\\details"),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r"\b(?:TEST|TEST_F|TEST_CASE|CU_ASSERT|RUN_TEST|EXPECT_[A-Z_]+|ASSERT_[A-Z_]+)\b|\bassert\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(thrd_create|thrd_join|mtx_lock|pthread_create|pthread_mutex_lock|atomic_int|_Atomic|memory_order_[a-z]+|thread_local)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r"\b(GtkWidget|CreateWindow|MessageBox|XOpenDisplay|gtk_window_new|Fl_Window|initscr|wprintw)\b"
-            ),
-            # 17. closures
-            "closures": None,  # Strict C23 lacks native closures (blocks are non-standard).
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                # =====================================================================
-                # [ROADMAP: AMBIGUITY OVERLAP AVOIDANCE]
-                # Same strict O(1) alternation fix applied here as in the `api` rule
-                # to prevent exponential space/asterisk evaluation.
-                # =====================================================================
-                r"^[ \t]*(?:static\s+|extern[ \t]+)?[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)[a-zA-Z_]\w*(?:\[[^\]]*\])?\s*=(?![ \t]*==)",
-                re.M,
-            ),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"\[\[\s*[a-zA-Z_:][^\]]*\s*\]\]"),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"\b_Generic\s*\([^)]*\)"),
-            # 21. comprehensions
-            "comprehensions": None,
-            # 22. scientific (Numerical / Compute Libraries)
-            # BUG FIX (Rule 9): `cblas_` ends in `_` (a word char) and was
-            # clearly intended as a prefix match for any BLAS routine
-            # (`cblas_dgemm`, `cblas_sgemm`, ...), but shared a trailing `\b`
-            # with word-ending siblings -- real usage always continues with
-            # more word characters right after (`cblas_dgemm`), so the
-            # boundary could never fire (both sides word chars). Pulled out
-            # of the shared group with only a leading `\b`.
-            "scientific": re.compile(
-                r"\b(?:math\.h|tgmath\.h|complex\.h|dgemm|sin|cos|tan|exp|log|sqrt|complex|I|_Float\d+|__m\d+)\b|\bcblas_"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Macros with args and unstructured jumps.
-            "reflection_metaprogramming": re.compile(r"^#\s*define\s+[a-zA-Z_]\w*\([^)]*\)|\bgoto\b", re.M),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r'^[ \t]*#[ \t]*(?:include|embed)\s*[<"][^>"]+[>"]', re.M),
-            "_dependency_capture": re.compile(r'^[ \t]*#[ \t\n]*(?:include|embed)[ \t\n]*[<"]([^>"]+)[>"]', re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:@author|\\author|Author:|Created by:|Copyright)\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, and
-            # rust earlier in this epic. Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(r"\b(FCGI_Accept|khttp_parse|MHD_start_daemon|facil\.io)\b"),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(epoll_wait|epoll_ctl|kqueue|kevent|select|poll|libev|libuv)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(r"\b(plugin_register|vtable|struct\s+[a-zA-Z_]\w*_ops)\b"),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"^[ \t]*#[ \t]*(?:define|undef|if|elif|else|endif|pragma|warning|error)\b",
-                re.M,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": re.compile(
-                r"->|\b(?:uintptr_t|intptr_t|ptrdiff_t|size_t)\b|(?<=[=\s,(])&\w+|(?<=[=\s,(])\*(?:\s*const\s*)?\w+"
-            ),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(r"\b(malloc|calloc|realloc|free|aligned_alloc|mmap|alloca)\b"),
-            # 37. inline_asm (The Bare Metal)
-            "inline_asm": re.compile(
-                r"\b(?:__asm__|asm|__asm)\b(?:\s+(?:volatile|__volatile__))?\s*\(|\b(?:__asm__|asm|__asm)\b[ \t]*\{"
-            ),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(r"\b(?:syslog|openlog|log_info|log_error|log_warn|log_debug|vsyslog)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(printf|fprintf|vprintf|puts|putchar|perror)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                # =====================================================================
-                # [ROADMAP: NESTED OPTIONAL SPACES (ReDoS TRAP)]
-                # FIX 2: `\s*[*]*\s*` is highly vulnerable to ReDoS if the payload
-                # is spaced asterisks like `(int * * *)`. Flattened to strictly linear
-                # `[ \t\n]*(?:\*[ \t\n]*)*` to prevent any overlapping whitespace matching.
-                # =====================================================================
-                r"\(\s*(?:int|float|double|char|bool|long|short|unsigned|signed|void)[ \t\n]*(?:\*[ \t\n]*)*\)\s*[a-zA-Z_]"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(abort|exit|_Exit|quick_exit|return\s+-1)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(sleep|usleep|nanosleep|thrd_sleep)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|\^|(?<![=!])~|<<=|>>=|&=|\|=|\^="),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mtx_lock|mtx_unlock|pthread_mutex_lock|atomic_flag_test_and_set|atomic_store)\b"
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|constexpr|alignas|restrict)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(free|fclose|close|munmap|destroy|shutdown)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Physical Reality: Static functions/variables are internal/private to the translation unit.
-            "encapsulation": re.compile(r"^[ \t]*static\b", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(on_event|handler|callback|signal\(|sigaction\()"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX (Rule 10): `mock\(`/`fake\(` end in a literal `(` but
-            # shared a trailing `\b` with word-ending siblings -- broke on
-            # the truly-empty-argument call form (`mock()`), where the next
-            # char after `(` is `)`, not a word char.
-            "test_skip": re.compile(r"\b(?:IGNORE_TEST|test\.skip)\b|mock\(|fake\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (C Specifics) ---
-            "serialization_parsing": re.compile(r"\b(cJSON_Parse|json_loads|xmlReadMemory|xmlParseFile|jansson)\b"),
-            "regex_execution": re.compile(r"\b(regcomp|regexec|regfree)\b"),
-            "time_date_logic": re.compile(r"\b(time_t|clock_gettime|gettimeofday|localtime_r?|strftime)\b"),
-            "ipc_rpc_bridges": re.compile(r"\b(fork|pipe|shmget|shmat|mmap|socket|bind|listen|accept)\b"),
-        },
-    },
-    "php": {
-        "_meta": {
-            "target_version": "PHP 8.5.x / Modern Laravel 11+, Symfony 7+, & PSR-12 Paradigms",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Merged standard suffixes, legacy formats, UI templates (.phtml, .ctp), and CMS "unparsable artifacts" (.module, .inc).
-        "extensions": [
-            ".php",
-            ".phtml",
-            ".php3",
-            ".php4",
-            ".php5",
-            ".php7",
-            ".php8",
-            ".phps",
-            ".ctp",
-            ".module",
-            ".inc",
-            ".theme",
-            ".install",
-            ".profile",
-            ".engine",
-            ".aw",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless framework CLI entry points that are secretly pure PHP code.
-        "exact_matches": ["artisan", "composer.phar", "drush", "wp-cli", "phpunit"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files (like .inc).
-        "discriminators": [
-            ".php",
-            "composer.json",
-            "composer.lock",
-            "phpunit.xml",
-            "phpunit.xml.dist",
-            "phpcs.xml",
-            ".php_cs",
-            ".php_cs.dist",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["php", "php-cli", "php-cgi", "hhvm"],
-        # UPGRADED: Maps to Family 6 (Polyglot)
-        # Rationale: PHP fundamentally operates within an HTML context, requiring the parser
-        # to explicitly hunt for <?php execution boundaries. It also supports multiple
-        # comment styles (//, #, and /* */).
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Control flow. Includes modern match expression. EXCLUDES throw (bailout_hits).
-            "branch": re.compile(
-                r"(?<!\$)(?<!->)(?<!::)\b(if|else|elseif|switch|case|default|foreach|for|while|do|try|catch|finally|break|continue|match|goto)\b|&&|\|\||\?\?|\?"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Signatures for functions and arrow functions. Bounded to prevent ReDoS.
-            # #1209: parameter-list span wrapped in its own capture group (was
-            # only reachable via group(0), the whole match including the
-            # "function"/"fn"/name prefix) so detector.py's counter isolates
-            # just "(...)" -- the whole-match fallback overcounted every
-            # zero/one-arg signature by +1 the same way Python's did (#1199).
-            # Name group added too, purely so existing extraction tests keep
-            # passing.
-            "args": re.compile(
-                r"(?<!\$)(?<!->)(?<!::)\b(?:function|fn)[ \t\n]*(?:&[ \t\n]*)?(?:/\*.*?\*/[ \t\n]*){0,3}([a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*)?[ \t\n]*(\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\))*\))*\))",
-                re.M | re.I,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const/readonly (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"(?<!\$)(?<!->)(?<!::)\b(namespace|use|class|interface|trait|enum|function|return|yield|declare|require|require_once|include|include_once|as|implements|extends|clone|new)\b"
-            ),
-            "func_start": re.compile(
-                r"(?:^|(?<!->)(?<!::)[^a-zA-Z0-9_$])(?:#\[(?:[^\]\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\][ \t\n]*){0,10}"
-                r"(?:(?:public|protected|private|static|final|abstract)[ \t\n]+){0,5}"
-                r"(?<!->)(?<!::)\bfunction[ \t\n]+(?:&[ \t\n]*)?(?:/\*.*?\*/[ \t\n]*){0,3}([a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*)[ \t\n]*(?=\()",
-                re.M | re.I,
-            ),
-            "class_start": re.compile(
-                r"^[ \t]*(?:#\[(?:[^\]\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\][ \t\n]*){0,10}"
-                r"(?:(?:abstract|final|readonly)[ \t\n]+){0,3}(?:class|interface|trait|enum)[ \t\n]+(?:/\*.*?\*/[ \t\n]*){0,3}(?!(?:extends|implements)\b)([a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*)(?![a-zA-Z0-9_\x80-\xff])",
-                re.M | re.I,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|declare\s*\(\s*strict_types[ \t]*=\s*1\s*\)|readonly|Throwable|Exception|assert|isset|empty|is_null|instanceof)\b|\?\?|\?->|#\[Override\]"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Error suppression, dangerous eval, and loose equality.
-            # (?<![=!]) on the == branch: without it, `===`/`!==` (strict
-            # equality/inequality, explicitly SAFE per this language's own
-            # `safety` rule above) both still matched via their trailing `==`
-            # substring at a shifted offset -- same bug found in javascript.
-            # BUG FIX: the `@` error-suppression check required the next
-            # char to be a letter/underscore, matching `@someFunc()` but
-            # missing PHP's extremely common `@$array['key']`/`@$var`
-            # suppression idiom (silencing "undefined index" notices).
-            # Widened to also allow `$` immediately after `@`.
-            "safety_bypasses": re.compile(
-                r"@(?:[a-zA-Z_\x80-\xff]|\$)|\b(unserialize|extract|parse_str|phpinfo)\b|error_reporting\s*\(\s*0\s*\)|(?<![=!])==(?!=)|!=(?!=)"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Shell execution and process killers. EXCLUDES prints (Phase 5).
-            "high_risk_execution": re.compile(r"\b(exec|shell_exec|system|passthru|proc_open|popen)\b|`[^`]+`"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(fopen|fread|fwrite|file_get_contents|file_put_contents|PDO|mysqli|curl_exec|socket|header|setcookie)\b|\$_(?:GET|POST|FILES|REQUEST|COOKIE)"
-            ),
-            # 10. api (Public Surface Area)
-            # Exposed surface. Explicit public markers + attribute routes.
-            "api": re.compile(r"\b(public)\b|#\[(?:ApiResource|Route|Get|Post|Put|Delete|Patch)[^\]]*\]"),
-            # 11. flux (State Mutation)
-            # Mutation of state. Variable reassignments and array mutators.
-            # QUADRATIC BLOWUP FIX: the optional `(?:\w+)?` before the
-            # required-but-often-absent `->`/`::` was unbounded with no
-            # preceding \b anchor -- O(n^2) on a long run of word characters
-            # with neither token present. Bounded to {1,100}.
-            "state_mutation": re.compile(
-                r"\$[a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*\s*(?:[-+*./%&|])?=|&\$|\bglobal\s+\$|(?:\w{1,100})?(?:->|::)[a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*[ \t]*=|array_(?:push|pop|shift|unshift|splice)\b|(?:\+\+|--)"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # BUG FIX: the `function|class|namespace|use|if|foreach`
-            # keyword check only ran after `/*` (the rare block-comment
-            # form) -- a commented-out declaration using `//` (PHP's
-            # standard, far more common single-line comment style, e.g.
-            # `// function foo() {}`) never matched at all. Applied the
-            # same keyword check to both comment styles.
-            "dead_code": re.compile(
-                r"//\s*[;{}]|(?://|/\*)\s*(?:function|class|namespace|use|if|foreach)\b"
-                r"|#\s*\$|//\s*(?:echo|print|\$|return|var_dump)"
-            ),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"/\*\*|@param|@return|@throws|@var|@deprecated|@property|@method"),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r"\b(PHPUnit|TestCase|assertSame|assertEquals|assertTrue|assertFalse|mock|spy|expects|toBe|test|it)\b|#\[Test\]"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # BUG FIX: `go\(` ends on `(` (non-word), so the shared
-            # trailing \b only fired when a word char immediately followed
-            # the paren -- never true for the zero-argument form (`go();`).
-            "concurrency": re.compile(
-                r"\b(?:Fiber|yield|Swoole|React\\|Amp\\|Coroutine|await|suspend|resume|pcntl_fork)\b|\bgo\("
-            ),
-            # 16. ui_framework (UI / View Components)
-            # BUG FIX: `view\s*\(`/`render\s*\(` both end on `(` (non-word),
-            # so the shared trailing \b only fired when a word char
-            # immediately followed the paren -- never true for the common
-            # real call shape `view("index")`, where a quote follows.
-            "ui_framework": re.compile(
-                r"\b(?:renderView|extends\s+Controller|Blade::|Twig\\Environment)\b"
-                r"|\bview\s*\(|\brender\s*\("
-                r'|@(?:if|foreach|yield|section|extends)\b|<\?=|echo\s+[\'"]<|\{\{[^}]*\}\}|\{%\s*[^%]*\s*%\}'
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"\b(?:function\s*\([^)]*\)\s*(?:use\s*\([^)]*\)\s*)?\{|fn\s*\([^)]*\)[ \t]*=>)"),
-            # 18. globals (Global / Shared State)
-            # BUG FIX: the leading \b before `$_SERVER`/`$_SESSION`/
-            # `$_ENV`/`$GLOBALS` requires a word char immediately before
-            # the `$` -- never true in real PHP, where a superglobal is
-            # always preceded by whitespace, `=`, `(`, or a line start
-            # (all non-word). All 4 of PHP's most common superglobal
-            # accesses never matched at all. `$` is unambiguous as a
-            # start anchor on its own; no leading \b was needed.
-            "globals": re.compile(r"(?:\$_SERVER|\$_SESSION|\$_ENV|\$GLOBALS)\b|\bglobal\s+\$", re.I),
-            # 19. decorators (Decorators / Annotations)
-            # BUG FIX (ReDoS): `[a-zA-Z0-9_:\\]+` and `[^\]]*` are two
-            # adjacent unbounded quantifiers matching an overlapping
-            # character set (both match plain letters/digits) -- against
-            # an adversarial attribute name with no closing `]`, every
-            # possible split between the two quantifiers gets tried
-            # before failing. Confirmed genuine O(n^2) scaling (0.045s/
-            # 0.18s/0.71s/2.85s for n=10k/20k/40k/80k, ~4x per doubling).
-            # Bounded both to reasonable caps.
-            "decorators": re.compile(r"#\[\s*[a-zA-Z0-9_:\\]{1,100}[^\]]{0,300}\]", re.M),
-            # 20. generics (Generics / Type Parameters)
-            # Simulated/Docblock generics.
-            "generics": re.compile(
-                r"@(?:template|implements|extends|use)\s+[a-zA-Z0-9_\\]+(?:<[^>]*>)?|\b(?:array|iterable|Collection)<[^>]*>"
-            ),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(
-                r"\b(array_map|array_filter|array_reduce|array_walk|array_column|array_find|array_any|array_all)\b"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(bcadd|bcsub|bcmul|bcdiv|gmp_add|gmp_mul|abs|cos|sin|tan|sqrt|log|exp|pow)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Magic methods, reflection, and variable variables.
-            "reflection_metaprogramming": re.compile(
-                r"\b(__(?:get|set|call|callStatic|invoke|destruct|clone)|Reflection(?:Class|Method|Property)|call_user_func(?:_array)?)\b|\$\$[a-zA-Z_\x80-\xff]"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r"\b(?:use\s+(?:function|const[ \t]+)?[\w\\]+|require|include|require_once|include_once)\b",
-                re.M,
-            ),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (PHP) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
-                #
-                # HISTORICAL BUG: Originally, this regex was anchored to the start of the
-                # line `^[ \t]*`. This blinded the firewall to PHP's dynamic execution
-                # patterns. PHP applications (especially legacy frameworks) frequently
-                # lazy-load files inside controllers, `if` statements, or assign the result
-                # of a file inclusion directly to a variable (e.g., `$config = require 'cfg.php';`).
-                #
-                # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
-                # boundary to find the inclusion keywords anywhere in the file.
-                #
-                # [ THE ASSIGNMENT SHIELD SIMPLIFICATION ]
-                # Because the regex is no longer anchored to the start of the line, we were
-                # able to completely delete the bloated, ReDoS-prone assignment capture group
-                # `(?:\$[a-zA-Z_]...=)?`. The engine now effortlessly ignores the `$var = `
-                # portion and skips straight to the `require` boundary.
-                #
-                # [ THE PARENTHESIS SHIELD ]
-                # PHP allows `require 'file.php'` and `require('file.php')`. The `\(?` safely
-                # bridges both syntaxes while capturing the target path.
-                # =====================================================================
-                r"\b(?:use[ \t\n]+(?:function[ \t\n]+|const[ \t\n]+)?([a-zA-Z0-9_\\]+(?:[ \t\n]*(?:as[ \t\n]+|[,{])[a-zA-Z0-9_\\ \t\n{},]+?)?)[ \t\n]*;|(?:require|require_once|include|include_once)[ \t\n]*\(?[ \t\n]*(?:['\"]([^'\"]+)['\"]|([^;]+?)[ \t\n]*(?=\)?\s*;)))",
-                re.M | re.I,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"@(?:author|copyright)\s+(.*)|(?:Created by|Maintainer):?\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(Response|JsonResponse|HtmlResponse|RedirectResponse|Symfony\\Component\\HttpFoundation|Illuminate\\Http\\Response)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(
-                r"\b(EventDispatcher|dispatchEvent|Listener|dispatch|broadcast|notify|Event::|listen)\b"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # BUG FIX: `app\(`/`make\(` both end on `(` (non-word), so the
-            # shared trailing \b only fired when a word char immediately
-            # followed the paren -- never true for the zero-argument form
-            # (`app();`/`make();`).
-            "dependency_injection": re.compile(
-                r"\b(?:ContainerInterface|Container|getContainer|inject|bind|singleton)\b"
-                r"|\bapp\(|\bmake\(|#\[(?:Inject|Autowire)[^\]]*\]"
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            # BUG FIX: `macro\s*\(`/`mixin\s*\(` both end on `(` -- the
-            # shared trailing \b only fired when a word char immediately
-            # followed the paren, e.g. `mixin(new Foo())` worked (`new`
-            # follows) but `macro("foo", ...)` didn't (a quote follows).
-            "macros": re.compile(r"\bMacroable\b|\bmacro\s*\(|\bmixin\s*\("),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": re.compile(r"\b(FFI::cast|FFI::addr|FFI::scope|FFI::new)\b"),
-            # 36. memory_alloc
-            "memory_alloc": re.compile(r"\bnew\s+[a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*"),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            # BUG FIX: `logger\(` ends on `(` (non-word), so the shared
-            # trailing \b only fired when a word char immediately followed
-            # the paren -- never true for the idiomatic Laravel chain form
-            # `logger()->info('message')`, where `)` follows.
-            "telemetry": re.compile(
-                r"(?:\b(?:Log::|LoggerInterface|Monolog\\|error_log|Psr\\Log)\b|logger\()"
-                r".*?(?:info|error|warning|debug|trace|notice|critical|alert|emergency)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(echo|print|var_dump|print_r|printf|vprintf|var_export|die|exit|dd|dump)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\((?:int|integer|bool|boolean|float|double|string|array|object|unset)\)\s*|\bsettype\s*\("
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|die|exit|abort)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(sleep|usleep|time_nanosleep|time_sleep_until)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(mutex|lock|synchronized|Semaphore|flock|sem_acquire)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(const|readonly|final)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(unset|fclose|mysql_close|mysqli_close|PDO::null|dispose|cleanup)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b(private|protected|internal)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\.on\(|addEventListener|subscribe|@KafkaListener|@RabbitListener"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX: `mock\(`/`fake\(` both end on `(` (non-word), so the
-            # shared trailing \b only fired when a word char immediately
-            # followed the paren -- never true for the zero-argument form
-            # (`mock();`).
-            "test_skip": re.compile(r"\b(?:markTestSkipped|test\.skip|it\.skip)\b|\bmock\(|\bfake\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (PHP Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(unserialize|serialize|json_decode|json_encode|simplexml_load_(?:string|file)|DOMDocument)\b"
-            ),
-            "regex_execution": re.compile(
-                r"\b(preg_match(?:_all)?|preg_replace(?:_callback)?|preg_split|preg_filter)\b"
-            ),
-            # BUG FIX: `time\s*\(`/`date\s*\(` both end on `(` (non-word),
-            # so the shared trailing \b only fired when a word char
-            # immediately followed the paren -- never true for the
-            # zero-argument form (`time()`) or a quoted format string
-            # (`date("Y-m-d")`).
-            "time_date_logic": re.compile(
-                r"\b(?:strtotime|DateTime(?:Immutable)?|date_create)\b|\btime\s*\(|\bdate\s*\("
-            ),
-            "ipc_rpc_bridges": re.compile(r"\b(shell_exec|exec|system|passthru|proc_open|curl_exec|fsockopen)\b"),
-        },
-    },
-    "powershell": {
-        "_meta": {
-            "target_version": "PowerShell 7.5.4 (Core / Cross-Platform / PSClasses)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard scripts (.ps1), modules (.psm1), data files evaluated as AST (.psd1), and type formatting files.
-        "extensions": [".ps1", ".psm1", ".psd1", ".ps1xml", ".psc1", ".pssc", ".cdxml"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: PowerShell rarely uses extensionless execution scripts; its conventions demand extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and analyzer settings to lock in context.
-        "discriminators": [
-            ".ps1",
-            ".psm1",
-            "PSScriptAnalyzerSettings.psd1",
-            "psake.ps1",
-        ],
-        # EXECUTION SIGNATURES: Modern cross-platform and legacy Windows interpreters found on Line 1.
-        "shebangs": ["pwsh", "powershell"],
-        # Maps to Family 4 (Hybrid Hash) -- #621: this comment always said
-        # "Family 4 (Hybrid Hash)" but the value below was "standard_block"
-        # until now, meaning PowerShell shared a regex with C-style languages
-        # and got zero comment stripping (standard_block never used the `#`
-        # token). "embedded_syntax" is the real family for this shape.
-        # Rationale: PowerShell uses '#' for single-line comments but relies on
-        # a unique '<# #>' syntax for multi-line block comments, requiring hybrid parsing logic.
-        "lexical_family": "embedded_syntax",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # branch: decisions that split flow. Includes ternary operators (?) and null-coalescing (??).
-            "branch": re.compile(
-                r"(?<![-$.])\b(if|else|elseif|switch|for|foreach|while|do|until|try|catch|finally|throw|trap|break|continue|return)\b|-and|-or|-not|-xor|\?\?|(?<=\s)\?(?=\s|\{)",
-                re.I,
-            ),
-            # args: Parameters / Coupling. Captures the param block mass of functions and script files.
-            # RULE 11 FIX (epic #813/#834): both alternatives used the flat `\([^)]*\)`,
-            # truncating at the FIRST `)` and breaking on a realistic default-value expression
-            # containing its own parens (`param($Config = (Get-DefaultConfig))`, extremely common
-            # for computed defaults) -- the paren variant of the same Rule-11 bug class already
-            # fixed for angle- and square-bracket generics elsewhere. Widened to the established
-            # one-level-nesting idiom.
-            # MISSING-DECLARATION-SHAPE FIX (epic #813/#834): PS class constructors
-            # (`Foo([string]$name) { ... }`) have no leading `function` keyword and no return-type
-            # bracket, so their parameter list was invisible to this rule entirely -- added as a
-            # third alternative, anchored to a trailing `{` (not just optional) specifically so it
-            # can't also match a bare call statement (`Foo($a, $b)` with no body), which PowerShell
-            # constructors/methods always have and bare calls never do immediately on the same line.
-            # SCOPE-QUALIFIER FIX (epic #813/#834): PowerShell allows an explicit scope modifier
-            # before a function name (`function global:Foo(...)`, also `script:`/`local:`/
-            # `private:`, a real idiom for module-authored functions that need global-scope
-            # visibility). The identifier class `[a-zA-Z0-9_-]+` doesn't include `:`, so the whole
-            # alternative failed to match at all past the scope prefix -- added as an optional
-            # non-capturing step-over before the name.
-            # NEW-ALTERNATIVE FALSE-POSITIVE FIX (epic #813/#834): the bare-identifier constructor
-            # alternative just above, on its own, ALSO matched PowerShell's own control-flow
-            # statements -- `if (...) {`, `while (...) {`, `switch (...) {`, `for (...) {`,
-            # `foreach (...) {`, `elseif (...) {` all share the exact "identifier, parens, trailing
-            # brace" shape a constructor call has. Caught by hand-testing the fix's own "invalid"
-            # case (`if ($a -eq $b) {`) before shipping, not by crucible (matches recurring class 21's
-            # lesson about a new alternative's own blind spots -- here at authoring time instead of
-            # via a corpus diff). Fixed with a negative-lookahead keyword exclusion.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # all three branches (was only reachable via group(0), the whole
-            # match including the "param"/"function"/name prefix) so
-            # detector.py's counter isolates just "(...)" -- the whole-match
-            # fallback overcounted every zero/one-arg signature by +1 the
-            # same way Python's did (#1199). Name groups added to branches
-            # 2/3 too, purely so existing extraction tests keep passing.
-            "args": re.compile(
-                r"\b(param)\s*(\((?:[^()]|\([^()]*\))*\))"
-                r"|\bfunction\s+(?:(?:global|script|local|private):)?([a-zA-Z0-9_-]+)\s*(\((?:[^()]|\([^()]*\))*\))"
-                r"|^[ \t]*(?:(?:hidden|static)\s+)*(?:\[(?:[^\[\]]|\[[^\[\]]*\])+\]\s+)?"
-                r"(?!(?:if|elseif|switch|while|for|foreach|until|trap|catch)\b)"
-                r"([A-Za-z_]\w*)\s*(\((?:[^()]|\([^()]*\))*\))\s*[ \t\n]*\{",
-                re.I | re.M,
-            ),
-            # linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope (process, begin, end).
-            # EXCLUDES access modifiers (hidden, static) to prevent Structural Complexity Inflation.
-            "structural_boundaries": re.compile(
-                r"(?<![-$.])\b(?:(?:function|filter|workflow|configuration|class|enum)\s+[a-zA-Z_]"
-                r"|(?:process|begin|end|clean)\s*\{"
-                r"|(?:return|exit)\b(?![-])"
-                r"|using\s+(?:namespace|module)\b)",
-                re.I,
-            ),
-            # func_start: Executable Logic Anchors. Anchors executable logic blocks.
-            # EXCLUDES class/enum to fix False Positives.
-            # BUG FIX: the return-type bracket class `[^\]]+` couldn't
-            # represent one level of nested brackets, so a PS class method
-            # with a generic .NET return type (e.g.
-            # `[Dictionary[string,int]] GetMap() {` /
-            # `[System.Collections.Generic.List[string]] GetItems() {`) --
-            # a common real-world form -- never matched at all, unlike the
-            # identical non-generic form (`[int] GetValue() {`), which did.
-            # MISSING-DECLARATION-SHAPE FIX (epic #813/#834): PS class constructors
-            # (`Foo([string]$name) { ... }`) have neither a leading `function` keyword nor a
-            # return-type bracket, so they were entirely invisible to this rule (only typed
-            # methods and `function`-keyword declarations matched). Added as a third
-            # alternative, anchored to a trailing `{` (not just optional) specifically so it
-            # can't also match a bare call statement (`Foo($a, $b)` with no body) -- PowerShell
-            # constructors/methods always have a body immediately following on the same
-            # logical statement, and a bare call never continues into an unrelated `{` like
-            # that in realistic code.
-            # SCOPE-QUALIFIER FIX (epic #813/#834): PowerShell allows an explicit scope modifier
-            # before a function name (`function global:Foo {}`, also `script:`/`local:`/
-            # `private:`). The identifier class doesn't include `:`, so the capture greedily
-            # consumed only the SCOPE KEYWORD itself (e.g. "global") as if it were the function
-            # name, silently returning a wrong name rather than failing to match -- worse than a
-            # non-match. Added an optional non-capturing step-over before the name.
-            # NEW-ALTERNATIVE FALSE-POSITIVE FIX (epic #813/#834): same as `args` above -- the
-            # bare-identifier constructor alternative just below also matched PowerShell's own
-            # control-flow statements (`if (...) {`, `while (...) {`, `switch (...) {`, `for (...)
-            # {`, `foreach (...) {`, `elseif (...) {`). Fixed with the same negative-lookahead
-            # keyword exclusion.
-            "func_start": re.compile(
-                r"^[ \t]*(?:function|filter|workflow)\s+(?:(?:global|script|local|private):)?([a-zA-Z0-9_-]+)"
-                r"|^[ \t]*(?:(?:hidden|static)\s+)*\[(?:[^\[\]]|\[[^\[\]]*\])+\]\s+(?!(?:if|elseif|switch|while|for|foreach|until|trap|catch|param)\b)([a-zA-Z_]\w*)(?=\s*\()"
-                r"|^[ \t]*(?:(?:hidden|static)\s+)*(?!(?:if|elseif|switch|while|for|foreach|until|trap|catch|param)\b)"
-                r"([A-Za-z_]\w*)\s*\((?:[^()]|\([^()]*\))*\)\s*[ \t\n]*\{",
-                re.I | re.M,
-            ),
-            # class_start: Object / Entity Declarations. Defines OO boundaries (Classes and Enums).
-            # #1295-adjacent: no capture group around the name meant every match collapsed into
-            # "Anonymous_Class" in the named-extraction path -- powershell has been in
-            # _CLASS_START_NAMED_EXTRACTION_LANGS since #1264, but this specific gap was never
-            # caught (real_classes=5 in the corpus, found_classes=0). Purely additive change --
-            # doesn't alter which lines match or how many, only makes match.groups() richer.
-            "class_start": re.compile(r"^[ \t]*(?:class|enum)\s+([a-zA-Z_]\w*)", re.I | re.M),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # safety: Defensive Programming. Strict mode, validation attributes, and null-conditional access (?.).
-            "safety": re.compile(
-                r"\b(try|catch|finally|trap|Set-StrictMode|ValidateNotNull|ValidateSet|ValidateRange|ValidatePattern)\b|-ErrorAction\s+Stop|\$\?|\?\.",
-                re.I,
-            ),
-            # safety_neg: Safety Bypasses. Actively bypassing errors or type checks (Out-Null, SilentlyContinue).
-            "safety_bypasses": re.compile(
-                r"-ErrorAction\s+SilentlyContinue|-WarningAction\s+SilentlyContinue|Out-Null|\[void\]|ExecutionPolicy\s+Bypass|\bIgnore\b",
-                re.I,
-            ),
-            # danger: High-Risk Execution. Dynamic code execution and process terminators.
-            "high_risk_execution": re.compile(r"\b(Invoke-Expression|iex|Stop-Process|kill|Exit)\b", re.I),
-            # io: I/O & Network Boundaries. Disk, Network, and URL fetching (Includes CERN/TBL legacy emulation triggers).
-            "io": re.compile(
-                r"\b(Get-Content|Set-Content|Out-File|Invoke-WebRequest|iwr|Invoke-RestMethod|irm|TcpClient|HttpListener|HTLoad|HTGet|ENQUIRE)\b",
-                re.I,
-            ),
-            # api: Public Surface Area. Exposed surface area (Module exports and non-hidden functions).
-            "api": re.compile(
-                r"\b(Export-ModuleMember|New-Alias|CmdletBinding)\b|^[ \t]*(?!hidden\s+)[a-zA-Z_]\w*\s*\(",
-                re.I | re.M,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. Captures assignments, scoped variables, array indexing, and anchored increments.
-            "state_mutation": re.compile(
-                # PATH A: EXPLICIT CMDLET MUTATION
-                r"\bSet-Variable\b|"
-                # PATH B: STANDARD ASSIGNMENT (Variables, Scopes, Properties, and Arrays)
-                # Safely captures $var, $global:var, $env:PATH
-                r"\$(?:[a-zA-Z]+:)?[a-zA-Z_]\w*"
-                # The Chain: Safely captures .Property OR ['Index'], clamped to {0,4} to prevent runaway depth
-                r"(?:\.[a-zA-Z_]\w*|\[[^\]\n]+\]){0,4}"
-                # The Operator: Uses [ \t]* instead of \s* to prevent O(N^2) vertical newline bleeding
-                r"[ \t]*(?:\+|-|\*|/|%)?=|"
-                # PATH C: PRE-INCREMENT / PRE-DECREMENT
-                # Anchored to a variable to prevent matching "C++" in strings
-                r"(?:\+\+|--)[ \t]*\$(?:[a-zA-Z]+:)?[a-zA-Z_]\w*|"
-                # PATH D: POST-INCREMENT / POST-DECREMENT
-                # Includes property/array chaining before the increment (e.g. $arr[0]++)
-                r"\$(?:[a-zA-Z]+:)?[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*|\[[^\]\n]+\]){0,4}[ \t]*(?:\+\+|--)",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out execution logic indicating dead features. Supports both `//` and `#` style comments.
-            "dead_code": re.compile(r"(?:#|<#)[ \t]*(?:function|class|if|foreach|while|return)\b", re.I),
-            # doc: Structured Documentation. Get-Help comment-based documentation.
-            "doc": re.compile(
-                r"\.(?:SYNOPSIS|DESCRIPTION|PARAMETER|EXAMPLE|NOTES|LINK|INPUTS|OUTPUTS|ROLE)\b",
-                re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            # Triggers indicating internal verification. MUST strictly anchor 'it', 'test', and 'toBe' with opening parentheses to prevent triggering on prose inside Pest/PHPUnit tests.
-            "test": re.compile(
-                r'\b(?:Mock|Assert-MockCalled|BeforeAll|AfterAll|BeforeEach|AfterEach|Should)\b|\b(?:Describe|Context|It)\s+[\'"]',
-                re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # concurrency: Temporal Static. Jobs, Runspaces, and PS7 Parallel pipelines.
-            # BUG FIX: `-Parallel` starts with `-` (non-word), so the
-            # shared leading \b could only fire when a word char
-            # immediately preceded the `-` -- never true for how this
-            # ForEach-Object flag is actually written (preceded by
-            # whitespace). PS7's parallel pipeline feature never matched.
-            "concurrency": re.compile(
-                r"\b(?:Start-Job|Wait-Job|Receive-Job|Start-ThreadJob|RunspaceFactory|PowerShell\.Create)\b|-Parallel\b",
-                re.I,
-            ),
-            # ui_framework: UI / View Components. WinForms/WPF bridges (Includes TBL WWW rendering emulation triggers).
-            "ui_framework": re.compile(
-                r"\[System\.Windows\.(?:Forms|Controls|Markup)\]|New-Object\s+System\.Windows\.|Out-GridView|HtmlDocument|WebBrowser|SGML|WorldWideWeb",
-                re.I,
-            ),
-            # closures: Closures / Anonymous Functions. ScriptBlocks (The foundation of PS closures).
-            # BUG FIX (ReDoS): the unbounded `[^}]*` before the closing `}`,
-            # combined with unanchored search, is O(n^2) on payloads with many
-            # `{` and no matching `}` (each of the n starting positions scans
-            # ~n chars before failing) -- confirmed via scaling measurements
-            # (~4x slowdown per input-size doubling). Bounded quantifiers cap
-            # the per-position scan cost, same fix shape as go/dart closures.
-            "closures": re.compile(r"\{\s{0,20}(?:param\s{0,10}\([^)]{0,300}\))?[^}]{0,500}\}", re.I),
-            # globals: Global / Shared State. Environment and global/script scope variables.
-            "globals": re.compile(
-                r"\$(?:global|env|script):[a-zA-Z_]\w*|\b(?:ErrorActionPreference|WarningPreference|ConfirmPreference)\b",
-                re.I,
-            ),
-            # decorators: Decorators / Annotations. Cmdlet and Parameter attributes.
-            "decorators": re.compile(
-                r"\[(?:CmdletBinding|Parameter|Alias|OutputType|AllowNull|AllowEmptyString)\s*\([^)]*\)\]",
-                re.I,
-            ),
-            # generics: Generics / Type Parameters. .NET generic type invocations.
-            "generics": re.compile(r"\[[a-zA-Z_.]+(?:`\d+)?\[[^\]]*\]\]", re.I),
-            # comprehensions: Iterators / Comprehensions. Pipeline filtering and projection.
-            "comprehensions": re.compile(
-                r"\|\s*(?:Where-Object|\?|Select-Object|select|ForEach-Object|%)[ \t]*\{",
-                re.I,
-            ),
-            # scientific: Numerical / Compute Libraries. .NET Math primitives.
-            "scientific": re.compile(
-                r"\[Math\]::(?:Abs|Acos|Asin|Atan|Ceiling|Cos|Exp|Floor|Log|Max|Min|Pow|Round|Sin|Sqrt|Tan|PI)\b",
-                re.I,
-            ),
-            # heat_triggers: Metaprogramming & Reflection. Reflection and on-the-fly C# compilation via Add-Type.
-            "reflection_metaprogramming": re.compile(
-                r"\b(Add-Type|System\.Reflection|System\.Management\.Automation\.Language|Invoke-Expression|iex)\b|&\s*\$[a-zA-Z_]\w*",
-                re.I,
-            ),
-            # import: Dependency Inclusions. Module and assembly loading.
-            # BUG FIX: the dot-sourcing alternative (`. .\script.ps1`)
-            # starts with `.` (non-word), so the shared leading \b could
-            # only fire when a word char immediately preceded the `.` --
-            # never true for how dot-sourcing is actually written (always
-            # preceded by whitespace or a line start). This common
-            # PowerShell module-loading idiom never matched at all.
-            "import": re.compile(
-                r"\b(?:Import-Module|using\s+module|using\s+namespace|using\s+assembly)\b|\.\s+[\w.\/\\]+\.ps1\b",
-                re.I,
-            ),
-            # --- UPDATED LINE FOR THE ORCHESTRATOR ---
-            # BUG FIX (epic #813/#834): the quoted-path branches used `['\"]?...['\"]?` -- an
-            # OPTIONAL quote pair around a capture class that excludes `\s` regardless of whether
-            # a quote is actually present. So a quoted path containing a space (e.g. the extremely
-            # common Windows `'C:\Program Files\MyModule\MyModule.psd1'`) silently truncated at the
-            # first space, losing everything after it. Replaced the single optional-quote capture
-            # with three real alternatives per import form (single-quoted / double-quoted / bare):
-            # a quoted capture now allows any character except its own quote (so spaces are fine),
-            # while the bare (unquoted) form keeps the original space/semicolon exclusion, since an
-            # unquoted PowerShell path genuinely cannot contain a space.
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:Import-Module|using[ \t\n]+(?:module|namespace|assembly))[ \t\n]+"
-                r"(?:'([^'\n]+)'|\"([^\"\n]+)\"|([^'\"\s;]+))"
-                r"|^[ \t]*\.[ \t\n]+"
-                r"(?:'([^'\n]+\.ps1)'|\"([^\"\n]+\.ps1)\"|([^'\"\s;]+\.ps1))",
-                re.I | re.M,
-            ),
-            # ownership: Authorship indicators in comments or metadata.
-            "ownership": re.compile(
-                r"^[ \t]*#\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)|\.AUTHOR\s+([^\n]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
-            "ssr_boundaries": re.compile(
-                r"\b(New-PodeServer|Add-PodeRoute|Write-PodeHtmlResponse|New-UDEndpoint|New-UDPage)\b",
-                re.I,
-            ),
-            "events": re.compile(
-                r"\b(Register-ObjectEvent|Register-EngineEvent|Register-WmiEvent|Unregister-Event|Wait-Event)\b",
-                re.I,
-            ),
-            "dependency_injection": re.compile(
-                r"\b(InversionOfControl|DependencyInjection|Register-Service|Get-Service|Resolve-Dependency)\b",
-                re.I,
-            ),
-            "macros": None,  # PowerShell lacks a preprocessor
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # PHP natively lacks pointers, but FFI (Foreign Function Interface) memory bounds are safely captured.
-            "pointers": re.compile(r"\[(?:IntPtr|UIntPtr)\]|\[ref\]\s*\$[a-zA-Z_]\w*", re.I),
-            "memory_alloc": re.compile(
-                r"\[System\.Runtime\.InteropServices\.Marshal\]::(?:AllocHGlobal|AllocCoTaskMem)",
-                re.I,
-            ),
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # telemetry: Professional observers. Structured pipeline logging.
-            "telemetry": re.compile(
-                r"\b(Write-Verbose|Write-Debug|Write-Information|Write-Warning|Start-Transcript|Write-Log)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            "debug_prints": re.compile(r"\b(Write-Host|echo)\b", re.I),
-            # # 40. explicit_casts (Explicit Type Casting)
-            # Forceful type coercion. PHP has a strict, built-in casting syntax which prevents false positives naturally.
-            "explicit_casts": re.compile(
-                r"\[(?:int|long|string|char|byte|bool|double|float|decimal|array|hashtable)\]\s*[\$\(]",
-                re.I,
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|Exit)\b|-ErrorAction\s+Stop", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(Start-Sleep|sleep)\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            # Low-level byte manipulation. CRITICAL: Removed the pipe '|' (PHP 8 Union Types), ampersand '&' (Pass-by-reference `&$var`), and used lookarounds for `<<` to prevent triggering on Heredocs (`<<<EOF`).
-            "bitwise_ops": re.compile(r"-(?:band|bor|bxor|bnot|shl|shr)\b", re.I),
-            # sync_locks: Barricades. Coordinated threading logic.
-            "sync_locks": re.compile(r"\b(lock|Monitor|Mutex|Semaphore|atomic|WaitOne)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"New-Variable\s+[^;]*?-Option\s+Constant|readonly", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown) Resource release.
-            "cleanup": re.compile(
-                r"\b(dispose|Remove-Variable|Remove-Item|Remove-Module|Stop-Transcript)\b",
-                re.I,
-            ),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"\b(hidden|private)\b", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(Register-ObjectEvent|on_|Connect-)\b", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs) Safety Theater.
-            "test_skip": re.compile(r"\b(pending|skip|Ignore)\b", re.I),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (PowerShell Specifics) ---
-            "serialization_parsing": re.compile(
-                r"(?i)\b(ConvertFrom-Json|ConvertTo-Json|Import-Clixml|ConvertFrom-Csv|Import-Csv)\b"
-            ),
-            # BUG FIX: `-match`/`-replace`/`-split` all start with `-`
-            # (non-word), so the shared leading \b could only fire when a
-            # word char immediately preceded the `-` -- never true for how
-            # these operators are actually written (always preceded by
-            # whitespace, after the left-hand operand). PowerShell's THREE
-            # most common native regex operators never matched at all.
-            # Same shape on `[regex]::` (leading `\b` before `[`, a
-            # non-word char, requires a preceding word char that's never
-            # actually there -- always whitespace, `=`, or line start) --
-            # dropped since `[` is already self-delimiting.
-            "regex_execution": re.compile(
-                r"(?i)-match\b|-replace\b|-split\b|\bSelect-String\b|\[regex\]::(?:Match|Replace|Matches)\b"
-            ),
-            "time_date_logic": re.compile(r"(?i)\b(Get-Date|New-TimeSpan|Start-Sleep|Measure-Command)\b"),
-            "ipc_rpc_bridges": re.compile(
-                r"(?i)\b(Invoke-Command|Invoke-RestMethod|Invoke-WebRequest|Start-Process|Start-Job|Enter-PSSession)\b"
-            ),
-        },
-    },
-    "shell": {
-        "_meta": {
-            "target_version": "Bash 5.2 / Zsh 5.9 / Modern DevOps Scripts",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        "extensions": [
-            ".sh",
-            ".bash",
-            ".zsh",
-            ".ksh",
-            ".dash",
-            ".command",
-            ".csh",
-            ".tcsh",
-            ".fish",
-            ".bats",
-        ],
-        # Thorough Exact Match List: Captures hidden configuration and profile scripts.
-        "exact_matches": [
-            ".bashrc",
-            ".zshrc",
-            ".profile",
-            ".bash_profile",
-            ".bash_logout",
-            ".inputrc",
-            "bash_completion",
-            "PKGBUILD",
-        ],
-        # Thorough Shebang mapping: Essential for identifying extensionless scripts.
-        "shebangs": ["bash", "sh", "zsh", "ksh", "dash", "ash", "rbash"],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Relies strictly on '#' for line-level Commented / Non-Executable Text; no native block delimiters.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logic jumps. Includes test constructs [[ ]] and [ ].
-            # CRITICAL: Excluded bare '((' and '))' to prevent ReDoS on massive subshell nesting.
-            "branch": re.compile(
-                r"\b(if|then|else|elif|fi|case|esac|for|while|do|done|until|select|break|continue)\b|&&|\|\||\[\[|\]\]|(?:^|(?<=\s|;|\||&))\[(?=\s)|(?<=\s)\](?=\s|;|\||&|$)"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Positional parameters and expansion markers.
-            # BUG FIX (epic #813/#835): the braced form only matched a bare
-            # `${1}`/`${10}` -- it had no allowance for the extremely common
-            # bash default-value/error-message expansion operators (`:-`,
-            # `:=`, `:?`, `:+`), so `${1:-default}` (arguably the single most
-            # common way positional params actually appear in real scripts)
-            # was entirely invisible to this rule. Added an optional
-            # `:[-=?+]...` suffix using the same one-level-nesting-safe idiom
-            # already established elsewhere in this file's `safety` rule
-            # (`(?:[^{}]|\{[^{}]*\})*`), so a nested default like
-            # `${1:-${DEFAULT:-x}}` is captured in full instead of truncating
-            # at the inner `}`. Confirmed linear-time (no ReDoS) up to a
-            # 200k-char adversarial input before landing.
-            # #1518: whole rule wrapped in one outer capture group so
-            # detector.py's counter can name it in `_args_findall_max_groups`
-            # below -- bash has no formal parameter list at all (a function's
-            # own `()` are always empty, permanently, by grammar), so a
-            # single match only ever sees the FIRST positional-parameter
-            # reference in the block and silently drops every one after it
-            # (`readlink "$1"` ... later `"$2"` measured got=1, not 2). This
-            # tells the shared counter to re-scan the WHOLE block and take
-            # the highest $N seen instead of trusting the first hit.
-            "args": re.compile(
-                r'(\$(?:[1-9]|\{#?[1-9][0-9]*(?:[:#%^,/~-](?:[^{}]|\{[^{}]*\})*)?\}|@|\*|#)|"\$@"|"\$\*")'
-            ),
-            "_args_findall_max_groups": {1},
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries and straight-line execution verbs.
-            # BOUNDARY FIX: `.` (the dot-source operator) is a non-word char, so it
-            # can never satisfy a shared leading `\b` -- the same trap documented on
-            # `_dependency_capture` below. Pulled out into its own statement-boundary
-            # anchored alternative instead of sitting inside the `\b(...)\b` group.
-            "structural_boundaries": re.compile(
-                r"\b(local|readonly|export|declare|typeset|return|exit|source|read|cd|pwd|ls|cp|mv|rm|mkdir|touch)\b|(?<!\|)\|(?!\s*\|)|(?:^|[ \t;|&])\.(?=[ \t])",
-                re.M,
-            ),
-            # Anchors executable logic blocks. Captures `function foo` or `foo()`.
-            # Handled by Mode D (Semantic Handshake) in detector.py.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL FUNCTION SHIELD (SHELL) ]
-                # Bash/Zsh allow extreme spacing and newlines between the `function`
-                # keyword and the identifier name.
-                # FIX: Upgraded horizontal spaces `[ \t]+` to `[ \t\n]+` for the
-                # `function` keyword path, allowing it to easily consume weird formatting.
-                #
-                # BUG FIX (epic #813/#835): the POSIX `name()` branch's keyword
-                # exclusion only listed 5 of bash's ~17 word-based reserved words
-                # (if/while/for/case/until) -- `done() {`, `elif() {`, `select() {`,
-                # `function() {`, etc. all falsely matched as function definitions.
-                # None of these are ever valid bash (a reserved word can't be used
-                # as a POSIX function name -- the real parser errors on it), but
-                # this is a regex-only engine scanning arbitrary/malformed text, so
-                # the same defensive intent that motivated the original 5-word list
-                # applies equally to the rest. Widened to the full reserved-word set.
-                # =====================================================================
-                r"^[ \t]*(?:function[ \t\n]+([a-zA-Z_][a-zA-Z0-9_.:-]*)|"
-                r"(?!(?:if|then|elif|else|fi|case|esac|while|until|for|in|do|done|function|select|time|coproc)\b)"
-                r"([a-zA-Z_][a-zA-Z0-9_.:-]*)[ \t\n]*\(\))",
-                re.M,
-            ),
-            # 5. class_start
-            # Shell is strictly procedural.
-            "class_start": None,
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Shell hardening: strict modes, traps, and robust quoting.
-            # QUADRATIC BLOWUP + NESTING FIX: the trap clause's `[^\n]*` and both
-            # `${...}` clauses' flat `[^}]+`/`[^}]*` were unbounded and unanchored --
-            # O(n^2) on a long run of unclosed traps/expansions (confirmed ~4x
-            # slowdown per input-size doubling). The trap clause is bounded to
-            # {0,300}; the `${...}` clauses use the one-level-nesting form so a
-            # realistic nested default like `${LOG_LEVEL:-${DEFAULT:-info}}` is
-            # captured in full instead of truncating at the inner `}`.
-            "safety": re.compile(
-                r'\b(set\s+-(?:[a-zA-Z]*e[a-zA-Z]*|u|o\s+pipefail)|trap\s+[^\n]{0,300}(?:ERR|EXIT|INT|TERM))\b|"\$[@*]"|"\$\{(?:[^{}]|\{[^{}]*\})+\}"|\bcommand\s+-v\b|\$\{[a-zA-Z0-9_]+:[-=?](?:[^{}]|\{[^{}]*\})*\}'
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Unquoted variables, dynamic evaluation, and blind network-to-shell piping.
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Unquoted variables, dynamic evaluation, and blind network-to-shell piping.
-            "safety_bypasses": re.compile(
-                r'\b(eval)\b(?!\s*\()|(?<!")\$(?![\(?])\w+(?!")|\|\|\s*true\b|>\s*/dev/null(?:\s*2>&1)?|\bcurl\s+[^|\n]{1,200}\|[ \t]*(?:bash|sh|zsh)\b'
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Destructive commands and privilege elevation. EXCLUDES echo (Phase 5).
-            "high_risk_execution": re.compile(
-                r"\b(rm\s+-[rR]f|sudo|chmod\s+(?:-R[ \t]+)?777|chown\s+(?:-R[ \t]+)?root|mkfs|dd|kill(?:all)?)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            # Redirections, pipes, and network clients.
-            "io": re.compile(r">|>>|<|\|(?:&)?|\b(curl|wget|nc|ssh|scp|ftp|rsync|cat|tail|grep|find|xargs|jq)\b"),
-            # 10. api (Public Surface Area)
-            # Exported variables and identifiers modifying the global environment.
-            "api": re.compile(r"^[ \t]*export\s+[a-zA-Z_]\w*", re.M),
-            # 11. flux (State Mutation)
-            # Mutation of state via assignment or arithmetic.
-            # QUADRATIC BLOWUP FIX: the arithmetic-expansion branch's two
-            # `[^)]*` quantifiers were unbounded -- on a long run of unclosed
-            # `(` characters, each opening pair is a candidate match start
-            # scanning to the end looking for the required operator + `))`,
-            # for O(n^2) total. Bounded to {0,200} each; real `(( ... ))`
-            # arithmetic expressions don't get remotely that long.
-            "state_mutation": re.compile(
-                r"^[ \t]*[a-zA-Z_]\w*(?:\[[^\]]+\])?\+?=(?![=~])|\b(?:let|declare)\s+[a-zA-Z_]\w*\+?=|\(\([^)]{0,200}(?:\+\+|--|[-+*/%]=)[^)]{0,200}\)\)",
-                re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out execution logic indicating dead features.
-            "dead_code": re.compile(r"#[ \t]*(?:if|for|while|function|export|echo|printf|cd|rm|sudo|ls)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(
-                r"^[ \t]*#\s*(?:@param|@return|Usage:|Description:|Examples:|Options:)|#\s*shellcheck\s+disable",
-                re.M | re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            # Triggers indicating internal verification. Anchored to shell-specific testing framework commands.
-            "test": re.compile(
-                r"\b(assert_?eq|assertTrue|assertFalse|assert_?match|bats|shunit2)\b|^@test\s+|\brun\s+[a-zA-Z0-9_-]+",
-                re.M,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # QUADRATIC BLOWUP + NESTING FIX: the process-substitution clauses'
-            # flat `[^)]*` were unbounded and unanchored -- O(n^2) on a long run
-            # of unclosed `<(`/`>(` (confirmed ~4x slowdown per input-size
-            # doubling). Upgraded to the one-level-nesting form so a realistic
-            # nested process substitution (e.g. `diff <(sort <(cat a)) <(sort b)`)
-            # is captured in full instead of truncating at the inner `)`.
-            "concurrency": re.compile(
-                r"&[ \t]*$|\b(wait(?:\s+-n)?|coproc|nohup|parallel|jobs|fg|bg|disown|xargs\s+-P)\b|&\s*\|\||<\((?:[^()]|\([^()]*\))*\)|>\((?:[^()]|\([^()]*\))*\)",
-                re.M,
-            ),
-            # 16. ui_framework (UI / View Components)
-            # Terminal UI builders and ANSI sequences.
-            "ui_framework": re.compile(
-                r"\b(dialog|whiptail|zenity|kdialog|notify-send|tput|gum|tmux)\b|\\033\[[0-9;]+m|\\e\[[0-9;]+m"
-            ),
-            # 17. closures
-            "closures": None,  # Shell lacks native anonymous lambdas.
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"\b(PATH|HOME|USER|SHELL|EDITOR|PWD|OLDPWD|TERM|LANG|OSTYPE|MACHTYPE|UID|EUID|GROUPS)\b"
-            ),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Brace expansions acting as inline loops.
-            "comprehensions": re.compile(r"\{[0-9]+(?:\.\.|,)[0-9]+(?:\.\.[0-9]+)?\}|\{[a-zA-Z]\.\.[a-zA-Z]\}"),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(bc|awk|dc|expr|jq|RANDOM|SRANDOM)\b|\$\(\("),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Sub-languages and indirect expansion. (ReDoS Shielded)
-            # QUADRATIC BLOWUP + NESTING FIX: `$(...)`'s flat `[^)]+` was
-            # unbounded and unanchored -- O(n^2) on a long run of unclosed
-            # `$(` (confirmed ~4x slowdown per input-size doubling). Upgraded
-            # to the one-level-nesting form so the common nested command
-            # substitution idiom (e.g. `DIR=$(cd "$(dirname "$0")" && pwd)`)
-            # is captured in full instead of truncating at the inner `)`.
-            "reflection_metaprogramming": re.compile(
-                r'\$\((?:[^()]|\([^()]*\))+\)|`[^`]+`|\b(?:awk|sed|perl|python[23]?|ruby)\s+[\'"][^\'"]{0,500}|\beval\s+\$|\$\{!?[a-zA-Z0-9_]+\}'
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"(?:^|[ \t;|&])(?:source\b|\.(?=[ \t]))[ \t]+[^\s;]+", re.M),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (SHELL) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
-                #
-                # HISTORICAL BUG: Originally, this regex was anchored to the start of the
-                # line `^[ \t]*`. This blinded the firewall to dynamic or conditional shell
-                # execution. Shell scripts frequently source environment files inside `if`
-                # blocks (e.g., `if [ -f .env ]; then source .env; fi`) or after logical
-                # operators (e.g., `test -f lib.sh && . lib.sh`). The anchored regex missed
-                # these entirely.
-                #
-                # THE FIX: The `^` anchor has been replaced with a Shell Statement Boundary:
-                # `(?:^|[ \t;|&])`. This allows the engine to recognize a `source` or `.`
-                # command immediately following a pipe `|`, a background task `&`, a logic
-                # gate `&&`, a command separator `;`, or standard whitespace, without
-                # triggering false positives on prose in echo statements.
-                #
-                # [ THE DOT-OPERATOR WORD BOUNDARY TRAP ]
-                # We CANNOT use a standard `\b` word boundary for the entire group because
-                # the dot operator (`.`) is a non-word character. `\b\.` will fail.
-                # Therefore, we explicitly branch: `source` gets a word boundary `\b`,
-                # and `.` gets a positive lookahead for whitespace `(?=[ \t])`.
-                # =====================================================================
-                r"(?:^|[ \t;|&])(?:source\b|\.(?=[ \t]))[ \t]+['\"]?([^'\"\s;]+)['\"]?",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"^[ \t]*#\s*(?:Author|Created by|Maintainer|Copyright):?\s+(.*)",
-                re.M | re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # QUADRATIC BLOWUP FIX: the trailing `[^\]]*` was unbounded and
-            # unanchored -- O(n^2) on a long run of unclosed `#[SPEC-...` tags
-            # (confirmed ~4x slowdown per input-size doubling). Bounded to
-            # {0,300}; real spec/audit tags don't get remotely that long.
-            "spec_exposure": re.compile(r"#\s*\[(?:\s*SPEC\s*-\s*\d+|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            # Legacy CGI shell environments.
-            "ssr_boundaries": re.compile(
-                r'\b(?:CONTENT_TYPE|QUERY_STRING|HTTP_USER_AGENT)\b|echo\s+"Content-type:\s*text/(?:html|plain|json)'
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # Named pipes and OS signal handlers.
-            "events": re.compile(
-                r"\b(mkfifo|mknod|inotifywait|inotifywatch|fswatch|tail\s+-f|kill\s+-(?:SIG)?(?:USR1|USR2|HUP|TERM))\b"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(r"\$\{1:-\w+\}|\$\{2:-\w+\}|\b(?:command\s+-v|type\s+-p)\b"),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(r"^[ \t]*(?:alias|shopt)\b", re.M),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Raw memory addressing. Shell uses namerefs and indirect expansion.
-            "pointers": re.compile(r"\b(?:declare\s+-n|typeset\s+-n)\b|\$\{\!"),
-            # 36. memory_alloc
-            "memory_alloc": None,
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:logger|syslog|log_info|log_err|log_warn|log_debug)\b|>\s*/dev/(?:stderr|console)"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(echo|printf|print|read)\b"),
-            # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": None,
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(exit|kill|abort|halt|return\s+[1-9][0-9]*)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(sleep|read\s+-t)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": None,
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(flock|mkdir|mkfifo|lockfile|sem)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(readonly|declare\s+-r|typeset\s+-r)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # QUADRATIC BLOWUP FIX: same class of bug as `safety`'s trap clause
-            # above -- the unbounded `.*` before the required `EXIT` literal was
-            # unanchored, O(n^2) on a long run of `trap ` occurrences that never
-            # resolve to EXIT (confirmed ~4x slowdown per input-size doubling).
-            # Bounded to {0,300}, matching the fix already applied to `safety`.
-            "cleanup": re.compile(r"\b(rm\s+-f|trap\s+.{0,300}EXIT|unset|exit|logout)\b"),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Physical Reality: local variables represent internal state scope.
-            "encapsulation": re.compile(r"\b(local|typeset|declare)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(read|inotifywait|nc\s+-l|while\s+read)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BOUNDARY FIX: `#\s*SKIP` starts with `#` (non-word), so it could
-            # never satisfy the shared leading `\b` -- real comment markers are
-            # always preceded by whitespace or line start (also non-word), so a
-            # `# SKIP: ...` comment never matched at all. Pulled out of the
-            # group with the leading `\b` dropped (the `#` is self-delimiting).
-            "test_skip": re.compile(r"\b(test\.skip|bats_skip|mock|stub)\b|#\s*SKIP\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Shell Specifics) ---
-            "serialization_parsing": re.compile(r"\b(jq|yq|awk|sed|xmlstarlet)\b"),
-            "regex_execution": re.compile(r"\b(grep|egrep|sed|awk)\b|=~"),
-            # BOUNDARY FIX: the trailing `\s+` before the shared closing `\b`
-            # required a word char to immediately follow the whitespace --
-            # never true for how `date`/`sleep` are actually invoked (almost
-            # always followed by a `-flag` or `+FORMAT`, both non-word). The
-            # single most common real-world form of `date` (`date +%Y-%m-%d`)
-            # never matched at all. The `\s+` was redundant anyway -- `\b`
-            # alone already prevents partial-word matches like "update".
-            "time_date_logic": re.compile(r"\b(date|sleep|uptime|times)\b"),
-            "ipc_rpc_bridges": re.compile(r"\b(curl|wget|nc|netcat|ssh|scp|xargs|socat)\b"),
-        },
-    },
-    "ruby": {
-        "_meta": {
-            "target_version": "Ruby 4.0 Paradigms (Ruby 3.4+ / Ractors / Sorbet / Pattern Matching)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard suffixes, rack configs (.ru), gem specs, and various templating/DSL extensions.
-        "extensions": [
-            ".rb",
-            ".rbw",
-            ".rake",
-            ".rbi",
-            ".gemspec",
-            ".rbx",
-            ".builder",
-            ".ru",
-            ".podspec",
-            ".jbuilder",
-            ".rabl",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless infrastructure-as-code and dependency configurations that are secretly pure Ruby.
-        "exact_matches": [
-            "Gemfile",
-            "Rakefile",
-            "Vagrantfile",
-            "Guardfile",
-            "Capfile",
-            "Thorfile",
-            "Berksfile",
-            "Cheffile",
-            "Podfile",
-            "Fastfile",
-            "Appraisals",
-        ],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, lockfiles, and environment pins to lock in context.
-        "discriminators": [
-            ".rb",
-            "Gemfile.lock",
-            ".ruby-version",
-            ".ruby-gemset",
-            "config.ru",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["ruby", "macruby", "jruby", "rbx"],
-        # UPGRADED: Maps to Family 4 (Hybrid Hash)
-        # Rationale: Uses '#' for single-line comments, but multi-line literature
-        # utilizes the `=begin ... =end` block syntax, requiring hybrid parsing rules.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES raise/throw (bailout_hits).
-            "branch": re.compile(
-                r"\b(if|unless|elsif|else|case|when|in|for|while|until|begin|rescue|ensure|break|next|redo|retry)\b|&&|\|\||\?|=>"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks of methods, lambdas, and blocks. Bounded to prevent ReDoS.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # all four branches (was only reachable via group(0), the whole
-            # match including the "def"/"do"/"->" prefix) so detector.py's
-            # counter isolates just the real parameter text -- the
-            # whole-match fallback overcounted every zero/one-arg signature
-            # by +1 the same way Python's did (#1199). Name group added to
-            # the first branch too, purely so existing extraction tests keep
-            # passing.
-            "args": re.compile(
-                r"\bdef\s+(?:(?:[^\W\d]\w*(?:::[^\W\d]\w*)*\.|self\.)[ \t\n]*)?([^\W\d]\w*[=!?]?|\[\]=?|<<|>>|<=>|===?|!=|=~|!~|<=?|>=?|[+\-*/%&|^~`!])\s*(\((?:(?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\))*\))*)\))|"
-                r"\A(?!\s*\bdef\b)[\s\S]*?(?:\bdo\s*\|([^|]*)\||\{\s*\|([^|]*)\|)|"
-                r"->\s*(\((?:(?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\))*\))*)\))",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(class|module|def|yield|return|super|alias|undef|require|require_relative|include|extend|prepend|attr_reader|attr_writer|attr_accessor|Data\.define)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks. EXCLUDES class/module definitions.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL CLASS-METHOD SHIELD (RUBY) ]
-                # Ruby allows 'def', 'self.', the function name, and the argument list
-                # to be separated by vertical newlines.
-                # FIX: Replaced `\s+` with `[ \t\n]+` and explicitly allowed `[ \t\n]*`
-                # after `self.` so the parser doesn't break when tracking singleton methods.
-                # Upgraded the trailing lookahead to safely handle newlines before `(`.
-                # Upgraded name parsing to support operator overloads, unicode, and explicit namespace contexts.
-                # =====================================================================
-                r'^[ \t]*(?:def[ \t\n]+(?:(?:[^\W\d]\w*(?:::[^\W\d]\w*)*\.|self\.)[ \t\n]*)?|define_method[ \t\n]*\(?[ \t\n]*[:\'"]?)([^\W\d]\w*[=!?]?|\[\]=?|<<|>>|<=>|===?|!=|=~|!~|<=?|>=?|[+\-*/%&|^~`!])(?=[ \t\n]*[)(]|[\'"]?[ \t\n]*(?:\{|do)|[ \t\n]|$)',
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            "class_start": re.compile(
-                r"^[ \t]*(?:class|module)\s+(?:::)?([^\W\d]\w*(?:::[^\W\d]\w*)*|<<\s*self|<<\s*@[a-zA-Z_]\w*)(?:\s*<\s*(?:::)?([^\W\d]\w*(?:::[^\W\d]\w*)*))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\&\.|\b(rescue|ensure|fetch|frozen_string_literal|freeze|catch|throw|safe_load|T\.must|T\.let|T\.cast|T\.bind)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Dynamic logic bypasses and Sorbet escape hatches.
-            "safety_bypasses": re.compile(
-                r"\b(eval|class_eval|instance_eval|module_eval|send|__send__|public_send|binding|instance_variable_set|unsafe_load|T\.unsafe|T\.untyped)\b"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and shell execution. EXCLUDES puts (Phase 5).
-            "high_risk_execution": re.compile(r"\b(abort|exit|exit!|system|exec|spawn|fork)\b|`[^`]+`|IO\.popen"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(File|Dir|IO|Net::HTTP|URI\.open|Socket|TCPSocket|FileUtils|ActiveRecord::Base|find|where|create|update|destroy)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Implicit public defaults (undercased defs) + explicit module functions.
-            "api": re.compile(
-                r'\b(module_function)\b|^[ \t]*(?:get|post|put|patch|delete|resources?)\s+[:\'"]',
-                re.M,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES const (freeze_hits).
-            # BUG FIX: the 6 bang-method alternatives (`merge!`, `update!`,
-            # `gsub!`, `map!`, `select!`, `reject!`) all end on `!`
-            # (non-word), so the shared trailing \b could never fire --
-            # whatever follows a Ruby bang-method call (`;`, `)`, a
-            # newline, another `.method`) is never a word character. None
-            # of Ruby's canonical in-place-mutation methods ever matched.
-            "state_mutation": re.compile(
-                r"@[a-zA-Z_]\w*\s*(?:\+|-|\*|/)?=|@@[a-zA-Z_]\w*\s*(?:\+|-|\*|/)?="
-                r"|\b(?:push|pop|shift|unshift|delete|clear)\b|<<"
-                r"|\bmerge!|\bupdate!|\bgsub!|\bmap!|\bselect!|\breject!"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"#[ \t]*(?:def|class|module|if|unless|while|puts|p)\b"),
-            # 13. doc (Structured Documentation)
-            # Captures YARD tags, Sorbet signatures, RDoc blocks/modifiers, and standard documentation headers.
-            "doc": re.compile(
-                r"^[ \t]*#\s*@(?:param|return|api|yield|raise|see|abstract|deprecated|note|example)|^[ \t]*sig[ \t]*\{|^=begin\s+(?:rdoc|pod)\b|^[ \t]*#\s*(?::nodoc:|:yields:|:args:|:return:)|^[ \t]*#\s*(?:Description|Usage|Example|Summary):\s+",
-                re.M | re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r'\b(describe|context|expect|assert[a-zA-Z_]*|refute[a-zA-Z_]*|setup|teardown|before|after|let|subject)\b|\b(?:it|test)\s+[\'"]'
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(Thread|Mutex|Monitor|ConditionVariable|Ractor|Fiber|Async|await|Concurrent)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r"\b(ActionView|render|render_to_string|ViewComponent::Base|Phlex::HTML|form_with|form_for|link_to|stylesheet_link_tag|Turbo|Stimulus|Hotwire)\b|<%|%>"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            # BUG FIX: all 4 alternatives shared one leading \b, but the
-            # brace-block (`{ |x| ... }`) and stabby-lambda (`->(x) { ... }`)
-            # forms both start with a non-word character (`{`/`-`) -- the
-            # shared leading \b could only fire when a word char
-            # immediately preceded them, never true for how these are
-            # actually written (preceded by whitespace, `=`, or a line
-            # start). Only the `do`-based forms ever matched; the brace
-            # block and stabby lambda -- two of Ruby's most common closure
-            # forms -- never did.
-            "closures": re.compile(r"\bdo\s*\|[^|]*\||\bdo\b|\{\s*\|[^|]*\||->\s*(?:\([^)]*\))?[ \t]*\{"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(r"\$[a-zA-Z_]\w*|\b(ENV|ARGV|ARGF|STDIN|STDOUT|STDERR|RUBY_VERSION)\b"),
-            # 19. decorators (Decorators / Annotations)
-            # Rails class macros acting as metadata descriptors.
-            "decorators": re.compile(
-                r"^[ \t]*(?:before_action|after_action|around_action|before_save|after_commit|validates|has_many|belongs_to|has_one)\b",
-                re.M,
-            ),
-            # 20. generics (Generics / Type Parameters)
-            # Sorbet parameterized types.
-            "generics": re.compile(r"\b(?:T::|::T::)?(?:Array|Hash|Set|Enumerable|Class)\[[^\]]*\]"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(
-                r"\.(?:map|collect|select|reject|reduce|inject|filter_map|flat_map|each_with_object|partition|group_by)\b(?:[ \t]*\{|\s*do)"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(Math|Complex|Rational|Matrix|Vector|Numo::NArray|BigDecimal)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Metaprogramming and runtime object extensions.
-            # BUG FIX: `respond_to_missing\?` ends on `?` (non-word), so the
-            # shared trailing \b could never fire. Never matched.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:method_missing|define_method|const_missing|included|extended|prepended|class\s*<<\s*self)\b"
-                r"|respond_to_missing\?"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"\b(?:require|require_relative|load|autoload)\b[^'\"]*['\"]", re.M),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (RUBY) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
-                #
-                # HISTORICAL BUG: Originally, this regex was anchored to the start of the
-                # line `^[ \t]*`. While this perfectly prevented hallucinations on commented-out
-                # imports, it completely blinded the firewall to Ruby's highly dynamic execution
-                # patterns. Ruby developers frequently lazy-load dependencies inside methods
-                # (e.g., `def parse; require 'json'; end`) or behind conditionals. The anchored
-                # regex missed these entirely, allowing Trojans to slip through.
-                #
-                # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
-                # boundary to find the keywords anywhere in the file.
-                #
-                # [ THE OPTIONAL PARENTHESIS & AUTOLOAD SHIELD ]
-                # Ruby methods do not require parentheses (e.g., `require 'json'` vs `require('json')`).
-                # Additionally, `autoload` takes a symbol before the path (e.g., `autoload :MyMod, 'path'`).
-                # By injecting `[^'\"]*` between the keyword and the string delimiter, the engine
-                # safely bridges across optional parentheses, whitespace, and `autoload` symbol arguments
-                # to securely capture the target string.
-                # =====================================================================
-                r"\b(?:require|require_relative|load|autoload)\b[ \t\n(]*(?:['\"]([^'\"]+)['\"]|%[qQwW]\W([^ \t\n\W]+)\W)|\b(?:include|extend)\b[ \t\n(]+([^\W\d]\w*(?:::[^\W\d]\w*)*)",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"#\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(ActionController::Base|ActionController::API|Sinatra::Base|Hanami::Action|respond_to|format\.html|format\.json)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(r"\b(Wisper|broadcast|subscribe|ActiveSupport::Notifications\.instrument|publish)\b"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(r"\b(Dry::Container|Dry::AutoInject|include\s+Import|inject)\b"),
-            # 34. macros (Preprocessor Directives / Macros)
-            # Ruby DSL macros.
-            "macros": re.compile(
-                r"^[ \t]*(?:attr_accessor|attr_reader|attr_writer|scope|delegate)\b",
-                re.M,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": re.compile(r"\b(FFI::Pointer|Fiddle::Pointer|Fiddle::Function)\b"),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(r"\b(ObjectSpace|GC\.start|GC\.disable|GC\.enable|FFI::MemoryPointer)\b"),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:Rails\.logger|Logger\.new|SemanticLogger|[a-zA-Z_]\w*logger)\.(?:debug|info|warn|error|fatal|unknown)\b"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(puts|print|p|pp|warn)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\b(Integer|Float|String|Array|Hash|Complex|Rational)\b\s*\("),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # BUG FIX: `exit!` ends on `!` (non-word), so the shared
-            # trailing \b could never fire -- unlike high_risk_execution's
-            # copy of this same alternative (which is harmlessly masked by
-            # its own bare `exit` alternative), there's no bare `exit` here
-            # to save it. Never matched.
-            "panics_and_aborts": re.compile(r"\b(?:raise|fail|abort)\b|\bexit!"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\bsleep\b\s*[0-9.]+"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"\^|(?<![=!])~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(mutex|lock|synchronized|Semaphore|Monitor|Atomic[A-Z]\w*)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(freeze|frozen_string_literal|immutable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(close|GC\.start|dispose|shutdown|cleanup)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Visibility modifiers in Ruby.
-            "encapsulation": re.compile(r"\b(private|protected)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\.subscribe\(|\.on\(|addEventListener"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(skip|xit|xdescribe|mock|stub|double)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Ruby Specifics) ---
-            "serialization_parsing": re.compile(r"\b(JSON\.parse|YAML\.load|Marshal\.load|Nokogiri::(?:XML|HTML))\b"),
-            "regex_execution": re.compile(r"\b(Regexp\.new)\b|\.(match|scan|gsub|sub)\b|=~"),
-            "time_date_logic": re.compile(r"\b(Time\.now|Date\.today|DateTime\.now|sleep)\b"),
-            # BUG FIX: `system\s*\(` ends on `(` and `%x\{` both starts and
-            # ends on non-word characters (`%` / `{`) -- the shared \b
-            # boundaries could never fire for either. Neither ever matched.
-            "ipc_rpc_bridges": re.compile(r"\b(?:Open3|IO\.popen|Net::HTTP|TCPSocket)\b|\bsystem\s*\(|%x\{"),
-        },
-    },
-    "swift": {
-        "_meta": {
-            "target_version": "Swift 6.2 / iOS 18+ / Strict Concurrency, Macros & Swift Testing",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources and module interface declarations.
-        "extensions": [".swift", ".swiftinterface"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Tooling configurations that are secretly pure Swift code.
-        "exact_matches": ["Package.swift"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and package manager lockfiles to resolve ambiguous files in mixed Apple environments.
-        "discriminators": [".swift", "Package.resolved", "project.pbxproj"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for Swift-based scripting and automation.
-        "shebangs": ["swift", "swift-sh"],
-        # UPGRADED: Maps to Family 2 (Nested C)
-        # Rationale: Supports nested block comments (/* /* */ */), necessitating depth-aware stripping
-        # rather than standard C-style early termination.
-        "lexical_family": "recursive_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. Includes modern typed throws (throws(Error)).
-            # EXCLUDES throw/rethrows (bailout_hits).
-            "branch": re.compile(
-                r"\b(if|else|guard|switch|case|default|for|while|repeat|do|catch|break|continue|defer|try|throws)\b|&&|\|\||\?|\?\?"
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks. Bounded negation [^)]* and <[^>]*> to prevent ReDoS.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE ESCAPING CLOSURE SHIELD (SWIFT) ]
-                # Swift functions often take escaping closures `(Result<Void, Error>) -> Void`
-                # as parameters. The inner `()` breaks the `[^)]*` matcher.
-                # FIX: Upgraded horizontal spaces to `[ \t\n]+` to allow vertical jumps,
-                # and injected the 1-Level Nesting Trick `(?:[^)(]+|\([^)]*\))*` to safely
-                # capture the entire parameter block without ReDoS.
-                # =====================================================================
-                # RULE 11 FIX (epic #813/#824): the generic-parameter step-over was the flat
-                # `<[^>]*>`, truncating at the FIRST `>` and breaking any nested generic bound via
-                # a primary associated type constraint (`func foo<T: Collection<Int>>(x: T) {`,
-                # Swift 5.7+, mainstream). Widened to the established one-level-nesting idiom.
-                # #1209: parameter-list span wrapped in its own capture group
-                # in both alternatives (was only reachable via group(0), the
-                # whole match including the "func"/name prefix, or for
-                # trailing-closure syntax the leading "{"/capture-list) so
-                # detector.py's counter isolates just the real parameter text
-                # -- the whole-match fallback overcounted every zero/one-arg
-                # signature by +1 the same way Python's did (#1199). Name
-                # group added to the first alternative too, purely so
-                # existing extraction tests keep passing.
-                r"\b((?:func|init\??|subscript)[ \t\n]*(?:[a-zA-Z_]\w*)?)(?:[ \t\n]*<(?:[^<>]|<[^<>]*(?:<[^<>]*>[^<>]*)*>)*>)?[ \t\n]*(\((?:[^)(]|\([^)(]*(?:\([^)]*\)[^)(]*)*\))*\))|\{[ \t\n]*(?:\[[^\]]*\][ \t\n]*)?(\([^)]*\)|[a-zA-Z_]\w*(?:[ \t\n]*,[ \t\n]*[a-zA-Z_]\w*){0,50})?[ \t\n]*in\b",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and let (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(func|init|subscript|var|struct|class|enum|protocol|extension|actor|macro|import|typealias|associatedtype|mutating|nonmutating|isolated|nonisolated|return|yield|await|inout)\b|(?<!\blet )(?<!\bvar )(?<!\bfunc )(?<!\bclass )(?<!\bstruct )\b(some|any|consume|borrow|discard)\b|~Copyable"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks. EXCLUDES types/classes. Steps over Concurrency modifiers.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL ATTRIBUTE & GENERICS SHIELD ]
-                # Swift allows heavy modifier stacking and disconnected generics.
-                # FIX: Upgraded horizontal `[ \t]+` spaces to vertical `[ \t\n]+` across
-                # decorators and modifiers, and safely detached the generic stepper
-                # `(?:[ \t\n]*<[^>]*>)?` from the function name capture.
-                # RULE 11 FIX (epic #813/#824): that generic stepper was flat, truncating at the
-                # FIRST `>` and breaking any nested generic bound via a primary associated type
-                # constraint (`func foo<T: Collection<Int>>(x: T) {`, Swift 5.7+, mainstream) --
-                # same gap as args above. Widened to the established one-level-nesting idiom.
-                # =====================================================================
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,5}"
-                r"(?:(?:public|private|fileprivate|internal|open|package|override|final|static|class|mutating|nonmutating|isolated|nonisolated(?:\(unsafe\))?|distributed|required|convenience)[ \t\n]+){0,5}"
-                r"(?:func[ \t\n]+([a-zA-Z_]\w*|[=/\-+!*%<>&|^?~]+)(?:[ \t\n]*<(?:[^<>]|<[^<>]*(?:<[^<>]*>[^<>]*)*>)*>)?|(init\??)|(subscript))(?=[ \t\n]*\()",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # #1295: name wrapped in a capture group so the named-entity
-            # extractor (detector.py's _CLASS_START_NAMED_EXTRACTION_LANGS)
-            # can recover real names instead of flooding class_data with one
-            # "Anonymous_Class" phantom per match. Widened to an optional
-            # dotted chain (`\.[a-zA-Z_]\w*`) so nested-type extensions
-            # (`extension AFError.ParameterEncoderFailureReason { ... }`,
-            # mainstream in real Swift error-handling code) capture their
-            # full qualified name instead of truncating at the first dot.
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]*){0,5}(?:(?:public|private|fileprivate|internal|open|package|final|distributed|indirect)[ \t]+){0,5}(?:class|struct|enum|protocol|actor|extension|macro)\s+([a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # BUG FIX: `try\?`/`as\?` both end on `?` (non-word), so the
-            # shared trailing \b could never fire -- whatever follows
-            # these operators (a space, then the expression) is never a
-            # word character. Neither of Swift's two most common
-            # error-softening operators ever matched.
-            "safety": re.compile(
-                r"\b(?:guard\s+let|if\s+let|guard\s+var|if\s+var|catch|is|Sendable|Result|assert|precondition|Mutex)\b"
-                r"|try\?|as\?|@MainActor|\?\?"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Unsafe pointers and linter bypasses. EXCLUDES forced unwraps (moved to friction).
-            "safety_bypasses": re.compile(
-                r"\bunowned(?:\(unsafe\))?\b|\bnonisolated\(unsafe\)|\bunsafeDowncast\b|//\s*swiftlint:disable"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Fatal traps and process killers. EXCLUDES TODO (debt) and print (print_hits).
-            "high_risk_execution": re.compile(r"\b(fatalError|preconditionFailure|assertionFailure|abort|exit)\b"),
-            # 9. io (I/O & Network Boundaries)
-            # BUG FIX: `Data\(contentsOf:`/`write\(to:` both end on `:`
-            # (non-word), so the shared trailing \b could never fire.
-            # Neither ever matched.
-            "io": re.compile(
-                r"\b(?:URLSession|FileManager|FileHandle|UserDefaults|CoreData|SwiftData|NWConnection)\b"
-                r"|Data\(contentsOf:|write\(to:"
-            ),
-            # 10. api (Public Surface Area)
-            # Exposed surface area. Explicit visibility and Objective-C bridges.
-            # BUG FIX: 7 of the 10 alternatives are `@`-prefixed attributes,
-            # which start with a non-word char -- the shared leading \b
-            # could only fire when a word char immediately preceded the
-            # `@`, never true for how attributes are actually written.
-            # Never matched at all.
-            "api": re.compile(
-                r"\b(?:public|open|package)\b"
-                r"|@usableFromInline|@objc|@objcMembers|@_exported|@IBAction|@IBOutlet|@Published"
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. EXCLUDES let (freeze_hits).
-            "state_mutation": re.compile(
-                r"\b(var|inout|mutating|didSet|willSet|_modify)\b|@(?:State|Binding|FocusState|Bindable|Observable)|^[ \t]*(?:self\.)?[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*){0,5}\s*[-+*/]?=|\.(?:append|insert|remove|toggle|updateValue)\("
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"//[ \t]*(?:let|var|func|class|struct|actor|extension|if|guard|return)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"///|/\*\*|-\s*parameter|-\s*returns:|-\s*throws:|-\s*warning:"),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r"\b(?:XCTest|XCTestCase|XCTAssert[A-Za-z]*|setUp|tearDown)\b|@(?:Test|Suite)\b|#(?:expect|require)\b"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|actor|Task|TaskGroup|DispatchQueue|OperationQueue|MainActor|Sendable|isolated|nonisolated|continuation)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            # BUG FIX: `@State`/`@Binding`/`@Environment` are `@`-prefixed --
-            # same leading-\b bug as api above.
-            "ui_framework": re.compile(
-                r"\b(?:View|Body|ZStack|VStack|HStack|Text|Image|Button|SwiftUI|UIKit|AppKit|UIView|UIViewController|NSView|NSWindow)\b"
-                r"|@State|@Binding|@Environment"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(
-                r"completion:[ \t]*\{|\{\s*(?:\[[^\]]*\]\s*)?(?:\([^)]*\)|[a-zA-Z_]\w*(?:[ \t\n]*,[ \t\n]*[a-zA-Z_]\w*){0,50})[ \t\n]+in\b"
-            ),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"\b(?:static\s+let|static\s+var|shared|standard|default|NotificationCenter\.default|UserDefaults\.standard|FileManager\.default)\b|@Environment\b"
-            ),
-            # 19. decorators (Decorators / Annotations)
-            "decorators": re.compile(r"@[a-zA-Z_]\w*(?:\([^)]*\))?"),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"<\s*[A-Z][^>]*>|\bwhere\s+[a-zA-Z_]\w*\s*:|\b(?:some|any|each)\s+[A-Z]\w*"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": re.compile(
-                r"\.(?:map|compactMap|flatMap|filter|reduce|forEach|allSatisfy|contains)\s*(?:\(|\{)"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(simd|Accelerate|Double|Float|Float16|CGFloat|Decimal|CoreML|CreateML|vDSP|sqrt|pow|sin|cos|tan)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Reflection and Dynamic Dispatch.
-            # BUG FIX: `@objc` is `@`-prefixed -- same leading-\b bug.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:dynamic|Mirror\(|unsafeBitCast|withUnsafe\w+|KeyPath|WritableKeyPath)\b|@objc|\\\.[\w.]+"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*(?:@_exported[ \t]+)?import\s+[a-zA-Z_]\w*", re.M),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:@_exported[ \t]+)?import\s+(?:(?:typealias|struct|class|enum|protocol|let|var|func)\s+)?([a-zA-Z_][\w.]+)",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"//\s*(?:Created by|Author:|Copyright):\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(Vapor|Hummingbird|Request|Response|Route|app\.get|app\.post|EventLoopFuture)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # BUG FIX: `@Published` is `@`-prefixed -- same leading-\b bug.
-            # (`.sink`/`.assign` are left as-is: a leading `.` is preceded
-            # by an identifier in real method-chain usage, e.g.
-            # `publisher.sink { ... }`, so that leading \b fires correctly.)
-            "events": re.compile(
-                r"\b(?:NotificationCenter|Combine|Publisher|Subscriber|CurrentValueSubject|PassthroughSubject|AnyCancellable|ObservableObject|Observation)\b"
-                r"|\.sink|\.assign|@Published"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # BUG FIX: `@Environment`/`@EnvironmentObject`/`@Inject`/
-            # `@Dependency` are all `@`-prefixed -- same leading-\b bug.
-            "dependency_injection": re.compile(
-                r"\b(?:Swinject|Container|Resolver|Factory)\b|@Environment|@EnvironmentObject|@Inject|@Dependency"
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"#(?:Preview|Predicate|OptionSet|Rule|warning|error)\b|@(?:freestanding|attached)|#[A-Z]\w*"
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": re.compile(
-                r"\b(?:Unsafe(?:Mutable)?(?:Raw|Buffer)?Pointer|OpaquePointer|CVaListPointer|Unmanaged)\b|\.pointee\b|(?<=[=\s,(])&\w+"
-            ),
-            # 36. memory_alloc (Manual Memory Management)
-            # BUG FIX: `\.allocate\(capacity:` ends on `:` and
-            # `\.deallocate\(\)` ends on `)` -- both non-word, so the
-            # shared trailing \b could never fire. Neither ever matched.
-            "memory_alloc": re.compile(
-                r"\b(?:malloc|calloc|free|ManagedBuffer)\b|\.allocate\(capacity:|\.deallocate\(\)"
-            ),
-            # 37. inline_asm
-            "inline_asm": None,  # Swift delegates ASM to C-headers.
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:Logger|OSLog|os_log)\b|\bLogger\([^)]*\)\.(?:info|error|warning|debug|trace|notice|critical|fault)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(print|debugPrint|dump)\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\bas[!?]?\s+[A-Z]\w*|\bis\s+[A-Z]\w*|\b(?:Int|Double|Float|Float16|CGFloat|String|Bool)\s*\("
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|fatalError|abort|exit|preconditionFailure)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(sleep|delay|Task\.sleep)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|\^|(?<![=!])~|<<=|>>=|\^="),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(
-                r"\b(mutex|lock|synchronized|Semaphore|OSAllocatedUnfairLock|MainActor|distributed)\b",
-                re.I,
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(let|final|static|readonly|Immutable|Sendable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(deinit|close|free|dispose|shutdown|removeAll)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b(private|fileprivate|internal)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\.onAppear\(|\.onChange\(|\.sink\(|addObserver|subscribe"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX: `mock\(`/`stub\(`/`fake\(`/`double\(` all end on `(`
-            # (non-word), so the shared trailing \b only fired when a word
-            # char immediately followed the paren -- true for most
-            # single-argument calls, but never for the zero-argument form
-            # (`double()`), where `)` follows instead.
-            "test_skip": re.compile(r"\bXCTSkip\b|\bmock\(|\bstub\(|\bfake\(|\bdouble\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Swift Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(JSONDecoder|JSONEncoder|PropertyListSerialization|NSKeyedUnarchiver|XMLParser)\b"
-            ),
-            "regex_execution": re.compile(
-                r"\b(NSRegularExpression|Regex|try\s+Regex|\.range\(of:.*\.regularExpression)\b"
-            ),
-            # BUG FIX: `Date\(\)` ends on `)` (non-word), so the shared
-            # trailing \b could never fire. Never matched.
-            "time_date_logic": re.compile(
-                r"\b(?:Calendar\.current|DateFormatter|DispatchTime\.now|Timer\.scheduledTimer)\b|\bDate\(\)"
-            ),
-            # BUG FIX: `Process\(\)` ends on `)` -- same bug. Never matched.
-            "ipc_rpc_bridges": re.compile(
-                r"\b(?:URLSession|NSXPCConnection|NotificationCenter|DispatchQueue)\b|\bProcess\(\)"
-            ),
-        },
-    },
-    "kotlin": {
-        "_meta": {
-            "target_version": "Kotlin 2.3.10 (K2 Compiler / Wasm / Java 25 Support)",
-            "last_updated": "2026-03-12",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources, Kotlin script files (heavily used in modern Gradle), and module declarations.
-        "extensions": [".kt", ".kts", ".ktm"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Kotlin rarely uses extensionless execution scripts.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and Kotlin-DSL Gradle build files to lock in context.
-        "discriminators": [
-            ".kt",
-            "build.gradle.kts",
-            "settings.gradle.kts",
-            "gradle.properties",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for Kotlin scripting.
-        "shebangs": ["kotlin", "kotlinc", "kscript"],
-        # UPGRADED: Maps to Family 2 (Nested C)
-        # Rationale: (CORRECTION) While Kotlin uses // and /* */, it officially allows nested
-        # block comments (/* /* */ */). Using standard C parsing would cause early termination here.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. Includes modern 'when' and Elvis operator.
-            # EXCLUDES throw (bailout_hits).
-            "branch": re.compile(
-                r"\b(if|else|when|for|while|do|try|catch|finally|break|continue|return)\b|\?:|&&|\|\|"
-            ),
-            # 2. args (Parameters / Coupling)
-            # OPTIMIZED: Removed overlapping whitespace quantifiers to fix Regex Sludge.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE LAMBDA PARAMETER SHIELD (KOTLIN) ]
-                # Kotlin default arguments `emptyList()` and lambda parameters `(Result<T>) -> Unit`
-                # contain parentheses that shatter standard `[^)]*` boundaries.
-                # FIX: Implemented the 1-Level Nesting Trick `(?:[^)(]+|\([^)]*\))*` to
-                # absorb the inner parentheses. Upgraded spaces to `[ \t\n]*` for vertical layouts.
-                # =====================================================================
-                # RULE 11 FIX (epic #813/#823): the generic-parameter step-over was the flat
-                # `<[^>]{0,100}>`, truncating at the FIRST `>` and breaking any nested generic
-                # bound (`fun <T, U : Comparable<U>> foo(x: T, y: U): T {`, a realistic bounded
-                # generic function). Widened to the established one-level-nesting idiom.
-                # IDENTIFIER-GRAMMAR FIX (epic #813/#899): the name step-over required a plain
-                # `[a-zA-Z_]\w*`, so backtick-quoted arbitrary identifiers never matched. Added
-                # as an alternative, not a widened class.
-                # MULTI-DOT RECEIVER FIX: Upgraded the receiver capture to `[\w.]+` to support
-                # fully qualified extension receivers (e.g., `com.example.Foo.ext()`).
-                # ANONYMOUS FUNCTION FIX: Made the name capture optional to support `fun(x: Int)`.
-                # #1209: parameter-list span wrapped in its own capture group
-                # in both alternatives (was only reachable via group(0), the
-                # whole match including the "fun"/receiver/name prefix, or for
-                # trailing-lambda syntax the leading "{") so detector.py's
-                # counter isolates just the real parameter text -- the
-                # whole-match fallback overcounted every zero/one-arg
-                # signature by +1 the same way Python's did (#1199), including
-                # a bare trailing lambda (`list.forEach { item -> ... }`).
-                # Name group added to the first alternative too, purely so
-                # existing extraction tests keep passing.
-                r"\b(?:fun|constructor)\b(?:[ \t\n]*<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]*((?:(?:`[^`\n]{1,200}`|[\w.]+)\.)?(?:`[^`\n]{1,200}`|[a-zA-Z_]\w*))?[ \t\n]*(\((?:[^)(]|\([^)]*\))*\))|\{[ \t\n]*([a-zA-Z_][a-zA-Z0-9_ \t\n:<>,.?]{0,150}?)->",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries defining file architecture and control returns.
-            "structural_boundaries": re.compile(r"\b(package|import|return|class|interface|object|fun|typealias)\b"),
-            # 4. func_start (Executable Logic Anchors)
-            # OPTIMIZED: Bound annotation parenthesis scanning to prevent multi-line bleeding.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL MODIFIER & GENERIC SHIELD (KOTLIN) ]
-                # Kotlin allows annotations, modifiers, the 'fun' keyword, generics,
-                # and the function name to be split across multiple lines.
-                # FIX: Upgraded `[ \t]+` to `[ \t\n]+` across the decorator and modifier
-                # stacks. Modified the generic stepper to `(?:<[^>]{0,100}>[ \t\n]*)?`
-                # (removing the `\n` restriction) and updated the trailing lookahead
-                # to `[ \t\n]*[\(\{]` so it can safely jump vertical gaps to the parameters.
-                # =====================================================================
-                # RULE 11 FIX (epic #813/#823): same generic-parameter nesting gap as args above
-                # -- widened to the established one-level-nesting idiom.
-                # IDENTIFIER-GRAMMAR FIX (epic #813/#899): same backtick-identifier gap as `args`
-                # above (doc's Rule 16) -- added as an alternative capture group.
-                # MULTI-DOT RECEIVER FIX: Upgraded receiver to `[\w.]+` (e.g. `com.example.Foo.ext`).
-                r"^[ \t]*(?:@[\w.]+(?:\([^)\{]{0,300}\))?[ \t\n]*){0,10}"
-                r"(?:(?:public|private|protected|internal|open|override|abstract|final|suspend|inline|tailrec|infix|operator|external|expect|actual)[ \t\n]+){0,5}"
-                r"(?:context\s*\([^)]*\)\s*)?"
-                r"(?:(?:\bfun\b)[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:(?:(?:`[^`\n]{1,200}`|[\w.]+)\.)?(?:`([^`\n]{1,200})`|([a-zA-Z_]\w*)))?|(init)|(constructor))(?=[ \t\n]*[\(\{])",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # OPTIMIZED: Applied the same 300-char bounds to class annotations.
-            # COMPANION OBJECT FIX (epic #813/#823): `companion object { ... }` (almost always
-            # anonymous -- a name is rare and optional) never matched at all: "companion" wasn't in
-            # the modifier list, and even if it were, the class/interface/object/enum-class branch's
-            # name was mandatory. Added a dedicated alternative for it with an OPTIONAL name, kept
-            # narrowly scoped to the literal `companion object` shape rather than making the name
-            # optional for the general branch -- doing that broadly would have opened a new false
-            # positive on object EXPRESSIONS (`object : Base() {`, an anonymous object literal used
-            # inline, a different construct from an object DECLARATION).
-            # #1295: both name alternatives wrapped in capture groups (group 1
-            # for the main class/interface/object/enum-class branch, group 2
-            # for companion object's own optional name) so the named-entity
-            # extractor (detector.py's _CLASS_START_NAMED_EXTRACTION_LANGS)
-            # can recover real names instead of flooding class_data with one
-            # "Anonymous_Class" phantom per match -- same alternation shape
-            # `_resolve_class_start_match` already handles for Fortran/Lua.
-            # #1295: `fun` added to the modifier set for `fun interface Foo {`
-            # (SAM/functional-interface declarations, mainstream since Kotlin
-            # 1.4) -- previously unrecognized, a real recall gap confirmed
-            # against okhttp's `fun interface Factory`.
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)\{]{0,300}\))?[ \t]*){0,10}(?:(?:public|private|protected|internal|open|abstract|final|sealed|data|value|annotation|expect|actual|inner|fun)[ \t]+){0,5}(?:(?:class|interface|object|enum\s+class)\s+(`[^`\n]{1,200}`|[a-zA-Z_]\w*)|companion[ \t\n]+object(?:\s+(`[^`\n]{1,200}`|[a-zA-Z_]\w*))?)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\?\.(?!.)|as\?|\b(require|requireNotNull|check|checkNotNull|error|sealed|is|!is|Result|onSuccess|onFailure|fold|runCatching)\b|\?:"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Force unwrapping, unsafe casts, and suppression.
-            "safety_bypasses": re.compile(r"!!|as(?!\?)\b|\blateinit\s+var\b|@Suppress\b"),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Process killers and raw system triggers. EXCLUDES println (Phase 5).
-            "high_risk_execution": re.compile(r"\b(System\.exit|exitProcess|Runtime\.getRuntime|Thread\.stop)\b"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(File|InputStream|OutputStream|Retrofit|OkHttpClient|Ktor|HttpClient|RoomDatabase|Dao|SharedPreferences|DataStore|java\.nio)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Exposed surface. Implicit public/internal defaults + Ktor/Spring routes.
-            "api": re.compile(
-                r"\b(public|internal)\b|@(RestController|Controller|Service|Component|RequestMapping|GetMapping|PostMapping|Route)\b"
-            ),
-            # 11. flux (State Mutation)
-            # CRITICAL FIX: Added re.M so it scans every line, not just the first line of the file!
-            "state_mutation": re.compile(
-                r"\b(var|MutableList|MutableMap|MutableSet|MutableState|MutableStateFlow|Atomic[A-Za-z0-9]+)\b|^[ \t]*(?:this\.)?[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*\s*[-+*/%]?=|\.(?:add|addAll|remove|put|set|update)\(",
-                re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"//[ \t]*(?:val|var|fun|class|interface|object|if|when|for|return|import)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"/\*\*|@param|@return|@property|@receiver|@constructor|@throws|@see|@since"),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r"@(?:Test|ParameterizedTest|BeforeTest|AfterTest)|\b(?:assert[A-Za-z0-9_]*|mockk|spyk|test)\s*\(|\b(?:shouldBe|shouldNotBe)\b|\b(?:every|verify)\s*\{"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(suspend|launch|async|CoroutineScope|GlobalScope|Dispatchers|Flow|StateFlow|SharedFlow|Channel|yield|runBlocking|withContext|Mutex)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(
-                r"@Composable|Modifier|\b(Column|Row|Box|Text|Image|Button|Scaffold|LazyColumn|LazyRow|Surface|remember|mutableStateOf|findViewById|View|Activity|Fragment)\b"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            # OPTIMIZED: Removed overlapping whitespace quantifiers to fix ReDoS.
-            "closures": re.compile(r"\{[ \t\n]*[a-zA-Z_][a-zA-Z0-9_ \t\n:<>,.?]{0,150}?->"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"\b(object|companion\s+object)\b|^[ \t]*(?:const[ \t]+)?val\s+[A-Z_0-9]+[ \t]*=",
-                re.M,
-            ),
-            # 19. decorators (Decorators / Annotations)
-            # OPTIMIZED: Bounded arguments.
-            "decorators": re.compile(r"@[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*(?:\([^)\{]{0,300}\))?"),
-            # 20. generics (Generics / Type Parameters)
-            # Prevented catastrophic backtracking across newlines.
-            "generics": re.compile(r"<\s*(?:in|out)?\s*[A-Z][^>\n]{0,100}>|\breified\b|\bwhere\b"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Functional collection transformations.
-            "comprehensions": re.compile(
-                r"\.(?:map|mapNotNull|filter|filterNot|reduce|fold|flatMap|zip|associate|groupBy|forEach|any|all|none|find)\b"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(kotlin\.math\.|java\.lang\.Math\.|StrictMath\.|Random\.|sin|cos|tan|sqrt|exp|log|abs|BigDecimal|BigInteger)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Reflection and optimization hooks.
-            "reflection_metaprogramming": re.compile(
-                r"::class|javaClass|@JvmOverloads|@JvmStatic|@JvmField|@JvmName|\b(inline|crossinline|noinline|invoke|context|tailrec)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*import\s+(?:static[ \t]+)?[\w.]+;?", re.M),
-            "_dependency_capture": re.compile(r"^[ \t]*import[ \t\n]+(?:static[ \t\n]+)?([\w.*]+)", re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"@(?:author|since)\s+(.*)|//\s*(?:Created by|Maintainer|Copyright):\s+(.*)",
-                re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": re.compile(
-                r"\b(ApplicationCall|call\.respond|call\.respondText|call\.respondHtml|ServerResponse|ModelAndView)\b"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # BUG FIX: required a literal `(`, but Kotlin's idiomatic
-            # SAM-conversion trailing-lambda form (`flow.collect { value ->
-            # ... }`, omitting the parens entirely) is the dominant
-            # real-world style for Flow collectors -- more common than the
-            # parenthesized form. Widened to accept either `(` or `{`.
-            "events": re.compile(
-                r"\.(?:collect|collectLatest|observe|subscribe|onNext)\s*[\(\{]|\b(LiveData|Observer|Observable|FlowCollector)\b"
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"@(?:Inject|Module|Provides|Binds|HiltViewModel|AndroidEntryPoint|Component|Autowired)|(?:koin|get|inject)\(\)"
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(r"@(?:OptIn|RequiresOptIn|Suppress|SuppressWarnings)\b"),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Kotlin/Native FFI boundaries.
-            "pointers": re.compile(r"\b(?:CPointer|COpaquePointer|CFunction|CValue|CPointed)\b"),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(r"\b(?:memScoped|alloc|allocArray|nativeHeap\.alloc|nativeHeap\.free)\b"),
-            # 37. inline_asm
-            "inline_asm": None,  # Usually bridged via C-headers in Native.
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:Timber|Log|Logger|LoggerFactory)\.(?:i|e|w|d|v|info|error|warn|warning|debug|trace|verbose)\b|@Slf4j"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(println|print)\b\s*\("),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\bas\??\s+[A-Z]\w*|\.to(?:Int|Long|Short|Byte|Double|Float|String|Boolean|UInt|ULong|UShort|UByte)\(\)"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|raise|exitProcess|return|panic)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(delay|Thread\.sleep|yield)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"\.(?:shl|shr|ushr|and|or|xor|inv)\(|\b(?:shl|shr|ushr|xor)\b"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(mutex|lock|synchronized|Semaphore|Atomic[A-Z]\w*)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(val|const|immutable|readonly)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(close|dispose|shutdown|use|cleanup)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b(private|protected|internal)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            # BUG FIX: required a literal `(`, but the idiomatic Kotlin
-            # SAM-conversion trailing-lambda form (`button.setOnClickListener
-            # { ... }`, omitting the parens entirely) is the dominant
-            # real-world style for Android/Compose listeners. Widened to
-            # accept either `(` or `{`.
-            "listeners": re.compile(r"\.(?:collect|observe|subscribe|on[A-Z]\w*|set[A-Z]\w*Listener)\s*[\(\{]"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"@(?:Ignore|Disabled)|test\.skip\(|mockk|spyK|fake\("),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Kotlin Specifics) ---
-            # BUG FIX: `Gson\(\)` ends on `)` -- shared trailing \b never
-            # fired. Never matched.
-            "serialization_parsing": re.compile(
-                r"\b(?:Json\.decodeFromString|Json\.encodeToString|Moshi|ObjectMapper)\b|\bGson\(\)"
-            ),
-            # BUG FIX: `Regex\(\)` required LITERALLY EMPTY parens, but
-            # Kotlin's `Regex` class has no zero-arg constructor -- real
-            # usage is always `Regex(pattern)`, which never matched even
-            # before the `\)` trailing-\b bug is considered. Widened to
-            # `Regex\(` (matching the constructor call regardless of its
-            # argument). `\.toRegex\(\)` (the real zero-arg extension
-            # function on String) keeps its literal empty parens but still
-            # needed the same trailing-\b fix as the rest of this sweep.
-            "regex_execution": re.compile(r"\bRegex\(|\.toRegex\(\)|\.matches\(|\.find\("),
-            "time_date_logic": re.compile(
-                r"\b(Clock\.System\.now|Instant\.now|System\.currentTimeMillis|Duration\.minutes|LocalDate)\b"
-            ),
-            # BUG FIX: `Intent\(`/`HttpClient\(` both end on `(` (non-word),
-            # so the shared trailing \b only fired when a word char
-            # immediately followed the paren -- true for the common
-            # `Intent(this, Foo::class.java)` form, but never for the
-            # zero-argument form (`HttpClient()`), where `)` follows.
-            "ipc_rpc_bridges": re.compile(
-                r"\b(?:BroadcastReceiver|ProcessBuilder|bindService)\b|\bIntent\(|\bHttpClient\("
-            ),
-        },
-    },
-    "sqlite": {
-        "_meta": {
-            "target_version": "SQLite 3.51.2+ (STRICT Tables, JSONB, RETURNING, Math & CTEs)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard SQL scripts, data definition, and data manipulation files.
-        "extensions": [".sql", ".ddl", ".dml"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Standard SQLite configuration and history files that consist of CLI commands/SQL.
-        "exact_matches": [".sqliterc"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Binary database files acting as gravitational anchors to prove a .sql file is SQLite and not Postgres/MySQL.
-        "discriminators": [
-            ".sql",
-            ".db",
-            ".sqlite",
-            ".sqlite3",
-            ".db3",
-            ".s3db",
-            ".sl3",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["sqlite3", "sqlite"],
-        # Maps to Family 5 (Hybrid Dash) -- #621: this comment always said
-        # "Family 5 (Hybrid Dash)" but the value below was "standard_block"
-        # until now, so sqlite shared a regex with C-style languages and got
-        # zero comment stripping (standard_block never used the `--` token).
-        # "multi_style_dash" is the real family for this shape.
-        # Rationale: Uses '--' for line-level and '/*' '*/' for block-level Commented / Non-Executable Text.
-        "lexical_family": "multi_style_dash",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical filters. Includes case logic and modern IIF().
-            "branch": re.compile(
-                r"\b(CASE|WHEN|THEN|ELSE|END|IFNULL|NULLIF|COALESCE|IIF|FILTER|WHERE|HAVING)\b",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks and input coupling. Bounded to prevent ReDoS on massive IN clauses.
-            # Now explicitly captures CTE scoped arguments: cte_name (col1, col2)
-            # BUG FIX (epic #813/#836), two findings:
-            # 1. Rule 11 shape: the VALUES/IN clause's `\([^)]{0,2000}\)` was a
-            #    flat, unnested paren match -- a nested subquery (`IN (SELECT
-            #    id FROM (SELECT id FROM other))`, common real SQL) truncated
-            #    at the FIRST closing paren (the inner subquery's own),
-            #    silently ending the match one paren early instead of
-            #    covering the whole clause. Widened to the established
-            #    one-level-nesting-safe idiom, bounded on both the inner and
-            #    outer repetition to stay ReDoS-safe.
-            # 2. The CTE alternative required the CTE name to be at TRUE line
-            #    start (`^[ \t]*`) -- but the single most common way to
-            #    actually write a CTE is inline, right after the `WITH`
-            #    keyword on the same line (`WITH cte_name (col1, col2) AS
-            #    (...)`), which this pattern never matched at all. Added an
-            #    alternative anchor: immediately after `WITH` or `WITH
-            #    RECURSIVE`, in addition to (not instead of) true line start
-            #    (multi-CTE statements formatted one-per-line still hit the
-            #    original anchor). Kept as a non-capturing addition -- this
-            #    rule has zero capture groups by design (every alternative is
-            #    checked via whole-match substring, not a captured group), so
-            #    adding a real group here would have changed that convention
-            #    for every OTHER alternative too.
-            "args": re.compile(
-                r"\?[0-9]*|[:@$][a-zA-Z_]\w*|\b(?:VALUES|IN)\s*\((?:[^()]|\([^()]{0,2000}\)){0,2000}\)|"
-                r"(?:^[ \t]*|\bWITH(?:[ \t\n]+RECURSIVE)?[ \t\n]+)[a-zA-Z_]\w*[ \t\n]*\([^)]{0,2000}\)[ \t\n]*AS[ \t\n]*\(",
-                re.I | re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries defining query execution flow.
-            "structural_boundaries": re.compile(
-                r"\b(SELECT|FROM|JOIN|(?:INNER|LEFT|RIGHT|FULL|CROSS|NATURAL)(?:\s+OUTER)?\s+JOIN|GROUP\s+BY|ORDER\s+BY|LIMIT|OFFSET|UNION|INTERSECT|EXCEPT|RETURNING|AS|INTO|WINDOW|STRICT|WITHOUT\s+ROWID|PARTITION\s+BY|PRECEDING|FOLLOWING|UNBOUNDED|CURRENT\s+ROW)\b",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Executable logic wrappers. EXCLUDES tables to avoid False Positives.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL MODIFIER SHIELD (SQLITE) ]
-                # SQL developers frequently format DDL statements across multiple lines,
-                # stacking `CREATE`, `TEMPORARY TRIGGER`, and `IF NOT EXISTS` vertically.
-                # FIX: Upgraded the `\s+` and `[ \t]+` modifier bounds to `[ \t\n]+`.
-                # Critically, the `IF NOT EXISTS` block previously failed to capture
-                # the vertical gap, causing the engine to capture `IF` as the target name.
-                #
-                # BUG FIX (epic #813/#836), two findings:
-                # 1. No allowance for a schema-qualified name (`CREATE
-                #    TRIGGER main.my_trigger ...`) -- standard, common SQLite
-                #    syntax when working with ATTACHed databases or
-                #    explicitly targeting `temp.`. Since `\w` never spans a
-                #    literal `.`, the old pattern couldn't capture "main.my_
-                #    trigger" as one token and had no fallback to skip the
-                #    schema prefix and capture just the real name -- the
-                #    whole match failed outright. Added an optional
-                #    `(?:[a-zA-Z_]\w*\.)?` schema-prefix skip before the
-                #    capture.
-                # 2. No allowance for any of SQLite's three quoted-identifier
-                #    styles (`"name"`, `` `name` ``, `[name]`) -- so even a
-                #    plain quoted name with no special characters at all
-                #    (`CREATE VIEW "group" AS ...`, quoting a name that
-                #    happens to collide with a reserved word -- the single
-                #    most common real reason to quote an identifier) failed
-                #    outright. Added the three quoted forms as alternatives
-                #    inside the SAME capture group (quotes included in the
-                #    captured text) rather than as separate numbered groups,
-                #    since detector.py reserves capture group 2 specifically
-                #    for class_start's inheritance-parent extraction on other
-                #    languages -- adding new numbered groups here would have
-                #    silently shifted that convention.
-                # =====================================================================
-                r"^[ \t]*CREATE[ \t\n]+(?:(?:TEMP|TEMPORARY)[ \t\n]+)?(?:UNIQUE[ \t\n]+)?(?:TRIGGER|VIEW|INDEX)[ \t\n]+"
-                r"(?:IF[ \t\n]+NOT[ \t\n]+EXISTS[ \t\n]+)?(?:[a-zA-Z_]\w*\.)?"
-                r"((?:\"[^\"]+\"|`[^`]+`|\[[^\]]+\]|[a-zA-Z_]\w*))(?=[ \t\(\n;]|$)",
-                re.I | re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Physical entity instantiation (Tables).
-            # BUG FIX (epic #813/#836), three findings:
-            # 1/2. Same schema-qualifier and quoted-identifier gaps as
-            #    func_start above -- `CREATE TABLE main.users (...)` and
-            #    `CREATE TABLE "my table" (...)` were both entirely
-            #    invisible. Same fix, same single-group approach.
-            # 3. Pre-existing (not introduced by the above): the "IF NOT
-            #    EXISTS" clause's own trailing gap used `[ \t]+` -- unlike
-            #    its internal `NOT`/`EXISTS` gaps (`\s+`, which already
-            #    included newlines), the FINAL gap before the table name
-            #    didn't allow a newline. func_start's own "VERTICAL MODIFIER
-            #    SHIELD" fix (see its comment above) already covers this
-            #    exact shape for TRIGGER/VIEW/INDEX, but was never applied to
-            #    class_start's parallel TABLE clause -- so `CREATE TABLE IF
-            #    NOT EXISTS\n    users (...)` (a real, common vertical
-            #    formatting style) silently captured "IF" as the table name
-            #    instead of "users". Widened to `[ \t\n]+`, matching
-            #    func_start's existing idiom.
-            "class_start": re.compile(
-                r"^[ \t]*CREATE\s+(?:(?:TEMP|TEMPORARY)\s+)?(?:VIRTUAL[ \t]+)?TABLE\s+"
-                r"(?:IF\s+NOT\s+EXISTS[ \t\n]+)?(?:[a-zA-Z_]\w*\.)?"
-                r"((?:\"[^\"]+\"|`[^`]+`|\[[^\]]+\]|[a-zA-Z_]\w*))(?=[ \t\(\n;]|$)",
-                re.I | re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(TRANSACTION|COMMIT|ROLLBACK|SAVEPOINT|RELEASE|CONSTRAINT|CHECK|UNIQUE|PRIMARY\s+KEY|FOREIGN\s+KEY|STRICT|IF\s+NOT\s+EXISTS|ON\s+DELETE\s+CASCADE|PRAGMA\s+foreign_keys[ \t]*=\s*(?:1|ON))\b",
-                re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Bypassing safety checks and structural removals.
-            "safety_bypasses": re.compile(
-                r"\b(DROP\s+TABLE|DROP\s+VIEW|DROP\s+INDEX|PRAGMA\s+foreign_keys[ \t]*=\s*(?:0|OFF)|PRAGMA\s+writable_schema[ \t]*=\s*(?:1|ON)|PRAGMA\s+ignore_check_constraints[ \t]*=\s*(?:1|ON)|IF\s+EXISTS)\b",
-                re.I,
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Destructive schema actions and system bypasses.
-            "high_risk_execution": re.compile(
-                r"\b(PRAGMA\s+legacy_alter_table|DROP\s+DATABASE)\b|^[ \t]*\.(?:shell|system|exit|quit)\b",
-                re.I | re.M,
-            ),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(SELECT|INSERT|UPDATE|DELETE|REPLACE|ATTACH\s+DATABASE|DETACH\s+DATABASE|readfile|writefile)\b|^[ \t]*\.(?:import|output|dump|read)\b",
-                re.I | re.M,
-            ),
-            # 10. api (Public Surface Area)
-            # Exposed surface area (Views and Virtual Tables).
-            "api": re.compile(
-                r"^[ \t]*CREATE\s+(?:TEMP|TEMPORARY)?\s*(?:VIEW|VIRTUAL\s+TABLE)\s+",
-                re.I | re.M,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. Includes UPSERT.
-            "state_mutation": re.compile(
-                r"\b(UPDATE|SET|ALTER\s+TABLE|ADD\s+COLUMN|DROP\s+COLUMN|RENAME\s+TO|UPSERT|ON\s+CONFLICT\s+DO\s+UPDATE|ON\s+CONFLICT\s+DO\s+NOTHING|REPLACE\s+INTO|EXCLUDED\.[a-zA-Z_]\w*|jsonb?_(?:insert|replace|set|remove|patch))\b",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(
-                r"(?:--|/\*)[ \t]*(?:SELECT|INSERT|UPDATE|DELETE|CREATE|DROP|ALTER|PRAGMA)\b",
-                re.I,
-            ),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"--\s*@(?:param|return|brief|table|column)|/\*\*|--\s*Description:"),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(
-                r"\b(?:EXPLAIN[ \t]+QUERY[ \t]+PLAN|PRAGMA[ \t]+integrity_check|PRAGMA[ \t]+foreign_key_check)\b|^[ \t]*\.(?:testcase|lint)\b",
-                re.I | re.M,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(BEGIN\s+EXCLUSIVE|BEGIN\s+IMMEDIATE|PRAGMA\s+journal_mode[ \t]*=\s*WAL|PRAGMA\s+busy_timeout|PRAGMA\s+synchronous|PRAGMA\s+wal_checkpoint)\b",
-                re.I,
-            ),
-            # 16. ui_framework
-            "ui_framework": None,
-            # 17. closures (Closures / Anonymous Functions)
-            # SQLite does not support functional closures/lambdas. (CTEs are structural boundaries/loops).
-            "closures": None,
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"\b(sqlite_master|sqlite_schema|sqlite_sequence|sqlite_temp_schema|sqlite_stat\d+|PRAGMA\s+global_)\b",
-                re.I,
-            ),
-            # 19. decorators (Decorators / Annotations)
-            # Optimizer hints.
-            "decorators": re.compile(
-                r"\b(?:INDEXED\s+BY|NOT\s+INDEXED|MATERIALIZED|NOT\s+MATERIALIZED)\b",
-                re.I,
-            ),
-            # 20. generics (Generics / Type Parameters)
-            "generics": re.compile(r"\bANY\b|\bCAST\s*\([^)]{0,500}\)", re.I),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # JSON iterations and windowing.
-            "comprehensions": re.compile(
-                r"\b(json_each|json_tree|json_group_array|json_group_object)\b|\bOVER\s*\([^)]{0,500}\)",
-                re.I,
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(abs|acos|asin|atan|ceil|cos|degrees|exp|floor|ln|log|pi|pow|radians|sin|sqrt|tan|random|match|bm25|snippet|highlight|rtree|geopoly_[a-z_]+)\b",
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Recursive logic and JSON paths.
-            "reflection_metaprogramming": re.compile(
-                r"\bWITH\s+RECURSIVE\b|\bGENERATED\s+ALWAYS\s+AS\b[^,;()]{0,20}\([^()]{0,300}\)[ \t]*(?:STORED|VIRTUAL)\b|->>|->|\b(?:json_extract|jsonb_extract)\b",
-                re.I,
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r"\b(ATTACH\s+DATABASE|load_extension)\b|^[ \t]*\.(?:read|load|import)\s+",
-                re.I | re.M,
-            ),
-            # BUG FIX (epic #813/#836): the ATTACH clause's optional-quote-pair
-            # idiom (`['"]?...['"]?`) excluded whitespace from the capture
-            # regardless of whether a quote was actually present -- the same
-            # bug class already confirmed for PowerShell's _dependency_capture
-            # (recurring class 39), but a worse "total failure" variant here:
-            # because the mandatory literal `AS` keyword must immediately
-            # follow the (optional) closing quote, a quoted path containing a
-            # space (a real, common Windows/macOS absolute path shape) didn't
-            # just truncate -- it failed to match AT ALL, since there was no
-            # way to reach "AS" with the space excluded from the capture.
-            # Fixed with real per-quote-style alternatives (single-quoted,
-            # double-quoted, bare), consistent with the PowerShell fix.
-            # BUG FIX (2026-08-30, sqlite tri-comparison validation pass): the
-            # `.import`/`.read`/`.load` alternative captured the FIRST
-            # whitespace-delimited token after the dot-command unconditionally
-            # -- but SQLite CLI's real `.import` accepts leading flags
-            # (`-csv`, `-ascii`, `-colsep ","`, `-skip N`, `-schema NAME`,
-            # `-v`), a documented, common shape (`sqlite_cli_scripts/import01.
-            # sql`'s corpus is full of `.import -csv file1.csv t4`). The old
-            # pattern captured `-csv` itself as the "dependency path" -- a
-            # real false positive polluting the dependency DAG with a garbage
-            # flag-shaped node instead of the actual imported file. There's no
-            # safe, bounded way to know which flags take a value (`-colsep`)
-            # vs. are boolean (`-csv`) without a flag table this regex layer
-            # doesn't have, so guessing past them risks capturing a flag's
-            # OWN value instead (worse: still wrong, now silently so). Given
-            # that choice, requiring the captured token not start with `-`
-            # trades a miss (no dependency edge for a flagged `.import`) for
-            # what this signal already prioritizes elsewhere in this file --
-            # never a wrong path -- consistent with `.import data.csv mytable`
-            # (no flags) staying captured correctly.
-            "_dependency_capture": re.compile(
-                r"\bATTACH\s+(?:DATABASE\s+)?(?:'([^']+)'|\"([^\"]+)\"|([^'\"\s;]+))\s+AS|"
-                r"\bload_extension\s*\(\s*['\"]([^'\"]+)['\"]|^[ \t]*\.(?:read|load|import)\s+['\"]?([^'\"\s-][^'\"\s]*)['\"]?",
-                re.I | re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"--\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            "spec_exposure": re.compile(r"--\s*\[(?:\s*SPEC\s*-\s*\d+|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            "events": re.compile(
-                r"\b(CREATE\s+TRIGGER|AFTER\s+UPDATE|AFTER\s+INSERT|AFTER\s+DELETE|BEFORE\s+UPDATE|BEFORE\s+INSERT|BEFORE\s+DELETE|INSTEAD\s+OF)\b",
-                re.I,
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            "dependency_injection": re.compile(
-                r"\b(?:sqlite3_load_extension|SELECT\s+load_extension)\b|^[ \t]*\.load\b",
-                re.I | re.M,
-            ),
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"\b(PRAGMA\s+compile_options|sqlite_compileoption_used)\b|^[ \t]*\.parameter\s+(?:set|init)\b",
-                re.I | re.M,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": None,
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(
-                r"\bPRAGMA\s+(?:mmap_size|cache_size|temp_store|page_size|shrink_memory)\b",
-                re.I,
-            ),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:sqlite_stat1|sqlite_stat4|ANALYZE)\b|^[ \t]*\.(?:trace|log|show|stats|timer)\b",
-                re.I | re.M,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(
-                r"\b(?:disp|warning|fprintf(?![ \t]*\([ \t]*[a-zA-Z_]))\b|^\.print\b|^\.echo\b",
-                re.I | re.M,
-            ),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\bCAST[ \t]*\((?:[^()]{0,500}|\([^()]{0,500}\)){0,500}[ \t]+AS[ \t]+[a-zA-Z_]+\s*\)", re.I
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(ABORT|RAISE|EXIT|QUIT)\b|^[ \t]*\.(?:exit|quit)\b", re.I | re.M),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\bPRAGMA\s+busy_timeout\b|^[ \t]*\.pause\b", re.I | re.M),
-            # 43. bitwise_ops (Bitwise Operations)
-            # (?<!-)>> excludes the `->>` JSON arrow operator (reflection_metaprogramming),
-            # which is not a bitwise right-shift.
-            "bitwise_ops": re.compile(r"<<|(?<!-)>>|\^|~|(?<!\|)\|(?!\|)"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(BEGIN\s+EXCLUSIVE|BEGIN\s+IMMEDIATE|PRAGMA\s+synchronous)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(STRICT|WITHOUT\s+ROWID|CONSTANT|READONLY)\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(DROP\s+TABLE|VACUUM|DETACH|CLOSE|CLEAR|DELETE\s+FROM)\b", re.I),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Temporary/Local scopes and hidden columns.
-            "encapsulation": re.compile(r"\b(TEMP|TEMPORARY|HIDDEN)\b", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(BEFORE\s+|AFTER\s+|INSTEAD\s+OF)\b", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"^[ \t]*\.testcase\s+skip\b|\bPRAGMA\s+ignore_check_constraints\b", re.I | re.M),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (SQLite / SQL Specifics) ---
-            "serialization_parsing": re.compile(
-                r"(?i)\b(json_extract|json_tree|json_each|json_object|json_array|json_type)\b"
-            ),
-            "regex_execution": re.compile(r"(?i)\b(REGEXP|GLOB|LIKE|MATCH)\b"),
-            "time_date_logic": re.compile(
-                r"(?i)\b(strftime|datetime|julianday|unixepoch|current_timestamp|current_date|current_time)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(r"(?i)\b(ATTACH\s+DATABASE|DETACH\s+DATABASE|PRAGMA)\b"),
-        },
-    },
-    "html": {
-        "_meta": {
-            "target_version": "Modern HTML Living Standard (2025) & Web Components",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard markup, XML-based HTML, and modern JS/server-side UI component frameworks.
-        "extensions": [
-            ".html",
-            ".htm",
-            ".xhtml",
-            ".cshtml",
-            ".vue",
-            ".svelte",
-            ".astro",
-            ".ejs",
-            ".hbs",
-            ".twig",
-            ".erb",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Standardized routing and entry points.
-        "exact_matches": ["index.html", "404.html"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and frontend build tools to prove context.
-        "discriminators": [
-            ".html",
-            "package.json",
-            "vite.config.js",
-            "webpack.config.js",
-            "nuxt.config.js",
-        ],
-        # EXECUTION SIGNATURES: HTML is a declarative markup language; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: Uses SGML-style block delimiters () exclusively; no single-line anchor.
-        "lexical_family": "block_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # User-driven branching and declarative framework conditionals.
-            # BUG FIX: `*ngIf` was inside the shared `\b(...)"[^"]*"` group.
-            # `*` is a non-word char always preceded by whitespace in real
-            # markup (`<div *ngIf="cond">`) -- a `\b` between two non-word
-            # characters can never fire, so Angular's structural directive
-            # never matched. Pulled out with no leading `\b` (self-delimiting).
-            # BUG FIX (#735): every `"[^"]*"`-shaped attribute-value pattern
-            # in this rules dict assumed double-quoted HTML attributes only
-            # -- `<div v-if='cond'>` (single-quoted, equally valid HTML)
-            # never matched. Swapped the literal `"` delimiters for a
-            # `["\']` quote-character class and widened the wildcard
-            # content class to `[^"\']` (excludes either quote char) --
-            # the same idiom this file's own `_dependency_capture` already
-            # uses. No ReDoS risk added: still exactly one unbounded
-            # quantifier per gap, just a wider character class.
-            "branch": re.compile(
-                r"<(?:details|summary|noscript)(?=[ \t\n\r\f/>])|\b(?:v-if|ng-if|x-if|hx-swap)=(?:\"[^\"]*\"|'[^']*')|\*ngIf=(?:\"[^\"]*\"|'[^']*')|\{%\s*(?:if|elif|else|endif)\s*[^%]*%\}|\{\{#if\s+[^}]+\}\}",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Attribute signatures defining input coupling. Bounded to prevent ReDoS on massive data attrs.
-            "args": re.compile(
-                r"\b(data-[a-zA-Z0-9_-]+|aria-[a-z]+|name|value|placeholder|for|alt|step|min|max)(?:[ \t\n\r\f]*=[ \t\n\r\f]*(?:\"[^\"]*\"|'[^']*'|[^ \t\n\r\f>\"']+))?",
-                re.IGNORECASE,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural document flow tags. Includes 1990 CERN tags (<nextid>, <address>) alongside modern semantic ones.
-            "structural_boundaries": re.compile(
-                r"<(?:html|head|body|main|section|article|header|footer|div|span|p|h[1-6]|ul|ol|li|dl|dt|dd|nav|aside|figure|figcaption|search|address|nextid|hp[1-2]|dir|menu)(?=[ \t\n\r\f/>])",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable behavior blocks. The negative lookahead (Rule 15)
-            # excludes a `<script>` whose `type` is a non-executable value -- a
-            # browser treats any `type` outside the JS-MIME / `module` set as an
-            # inert data block and never runs it (#2492). This lookahead gates the
-            # raw structural-signal count (matched against un-shielded source);
-            # detector.py's Mode B slicer re-applies HTML_NONEXECUTABLE_SCRIPT_TAG
-            # against raw source for the named-function list, because the shared
-            # brace-safe stream has blanked the `type` value by the time this
-            # regex runs there.
-            "func_start": re.compile(
-                r"<(script|style)"
-                r"(?![^>]*\btype[ \t\n\r\f]*=[ \t\n\r\f]*[\"']?(?:" + _HTML_NONEXECUTABLE_SCRIPT_TYPES + r"))"
-                r"(?=[ \t\n\r\f/>])",
-                re.IGNORECASE,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Defines structural entities, Web Components, and template boundaries.
-            "class_start": re.compile(
-                r"<(form|table|svg|canvas|picture|video|audio|dialog|template|fieldset|legend|[a-z][a-z0-9]*-[a-z0-9-]+)(?=[ \t\n\r\f/>])",
-                re.IGNORECASE,
-            ),
-            # --- PHASE 2: RISK ENGINE (Structural Integrity & Debt) ---
-            # 6. safety (Defensive Programming / Validation)
-            # Browser security and validation constraints.
-            # BUG FIX: `pattern="..."`/`sandbox="..."`/`rel="noopener..."`/
-            # `integrity="..."` were inside the shared `\b(...)\b` group.
-            # Each ends on a literal `"`, and the char immediately after a
-            # closing attribute quote (a space or `>`) is also non-word --
-            # `\b` between two non-word characters can never fire, so all
-            # four never matched. Pulled out with no trailing `\b`
-            # (self-delimiting on the closing quote).
-            "safety": re.compile(
-                r"\b(?:required|readonly|disabled)\b|pattern=(?:\"[^\"]*\"|'[^']*')|sandbox=(?:\"[^\"]*\"|'[^']*')|rel=(?:\"noopener(?: noreferrer)?\"|'noopener(?: noreferrer)?')"
-                r"|integrity=(?:\"[^\"]*\"|'[^']*')|<meta\s+http-equiv=(?:\"Content-Security-Policy\"|'Content-Security-Policy')",
-                re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Actively bypasses standard browser safety (e.g. target="_blank" without noopener).
-            "safety_bypasses": re.compile(
-                r"target=(?:\"_blank\"|'_blank')(?!\s+rel=(?:\"noopener\"|'noopener'))|href=(?:\"javascript:[^\"]*\"|'javascript:[^']*')|on[a-z]+=(?:\"[^\"]*(?:eval\(|document\.write\()|'[^']*(?:eval\(|document\.write\()')",
-                re.I,
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # HTML is declarative markup. Execution dangers (eval, setTimeout) belong in JS.
-            "high_risk_execution": None,
-            # 9. io (I/O & Network Boundaries)
-            # Hyperlink navigation and resource fetching. (The core of the Web).
-            "io": re.compile(
-                r"\b(?:src|href|action|poster|data)=(?:\"[^\"]*\"|'[^']*')|<(?:a|form|iframe|audio|video|object|embed|source|track|img)(?=[ \t\n\r\f/>])",
-                re.I,
-            ),
-            # 10. api (Public Surface Area)
-            # Exposed identifiers and metadata consumption surface.
-            "api": re.compile(
-                r"\b(?:id|name|role|exportparts|part|itemprop|itemscope|itemtype)=(?:\"[^\"]*\"|'[^']*')|<slot(?=[ \t\n\r\f/>])|<meta\s+(?:property=(?:\"og:|'og:)|name=(?:\"twitter:|'twitter:))",
-                re.I,
-            ),
-            # 11. flux (State Mutation)
-            # HTML is declarative markup. State mutation (DOM manipulation) belongs in JS.
-            "state_mutation": None,
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out structural logic.
-            "dead_code": re.compile(
-                r"<!--[ \t]*<(?:div|script|style|form|table|a|p|section|span|img|ul|li|nav|header|footer|main)(?=[ \t\n\r\f/>])",
-                re.I,
-            ),
-            # 13. doc (Structured Documentation)
-            # Structured intent for crawlers and accessibility.
-            "doc": re.compile(
-                r"<title>[^<]*</title>|<meta\s+name=(?:\"(?:description|keywords|author)\"|'(?:description|keywords|author)')\s+content=(?:\"[^\"]*\"|'[^']*')|\baria-(?:description|label|labelledby|describedby|details)=(?:\"[^\"]*\"|'[^']*')",
-                re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(r"\bdata-(?:testid|cy|test|test-id|qa)[ \t]*=", re.I),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # Prioritization and asynchronous fetching logic.
-            # BUG FIX: same trailing-`\b`-after-quote trap as `safety` above --
-            # `loading="lazy"`/`fetchpriority="..."`/`decoding="async"` all end
-            # on `"`, and the shared trailing `\b` can't fire against the
-            # non-word char that follows a closing attribute quote. Pulled out.
-            "concurrency": re.compile(
-                r"\b(?:async|defer)\b|loading=(?:\"lazy\"|'lazy')|fetchpriority=(?:\"(?:high|low)\"|'(?:high|low)')|decoding=(?:\"async\"|'async')"
-                r"|<link\s+rel=(?:\"(?:preload|prefetch|preconnect|modulepreload|prerender)\"|'(?:preload|prefetch|preconnect|modulepreload|prerender)')",
-                re.I,
-            ),
-            # 16. ui_framework (UI / View Components)
-            # Formatting tags and Tailwind/Bootstrap utility density.
-            "ui_framework": re.compile(
-                r"<(?:b|i|u|strong|em|mark|small|del|ins|sub|sup)(?=[ \t\n\r\f/>])|\bclass=(?:\"[^\"]*(?:flex|grid|absolute|relative|block|inline-block|container|row|col-[0-9]+|justify-center|items-center|w-full|h-full)[^\"]*\"|'[^']*(?:flex|grid|absolute|relative|block|inline-block|container|row|col-[0-9]+|justify-center|items-center|w-full|h-full)[^']*')",
-                re.I,
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            # DOM encapsulation via Shadow DOM.
-            "closures": re.compile(
-                r"<template\s+shadowrootmode=(?:\"[^\"]*\"|'[^']*')>|<template\s+shadowroot=(?:\"[^\"]*\"|'[^']*')>",
-                re.I,
-            ),
-            # 18. globals (Global / Shared State)
-            # HTML is declarative markup. Browser globals (window, document) belong in JS.
-            "globals": None,
-            # 19. decorators (Decorators / Annotations)
-            # Directive-based logic mutation (HTMX, Vue, Alpine).
-            # BUG FIX: `hidden`/`inert` are true HTML boolean attributes,
-            # almost always written bare (`<div hidden>`) with no `=` at
-            # all -- the old pattern required `[ \t]*=` unconditionally
-            # after every alternative, so the dominant real-world form of
-            # these two never matched. Made the `=...` suffix optional only
-            # for hidden/inert; the rest (class/style/tabindex/etc.) always
-            # require an explicit value in real markup, so they keep the
-            # mandatory `=`.
-            "decorators": re.compile(
-                r"\b(?:hidden|inert)\b(?:[ \t]*=)?"
-                r"|\b(?:class|style|tabindex|draggable|spellcheck|dir|lang|translate)[ \t]*="
-                r"|hx-[a-z-]+=(?:\"[^\"]*\"|'[^']*')|x-[a-z-]+=(?:\"[^\"]*\"|'[^']*')|v-[a-z-]+=(?:\"[^\"]*\"|'[^']*')",
-                re.I,
-            ),
-            "generics": re.compile(r"<slot(?=[ \t\n\r\f/>])[^>]*>", re.I),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Declarative array iteration in markup.
-            # BUG FIX: same leading-`\b`-before-`*` trap as `branch` above --
-            # `*ngFor` is always preceded by whitespace in real markup, so
-            # the shared leading `\b` (boundary between two non-word chars)
-            # never fired. Pulled out with no leading `\b`.
-            "comprehensions": re.compile(
-                r"\b(?:v-for|ng-repeat|x-for)=(?:\"[^\"]*\"|'[^']*')|\*ngFor=(?:\"[^\"]*\"|'[^']*')|\{%\s*for\b[^%]*%\}|\{\{#each\b[^}]*\}\}",
-                re.I,
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            # MathML and SVG path math.
-            "scientific": re.compile(
-                r'<(?:math|mfrac|mi|mo|svg|canvas|path|circle|rect|polygon|polyline)(?=[ \t\n\r\f/>])|\bd=(?:"[MmLlHhVvCcSsQqTtAaZz0-9\s,.-]+"|\'[MmLlHhVvCcSsQqTtAaZz0-9\s,.-]+\')',
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Extreme logic heat: heavy inline styles and JS pollution.
-            # BUG FIX: `style="[^"]*;"` required a literal trailing `;`
-            # immediately before the closing quote. CSS allows omitting the
-            # last declaration's semicolon, and most real inline styles
-            # (hand-written or minified) don't carry one -- confirmed
-            # `style="color:red"` and `style="color:red;font-size:12px"`
-            # (multi-declaration, no trailing `;`) never matched under the
-            # old pattern. Dropped the semicolon requirement; presence of
-            # any inline style attribute is the actual intent here.
-            "reflection_metaprogramming": re.compile(
-                r"style=(?:\"[^\"]*\"|'[^']*')|\bon[a-z]+=(?:\"[^\"]*\"|'[^']*')", re.I
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(
-                r"<script\s+type=(?:\"(?:importmap|module)\"|'(?:importmap|module)')|<link\s+(?:rel=(?:\"stylesheet\"|'stylesheet')|rev=(?:\"[^\"]*\"|'[^']*'))",
-                re.I,
-            ),
-            "_dependency_capture": re.compile(
-                r'<(?:script(?=[ \t\n\r\f/>])[^>]*?\bsrc|link(?=[ \t\n\r\f/>])[^>]*?\bhref)[ \t\n\r\f]*=[ \t\n\r\f]*(?:"([^"]*)"|\'([^\']*)\'|([^ \t\n\r\f>"\']+))',
-                re.IGNORECASE,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"<meta\s+name=(?:\"(?:author|creator|publisher)\"|'(?:author|creator|publisher)')\s+content=(?:\"([^\"]+)\"|'([^']+)')|<link\s+rev=(?:\"made\"|'made')\s+href=(?:\"mailto:[^\"]+\"|'mailto:[^']+')",
-                re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|RFC|W3C|CERN|TBL)[^\]]{0,300}\]", re.I
-            ),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            # Back-end template engine hydration.
-            "ssr_boundaries": re.compile(
-                r"<\?php|<%|<%=|\{\{\s*[^}]+\s*\}\}|\{%\s*[^%]+\s*%\}|\b(?:data-reactroot|data-server-rendered|ng-version|nuxt-ssr)=[\"'][^\"']*[\"']",
-                re.I,
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # Declarative event dispatchers.
-            "events": re.compile(
-                r"\bhx-trigger=[\"'][^\"']*[\"']|@[a-z]+=[\"'][^\"']*[\"']|v-on:[a-z]+=[\"'][^\"']*[\"']|\([a-z]+\)=[\"'][^\"']*[\"']",
-                re.I,
-            ),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # BUG FIX: trailing `\b` right after the closing `"` -- same
-            # shared-boundary trap as safety/concurrency above (the char
-            # after a closing attribute quote is never a word char), so
-            # this never matched at all. Self-delimiting on the quote.
-            "dependency_injection": re.compile(r"<script\s+type=[\"']importmap[\"']", re.I),
-            # 34. macros (Preprocessor Directives / Macros)
-            # Server Side Includes (SSI).
-            "macros": re.compile(r"<!--#\s*(?:include|exec|echo|config|if|else|endif)\b", re.I),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Fragment identifiers and original name pointers.
-            "pointers": None,
-            # 36. memory_alloc
-            "memory_alloc": None,
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            # Professional analytics trackers.
-            "telemetry": re.compile(
-                r"<script[^>]*src=[\"'][^\"']*(?:analytics|gtag|gtm|segment|plausible|mixpanel)[^\"']*[\"']|\bdata-layer\b|\bnavigator\.sendBeacon\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            # Ad-hoc debug statements in scripts.
-            "debug_prints": re.compile(
-                r"\b(?:document\.write|alert|confirm|prompt|console\.(?:log|error|warn|dir|trace|info))\s*\(",
-                re.I,
-            ),
-            # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": None,
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(?:process\.exit|history\.back|window\.close)\s*\(", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(?:setTimeout|setInterval)\s*\(", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": None,
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": None,
-            # 45. immutability_locks (Immutability Constraints)
-            # BUG FIX: `aria-disabled="true"` ended on `"`, inside the same
-            # shared trailing-`\b` trap as safety/concurrency above. It
-            # happened to still match in practice only because "disabled" is
-            # a substring of "aria-disabled" and self-heals via the bare
-            # `disabled` alternative (matching regardless of the actual
-            # true/false value, which was never the intent) -- pulled out so
-            # the match is for the right reason.
-            "immutability_locks": re.compile(r"\b(?:readonly|disabled|inert)\b|aria-disabled=[\"']true[\"']", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(
-                r'\b(?:removeEventListener|clearInterval|clearTimeout|remove|innerHTML\s*=\s*[\'"][\'"])\s*\(',
-                re.I,
-            ),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Declarative and Shadow DOM boundaries.
-            "encapsulation": re.compile(r"<(?:template|shadowrootmode|slot)\b", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            # Event sinks waiting for state broadcast.
-            "listeners": re.compile(r"\bhx-trigger|v-on:|@[a-z]+=|addEventListener|on[a-z]+=", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(?:data-skip|data-ignore|mock-data|test-skip)\b", re.I),
-        },
-    },
-    "css": {
-        "_meta": {
-            "target_version": "Modern CSS (2025 Baseline) / Native Nesting / Container Queries",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard stylesheets, preprocessors (Sass/Less), and PostCSS files.
-        "extensions": [".css", ".scss", ".sass", ".less", ".styl", ".pcss"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: CSS rarely uses extensionless configurations.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: CSS linting, PostCSS, and utility framework configurations acting as disambiguation anchors.
-        "discriminators": [
-            ".css",
-            "postcss.config.js",
-            "tailwind.config.js",
-            ".stylelintrc",
-            ".stylelintignore",
-        ],
-        # EXECUTION SIGNATURES: CSS is a declarative stylesheet language; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: Uses '/*' and '*/' for blocks; preprocessors add '//' for lines.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical gating. Includes Container/Media queries and logic-gating pseudo-selectors.
-            # BUG FIX: all 4 at-rule alternatives start with `@` (non-word),
-            # so the shared leading \b could only fire when a word char
-            # immediately preceded the `@` -- never true for how at-rules
-            # are actually written (preceded by whitespace or a line
-            # start). None of these ever matched at all.
-            "branch": re.compile(
-                r"@media\b|@supports\b|@container\b|@starting-style\b|:(?:has|is|where|not)\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Signatures defining input coupling. Bounded to prevent ReDoS on massive calculations.
-            # BUG FIX (Rule 11): `[^)]*` is a flat negated class -- can't
-            # represent even one level of nesting. Modern CSS math functions
-            # nest constantly (`calc(var(--x) + 1px)`, `min(sin(45deg), .5)`)
-            # -- confirmed the old pattern truncated at the first inner `)`,
-            # matching only `calc(var(--x)` instead of the full call.
-            # Upgraded to the one-level-nesting bounded form (the two
-            # alternatives never match overlapping text, so it stays linear).
-            "args": re.compile(
-                r"\b(?:calc|clamp|min|max|var|env|url|rgba?|hsla?|lch|oklch|color-mix|light-dark)"
-                r"\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)",
-                re.I,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: Access modifiers (none in CSS) and !important (freeze_hits).
-            # BUG FIX: all 8 at-rule alternatives are `@`-prefixed -- same
-            # leading-\b bug as branch above. None ever matched.
-            "structural_boundaries": re.compile(
-                r"@layer\b|@scope\b|@property\b|@font-face\b|@keyframes\b|@page\b|@charset\b|@namespace\b",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks (Selectors). EXCLUDES classes/IDs to avoid False Positives.
-            "func_start": re.compile(
-                r"^[ \t]*(@(?:media|supports|container|layer|keyframes|-webkit-keyframes)\b)(?=[^{]*\{)",
-                re.M | re.I,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Defines discrete visual entities via Class and ID selectors.
-            "class_start": re.compile(
-                r"(?<!\*[ \t\n])(?<!\*)(?<![\"'\\])(\.(?:[a-zA-Z_\-]|\\(?:[0-9a-fA-F]{1,6}\s?|[^0-9a-fA-F\n\r\t\f]))(?:[^\s{>+~:,. \"\'\[\]\(\)\;\\]|\\.)*|\#(?:[a-zA-Z_\-]|\\(?:[0-9a-fA-F]{1,6}\s?|[^0-9a-fA-F\n\r\t\f]))(?:[^\s{>+~:,. \"\'\[\]\(\)\;\\]|\\.)*)(?=[^{};]*\{)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Defensive fallbacks and mathematical clamps.
-            "safety": re.compile(
-                r"@supports\b|\bvar\([^,]+,\s*(?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)|\b(?:minmax|clamp)\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)|\bcontain\s*:\s*(?:strict|content|paint|layout)\b",
-                re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Universal selectors and high-specificity ID overrides.
-            "safety_bypasses": re.compile(r"^[ \t]*\*|^[ \t]*#[\w-]+\s*(?:[:.[>+~][^{;]*)?\{", re.M | re.I),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Extreme tech debt and legacy engine thrashing.
-            "high_risk_execution": re.compile(r"\b(?:expression|behavior|-ms-filter)\b"),
-            # 9. io (I/O & Network Boundaries)
-            # =====================================================================
-            # THE FIX: Prevent False I/O Latency Flags.
-            # HISTORICAL CONTEXT FOR FUTURE LLMS: CSS is a declarative language.
-            # Using `url()` or `@import` fetches a visual asset during browser paint;
-            # it does NOT block a computational thread to read from a database or
-            # write to a file system. If given a regex, the engine will hallucinate
-            # severe I/O bottlenecks on standard stylesheets. Must remain `None`.
-            # =====================================================================
-            "io": None,
-            # 10. api (Public Surface Area)
-            # Design Tokens and global properties exposed for script/component consumption.
-            "api": re.compile(r":root\b|@property\b|--[a-zA-Z0-9_-]+\s*:|::part\s*\([^)]*\)", re.I),
-            # 11. flux (State Mutation)
-            # =====================================================================
-            # THE FIX: Prevent 'Declarative Hallucination' of State Flux.
-            # HISTORICAL CONTEXT FOR FUTURE LLMS: Defining a CSS custom property
-            # (`--color: red;`) is a static declaration, not a sequential state
-            # mutation (like `x = x + 1` in Turing-complete languages). Treating it
-            # as flux causes stylesheets to mathematically outrank complex controllers
-            # in volatility. Must remain `None`.
-            # =====================================================================
-            "state_mutation": None,
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out structural rules.
-            "dead_code": re.compile(
-                r"/\*[ \t]*(?:@media|@container|@supports|@keyframes|\.[a-zA-Z][\w-]*|#[a-zA-Z][\w-]*)\b"
-                r"|/\*[ \t]*[a-zA-Z][\w-]*[ \t]*\{",
-                re.I,
-            ),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(
-                r"/\*\*\s*|/\*\s*@(?:param|return|author|example|prop|define|theme)",
-                re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(r"\[[ \t]*data-(?:testid|cy|test|test-id|qa)[ \t]*[=\]]", re.I),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # Logic executing concurrently on the GPU.
-            "concurrency": None,
-            # 16. ui_framework (UI / View Components)
-            # Density of layout primitives and Tailwind utilities.
-            "ui_framework": re.compile(
-                r"\b(?:display:\s*flex|display:\s*grid|justify-content|align-items|gap|grid-template-columns|absolute|relative)\b|@apply\b",
-                re.I,
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            # Native CSS Nesting (&).
-            "closures": re.compile(r"(?:^[ \t]*|\s+|,)&\s*(?:[:.\[>+~][^{;]*)?\{", re.M),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(r"^[ \t]*(?::root|html|body|\*)\s*(?:{[^}]*}|[,{])", re.M | re.I),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions
-            "comprehensions": None,
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(
-                r"\b(?:sin|cos|tan|asin|acos|atan|atan2|hypot|abs|sign|mod|rem|round|pow|sqrt|exp|log)"
-                r"\s*\((?:[^()]|\([^()]*\))*\)",
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Catastrophic specificity graphs and recursively nested logic.
-            "reflection_metaprogramming": re.compile(
-                r"&(?:\s*&)+|:(?:has|is|not)\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*:(?:has|is|not)\s*\(|calc\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*calc\s*\(",
-                re.I,
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"@import\b", re.I),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*@import[ \t\n]+(?:url\(\s*['\"]?|['\"])([^'\"\)\s;]+)",
-                re.I | re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"/\*\s*(?:@author|Author:|Created by|Maintainer|Copyright):?\s+([^*]*)\*/",
-                re.I | re.S,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX: confirmed O(n^2) ReDoS -- the SPEC alternative's
-            # unbounded `\d+` sits directly adjacent to the also-unbounded
-            # `[^\]]*`, whose charset fully overlaps digits. Measured ~4x
-            # runtime per size doubling on "[SPEC-" + digits with no
-            # closing bracket. Bounded `\d+` to `\d{1,10}` (no realistic
-            # ticket ID needs more) and `[^\]]*` to `{0,300}`.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]|\bfigma\.com/file/", re.I
-            ),
-            # 31. ssr_boundaries
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Modern Scroll-Driven animation timelines.
-            "events": re.compile(
-                r"@(?:scroll-timeline|view-timeline)|animation-timeline:\s*(?:scroll|view)\([^)]*\)",
-                re.I,
-            ),
-            # 33. dependency_injection
-            "dependency_injection": None,
-            # 34. macros
-            "macros": None,
-            # 35. pointers
-            "pointers": None,
-            # 36. memory_alloc
-            "memory_alloc": None,
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry
-            "telemetry": None,
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            # =====================================================================
-            # THE FIX: Prevent String Literal Hallucinations.
-            # HISTORICAL CONTEXT FOR FUTURE LLMS: CSS does not possess a runtime
-            # console or a `console.log` function. If a regex here triggers, it is
-            # guaranteed to be a false positive hallucinating on a string literal
-            # (e.g., `content: "console.log";`). Must remain `None`.
-            # =====================================================================
-            "debug_prints": None,
-            # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": None,
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # Execution resets.
-            "panics_and_aborts": re.compile(r"\b(unset|initial|revert|revert-layer)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(?:transition-delay|animation-delay)\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": None,
-            # 44. sync_locks (Resource Management & Stability)
-            # Coordinating cascade layers and containment.
-            "sync_locks": None,
-            # 45. immutability_locks (Immutability Constraints)
-            # Explicit locks on data mutation.
-            "immutability_locks": re.compile(r"!important\b|\bconstant\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # =====================================================================
-            # THE FIX: Prevent False Memory Management Flags.
-            # HISTORICAL CONTEXT FOR FUTURE LLMS: In CSS, `clear: both;` is a
-            # layout formatting property used to push elements below floats. It
-            # does absolutely nothing to destroy variables, clear cache, or free up
-            # RAM. Giving this a regex tricks the physics engine into thinking the
-            # stylesheet is performing active memory management. Must remain `None`.
-            # =====================================================================
-            "cleanup": None,
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Scoping and part boundaries.
-            "encapsulation": re.compile(r"@scope\b|::part|::slotted", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            # Subscribing to external timelines.
-            "listeners": re.compile(r"animation-timeline|@scroll-timeline", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(?:data-skip|data-ignore)\b", re.I),
-        },
-    },
-    "fortran": {
-        "_meta": {
-            "target_version": "Fortran 2018 (Backwards compatible with Legacy Fortran 77)",
-            "last_updated": "2026-03-01",
-            "blueprint_version": "v7.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard fixed-format, free-format, legacy dialects, and preprocessor files.
-        "extensions": [
-            ".f",
-            ".f90",
-            ".f77",
-            ".for",
-            ".fpp",
-            ".f95",
-            ".f03",
-            ".f08",
-            ".f18",
-            ".ftn",
-            ".inc",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Fortran rarely uses extensionless configurations.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests (fpm), and build files to resolve ambiguous files like .inc.
-        "discriminators": [
-            ".f90",
-            ".f77",
-            ".f",
-            "fpm.toml",
-            "CMakeLists.txt",
-            "Makefile",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for modern Fortran "scripting" wrappers.
-        "shebangs": ["fortran", "f90", "f77", "gfortran"],
-        # UPGRADED: Maps to Family 7 (The Positional Ancients)
-        # Rationale: Fixed-format requires Column 1 monitoring ('C' or '*'); Free-format uses '!'.
-        "lexical_family": "positional_anchored",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Control flow that forces the CPU to make a decision or jump. High density creates jagged shapes.
-            # Includes standard conditional blocks, legacy computed GO TO, and modern SELECT TYPE / SELECT RANK.
-            "branch": re.compile(
-                r"\b(IF|ELSEIF|ELSE|DO|WHILE|SELECT\s+CASE|CASE|DEFAULT|WHERE|ELSEWHERE|GO\s*TO|GOTO|SELECT\s+TYPE|SELECT\s+RANK|EXIT|CYCLE)\b|\.AND\.|\.OR\.",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Signatures defining input parameters. Drives the physical size/mass of the function.
-            # Upgraded to capture both the declaration block and explicit INTENT binding markers
-            # that act as the true coupling mass in legacy Fortran, as well as VALUE and OPTIONAL.
-            # #1209: name and parameter-list span split into their own
-            # capture groups (was only reachable via group(0), the whole
-            # match including the "SUBROUTINE"/"FUNCTION"/"ENTRY" prefix and
-            # name) so detector.py's counter isolates just "(...)" instead of
-            # whitespace-splitting the prefix text -- the same overcount
-            # shape #1199 fixed elsewhere. The args group's trailing empty
-            # alternative (`|`) makes it participate even when the parens are
-            # genuinely absent (a bare `SUBROUTINE Foo` with zero arguments
-            # is valid Fortran with no "()" at all) -- without it, a
-            # zero-arg bare subroutine's ONLY participating group would be
-            # the name itself, which the existing whitespace-split fallback
-            # would then miscount as 1 argument instead of 0. The bare
-            # INTENT/VALUE/OPTIONAL alternative is left alone -- it's a
-            # signal for keyword usage inside a parameter declaration line,
-            # not a per-function signature match, and (per func_start's own
-            # anchoring at the declaration line) is never actually the FIRST
-            # match within a sliced function block in practice.
-            "args": re.compile(
-                r"\b(?:SUBROUTINE|FUNCTION|ENTRY)\s+([A-Za-z_]\w*)\s*(\([^)]*\)|)|\b(?:INTENT\s*\(\s*(?:IN|OUT|INOUT)\s*\)|VALUE\b|OPTIONAL\b)",
-                re.I,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries defining straight-line execution and data types.
-            # CRITICAL GUARDRAIL: Access modifiers (PUBLIC, PRIVATE, PROTECTED) do not belong here. Explicitly omitted to prevent the Structural Complexity Inflation Bug
-            "structural_boundaries": re.compile(
-                r"\b(PROGRAM|MODULE|SUBMODULE|BLOCK\s+DATA|CONTAINS|END\s+(?:PROGRAM|MODULE|SUBROUTINE|FUNCTION|BLOCK|TYPE|ASSOCIATE)|RETURN|IMPLICIT|USE|ASSOCIATE|BLOCK|INTEGER|REAL|COMPLEX|LOGICAL|CHARACTER|DOUBLE\s+PRECISION|CLASS)\b",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # =====================================================================
-            # [ CONTEXT: FORTRAN FUNCTION AST EXTRACTOR & REDOS SHIELD]
-            # PURPOSE: Anchors executable logic blocks (Program, Subroutine, Function, Entry)
-            #   across 60+ years of Fortran dialects (F77 through F2018).
-            # VULNERABILITY: Fortran allows extreme signature variability: prefix stacking
-            #   (PURE RECURSIVE), legacy memory sizing (REAL*8), modern kinds (INTEGER(KIND=4)),
-            #   derived types (TYPE(MyStruct)), object-oriented classes (CLASS(Obj)), and
-            #   trailing attributes (RESULT, BIND(C)). Using unbounded `\s+` across these
-            #   permutations causes Catastrophic Backtracking (ReDoS) on large legacy files.
-            # THE "IRON WALL" FIX:
-            #   1. Strict `[ \t\n]` bounds prevent horizontal/vertical bleeding.
-            #   2. Negative lookahead `(?!\bEND\b)` prevents ghosting `END SUBROUTINE FOO`.
-            #   3. Clamped quantifiers `{0,5}` on prefixes stop runaway recursion.
-            #   4. Added `CLASS` to the base types to support modern Object-Oriented Fortran.
-            #   5. Positive lookaheads on the tail `(?=...)` safely handle line continuations (`&`)
-            #      and F90 comments (`!`) without consuming them into the capture group.
-            # =====================================================================
-            "func_start": re.compile(
-                # 1. THE HORIZONTAL ANCHOR & END SHIELD
-                # Stops O(N^2) vertical spirals. Explicitly blocks "END SUBROUTINE FOO" from triggering.
-                r"^[ \t]*(?!\bEND\b)"
-                # =====================================================================
-                # [ THE VERTICAL LEGACY SHIELD ] (Hard-learned from Pathological Fuzzer):
-                # Fortran allows extreme prefix stacking (e.g., `PURE RECURSIVE REAL*8`).
-                # We previously restricted this to `[ \t]+` to avoid newline spirals.
-                # FIX: Fortran developers frequently use line continuations (`&`) or split types.
-                # We carefully upgraded `[ \t]` to `[ \t\n]` inside the rigidly bounded
-                # `{0,5}` modifier limits so the engine can safely leap over vertical lines
-                # without resorting to unbounded `\s+` which triggers ReDoS.
-                # =====================================================================
-                # 2. THE PREFIX STACK
-                # F95/F2008 allows stacking prefixes. Capped at {0,5} to prevent ReDoS.
-                r"(?:(?:PURE|ELEMENTAL|RECURSIVE|IMPURE|MODULE)[ \t\n]+){0,5}"
-                # 3. THE RETURN TYPE
-                # Optional for Subroutines/Programs, mandatory for explicit Functions.
-                r"(?:"
-                # 3a. Base Types (Primitives + Derived + Classes + Legacy + Complex)
-                r"(?:INTEGER|REAL|COMPLEX|LOGICAL|CHARACTER|TYPE|CLASS|DOUBLE[ \t\n]+PRECISION|DOUBLE[ \t\n]+COMPLEX)"
-                # 3b. Legacy Sizing (*8) or Modern Kinds/Lengths ((KIND=4, LEN=*)) and Attributes.
-                # #1531: this lazy class includes letters/newlines with no length cap, so on a
-                # body-less type declaration line immediately preceding an unrelated later
-                # SUBROUTINE/FUNCTION (e.g. `CHARACTER(len=*), INTENT(IN) :: message` followed a
-                # few lines later by `END SUBROUTINE wrf_message`), backtracking let it swallow
-                # the ENTIRE intervening subroutine body -- including its own trailing
-                # `END SUBROUTINE <name>` -- and match keyword+identifier there instead,
-                # producing a phantom duplicate whose start_line/args belonged to a type
-                # declaration, not any real definition. `{0,40}` caps the class at comfortably
-                # more than any real single/continued attribute list needs (confirmed against
-                # language-crucible's fortran corpus) while landing well short of the ~95+ chars
-                # needed to reach a phantom match. A per-character `(?!\bEND\b)` exclusion was
-                # tried first and is more semantically precise, but disables the `re` module's
-                # fast path for a plain bounded character class -- confirmed via direct timing
-                # (0.01s here vs. ~13s with the lookahead) on a payload of thousands of repeated
-                # type-declaration lines with one distant END, a real ReDoS regression on a
-                # non-pathological, plausible shape. A numeric bound has none of that risk.
-                r"(?:[A-Za-z0-9_ \t&*,()=:]|&\s*\n){0,40}?"
-                r")?"
-                # 4. THE EXECUTION BLOCK KEYWORD
-                # Supports multi-line continuation `&` inside the spaces
-                r"(?:FUNCTION|SUBROUTINE|PROGRAM|ENTRY)[ \t\n&+]+"
-                # 5. THE IDENTIFIER CAPTURE (FUNCTION IDENTIFIER - GROUP 1)
-                # Extracts the actual block name.
-                r"([A-Za-z_]\w*)"
-                # 6. THE TRAILING ANCHOR (Lookahead)
-                # Confirms the boundary without consuming it. Handles opening parens `(`, comments `!`,
-                # line continuations `&`, EOF `$`, or explicit F2003+ modifiers (RESULT, BIND).
-                r"(?=[ \t\n]*(?:[\(!&]|$|\bRESULT\b|\bBIND\b))",
-                re.I | re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Defines object-oriented and structural boundaries. Drives API Surface Area math.
-            # Maps to Fortran MODULEs, SUBMODULEs, INTERFACEs, and structural TYPE definitions (Fortran's struct/class equivalent).
-            # Upgraded to handle SUBMODULE (parent) child syntax and trailing comments.
-            # #1264: `(?!PROCEDURE\b)` excludes `MODULE PROCEDURE name1, name2` --
-            # a separate-module-procedure implementation stub, not a `MODULE
-            # <name>` declaration -- from being misread as a module named
-            # "PROCEDURE". Invisible until #1264 wired class_start into the
-            # named-entity extractor; previously class_start only fed a
-            # numeric signal count that never surfaced the bad name.
-            "class_start": re.compile(
-                r"^[ \t]*(?!\bEND\b)(?:(?:MODULE|BLOCK\s+DATA|INTERFACE)\s+|SUBMODULE\s*(?:\([^)]*\))?\s+)(?!PROCEDURE\b)([A-Za-z_]\w*)|"
-                r"^[ \t]*(?!\bEND\b)TYPE(?:[ \t]*::\s*|,[^:]*::\s*|\s+)([A-Za-z_]\w*)(?=[ \t]*(?:!|\n|$))",
-                re.I | re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming)
-            # Fortification markers establishing strict boundaries: explicit typing (`IMPLICIT NONE`),
-            # explicit intent (`INTENT(IN)`), bounds safety (`ALLOCATABLE`), and fatal assertions (`ERROR STOP`).
-            # BUG FIX: the shared trailing `\b` broke the INTENT(...) alternative,
-            # which ends in a literal `)` (non-word) -- `\b` right after can only
-            # fire if the very next char is a word character, never true for the
-            # realistic form ("INTENT(IN) :: x", followed by whitespace). INTENT(...)
-            # never actually matched in practice. Split it out of the shared group.
-            "safety": re.compile(
-                r"\bIMPLICIT\s+NONE\b|\bINTENT\s*\(\s*(?:IN|OUT|INOUT)\s*\)|"
-                r"\b(?:ALLOCATABLE|SAVE|PARAMETER|VALUE|ERROR\s+STOP|ASYNCHRONOUS|ASSOCIATED|ALLOCATED|PRESENT)\b",
-                re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses)
-            # Actively bypasses memory safety and compiler predictability.
-            # Legacy memory sharing (`COMMON`, `EQUIVALENCE`), dangerous implicit typing rules, and unprotected legacy array `DIMENSION` bounds.
-            "safety_bypasses": re.compile(
-                r"\b(COMMON|EQUIVALENCE|IMPLICIT\s+(?:REAL|INTEGER|CHARACTER|COMPLEX|LOGICAL|DOUBLE))\b",
-                re.I,
-            ),
-            # 8. danger (High-Risk Execution)
-            # Extreme tech debt, unconstrained legacy jumps (`GO TO`, `ASSIGN`), and raw terminal output.
-            # CRITICAL GUARDRAIL: Terminal prints (`PRINT`, `WRITE(*,...)`) strictly routed here, away from `io` and `telemetry`.
-            "high_risk_execution": re.compile(r"\b(GO\s*TO|GOTO|ASSIGN|RETURN\s+\d+)\b", re.I),
-            # 9. io (I/O & Network Boundaries)
-            # File operations, hardware inquiries, and disk boundaries.
-            # Negatively asserts `*` or `6` to ensure raw standard-out terminal prints do not trigger IO.
-            # BUG FIX: the shared trailing `\b` broke the WRITE alternative, which
-            # ends in a literal comma (non-word) -- `\b` right after can only fire
-            # if the very next char is a word character, never true for the
-            # overwhelmingly common realistic forms ("WRITE(10,*)", "WRITE(10,
-            # '(I5)')", "WRITE(10, x)" -- all followed by `*`, `'`, or whitespace).
-            # This made the file-unit-WRITE detection almost never fire in
-            # practice. Split WRITE out of the shared-boundary group; it's already
-            # unambiguously delimited by its own literal `(` and trailing `,`.
-            "io": re.compile(
-                r"\b(?:OPEN|CLOSE|READ|INQUIRE|REWIND|BACKSPACE|ENDFILE|FLUSH|FORMAT)\b|"
-                r"\bWRITE\s*\(\s*(?!\*|6\b)[^,]+,",
-                re.I,
-            ),
-            # 10. api (Public Surface Area)
-            # Code exposed to the outside world. Visibility exports (`PUBLIC`) and FFI bridges (`BIND(C)`).
-            "api": re.compile(
-                r"\b(PUBLIC|BIND\s*\(\s*C\s*\))\b|"
-                r"^[ \t]*(?:(?:PURE|ELEMENTAL|RECURSIVE)[ \t]+){0,5}(?:TYPE\s*\([^)]*\)[ \t]+)?(?:SUBROUTINE|FUNCTION)\s+[A-Za-z_]\w*",
-                re.M | re.I,
-            ),
-            # 11. flux (State Mutation)
-            # Mutation of state. Variable assignments and standard memory manipulations.
-            # Captures standard `=` (avoiding `==`, `<=`, etc.)
-            # TWO FIXES:
-            # 1. QUADRATIC BLOWUP: the unbounded `[A-Za-z0-9_%()]+` (no \b
-            #    anchor) got retried at every position in a long `=`-less
-            #    line, backtracking O(n) per position for O(n^2) total.
-            #    Bounded to {0,199}; real Fortran variable/array-element
-            #    expressions (even with subscripts) don't get remotely
-            #    that long.
-            # 2. KIND=/LEN=/etc EXCLUSION WAS LEAKY: the negative lookahead
-            #    only blocks a match starting exactly at "KIND", not one
-            #    starting mid-word (e.g. "KIND = 5" still matched "IND = "
-            #    starting at position 1, since \bKIND doesn't apply there).
-            #    Added a real `\b` + explicit `[A-Za-z_]` first-char
-            #    requirement so the match can only start at a genuine word
-            #    boundary, where the exclusion lookahead actually applies.
-            "state_mutation": re.compile(
-                r"(?!\b(?:KIND|LEN|UNIT|FMT|FILE|STATUS|ACTION)\s*=)\b[A-Za-z_][A-Za-z0-9_%\(\)]{0,199}[ \t]*=[^=>]",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out logic, commented-out structural code. Supports both Fortran 90+ (`!`) and legacy F77 (`C`/`*` in column 1).
-            "dead_code": re.compile(r"(?i)(?:!|^[cC*])[ \t]*(?:if|do|where|call|function|subroutine|allocate)\b"),
-            # 13. doc (Structured Documentation)
-            # Documentation meant to be parsed by generators (Doxygen style `!>`, `!<`, or `! @`).
-            "doc": re.compile(
-                r"^[Cc*!dD][ \t]*[@><\\]|^[ \t]*![ \t]*(?:Author|Description|Param|Return):",
-                re.I | re.M,
-            ),
-            # 14. test (Testing & Assertions)
-            # Test frameworks like pFUnit, generic assertions, and verification routines.
-            # BUG FIX: all 5 pFUnit alternatives are `@`-prefixed -- the
-            # leading \b could only fire when a word char immediately
-            # preceded the `@`, never true for how these annotations are
-            # actually written. None ever matched at all.
-            "test": re.compile(
-                r"@test\b|@assertEqual\b|@assertTrue\b|@assertFalse\b|@assertException\b|call[ \t]+assert_[a-z_]+",
-                re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # Fortran 2008/2018 Coarrays (distributed shared memory programming natively in the language) and OpenMP pragmas.
-            "concurrency": re.compile(
-                r"\b(COARRAY|SYNC\s+ALL|SYNC\s+IMAGES|SYNC\s+MEMORY|CRITICAL|LOCK|UNLOCK|FAIL\s+IMAGE|FORM\s+TEAM|MPI_[A-Za-z_]+)\b|!\$(?:OMP|ACC)\b",
-                re.I,
-            ),
-            # 16. ui_framework (UI / View Components)
-            # Fortran handles math and background computing. No native UI frameworks exist.
-            "ui_framework": None,
-            # 17. closures (Closures / Anonymous Functions)
-            # Fortran does not natively support closures, lambdas, or anonymous functions.
-            "closures": None,
-            # 18. globals (Global / Shared State)
-            # Persistent application state across scopes. F77 `COMMON` blocks, `SAVE` variables, and `EXTERNAL` procedures.
-            "globals": re.compile(r"\b(COMMON|SAVE|EXTERNAL)\b", re.I),
-            # 19. decorators (Decorators / Annotations)
-            # Fortran does not have Python-style decorators, but compiler directives heavily modify block execution behaviors.
-            # BUG FIX: the shared trailing `\b` after the `$`-ending alternatives
-            # (!DIR$/cDEC$) is a no-op in the realistic form -- real directives are
-            # always written with a space after the `$` ("!DIR$ SIMD"), and `\b`
-            # can never fire between two non-word characters. Only the OMP/ACC
-            # alternatives (which end in a word character) legitimately need it.
-            "decorators": re.compile(r"^[ \t]*(?:!DIR\$|cDEC\$|!\$OMP\b|!\$ACC\b)", re.I | re.M),
-            # 20. generics (Generics / Type Parameters)
-            # Fortran Generic Interfaces overriding operators/assignments, and Parameterized Derived Types (PDTs).
-            # CRITICAL GUARDRAIL: Safely bounds `<[^>]*>` and parentheses `\([^)]*\)` to avoid ReDoS.
-            # BUG FIX: the shared trailing `\b` applied to every alternative broke
-            # 3 of 5 -- GENERIC::, TYPE name(...), and EXTENDS(...) all end in a
-            # non-word character (`:` or `)`), so a `\b` immediately after can only
-            # fire if the very next character is a word character, never true for
-            # realistic code ("GENERIC :: foo", "TYPE point(k, n)", "EXTENDS(base)"
-            # followed by whitespace/newline/EOF). Moved the boundary onto only the
-            # two alternatives that actually end in a word character.
-            "generics": re.compile(
-                r"\b(?:INTERFACE\s+ASSIGNMENT\b|INTERFACE\s+OPERATOR\b|GENERIC\s*::|"
-                r"TYPE\s+[A-Za-z_]\w*\s*\([^)]*\)|EXTENDS\s*\([^)]*\))",
-                re.I,
-            ),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Modern Fortran implicit loops, array constructors (`[...]`, `(/.../)`), and parallel execution syntax (`DO CONCURRENT`, `FORALL`).
-            "comprehensions": re.compile(r"\b(?:FORALL|DO\s+CONCURRENT)\b|\[[^\]]+\]|\(\/[^/]+\/\)", re.I),
-            # 22. scientific (Numerical / Compute Libraries)
-            # Native Fortran superpower: Vectorized matrix operations, tensor reductions, and strict scientific primitive typing.
-            "scientific": re.compile(
-                r"\b(MATMUL|DOT_PRODUCT|TRANSPOSE|SUM|PRODUCT|MAXVAL|MINVAL|MAXLOC|MINLOC|RESHAPE|SQRT|EXP|LOG|LOG10|SIN|COS|TAN|ASIN|ACOS|ATAN|ATAN2|SINH|COSH|TANH|KIND=|CEILING|FLOOR|MOD|MODULO)\b",
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # High Cognitive Load: Memory aliasing (`EQUIVALENCE`), multiple entry points (`ENTRY`), Object-Oriented runtime dispatch (`CLASS DEFAULT`, `%`), and unstructured `NAMELIST` loading.
-            "reflection_metaprogramming": re.compile(
-                r"\b(EQUIVALENCE|ENTRY|SELECT\s+TYPE|CLASS\s+DEFAULT|NAMELIST|VOLATILE)\b",
-                re.I,
-            ),
-            # 24. import (Dependency Inclusions)
-            # Dependency linkage across Fortran modules and files.
-            "import": re.compile(r"\b(USE|INCLUDE|IMPORT)\b", re.I),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:USE(?:\s+|\s*(?:,[^:]*)?::\s*)([a-zA-Z0-9_]+)|INCLUDE[ \t\n]*['\"]([^'\"]+)['\"]|SUBMODULE\s*\(\s*([^):]+)[^)]*\))",
-                re.IGNORECASE | re.MULTILINE,
-            ),
-            # 25. ownership (Authorship Metadata)
-            # Identifying the developer, maintainer, or copyright holder natively.
-            "ownership": re.compile(
-                r"^[cCdD*!][ \t]*(?:Author|Created by|Maintainer|Developer):\s+(.*)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # Audit tags establishing traceability of intent back to physics papers or architectural specifications.
-            # CRITICAL: Removed (?i) to enforce strict uppercase [SPEC-XYZ] tags and prevent prose collisions.
-            "spec_exposure": re.compile(r"\[\s*(?:SPEC\s*-\s*\d+|AUDIT-[A-Z0-9_-]+)\s*\]"),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            # Fortran does not perform Server-Side Rendering.
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Fortran 2018 natively introduced Event-Driven programming primitives for Coarray synchronization.
-            "events": re.compile(r"\b(EVENT\s+POST|EVENT\s+WAIT|EVENT_QUERY)\b", re.I),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # Fortran handles linkages procedurally or via modules. No native DI containers or decorators exist.
-            "dependency_injection": None,
-            # Low-level systems language concepts mapped to Fortran paradigms.
-            # 34. macros (Preprocessor Directives / Macros)
-            # Fortran utilizes the standard C Preprocessor (cpp) allowing for structural `#define`, `#ifdef` pathing (e.g., `#ifdef MPI`).
-            "macros": re.compile(
-                r"^[ \t]*#(?:define|undef|if|ifdef|ifndef|elif|else|endif|include|pragma)\b",
-                re.M | re.I,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Explicit memory mapping. Includes native Fortran `POINTER` logic, assignments `=>`, and C-FFI pointer bridges (`C_PTR`).
-            "pointers": re.compile(r"(?i)\bpointer\b|[ \t]*=>[ \t]*"),
-            # 36. memory_alloc (Manual Memory Management)
-            # Dynamic memory allocation managed explicitly by the developer on the heap.
-            "memory_alloc": re.compile(r"\b(ALLOCATE|DEALLOCATE|MOVE_ALLOC|MALLOC|FREE)\b", re.I),
-            # 37. inline_asm (The Bare Metal)
-            # Fortran delegates assembly to standard C linkage. Inline ASM is explicitly not supported natively in Fortran code.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (The Structured Observers)
-            # CRITICAL GUARDRAIL: Isolates structured diagnostic output (custom Fortran loggers) away from raw terminal prints.
-            "telemetry": re.compile(
-                r"\b(?:call[ \t]+)?(?:log_info|log_error|log_warn|log_debug|logger%info|logger%error|logger%warn|logger%debug|flog)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            # Raw terminal output natively dumping to stdout.
-            "debug_prints": re.compile(r"\b(?:PRINT\b|WRITE\s*\(\s*(?:\*|6)\s*[,)])", re.I),
-            # # 40. explicit_casts (Explicit Type Casting)
-            # Forceful type coercion bypassing the safety engine. Strictly defining known Fortran intrinsic type conversion functions.
-            "explicit_casts": re.compile(r"(?i)\b(?:int|real|cmplx|dble|achar|char|iachar|ichar)[ \t]*\([^)]*\)"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # Hard execution destruction and unrecoverable exceptions.
-            "panics_and_aborts": re.compile(r"(?i)\b(?:stop|error[ \t]+stop|return)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            # Forcing threads to sleep.
-            "thread_sleeps": re.compile(r"(?i)\bcall[ \t]+(?:sleep|usleep)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            # Low-level byte manipulation utilizing Fortran's explicit intrinsic bitwise functions.
-            "bitwise_ops": re.compile(r"(?i)\b(?:iand|ior|ieor|not|ishft|ishftc|btest|ibset|ibclr|ibits)\b"),
-            # 44. sync_locks (Resource Management & Stability)
-            # Explicit coordination to prevent race conditions .
-            "sync_locks": re.compile(
-                r"(?i)\b(?:lock|unlock|critical|sync[ \t]+all|sync[ \t]+images|sync[ \t]+memory)\b"
-            ),
-            # 45. immutability_locks (Immutability Constraints)
-            # Explicit locking of data to prevent mutation .
-            # BUG FIX: the shared trailing `\b` broke the intent(...) alternative,
-            # which ends in a literal `)` (non-word) -- same defect class as the
-            # `safety` rule's INTENT(...) alternative above. Dropped the trailing
-            # boundary for it; `)` is already unambiguous.
-            "immutability_locks": re.compile(r"(?i)\bparameter\b|\bintent[ \t]*\([ \t]*in[ \t]*\)"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # Explicit destruction of state or closing of streams .
-            "cleanup": re.compile(r"(?i)\b(?:close|deallocate|nullify)\b"),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Logic hidden from view via visibility modifiers .
-            "encapsulation": re.compile(r"(?i)\bprivate\b"),
-            # 48. listeners (Event Listeners / Observers)
-            # Waiting to receive state from an external broadcast .
-            "listeners": None,
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # Framework code that explicitly bypasses verification.
-            "test_skip": None,
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Fortran Specifics) ---
-            "serialization_parsing": re.compile(r"(?i)\b(NAMELIST|READ\s*\(|WRITE\s*\(|FORMAT|OPEN\s*\()\b"),
-            "regex_execution": re.compile(
-                r"(?i)\b(SCAN|INDEX|VERIFY|ADJUSTL|ADJUSTR)\b"
-            ),  # Relies on intrinsic string processing
-            "time_date_logic": re.compile(r"(?i)\b(DATE_AND_TIME|SYSTEM_CLOCK|CPU_TIME)\b"),
-            # BUG FIX: the shared trailing `\b` made the `OMP_` prefix alternative
-            # unreachable -- `OMP_` ends in `_` (a word char), and real OpenMP
-            # runtime calls always continue with more word characters right after
-            # (`OMP_GET_THREAD_NUM`), so the boundary could never fire (both sides
-            # word chars). `OMP_` was clearly meant as a prefix match, not an
-            # exact-token match -- dropped the trailing boundary for it.
-            "ipc_rpc_bridges": re.compile(
-                r"(?i)\b(?:MPI_Init|MPI_Send|MPI_Recv|MPI_Bcast|EXECUTE_COMMAND_LINE)\b|\bOMP_"
-            ),
-        },
-    },
-    "assembly": {
-        "_meta": {
-            "target_version": "x86-64 (NASM/GAS) & ARMv8 (AArch64) - Backwards Compatible",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard assembly, GNU Assembler, NASM, MASM, and architecture-specific extensions.
-        "extensions": [
-            ".asm",
-            ".s",
-            ".S",
-            ".inc",
-            ".nasm",
-            ".s64",
-            ".masm",
-            ".arm",
-            ".a51",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Assembly is assembled directly to machine code; no extensionless exact configurations exist.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, linker scripts (.ld), and build systems acting as disambiguation anchors to resolve .inc or .s files.
-        "discriminators": [
-            ".asm",
-            ".s",
-            ".S",
-            ".c",
-            ".cpp",
-            ".ld",
-            "Makefile",
-            "CMakeLists.txt",
-        ],
-        # EXECUTION SIGNATURES: Assembly is compiled/assembled to binary; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: Uses unique line delimiters ';' (NASM/Intel) and '#' (GAS/ARM).
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES system exits/halts (bailout_hits).
-            "branch": re.compile(
-                r"\b(jmp|je|jne|jz|jnz|ja|jb|jl|jg|jge|jle|jae|jbe|call|ret|b|bl|bx|blr|cbz|cbnz|tbz|tbnz|beq|bne|loop)\b",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Assembly uses ABI registers for parameter coupling. Also covers the
-            # legacy 8/16-bit x86 register forms (al/ah/ax, etc.) and the r8/r9
-            # sub-register suffixes (r8d/r8w/r8b), since this language's own
-            # _meta declares it "Backwards Compatible" and real corpus code
-            # (e.g. 16-bit real-mode bootloaders) uses exactly these forms for
-            # register-coupling. (#856 follow-up) Previously `[er][89]` matched
-            # the nonexistent registers "e8"/"e9" while failing to match the
-            # real r8d/r9d/r8w/r9w/r8b/r9b forms, since the trailing `\b` never
-            # fires between two word characters (the digit and the size suffix).
-            "args": re.compile(
-                r"\b([er]di|[er]si|[er]dx|[er]cx|r[89][dwb]?|x[0-7]|w[0-7]|v[0-7]|xmm[0-7]|r[0-7]"
-                r"|a[xhl]|b[xhl]|c[xhl]|d[xhl]|si|di)\b",
-                re.I,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Data movement and arithmetic primitives. EXCLUDES: Linker visibility (api) and sections (globals).
-            "structural_boundaries": re.compile(
-                r"\b(mov(?:abs|[sz]x|[bwlq]|aps|ups|dqu)?|vmov[a-z]+|lea|ldr[s]?[bhw]?|str[bhw]?|push|pop|add|sub|inc|dec|mul|imul|div|idiv|nop|ldp|stp)\b",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Subroutine entry points. EXCLUDES data labels or local loop markers.
-            # The trailing negative lookahead is the generic-assembly counterpart to
-            # agc_assembly's "label must be followed by a real opcode" positive lookahead,
-            # inverted for the own-line-label convention this dialect uses: a label whose
-            # colon is followed (same line, or the very next line) only by a pure
-            # data-emission / location-counter directive (`.asciz`, `.byte`, `.org`,
-            # `.endobj`, NASM `db`/`resb`/`times`, ...) is a data object, not a subroutine
-            # entry -- e.g. cosmopolitan/ape.S's `ape.mbrpad:` / `.org 0x1b4`
-            # (assembly/function/existence/agree[gitgalaxy]_vs[ctags], the mirror of
-            # agc_assembly's own data-label win). Section/visibility/type/align directives
-            # are deliberately NOT in the list -- those legitimately sit between a real
-            # function's label and its first instruction.
-            "func_start": re.compile(
-                r"^[ \t]*(?!\.L|\.LC|\d|\.text|\.data|\.bss)([a-zA-Z_?@.][a-zA-Z0-9_.$?@]*)(?=[ \t]*:)"
-                r"(?![ \t]*:[ \t]*(?:\r?\n[ \t]*)?"
-                r"(?:\.(?:org|endobj|asciz|ascii|string|byte|hword|short|word|long|int|value"
-                r"|quad|octa|single|double|float|fill|space|skip|zero|incbin)"
-                r"|d[bwdq]|res[bwdq]|times)\b)",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Maps to assembler structure definition macros.
-            "class_start": re.compile(
-                r"^[ \t]*(?:(?:struc|STRUCT|\.struct)[ \t]+[a-zA-Z_?@.][a-zA-Z0-9_.$?@]*|[a-zA-Z_?@.][a-zA-Z0-9_.$?@]*[ \t]+(?:struc|STRUCT|\.struct))\b",
-                re.M | re.I,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Stack preservation and defensive frame setups.
-            "safety": re.compile(
-                r"\b(enter|leave|endbr64|paciasp|autiasp|bti|retab|\.align|\.p2align)\b|\b(?:stp|ldp)\s+x29,\s*x30",
-                re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Indirect jumps and hardware interrupt disabling.
-            "safety_bypasses": re.compile(
-                r"\b(?:jmp|call)\s+(?:\*|\[|[er]?[abcd]x|r\d+)\b|\bbr\s+[xw]\d+\b|\b(cli|msr\s+daifclr)\b",
-                re.I,
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # CPU halts and debug traps. EXCLUDES prints (Phase 5).
-            "high_risk_execution": re.compile(r"\b(hlt|int\s+3|brk|ud2|sys_exit|sys_kill)\b", re.I),
-            # 9. io (I/O & Network Boundaries)
-            # System calls and hardware I/O ports.
-            "io": re.compile(
-                r"\b(in|out|ins[bdw]|outs[bdw]|syscall|svc\b|int\s+0x80|sys_read|sys_open)\b",
-                re.I,
-            ),
-            # 10. api (Public Surface Area)
-            # Linker-visible global exports.
-            "api": re.compile(
-                r"^[ \t]*(?:\.global|\.globl|global|EXPORT|PUBLIC|EXTERN|IMPORT)\b",
-                re.M | re.I,
-            ),
-            # 11. flux (State Mutation)
-            # Explicit memory/register swaps and atomic increments.
-            "state_mutation": re.compile(r"\b(xchg|cmpxchg|inc|dec)\b", re.I),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"(?i)(?:;|#|//)[ \t]*(?:jmp|call|mov|push|pop|cmp|add|sub)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"^[;#@/|]+\s*@(?:param|return|brief|author|note)", re.M | re.I),
-            # 14. test (Testing & Assertions)
-            "test": re.compile(r"(?i)\b(?:describe|expect|assert|TestCase)\b|\bit[ \t]*\("),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(lock|xadd|mfence|lfence|sfence|dmb|dsb|isb|ldxr|stxr|ldaxr|stlxr)\b",
-                re.I,
-            ),
-            # 16. ui_framework
-            "ui_framework": None,
-            # 17. closures
-            "closures": None,
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(
-                r"^[ \t]*(?:\.data|\.bss|\.rodata|\.comm|section\s+\.data|section\s+\.bss)\b",
-                re.M | re.I,
-            ),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Instruction repetition prefixes.
-            "comprehensions": re.compile(
-                r"^[ \t]*(?:%rep|\.rept|\.irp)\b|\b(?:rep|repe|repne|repz|repnz)\b",
-                re.M | re.I,
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            # FPU, SSE, AVX, and NEON instructions.
-            "scientific": re.compile(
-                r"\b(fadd|fsub|fmul|fdiv|fsqrt|vadd[ps][sd]|vsub[ps][sd]|vmul[ps][sd]|fmla|fmov)\b",
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Complex SIB addressing and block replication.
-            "reflection_metaprogramming": re.compile(r"\[\s*[a-zA-Z0-9_]+\s*\+\s*[a-zA-Z0-9_]+\s*\*\s*\d+", re.I),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*(?:%include|\.include|\.incbin|INCLUDE|INCLUDELIB)\b", re.M | re.I),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:%include|\.include|\.incbin|INCLUDE|INCLUDELIB)\s+(?:['\"]([^'\"]+)['\"]|([^'\"\s]+))",
-                re.M | re.I,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"^[;#@/|]+\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)",
-                re.M | re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|rfc)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Interrupt vectors and exception handlers.
-            "events": re.compile(
-                r"\b(int\s+(?:0x)?[0-9a-fA-F]+|iret[qd]?|reti|svc|hvc|smc)\b|^[ \t]*(?:vector|handler|isr)_[a-zA-Z0-9_]+:",
-                re.M | re.I,
-            ),
-            # 33. dependency_injection
-            "dependency_injection": None,
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"^[ \t]*(?:%macro|\.macro|%endmacro|\.endm|%define|\.equ|\.set|#define)\b",
-                re.M | re.I,
-            ),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Raw memory addressing and dereferencing.
-            "pointers": re.compile(r"(?i)(?:byte|word|dword|qword)[ \t]+ptr[ \t]*\[[^\]]*\]|\[[^\]]+\]"),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(
-                r"\b(?:call|bl)\s+(?:_?malloc|_?calloc)\b|\b(?:sys_mmap|sys_brk)\b",
-                re.I,
-            ),
-            # 37. inline_asm
-            "inline_asm": None,  # This is base assembly.
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(?:call|bl)\s+(?:log_info|log_error|log_warn|log_debug|syslog)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(?:call|bl)\s+(?:printf|puts|sys_write)\b", re.I),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"(?i)\b(?:byte|word|dword|qword)[ \t]+ptr\b"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # Hard execution destruction and unrecoverable hardware exceptions. [cite: 780]
-            "panics_and_aborts": re.compile(r"(?i)\b(?:hlt|ud2|brk|svc|int[ \t]+3)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            # Forcing hardware threads to sleep or pause execution. [cite: 781]
-            "thread_sleeps": re.compile(r"(?i)\b(?:pause|hlt|wfi|wfe)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            # Low-level byte manipulation natively supported by the instruction set. [cite: 782]
-            "bitwise_ops": re.compile(r"(?i)\b(?:and|or|xor|not|shl|shr|sal|sar|rol|ror|lsl|lsr|asr)\b"),
-            # 44. sync_locks (Resource Management & Stability)
-            # Explicit hardware coordination to prevent race conditions (e.g., atomic instructions, memory barriers). [cite: 783]
-            "sync_locks": re.compile(r"(?i)\b(?:lock|xchg|cmpxchg|stxr|ldxr|dmb|dsb|isb)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            # Explicit locking of data to prevent mutation (e.g., read-only data sections or constants). [cite: 784]
-            "immutability_locks": re.compile(r"(?i)\b(?:equ|\.rodata|\.rdata)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # Assembly relies on manual memory management via standard instructions, lacking dedicated cleanup APIs. [cite: 785]
-            "cleanup": re.compile(r"\b(?:call|bl)\s+_?free\b", re.I),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Logic hidden from view via visibility directives. [cite: 786]
-            "encapsulation": re.compile(r"^[ \t]*(?:\.local|\.private)\b", re.M | re.I),
-            # 48. listeners (Event Listeners / Observers)
-            # Assembly relies on hardware interrupts rather than high-level listener subscriptions. [cite: 787]
-            "listeners": None,
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # Framework code that explicitly bypasses verification. [cite: 788]
-            "test_skip": None,
-            # --- HYBRID DOMAIN SENSORS ---
-            # serialization_parsing: Assembly has no native or universal JSON/XML/YAML
-            # parsing construct -- unlike malloc/free/printf there is no single
-            # ubiquitous libc convention for this, so per Strict Feature Parity
-            # (Rule 4) this stays None rather than forcing a fit.
-            "serialization_parsing": None,
-            # regex_execution: No native regex instruction; the realistic native
-            # equivalent is a call into the POSIX libc regex API.
-            "regex_execution": re.compile(
-                r"\b(?:call|bl)\s+_?(?:regcomp|regexec|regfree|re_search|re_match)\b",
-                re.I,
-            ),
-            # time_date_logic: rdtsc/rdtscp are real native timestamp-counter
-            # instructions; also covers calls into the libc time API.
-            "time_date_logic": re.compile(
-                r"\brdtscp?\b|\b(?:call|bl)\s+_?(?:time|clock|clock_gettime|gettimeofday)\b",
-                re.I,
-            ),
-            # ipc_rpc_bridges: Raw process/IPC syscalls and their libc wrappers.
-            # Distinct from `io`'s generic sys_read/sys_open/syscall tokens.
-            "ipc_rpc_bridges": re.compile(
-                r"\b(?:call|bl)\s+_?(?:fork|execve|pipe|socket|clone)\b|\bsys_(?:fork|execve|pipe|clone)\b",
-                re.I,
-            ),
-        },
-    },
-    "agc_assembly": {
-        "_meta": {
-            "target_version": "Apollo Guidance Computer (Luminary 099 / Comanche 055 - Apollo 11)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Apollo Guidance Computer digitized source files.
-        "extensions": [".agc"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: AGC code is hardware-level; no extensionless exact configurations exist.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and emulator/assembler tools to lock in the historical context.
-        "discriminators": [".agc", "yaYUL"],
-        # EXECUTION SIGNATURES: AGC code is hardware-level or emulator-resident; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Digitized source uses '#' for line-level Commented / Non-Executable Text.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES fatal alarms (bailout_hits).
-            "branch": re.compile(
-                r"\b(TC|TCF|BZF|BZMF|BZE|BMN|BPL|BMI|CCS|RESUME|RETURN|TCR|OVSK|BVBZ|CALL|GOTO)\b",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Safely captures hardware registers (A, Q, L, Z) ONLY when they are
-            # explicitly coupled to an AGC mathematical/memory opcode.
-            # Also captures the Bank assignment declarations.
-            # BUG FIX (epic #813/#857): AUG/DIM/INCR (real register-mutating
-            # instructions already recognized by this file's own
-            # `state_mutation` rule) were missing from the opcode list, so
-            # `AUG A`/`DIM Q`/`INCR A` -- real, common coupling of a hardware
-            # register to an instruction -- were invisible.
-            "args": re.compile(
-                r"\b(?:[EFB]BANK)="
-                r"|"
-                r"\b(?:CA|CS|TS|AD|SU|MULT|DV|MASK|DXCH|LXCH|QXCH|XCH|INDEX|AUG|DIM|INCR|CCS)[ \t]+(?:A|Q|L|Z)\b",
-                re.I,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Standard instruction flow and data markers.
-            "structural_boundaries": re.compile(
-                r"\b(CA|CAF|CS|TS|DXCH|LXCH|QXCH|XCH|AD|SU|MULT|DV|MASK|CCS|SETLOC|BANK|COUNT|ADRES|OCTAL|2OCT|DEC|2DEC|BLOCK|ERASE)\b",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Subroutine entry points anchoring logic blocks.
-            # BUG FIX: the lookahead's `\s+` can cross a newline (Rule 5),
-            # so a bare label on its own line (nothing else on that line)
-            # could get falsely bound to an unrelated opcode several blank
-            # lines later -- confirmed "MYLABEL\n\n\n\tTC INTERNAL\n"
-            # incorrectly captured MYLABEL. Real AGC label+opcode pairs are
-            # always on the same physical line (fixed-column YUL/GAP
-            # format); bounded to `[ \t]+`.
-            # BUG FIX (epic #813/#857): the opcode whitelist was a small,
-            # ad hoc subset of the real AGC instruction set -- missing
-            # instructions this SAME file's own sibling rules already
-            # recognize as legitimate (`args`'s CA|CS|TS|AD|SU|MULT|DV|MASK|
-            # DXCH|LXCH|QXCH|XCH|INDEX, `branch`'s TCF|BZE|BMN|RESUME|
-            # RETURN|TCR|GOTO|OVSK|BVBZ, `safety`'s RELINT|EDRUPT,
-            # `state_mutation`'s INCR|AUG|DIM|DAS), so a label followed by
-            # ANY of these real, common opcodes was invisible as a
-            # subroutine entry. Confirmed empirically against the real
-            # Apollo 11 (Luminary/Comanche) source corpus in
-            # language-crucible: the old pattern matched 609 label+opcode
-            # pairs across the corpus; `CAF` alone (Clear and Add Fixed --
-            # arguably the single most common AGC instruction after
-            # TC/CS/TS/CA, 94 occurrences in this corpus) was entirely
-            # missing. Widened to the union of opcodes already vetted
-            # elsewhere in this file, confirmed against the real corpus to
-            # raise total matches to 812 (+33%) with zero new false
-            # positives against data/constant pseudo-ops (OCT/OCTAL/DEC/
-            # 2DEC/ADRES/CADR/EQUALS/etc. all correctly stay excluded --
-            # those mark data declarations, not subroutine entries).
-            "func_start": re.compile(
-                r"^([A-Z0-9_-]+)(?=[ \t]+(?:TC|TCF|CA|CAF|CS|TS|DXCH|LXCH|QXCH|XCH|CCS|DLOAD|STORE|CALL|INDEX|"
-                r"EXTEND|INHINT|RELINT|EDRUPT|BZF|BZMF|BPL|BMI|BZE|BMN|RESUME|RETURN|TCR|GOTO|OVSK|BVBZ|"
-                r"AD|ADS|SU|MULT|DV|MASK|INCR|AUG|DIM|DAS|RVQ)\b)",
-                re.M | re.I,
-            ),
-            # 5. class_start
-            # AGC lacks native objects.
-            "class_start": None,
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Real-time safety guards and interrupt control.
-            "safety": re.compile(
-                r"\b(INHINT|RELINT|TC\s+DOWNRUPT|CS\s+ERESTORE|MUST\s+RESTORE|EDRUPT)\b",
-                re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Bypassing predictable flow or task management risks.
-            "safety_bypasses": re.compile(r"\b(TC\s+JOBSLEEP|TC\s+JOBWAKE|TCF\s+2|TASKOVER|TCF\s+ADRERR)\b", re.I),
-            # 8. danger (High-Risk Execution / System Calls)
-            # High-risk failure states and alarms. EXCLUDES MOD history (Phase 2 debt).
-            "high_risk_execution": re.compile(r"\b(CURTAINS|SOFTWARE\s+RESTART|SYSTEM_FAILURE|WHIMPER|HALT)\b", re.I),
-            # 9. io (I/O & Network Boundaries)
-            # Hardware I/O bridging to the Command/Lunar Module.
-            "io": re.compile(r"\b(DSKY|CHANNEL|READ|WRITE|V\d+N\d+|OUT\d+|IN\d+)\b", re.I),
-            # 10. api (Public Surface Area)
-            # Global labels and externally visible entry points.
-            "api": re.compile(
-                r"^[A-Z0-9_-]+\s+EQUALS|^[ \t]*(?:SUBROUTINE|BEXT|EXTEND)\b",
-                re.M | re.I,
-            ),
-            # 11. flux (State Mutation)
-            # Direct state mutation and register storage.
-            "state_mutation": re.compile(
-                r"\b(TS|DXCH|LXCH|QXCH|XCH|INCR|AUG|DIM|WRSUB|AUGMENT|DIMINISH|STORE|STQ|STCALL|DAS)\b",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"(?i)#[ \t]*(?:TCF|CCS|INDEX|BZF|BZN|CA|CS)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(
-                r"^#\s*(?:Page|MOD\s+(?:BY|NO)|FUNCTIONAL\s+DESCRIPTION|SUBROUTINE|PURPOSE|CALLING\s+SEQUENCE|AUTHOR|PROGRAM|REVISION)",
-                re.M | re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            # System integrity verifications and self-checks.
-            "test": re.compile(
-                r"\b(TC\s+ALARM2|SELFCHECK|ROPECHK|ERASCHK|CNTRCHK|CHECK|TC\s+BANKJUMP)\b",
-                re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # Priority multitasking scheduler and task management.
-            "concurrency": re.compile(
-                r"\b(PRIO[1-9]|EXEC|TC\s+NOVAC|TC\s+WAITLIST|TC\s+FINDVAC|ENDOFJOB|PHASCHNG|AWAKE|SLEEP|VARDELAY)\b",
-                re.I,
-            ),
-            # 16. ui_framework (UI / View Components)
-            # DSKY (Display/Keyboard) UI verbs and nouns.
-            "ui_framework": re.compile(r"\b(V\s+\d+|N\s+\d+|NOUN|VERB|ENTER|PROCEED)\b", re.I),
-            # 17. closures
-            "closures": None,
-            # 18. globals (Global / Shared State)
-            # Memory division markers.
-            "globals": re.compile(
-                r"\b(ERASABLE\s+MEMORY|FIXED\s+MEMORY|WORKING-STORAGE|COMMON|FLAGWRD\d+|BIT\d+)\b",
-                re.I,
-            ),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions
-            "comprehensions": None,
-            # 22. scientific (Numerical / Compute Libraries)
-            # Vector math and orbital navigation interpreter routines.
-            "scientific": re.compile(
-                r"\b(VAD|VSUB|BDSU|DDV|DMP|DSU|SQRT|NORM|SIGN|ABS|SIN|COS|ASIN|ACOS|SPCOS|SPSIN|DOT|CROSS|UNIT|ABVAL|VXV|VXM|MXV)\b",
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Self-modifying logic and VM entry.
-            "reflection_metaprogramming": re.compile(r"\b(INDEX|TC\s+INTPRET|DXCH\s+0000|RVQ)\b", re.I),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"\b(BANK|SETLOC|EBANK=)\b", re.I),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:BANK[ \t\n]+|SETLOC[ \t\n]+|EBANK=[ \t\n]*)([A-Za-z0-9_]+)",
-                re.I | re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"^#\s*(?:MOD\s+BY|AUTHOR|CREATED\s+BY|MAINTAINER|Contact)\s*[:\-]\s*(.*)",
-                re.M | re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # Linkage to MIT GSOP or mission versions.
-            "spec_exposure": re.compile(
-                r"\b(GSOP|LUMINARY|COMANCHE|COLOSSUS|SUNDISK|SUNBURST|PCR\s*\d+|PCN\s*\d+|SPEC\s*-\s*\d+|#\s*REF:)\b",
-                re.I,
-            ),
-            # 31. ssr_boundaries
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Hardware interrupt vectors (Rupts).
-            "events": re.compile(
-                r"\b(RUPT|TIME1|TIME2|KEYRUPT|UPRUPT|DOWNRUPT|RADAR|OPTIC|HANDRUPT|ERRUPT)\b",
-                re.I,
-            ),
-            # 33. dependency_injection
-            "dependency_injection": None,
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(r"^[ \t]*(?:MACRO|ENDMAC|DEFINE)\b", re.M | re.I),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": re.compile(r"\b(?:INDEX|INDIRECT|POINTER|CADR|FCADR|ECADR)\b|\*[A-Z0-9_-]+", re.I),
-            # 36. memory_alloc (Manual Memory Management)
-            "memory_alloc": re.compile(r"\b(?:ERASABLE|FIXED|EQUALS|SHARE)\b", re.I),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            # Spacecraft downlink routines.
-            "telemetry": re.compile(r"\b(DNTM|DOWNLINK|TELEM|TM|DUMPTEL|TM\s+WORD)\b", re.I),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            "debug_prints": re.compile(r"\b(?:FLASH|PINBALL|OUT\d+)\b", re.I),
-            # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\bEXTEND\b", re.I),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(POODOO|BAILOUT|TC\s+ALARM|ABORT)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(TC\s+JOBSLEEP|VARDELAY)\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"\b(MASK|AD|SU|MULT|DV)\b", re.I),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(INHINT|RELINT|LOCK|UNLOCK)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\bFIXED\s+MEMORY\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(ENDOFJOB|RESUME|EXIT)\b", re.I),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Internal task-local labels or non-global tags.
-            # BUG FIX: required a lowercase-starting label, but authentic
-            # AGC assembly source is uppercase-only (per this section's own
-            # convention -- every other rule here uses `re.I`, and
-            # func_start's own capture class is `[A-Z0-9_-]+`) -- confirmed
-            # a realistic label ("MYLABEL") never matched at all. Widened
-            # to accept any case.
-            "encapsulation": re.compile(r"^[ \t]*[A-Za-z0-9_][a-zA-Z0-9_.]*", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(EVENT\s+WAIT|TC\s+WAITLIST)\b", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": None,
-        },
-    },
-    "lua": {
-        "_meta": {
-            "target_version": "Lua 5.5 / Luau / LuaLS Annotations / LuaJIT",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard scripts, Luau (Roblox), Nmap Scripting Engine (.nse), and LuaRocks package specs (.rockspec).
-        "extensions": [".lua", ".luau", ".nse", ".pd_lua", ".wlua", ".rockspec"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Tooling and documentation configurations that are secretly pure Lua code.
-        "exact_matches": ["config.ld"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and linting configs to resolve ambiguous files.
-        "discriminators": [".lua", ".luacheckrc", "stylua.toml", ".rockspec"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for CLI, Game-Engine, and embedded scripts.
-        "shebangs": ["lua", "luajit", "luau", "texlua"],
-        # Maps to Family 5 (Hybrid Dash) -- #621: this comment always said
-        # "Family 5 (Hybrid Dash)" but the value below was "standard_block"
-        # until now, so lua shared a regex with C-style languages and got
-        # zero comment stripping (standard_block never used the `--` token).
-        # "multi_style_dash" is the real family for this shape.
-        # Rationale: Uses '--' for lines and '--[[ ... ]]' for blocks.
-        "lexical_family": "multi_style_dash",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes standard loops and Lua 5.2+ goto.
-            "branch": re.compile(
-                r"\b(if|then|elseif|else|for|in|while|do|repeat|until|break|continue|goto|and|or|not)\b"
-            ),
-            # 2. args: Parameters / Coupling. Captures parameters in named and anonymous function signatures.
-            # #1209: parameter-list span wrapped in its own capture group (was
-            # only reachable via group(0), the whole match including the
-            # "function"/name prefix) so detector.py's counter isolates just
-            # "(...)" -- the whole-match fallback overcounted every zero/
-            # one-arg signature by +1 the same way Python's did (#1199). Name
-            # group added too, purely so existing extraction tests keep
-            # passing.
-            "args": re.compile(
-                r"\bfunction\s*([a-zA-Z_][\w.:]*\s*)?(?:<(?:[^<>]|<[^<>]*>)*>\s*)?(\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\))"
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope and data definitions.
-            "structural_boundaries": re.compile(
-                r"\b(local|end|require|module|return|export\s+type|type)\b|<\s*(?:const|close|toclose)\s*>"
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic blocks (named functions).
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL FUNCTION SHIELD (LUA) ]
-                # Lua developers frequently split the `local`, `function`, and identifier
-                # across newlines.
-                # FIX: Upgraded horizontal `[ \t]+` bounds to `[ \t\n]+` across the
-                # modifier stack, and securely allowed `[ \t\n]*` in the positive
-                # lookahead for the parenthesis. Includes support for Luau generic types.
-                # =====================================================================
-                # #2461: also anchor after a `;` -- a `local function` / `function`
-                # declaration is not always the first statement on its line
-                # (`local a; local function f(x) ... end`, common in the Lua test
-                # suite). `;` is a bare statement separator once strings/comments
-                # are shielded, so a `function` keyword immediately after one is a
-                # real declaration head, not text.
-                r"(?:^[ \t]*|;[ \t]*)(?:local[ \t\n]+)?(?:export[ \t\n]+)?function[ \t\n]+([a-zA-Z_][\w.:]*)(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?\()",
-                re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Captures proto-tables or EmmyLua class definitions.
-            "class_start": re.compile(
-                r"^[ \t]*---@class\s+([a-zA-Z_]\w*)|^[ \t]*(?:local[ \t\n]+)?(?:export[ \t\n]+)?(?:type[ \t\n]+)?([A-Z][a-zA-Z0-9_]*)(?=[ \t\n]*=[ \t\n]*\{)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Protected calls, assertions, and type checks.
-            "safety": re.compile(
-                r"\b(pcall|xpcall|assert|error|type|getmetatable|rawequal|ipairs|pairs|next)\b|<\s*(?:const|close|toclose)\s*>"
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing safety (environment manipulation/raw access).
-            "safety_bypasses": re.compile(
-                r"\b(rawget|rawset|rawlen|debug\.[a-zA-Z0-9_]+|collectgarbage|_G|_ENV|getfenv|setfenv)\b"
-            ),
-            # 8. danger: High-Risk Execution. Dynamic evaluation and OS-level execution hooks.
-            "high_risk_execution": re.compile(
-                r"\b(os\.execute|os\.exit|os\.remove|os\.rename|load|loadstring|loadfile)\b"
-            ),
-            # 9. io: I/O & Network Boundaries. Standard IO library and environment inquiries.
-            "io": re.compile(r"\b(io\.open|io\.read|io\.lines|io\.close|io\.input|io\.output|io\.popen|os\.getenv)\b"),
-            # 10. api: Public Surface Area. Functions NOT marked local or explicit module returns.
-            "api": re.compile(
-                r"^[ \t]*function\s+[^_][\w.:]*|^[ \t]*return\s+[a-zA-Z_]\w*[ \t]*$|---@public|\bexport\b",
-                re.M,
-            ),
-            # 11. flux: State Mutation. State mutation (assignments and table mutators).
-            "state_mutation": re.compile(
-                r"\b[a-zA-Z_]\w*(?:\[[^\]]+\]|\.[a-zA-Z_]\w*)?\s*(?<![=<>~])=(?![=])|\btable\.(?:insert|remove|move|sort|concat)\b"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code trails.
-            "dead_code": re.compile(
-                r"(?:--|--\[=*\[)[ \t]*(?:if|local|function|for|while|print|return)\b",
-                re.M,
-            ),
-            # 13. doc: Structured Documentation. LDoc/EmmyLua style documentation.
-            "doc": re.compile(
-                r"---@(?:param|return|field|see|alias|private|protected|diagnostic)|---\s*[A-Z]",
-                re.M,
-            ),
-            # 14. test: Testing & Assertions. Busted, LuaUnit, and custom verification markers.
-            "test": re.compile(
-                r'\b(?:setup|teardown|busted|luassert|assert|mock|stub|spy|luaunit|Test[A-Z]\w*)\b|\b(?:describe|it)\s*[\'"(]'
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Lua coroutines and task schedulers.
-            "concurrency": re.compile(
-                r"\b(coroutine\.(?:create|resume|yield|wrap|status|isyieldable|close)|task\.(?:spawn|wait|defer|delay)|uv\.[a-zA-Z0-9_]+)\b"
-            ),
-            # 16. ui_framework: UI / View Components. Game engine hooks (LÖVE, Solar2D, Defold, Roblox).
-            "ui_framework": re.compile(
-                r"\b(love\.[a-zA-Z0-9_]+|display\.new[a-zA-Z0-9_]+|gui\.[a-zA-Z0-9_]+|Roact\.[a-zA-Z0-9_]+|Instance\.new)\b"
-            ),
-            # 17. closures: Closures / Anonymous Functions. Anonymous function depth.
-            "closures": re.compile(r"(?:^|[(=,\s])function\s*\([^)]*\)", re.M),
-            # 18. globals: Global / Shared State. Access to global registries.
-            "globals": re.compile(r"\b(_G|_ENV|_VERSION|arg)\b|^[ \t]*[A-Z][A-Z0-9_]*[ \t]*=(?![=])", re.M),
-            # 19. decorators: Decorators / Annotations. EmmyLua annotations.
-            "decorators": re.compile(r"^[ \t]*---@[a-zA-Z_]\w*", re.M),
-            # 20. generics: Generics / Type Parameters. EmmyLua generic type annotations.
-            "generics": re.compile(r"---@(?:generic|type)\s+[a-zA-Z_]\w*(?:<[^>]*>)?"),
-            # 21. comprehensions: Iterators / Comprehensions. Functional iterator patterns.
-            "comprehensions": re.compile(
-                r"\b(?:pairs|ipairs|next|string\.gmatch)\b|\b(?:lume|moses|_\.)(?:map|filter|reduce|each|find|any|all)\b"
-            ),
-            # 22. scientific: Numerical / Compute Libraries. Standard math library.
-            "scientific": re.compile(r"\b(math\.[a-zA-Z0-9_]+|bit32\.[a-zA-Z0-9_]+)\b|<<|>>|//"),
-            # 23. heat_triggers: Metaprogramming & Reflection. Metatable overrides and Dunder methods.
-            "reflection_metaprogramming": re.compile(
-                r"\b(__index|__newindex|__call|__add|__sub|__mul|__div|__mod|__pow|__unm|__idiv|__band|__bor|__bxor|__bnot|__shl|__shr|__concat|__len|__eq|__lt|__le|__gc|__close|__mode)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"\b(?:require|dofile)\b[ \t\n]*\(?[ \t\n]*['\"]", re.M),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (LUA) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Firewall.
-                #
-                # HISTORICAL BUG: Anchored to `^[ \t]*`. In Lua, modules are simply tables
-                # returned by the `require` function. They are frequently lazy-loaded
-                # inside local functions or conditionally assigned. Furthermore, because
-                # the regex demanded the assignment (`local x = require...`) to touch the
-                # left margin, it missed indented conditionals and inline evaluations entirely.
-                #
-                # THE FIX: Stripped the `^` anchor and completely deleted the bloated
-                # variable-assignment capture group. We now scan directly for the `require`
-                # or `dofile` boundary.
-                #
-                # [ THE PARENTHESIS SHIELD ]
-                # Lua allows calling functions with a single string argument without
-                # parentheses: `require "math"` vs `require("math")`. The `\(?` safely
-                # bridges both syntaxes.
-                # =====================================================================
-                r"\b(?:require|dofile)[ \t\n]*\(?[ \t\n]*['\"]([^'\"]+)['\"]",
-                re.M,
-            ),
-            # 25. ownership: Authorship metadata in comments.
-            "ownership": re.compile(
-                r"--\s*(?:Author|Copyright|License|Maintainer):\s+([^\n]+)|---\s*@author\s+([^\n]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
-            # 31. ssr_boundaries: View Horizon. Server-side rendering (Lapis/OpenResty).
-            "ssr_boundaries": re.compile(
-                r"\b(ngx\.say|ngx\.print|ngx\.exit|ngx\.req|lapis\.Serve|lapis\.Application)\b"
-            ),
-            # 32. events: Pub/Sub Network. Signal handlers and event brokers.
-            "events": re.compile(
-                r"\b(addEventListener|removeEventListener|dispatchEvent|on|emit|EventEmitter|Connect|FireServer|FireClient)\b"
-            ),
-            # 33. dependency_injection: Inversion of Control. Service locator patterns.
-            "dependency_injection": re.compile(r"\b(inject|container:get|container:resolve|Locator)\b"),
-            # 34. macros: Preprocessor Hooks. (Lua lacks a native preprocessor).
-            "macros": None,
-            # 35. pointers: Memory Map. FFI raw memory interactions.
-            "pointers": re.compile(
-                r"\b(ffi\.cast|ffi\.new|ffi\.cdef|ffi\.typeof|ffi\.sizeof|ffi\.alignof|ffi\.offsetof|ffi\.string|ffi\.copy|ffi\.fill)\b"
-            ),
-            # 36. memory_alloc: Manual Memory Management. Garbage collection triggers and FFI malloc.
-            "memory_alloc": re.compile(
-                r"\b(ffi\.C\.malloc|ffi\.C\.free|ffi\.C\.calloc|ffi\.C\.realloc|collectgarbage)\b"
-            ),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics.
-            "telemetry": re.compile(r"\b(?:log\.(?:info|warn|error|debug|trace)|ngx\.log|ngx\.ERR|ngx\.INFO)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(print|warn|io\.write)\b"),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax.
-            "explicit_casts": re.compile(r"\b(ffi\.cast|tonumber|tostring)\b"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(error|assert|os\.exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r'\b(task\.wait|os\.execute\s*\(?[\'"]sleep)\b'),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|&|\||\^|~(?!=)"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(mutex|lock|semaphore|critical_section|uv\.mutex)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"<\s*const\s*>"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(
-                r"\b(ffi\.C\.free|collectgarbage|io\.close|:[ \t]*close)\b|<\s*(?:close|toclose)\s*>"
-            ),
-            # 47. encapsulation
-            "encapsulation": re.compile(r"\b(local|_ENV)\b|---@private", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            # BUG FIX: `on\s*\(` ends on `(` (non-word), so the shared
-            # trailing \b could only fire when a word char immediately
-            # followed the paren -- never true for the common real call
-            # shape `emitter:on('event', cb)`, where a quote follows.
-            "listeners": re.compile(r"\bon\s*\(|\b(?:subscribe|Connect|addEventListener)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(xdescribe|xit|skip)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Lua Specifics) ---
-            "serialization_parsing": re.compile(r"\b(string\.dump|loadstring|load|cjson\.decode|cjson\.encode)\b"),
-            "regex_execution": re.compile(r"\b(string\.match|string\.gmatch|string\.find|string\.gsub)\b"),
-            "time_date_logic": re.compile(r"\b(os\.time|os\.clock|os\.date|os\.difftime)\b"),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(os\.execute|io\.popen|coroutine\.create|coroutine\.resume|coroutine\.yield)\b"
-            ),
-        },
-    },
-    "perl": {
-        "_meta": {
-            "target_version": "Perl 5.42.0 (Corinna Native OOP, Signatures, Try/Catch, Defer)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard scripts, modules, tests, POD docs, and legacy CGI web scripts.
-        "extensions": [".pl", ".pm", ".t", ".pod", ".plx", ".cgi", ".al", ".ph"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Core build scripts that are purely executed Perl code.
-        "exact_matches": ["Makefile.PL", "Build.PL"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and CPAN metadata to resolve .pl (Prolog collision) and .t.
-        "discriminators": [
-            ".pm",
-            ".pod",
-            ".pl",
-            "cpanfile",
-            "cpanfile.snapshot",
-            "META.json",
-            "META.yml",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1.
-        "shebangs": ["perl", "perl5", "perl6"],
-        # UPGRADED: Maps to Family 6 (Polyglot)
-        # Rationale: Perl's interaction with POD documentation blocks (=head, =cut) and embedded regex makes it a true polyglot lexical engine.
-        # #621: was "standard_block" (shared a regex with C-style languages,
-        # got zero comment stripping -- standard_block never used the `#`
-        # token). "line_exclusive" fixes the basic `#` line-comment case
-        # (needed no new family at all -- line_exclusive's own delimiter
-        # table already leads with `#`). The full "Polyglot" vision in the
-        # rationale above -- POD blocks (=head/=cut) -- is NOT covered by
-        # this; line_exclusive's real config has Ruby's =begin/=end but not
-        # Perl's own POD markers. Known remaining gap, not fixed here.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: Decisions that split the flow. Includes modern try/catch/finally and defer.
-            "branch": re.compile(
-                r"\b(if|unless|elsif|else|while|until|for|foreach|given|when|next|last|redo|try|catch|finally|defer|goto|continue|default)\b|&&|\|\||//|\?|(?<!:):(?!:)"
-            ),
-            # 2. args: Parameters / Coupling. Captures modern signatures, traditional @_ unpacking, and shift.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # the first two alternatives (was only reachable via group(0),
-            # the whole match including the "sub"/"my" prefix) so detector.py's
-            # counter isolates just the real parameter text -- the whole-match
-            # fallback overcounted every zero/one-arg signature by +1 the same
-            # way Python's did (#1199).
-            # #1519: the bare `(\bshift\b)` alternative used to match ANY
-            # occurrence of the word "shift" anywhere in the body -- including
-            # `shift @other_queue`/`shift(@other_queue)`, which shifts a
-            # DIFFERENT array, nothing to do with unpacking @_. Added a
-            # negative lookahead excluding those explicit-argument forms
-            # (bare `shift;`/`shift` and `my $x = shift;` both still match --
-            # only an explicit `(`/`@` right after "shift" is excluded).
-            # #1607 follow-up: also added a negative LOOKBEHIND excluding a
-            # sigil (`$@%&`) immediately before "shift" -- without it, a local
-            # variable literally NAMED `$shift` (a real, if thematically
-            # ironic, idiom: e.g. exiftool's `ConvertDateTime` stores its
-            # GlobalTimeShift option in `my $shift = ...`) false-matched on
-            # every later bare reference to that variable (`if ($shift)`,
-            # `$shift =~ ...`) as if each were its own real `shift` builtin
-            # call unpacking @_ -- confirmed inflating that one function's
-            # count from a real 2 to 8. `\b` alone doesn't exclude this: `$`
-            # is a non-word character, so `\bshift\b` still matches the
-            # "shift" substring inside `$shift` starting right after the `$`.
-            # Named in `_args_findall_sum_groups` below alongside the
-            # `my (...) = @_` group -- traditional Perl commonly unpacks args
-            # across MULTIPLE statements (`my $class = shift;` for the
-            # invocant, then later `my ($a, $b) = @_;` for the rest, or
-            # several sequential `my $x = shift;` lines), and a single match
-            # only ever sees the first one. `_args_findall_sum_groups` tells
-            # detector.py's counter to re-scan the whole block and SUM every
-            # matching statement's own contribution instead. A sub WITH a
-            # real declared signature/prototype (group 2) is unaffected --
-            # that always sits earlier in the text than any body-level idiom,
-            # so ordinary leftmost-match search already prefers it.
-            # Group 5: the OTHER extremely common "rest of the args" idiom --
-            # `my @statuses = @_;`, a bare (parenless) array catching every
-            # remaining positional arg after some have already been `shift`ed
-            # off, e.g. `my $class = shift; my @statuses = @_;`. Distinct
-            # from group 3's `my (...) = @_` (a fixed-size destructure) --
-            # this is inherently variadic, so it contributes exactly 1 (a
-            # single "rest" slot) via the same not-self-contained-parens
-            # fallback every other non-tuple match in this sum already uses,
-            # not a real element count.
-            "args": re.compile(
-                r"\b(?:sub|method)(\s+[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)?\s*(\([^)]*\))"
-                r"|\bmy\s*(\([^)]*\))\s*=\s*@_"
-                r"|((?<![$@%&])\bshift\b(?!\s*[(@]))"
-                r"|(\bmy\s+@\w+\s*=\s*@_\b)"
-            ),
-            "_args_findall_sum_groups": {3, 4, 5},
-            # #1607: group 2 (the "sub/method (...)" capture) matches BOTH a real
-            # modern named signature (`sub foo($a, $b)`) and a legacy bare-sigil
-            # PROTOTYPE (`sub Options($$;@)`, `sub Get8u($$)`) -- the two are
-            # syntactically indistinguishable from the regex alone (both are just
-            # "(...)" after the sub/method keyword). detector.py uses this flag to
-            # tell prototypes apart from real signatures at count time (no commas
-            # ever appear in a prototype, by grammar, regardless of true arity) and
-            # falls through to the same body-idiom scan (`_args_findall_sum_groups`)
-            # already used for signature-less traditional subs, instead of trusting
-            # a prototype's declaration for a count it can't actually give.
-            "_args_prototype_groups": {2},
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and immutability.
-            "structural_boundaries": re.compile(
-                r"\b(my|our|state|local|field|class|role|package|sub|method|return|yield|use|require|undef|do|true|false|await)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Anchors executable logic blocks. MUST HAVE EXACTLY ONE CAPTURE GROUP for the name.
-            #
-            # LLM/MAINTAINER CONTEXT & DOMAIN KNOWLEDGE:
-            # 1. THE KEYWORDS: Captures standard `sub` and Perl 5.38+ Corinna OOP `method`.
-            # 2. THE CAPTURE: `([a-zA-Z_]\w*)` isolates the exact function name.
-            # 3. THE LOOKAHEAD GUARDRAILS `(?= ... )`: Perl allows a lot of junk between the name and the code block.
-            #    - `\(` : Safely steps over legacy Prototypes `sub foo ($$)` and modern Signatures `sub foo ($a, $b)`.
-            #    - `:`  : Safely steps over Subroutine Attributes `sub foo : lvalue : method {`.
-            #    - `\{` : Matches standard immediate block openings `sub foo {`.
-            #    - `\n|$`: Handles K&R style newline brace placements.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL SUBROUTINE SHIELD (PERL) ]
-                # Perl 5 (and modern Corinna OOP) allows newlines between the `sub`/`method`
-                # keyword and the function name.
-                # FIX: Exchanged `\s+` (which triggers ReDoS if unbounded) with a strictly
-                # controlled `[ \t\n]+` to allow vertical jumps. Upgraded the trailing
-                # lookahead to safely handle vertical gaps before the opening `{` or `(`.
-                # =====================================================================
-                r"^[ \t]*(?:sub|method)[ \t\n]+"
-                r"([a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)"
-                r"(?=[ \t\n]*(?::(?!:)|[\(\{]|$))",
-                re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines object-oriented and structural boundaries.
-            "class_start": re.compile(
-                r"^[ \t]*(?:package|class|role)\s+([a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)(?=[ \t\n]*[\d\.v_]*[ \t\n]*(?::(?!:)|[;\{]|$))",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Defensive constructs (strict, warnings, safe exceptions).
-            # BUG FIX: `eval[ \t]*\{` was inside the shared \b(...)\b wrapper.
-            # It ends on the literal `{` (non-word), so the trailing \b only
-            # matched when a word character immediately followed the brace
-            # (e.g. `eval{risky()}`) -- the far more common idiomatic style
-            # with a space after `{` (`eval { risky(); }`) has a non-word
-            # char (the space) right after the brace, so the boundary could
-            # never fire and the whole safe-eval-block form silently never
-            # matched. Also widened `[ \t]*` to `[ \t\n]*` to match perl's own
-            # vertical func_start shield -- a vertically-placed opening brace
-            # (`eval\n{`) is valid, if less common, style.
-            "safety": re.compile(
-                r"\b(?:use\s+strict|use\s+warnings|use\s+v5\.\d+|croak|confess|try|catch|finally|defer|isa|DOES)\b"
-                r"|\beval[ \t\n]*\{|->isa\b|->DOES\b"
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing safety (no strict, string eval).
-            # BUG FIX: the whole alternation used to be wrapped in \b(...)\b.
-            # `eval\s+(?!\w|{)` and `goto\s+\&` both end on a non-word
-            # character by construction (the negative lookahead guarantees
-            # the char after the trailing whitespace isn't \w, and `&` is
-            # never a word char) -- so the shared trailing \b, which needs a
-            # non-word/word transition, could never be satisfied. This
-            # silently dropped the two most common dangerous idioms:
-            # `eval $code;` / `eval($code);` (string-eval on a variable, not
-            # a literal) and `goto &$sub;` (dynamic dispatch). Each
-            # alternative now carries only the boundary that makes sense for
-            # its own shape. Also added a dedicated `eval\s*\(` alternative
-            # so the equally common no-space function-call form
-            # `eval($code)` is caught alongside `eval $code` -- naively
-            # widening the existing `eval\s+(?!\w|{)` to `eval\s*(?!\w|{)`
-            # doesn't work here, since `\s*` can backtrack to zero-width and
-            # let the lookahead be satisfied by the whitespace character
-            # itself, re-admitting the safe `eval q{1}` / `eval { ... }`
-            # bareword and block forms this guard exists to exclude.
-            "safety_bypasses": re.compile(
-                r'\b(?:no\s+strict|no\s+warnings)\b|\beval\s*["\']|\beval\s*\(|\beval\s+(?!\w|{)|\bgoto\s+&'
-            ),
-            # 8. danger: High-Risk Execution. Process killers and raw shell execution.
-            "high_risk_execution": re.compile(r"\b(system|exec|exit|qx|CORE::dump)\b|`[^`]+`"),
-            # 9. io: I/O & Network Boundaries. Disk, Network, DBI, and standard handles.
-            "io": re.compile(
-                r"\b(open|close|sysopen|sysread|syswrite|opendir|closedir|DBI->connect|Mojo::UserAgent|HTTP::Tiny|LWP::UserAgent|socket|connect|bind)\b|<[A-Z_0-9]+>|<>"
-            ),
-            # 10. api: Public Surface Area. Exposed surface area (Exports and modern routing).
-            "api": re.compile(
-                r'\b(?:get|post|put|del|any|patch)\s+[\'"]/[^\'"]*[\'"]|@(?:EXPORT|EXPORT_OK|EXPORT_TAGS|ISA)\b|use\s+(?:Exporter|parent|base)\b|:\s*(?:reader|writer|param)\b'
-            ),
-            # 11. flux: State Mutation. State mutation (assignments, array mutators, substitutions).
-            # UPDATED: Removed '.=' and '=~' / '!~' to prevent massive string-builder false positives.
-            "state_mutation": re.compile(
-                r"\b(?:push|pop|shift|unshift|splice|delete)\b|[\$@%][a-zA-Z_]\w*(?:->|\[|\{){0,5}\s*(?:\+|-|\*|/|\||&|\^|%|x)?=(?!=)|(?:\+\+|--)|\bs/"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural logic.
-            "dead_code": re.compile(
-                r"^[ \t]*#\s*(?:my|our|state|sub|method|class|package|if|unless|while|print|say)\b",
-                re.M,
-            ),
-            # 13. doc: Structured Documentation. Structured POD documentation.
-            "doc": re.compile(r"^=(?:pod|head[1-6]|item|over|back|cut|begin|end|encoding|for)\b", re.M),
-            # 14. test: Testing & Assertions. Assertions and Test frameworks.
-            "test": re.compile(
-                r"\b(?:Test2::V0|Test::More|cmp_ok|is_deeply|subtest|done_testing|BAIL_OUT)\b|\b(?:ok|is|isnt|like|unlike|plan|diag|note)\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Async, forks, and threads.
-            "concurrency": re.compile(
-                r"\b(async|await|fork|waitpid|threads(?:->create)?|threads::shared|AnyEvent|Coro|Mojo::IOLoop|Mojo::Promise|Future|Parallel::ForkManager)\b"
-            ),
-            # 16. ui_framework: UI / View Components. GUI libraries and template engines.
-            "ui_framework": re.compile(
-                r"\b(Tk::|Wx::|Gtk2::|Gtk3::|Prima::|Template|HTML::Mason|Mojolicious::Plugin::TagHelpers)\b|\brender(?:_to_string)?\b|<%|%>|\[%|%\]"
-            ),
-            # 17. closures: Closures / Anonymous Functions. Anonymous subroutines.
-            "closures": re.compile(r"\bsub\s*(?:\([^)]*\))?[ \t]*\{"),
-            # 18. globals: Global / Shared State. Magic variables and system globals.
-            # BUG FIX: `$$`, `$@`, `$!`, and `$?` were inside the shared
-            # trailing \b group. Each ends on a symbolic, non-word character,
-            # so the trailing \b (needed for the word-ending alternatives,
-            # to stop `$a` from matching inside `$abc`) could only fire when
-            # a word char immediately followed -- never true for how these
-            # 4 special vars are actually written (`$$;`, `if ($@)`, `warn
-            # $!;`, `$? >> 8`). All 4 of the most common Perl magic
-            # variables silently never matched.
-            "globals": re.compile(
-                r"(?:\$a|\$b|\$_|\$0|%ENV|%SIG|@ARGV|@INC)\b|\$\$|\$@|\$!|\$\?|^[ \t]*our\s+[\$@%]",
-                re.M,
-            ),
-            # 19. decorators: Decorators / Annotations. Subroutine and variable attributes.
-            "decorators": re.compile(r":\s*[a-zA-Z_]\w*(?:\([^)]*\))?"),
-            # 20. generics: Generics / Type Parameters. Parameterized types (via Type::Tiny/Moose).
-            "generics": re.compile(r"\b(?:ArrayRef|HashRef|Map|Tuple|Dict|Maybe|InstanceOf|ConsumerOf|Enum)\[[^\]]*\]"),
-            # 21. comprehensions: Iterators / Comprehensions. Map and Grep.
-            "comprehensions": re.compile(r"\b(?:map|grep|reduce|any|all|none|notall|first|List::Util)\b"),
-            # 22. scientific: Numerical / Compute Libraries. PDL and Math::BigInt.
-            "scientific": re.compile(
-                r"\b(Math::Trig|Math::BigInt|Math::BigFloat|Math::Complex|PDL|sin|cos|exp|log|sqrt|atan2|abs|int|rand|srand)\b"
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Metaprogramming and Symbol table hacks.
-            "reflection_metaprogramming": re.compile(
-                r"\b(AUTOLOAD|DESTROY|BEGIN|UNITCHECK|CHECK|INIT|END|tie|untie|bless|overload)\b|\*[a-zA-Z_]\w*[ \t]*=\s*(?:\\|&)|goto\s+&"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"\b(?:use|require|no)\s+[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*", re.M),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (PERL) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Firewall.
-                #
-                # HISTORICAL BUG: Anchored to `^[ \t]*`. While `use` is evaluated at
-                # compile-time and is typically top-level, `require` is evaluated at
-                # runtime and is very frequently scoped inside `if` statements or
-                # subroutines to defer loading heavy modules. The line anchor blinded
-                # the engine to these runtime inclusions.
-                #
-                # THE FIX: Stripped the `^` anchor and rely on the `\b` word boundary
-                # to capture module loading anywhere in the execution path.
-                # =====================================================================
-                r"\b(?:use|require|no)\s+([a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)",
-                re.M,
-            ),
-            # 25. ownership: Authorship metadata.
-            "ownership": re.compile(
-                r"^=head1\s+(?:AUTHOR|COPYRIGHT|LICENSE)|#\s*(?:Author|Maintainer|Created by):\s+([^\n]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags.
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries: View Horizon. Server-Side Rendering computation boundaries.
-            "ssr_boundaries": re.compile(
-                r"\b(Mojolicious::Controller|Dancer2|Catalyst::Controller|render|template|reply->|to_app)\b"
-            ),
-            # 32. events: Pub/Sub Network. Event-driven architecture signatures and message brokers.
-            "events": re.compile(
-                r'\b(?:emit|once|unsubscribe|catch|Mojo::EventEmitter|AnyEvent->condvar)\b|\b(?:on|subscribe)\s+[\'"]'
-            ),
-            # 33. dependency_injection: Inversion of Control. Inversion of Control (IoC) injection markers.
-            "dependency_injection": re.compile(r"\b(Bread::Board|Beam::Wire|IOC|container|resolve|inject|service)\b"),
-            # 34. macros: Preprocessor Hooks. Compiler pragmas or source filters.
-            "macros": re.compile(
-                r"\b(Filter::Simple|Filter::Util::Call|Devel::Declare|Keyword::Declare)\b|^[ \t]*BEGIN[ \t]*\{",
-                re.M,
-            ),
-            # 35. pointers: Memory Map. Explicit tracking of memory addressing or references.
-            # UPDATED: Removed '\\[$@%&*]\w+' to stop flagging standard pass-by-reference variables.
-            "pointers": re.compile(r"->(?:\[[^\]]*\]|\{[^\}]*\})|@\$|%\$|\$\$|\&\$"),
-            # 36. memory_alloc: Manual Memory Management. Explicit heap manipulations or reference count controls.
-            "memory_alloc": re.compile(
-                r"\b(Scalar::Util::weaken|Scalar::Util::isweak|Internals::SvREFCNT|Internals::SvREADONLY|undef|Devel::Peek)\b"
-            ),
-            # 37. inline_asm: Bare Metal. Direct architecture bridging via Inline modules.
-            "inline_asm": re.compile(r'\buse\s+Inline\s+[\'"](?:C|CPP|ASM)[\'"]'),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: The Professional. Structured logging and observability frameworks.
-            "telemetry": re.compile(
-                r"\b(?:Log::Log4perl|Log::Any|Mojo::Log|log_(?:info|debug|warn|error|fatal))\b|->(?:debug|info|warn|error|fatal|trace)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): The Amateur / Space Debris. Ad-hoc debug statements.
-            "debug_prints": re.compile(r"\b(print|say|printf|sprintf|warn)\b"),
-            # 40. explicit_casts (Explicit Type Casting): The "Trust Me" Tax. Explicitly bypassing the type-checker or manual blessing.
-            # UPDATED: Removed the pointer/reference overlap.
-            "explicit_casts": re.compile(r"\b(int|oct|hex|vec|ref|bless)\b"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts): The Detonators. Forcefully destroying the current execution context.
-            "panics_and_aborts": re.compile(r"\b(die|confess|croak|exit|BAIL_OUT)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) Forcing a thread to sleep or blocking waits.
-            "thread_sleeps": re.compile(r"\bsleep\b"),
-            # 43. bitwise_ops (Bitwise Operations) Manipulating raw bytes and memory registers.
-            # UPDATED: Added negative lookbehinds '(?<![=!])~' to ignore Perl regex operators.
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|(?<![=!])~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(lock|threads::shared|Thread::Semaphore)\b"),
-            # 45. immutability_locks (Immutability Constraints) Explicitly locking data so it cannot be mutated.
-            "immutability_locks": re.compile(r"\b(Readonly|Const::Fast|Internals::SvREADONLY)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown) Explicitly destroying state or releasing resources.
-            "cleanup": re.compile(r"\b(DESTROY|undef|close|closedir|finish)\b|^[ \t]*END[ \t]*\{", re.M),
-            # 47. encapsulation Explicitly hiding logic from the rest of the application.
-            "encapsulation": re.compile(r"\b(my|state|local)\b|:private\b"),
-            # 48. listeners (Event Listeners / Observers) Waiting to receive state from an external broadcast.
-            # BUG FIX: `on\s*\(` and `subscribe\s*\(` both end in a literal
-            # `(` (non-word), so the shared trailing \b could only fire when
-            # a word char immediately followed -- never true for the most
-            # common real call shape, `on('event', ...)`, where a quote
-            # follows the paren. Both never matched at all.
-            "listeners": re.compile(r"\bon\s*\(|\bsubscribe\s*\(|\badd_listener\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs) Code that bypasses test verification.
-            "test_skip": re.compile(r"\b(skip|todo_skip)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Perl Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(Storable::(?:thaw|fd_retrieve)|JSON::(?:decode_json|from_json)|YAML::(?:Load|LoadFile))\b"
-            ),
-            # BUG FIX: the trailing `\s*[/\W]` allowed the delimiter check to
-            # be satisfied by an ordinary whitespace/punctuation character
-            # that has nothing to do with a regex delimiter -- `\W` matches
-            # ANY non-word char, including plain space. This meant an
-            # ordinary bareword-named scalar (`$s`, `$m`, `$y`) followed by
-            # any operator or even just a space (`$s = 5;`, `my $y = 1;`)
-            # was misclassified as the `s///`/`m//`/`y///` operator. Dropped
-            # `\s*` (real delimiter usage never has a space before the
-            # opening delimiter) and narrowed the trailing class to actual
-            # Perl regex delimiter punctuation, excluding whitespace and the
-            # ordinary-code characters (`=`, `;`, `,`) that triggered the
-            # false positive.
-            "regex_execution": re.compile(
-                r"(=~|!~|\b(?:qr|m|s|tr|y)\b[/{}\[\]()<>!|#~^])"
-            ),  # Catches Perl's native binding operators and regex quotes
-            "time_date_logic": re.compile(r"\b(localtime|gmtime|Time::HiRes|sleep|time)\b"),
-            # BUG FIX: the whole alternation used to be wrapped in \b(...)\b.
-            # \b requires a word/non-word transition; `system\s*\(` and
-            # `exec\s*\(` both END in a literal `(` (non-word), so the
-            # trailing \b could never match once the paren was followed by
-            # anything else non-word (e.g. a string-literal quote or
-            # variable sigil) -- meaning `system("ls")` and `exec("ls")`,
-            # the two most common forms, never matched at all. Each
-            # alternative now carries only the boundary that makes sense
-            # for its own shape (leading \b for word-prefixed forms, none
-            # for the punctuation-delimited backtick form).
-            "ipc_rpc_bridges": re.compile(
-                r"\bsystem\s*\(|\bexec\s*\(|\bfork\b|\bIPC::Open[23]\b|\bqx\b|`.*`"
-            ),  # Backticks and qx// are shell executions
-        },
-    },
-    "haskell": {
-        "_meta": {
-            "target_version": "GHC 9.14.1+ (Linear Types, cases, Type Abstractions, RecordDotSyntax)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard source, literate Haskell, and C-preprocessor Haskell.
-        "extensions": [".hs", ".lhs", ".hsc", ".ghci"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Cabal custom setup scripts that evaluate as pure Haskell.
-        "exact_matches": ["Setup.hs", "Setup.lhs"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, Stack configs, and Cabal manifests to anchor the ecosystem.
-        "discriminators": [".hs", ".lhs", "stack.yaml", "cabal.project", ".cabal"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for script-based Haskell execution.
-        "shebangs": ["runhaskell", "runghc", "stack", "ghci"],
-        # UPGRADED: Maps to Family 5 (Hybrid Dash) -- #621: this comment
-        # named the wrong family; "Hybrid Dash"/multi_style_dash doesn't
-        # nest, and this rationale explicitly says Haskell's blocks DO nest.
-        # "recursive_block_haskell" reuses the same iterative nested-peel
-        # algorithm as recursive_block (Rust/Swift/Dart/Scala) with
-        # Haskell's own -- / {- / -} tokens instead of C-style ones. Was
-        # "standard_block" until now, meaning zero comment stripping at all
-        # (standard_block never used the `--`/`{-`/`-}` tokens).
-        # Rationale: Uses '--' for lines and '{- -}' for blocks, which strictly supports recursive nesting.
-        "lexical_family": "recursive_block_haskell",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # branch: decisions that split flow. Includes guards (|) and modern \cases.
-            "branch": re.compile(r"\b(if|then|else|case|of|MultiWayIf)\b|\\cases?|^[ \t]*\|", re.M),
-            # args: Parameters / Coupling. Captures type signatures, lambda bindings, and explicit @type apps.
-            # #1209: the type-signature and lambda-parameter spans wrapped in
-            # their own capture groups (was only reachable via group(0), the
-            # whole match including the leading "::"/"\") so detector.py's
-            # counter isolates just the real type/parameter text. Group 1
-            # (the `::` type signature) is named in `_args_arrow_count_groups`
-            # below, which routes it to detector.py's
-            # `_count_haskell_type_arrows` -- curried arity from top-level
-            # arrow count -- since neither the comma-list nor whitespace-
-            # token fallback used by every other language maps onto
-            # Haskell's syntax (and unlike every other branch here, a real
-            # signature can have ZERO arrows, e.g. `noop :: IO ()`, so this
-            # can't be inferred from content shape the way the other
-            # branches are). Group 2 (lambda params, space-separated like
-            # Scheme) already gets a correct count from the existing
-            # whitespace-split fallback, no special-casing needed.
-            # #1505 (follow-up): Group 3 is a signature-less function EQUATION's
-            # own LHS pattern list (`name pat1 pat2 = ...`) -- the exact shape
-            # func_start's own equation-form alternative anchors on (see that
-            # rule's comment below), needed because typeclass instance methods
-            # and where/let-local helpers routinely have no restated `::`
-            # signature at all, so group 1 never fires for their block and args
-            # silently measured 0 regardless of true arity. Anchored to the
-            # ABSOLUTE start of the block (`^` with no re.M) so it only ever
-            # reads the function's OWN first line, not some unrelated
-            # `name ... =` deeper in the body. Named in
-            # `_args_pattern_list_groups` below, which routes it to
-            # detector.py's `_count_haskell_pattern_list` -- a naive
-            # whitespace-split (the generic fallback every other language
-            # uses) wrongly splits a single parenthesized compound pattern
-            # like `(MetaList xs)` into two tokens, so this needs the same
-            # kind of dedicated counter as group 1's arrow-counting. A guard
-            # (`| cond = ...`) between the pattern list and the real `=`
-            # isn't a shape this alternative understands and simply fails to
-            # match (falls back to the pre-existing 0), not a regression.
-            # #1616 (follow-up): extended this same group-3 alternative to also
-            # accept a guard-only naming line (no `=` on the same line, just
-            # immediately followed by `\n[ \t]+\|`), keeping it in sync with
-            # func_start's own #1616 fix below.
-            #
-            # #1505 (follow-up, separate bug in the SAME rule): group 1's own
-            # character classes never included "." -- real-world Haskell
-            # overwhelmingly writes qualified/imported type names with a dot
-            # (`T.Text`, `IO.Newline`, `M.Map`), and the moment the scan hit
-            # that dot it fell out of the repetition entirely, truncating the
-            # whole captured signature to whatever came before it (confirmed:
-            # `inquotes :: T.Text -> T.Text` captured only `T` -- zero arrows
-            # counted from a real 1-arrow signature, i.e. every arrow after
-            # the first dotted type silently vanished). Added "." to both the
-            # first-char and continuation classes; safe for `_count_haskell_
-            # type_arrows` either way since it only scans for top-level "->"
-            # substrings and doesn't care what other characters ride along
-            # (e.g. a `forall a. a -> a` full-stop getting swept into the
-            # capture is harmless noise, not a new miscount).
-            #
-            # #1564 (follow-up, same rule): group 3's own equation-anchored
-            # alternative had the identical "let"-blocks-the-whole-line gap
-            # func_start had (see that rule's own #1564 comment below) --
-            # a same-line `let name args = expr` local binding never got its
-            # args counted, since the reserved-word exclusion sat right after
-            # `^[ \t]*` with no way to look past a leading "let ". Same fix:
-            # an optional `(?:let[ \t]+)?` skipped before the exclusion.
-            #
-            # #1615 (follow-up, same rule): extended the same optional skip
-            # to `where`, mirroring func_start's #1615 fix -- a same-line
-            # `where name args = expr` binding is now found by func_start,
-            # so args needs the identical `where`-skip or those newly-found
-            # functions get a wrong (0) arg count instead of simply being
-            # absent as before.
-            "args": re.compile(
-                r"::(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*((?:[a-zA-Z0-9_\'.,()\[\]]|=>|->|⊸)(?:[a-zA-Z0-9_\'.\s,()\[\]]|=>|->|⊸)*)"
-                r"|\\([a-zA-Z0-9_\'\s,()\[\]{} -]+)->"
-                r"|@[A-Z][a-zA-Z0-9_\']*"
-                r"|^[ \t]*(?:(?:let|where)[ \t]+)?(?!(?:let|in|where|do|mdo|if|then|else|case|of|module|import"
-                r"|class|instance|data|type|newtype|deriving|foreign|default"
-                r"|infixl|infixr|infix)\b)[a-zA-Z_][a-zA-Z0-9_']*[ \t]+"
-                r"((?:\"[^\"\n]*\"|\([^()\n]*\)|\[[^\[\]\n]*\]|[a-zA-Z0-9_'!]+)"
-                r"(?:[ \t]+(?:\"[^\"\n]*\"|\([^()\n]*\)|\[[^\[\]\n]*\]|[a-zA-Z0-9_'!]+))*)"
-                r"[ \t]*(?:=(?!=)(?!>)|\n[ \t]+\|)"
-            ),
-            # Which `args` capture-group index represents a `::` type
-            # signature (routes to arrow-based counting in detector.py) --
-            # see the comment on `args` above. Leading underscore excludes
-            # this from the structural-signal scan loop (coding_analysis
-            # skips any rule key starting with "_", same convention
-            # `_dependency_capture` uses).
-            "_args_arrow_count_groups": {1},
-            # Which `args` capture-group index represents a signature-less
-            # equation's own LHS pattern list -- routes to detector.py's
-            # `_count_haskell_pattern_list` (#1505 follow-up). See the `args`
-            # comment above for why this can't reuse the generic
-            # comma/whitespace fallback.
-            "_args_pattern_list_groups": {3},
-            # linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope and data definitions.
-            "structural_boundaries": re.compile(
-                r"\b(module|data|type|newtype|class|instance|let|in|where|do|mdo|deriving|family|pattern)\b|%1\s*->|⊸"
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic (Type Signatures).
-            # EXCLUDES data/type/class declarations to fix False Positives.
-            # #1442: a plain `::` type signature is the ONLY thing the first
-            # alternative below can anchor on -- but two extremely common
-            # real-world patterns never have one: typeclass instance method
-            # equations (the signature lives on the class declaration, not
-            # restated per-instance, e.g. `toJSON PlainMath = String "plain"`)
-            # and `where`-clause local helpers (Haskell allows -- and real
-            # code commonly omits -- a signature on these). Both are instead
-            # defined purely by a pattern-matched EQUATION: `name pattern...
-            # = expr`, indented under an enclosing `instance ... where` or
-            # `where` block. The second alternative anchors on that shape
-            # directly: an indented (`[ \t]+`, deliberately excluding
-            # column-0 -- unsigned top-level equations are a materially
-            # different, still-open problem, see the issue) lowercase-led
-            # identifier (real Haskell function/variable names can never
-            # start uppercase, which is what lets this cleanly reject
-            # constructor-headed patterns like `Just v = ...`), a reserved-
-            # word exclusion (so `where`/`do`/`case`/etc. themselves can
-            # never be mistaken for the bound name), then a lookahead
-            # requiring at least one non-whitespace pattern token before an
-            # unambiguous `=` (bounded to the current line via the `[^\n=]`
-            # exclusion, so this can never cross into a later line's `=` --
-            # each `=`-free line, e.g. every line of a `do` block that uses
-            # `<-` instead, fails closed). The `(?<![!<>/])`/`(?![=>])`
-            # guards keep `==`, `=>`, `<=`, `>=`, and `/=` from ever being
-            # mistaken for the defining `=`; requiring a real pattern token
-            # (not just more whitespace) before it is what excludes a bare
-            # `name = expr` value binding (mirrors #1312's point-free
-            # reasoning for the signature-anchored form -- zero args between
-            # name and `=` means "value", not "function").  A given
-            # function's 2nd+ pattern-matched clause (e.g. `toJSON`'s other
-            # 5 equations in the example above) independently satisfies this
-            # same alternative too; detector.py's `_slice_by_indentation`
-            # dedups those against the block the first clause already
-            # absorbed via the existing same-name-same-indent continuation
-            # walk, rather than emitting one node per clause.
-            # #1564: the reserved-word exclusion above (needed so `where`/
-            # `do`/`case`/etc. can never be mistaken for the bound name)
-            # sits immediately after `^[ \t]+`, so it also blocked the whole
-            # line whenever it happened to START with the keyword `let` --
-            # e.g. `let outputFile = fromMaybe "-" (optOutputFile opts)`,
-            # a same-line `let name args = expr` local binding declared
-            # inline in a `do` block. That shape's real name is never "let"
-            # itself, just the token right after it, but the old lookahead
-            # never got a chance to look past "let " to find it -- there's
-            # no other position on the line where `^` can anchor a retry.
-            # The new optional `(?:let[ \t]+)?` skips past a leading "let "
-            # (if present) before applying the same exclusion+capture on
-            # whatever follows, so `let name args = expr` now anchors on
-            # `name` exactly like the pre-existing non-`let` equation form
-            # -- while a bare multi-binding-block opener (`let` alone on its
-            # own line, nothing before the next line's `=`) still can't
-            # match, since the trailing `[ \t]+...=` lookahead has nothing
-            # on that same line to satisfy either way.
-            # #1615: extended the same optional-skip treatment to `where`
-            # for same-line where-clause bindings, e.g.
-            # `where matchTags tags = flip elem tags . T.toLower`.
-            # #1616: the trailing `[ \t]+...=` lookahead above required an `=`
-            # on the exact same line as the name and pattern list. This missed
-            # guard-only equations (e.g. `isAllowedPunct c \n | cond = ...`)
-            # where the `=` only appears on the indented guard lines below.
-            # Extended the lookahead to accept either an unambiguous `=` on the
-            # same line OR the line ending without an `=`/newline and immediately
-            # followed by an indented guard `\n\3[ \t]+\|` (where `\3` is the
-            # captured leading indent). Bounded and conservative:
-            # this explicitly doesn't parse the indentation stack to prove the `|`
-            # belongs to this binding vs. a sibling, but its limitation is
-            # documented and ReDoS safe since the same-line prefix scan `[^\n=]*`
-            # still fails closed if it hits a real `=` or crosses a newline.
-            "func_start": re.compile(
-                r"^[ \t]*(?:foreign\s+(?:import|export)\s+[a-zA-Z0-9_]+\s+(?:(?:unsafe|safe|interruptible)\s+)?(?:\"[^\"]*\"\s+)?)?(?!(?:data|type|newtype|class|instance|let|in|where|do|deriving)\b)(?:([a-zA-Z_][a-zA-Z0-9_\']*)|(\([^)]+\)))(?=(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*::)"
-                r"|^([ \t]+)(?:(?:let|where)[ \t]+)?(?!(?:case|class|data|default|deriving|do|else|foreign|if|import|in|infix|infixl|infixr|instance|let|mdo|module|newtype|of|then|type|where)\b)([a-z_][a-zA-Z0-9_\']*)(?=[ \t]+[^\s=][^\n=]*(?:(?<![!<>/])=(?![=>])|\n\3[ \t]+\|))",
-                re.M,
-            ),
-            # class_start: Object / Entity Declarations. Defines structural entities and typeclass boundaries.
-            "class_start": re.compile(
-                r"^[ \t]*(?:data(?:\s+family)?|newtype|class|type(?:\s+family)?)(?:(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*(?:\([^)]+\)(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*=>|[A-Z][a-zA-Z0-9_\']*(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*[a-z][a-zA-Z0-9_\']*(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*=>))?(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*([A-Z][a-zA-Z0-9_\']*)(?=(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*(?:[a-z][a-zA-Z0-9_\']*(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*)*(?:=|\||where|deriving|::|\n|$))",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # safety: Defensive Programming. Functional safety (Maybe/Either) and exception brackets.
-            "safety": re.compile(
-                r"\b(Maybe|Either|Just|Nothing|Right|Left|try|catch|bracket|finally|onException|SafeT|mask|pure|return)\b"
-            ),
-            # safety_neg: Safety Bypasses. Bypassing purity (unsafePerformIO) and partial functions.
-            "safety_bypasses": re.compile(
-                r"\b(unsafePerformIO|unsafeCoerce|error|undefined|fromJust|head|tail|init|last|throw|unsafeFixIO)\b"
-            ),
-            # danger: High-Risk Execution. Forceful aborts and Debug-trace leaks in production.
-            "high_risk_execution": re.compile(
-                r"\b(die|exitWith|exitFailure|Debug\.Trace|trace|traceShow|traceIO|traceM)\b"
-            ),
-            # io: I/O & Network Boundaries. IO Monad and hardware interactions.
-            "io": re.compile(
-                r"\b(IO|readFile|writeFile|appendFile|hGetContents|hPutStr|openFile|withFile|getLine|getChar|Socket|Connection|runDB)\b"
-            ),
-            # api: Public Surface Area. Captured via module headers. Captures both explicit lists and implicit "all" exports.
-            "api": re.compile(
-                r"^[ \t]*module\s+[A-Z][a-zA-Z0-9_.]*(?:\s*\([^)]*\))?\s*where|\bforeign\s+export\b",
-                re.M,
-            ),
-            # flux: State Mutation. State mutation (IORef/MVar) and monadic binds (<-).
-            "state_mutation": re.compile(
-                r"\b(IORef|STRef|TVar|MVar|TMVar|modifyIORef\'?|writeIORef|putMVar|modify|put|StateT)\b|<-"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(
-                r"--\s*(?:data|type|newtype|class|instance|let|where|import|putStrLn)\b",
-                re.M,
-            ),
-            # doc: Structured Documentation. Haddock documentation markers.
-            "doc": re.compile(r"--\s*\||--\s*\^|\{-\||--\s*@(?:param|return|author)"),
-            # test: Testing & Assertions. Verification framework keywords (QuickCheck/Hspec).
-            "test": re.compile(
-                r'\b(?:hspec|QuickCheck|prop_[a-zA-Z0-9_\']+|assertEqual|shouldBe|testGroup|testCase)\b|\b(?:describe|it|property)\s+"'
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # concurrency: Temporal Static. STM, async, and thread forking.
-            "concurrency": re.compile(r"\b(forkIO|forkOS|async|wait|cancel|MVar|TVar|STM|atomically|threadDelay)\b"),
-            # ui_framework: UI / View Components. Functional reactive GUI and web components.
-            "ui_framework": re.compile(r"\b(Threepenny|Brick|Reflex|Miso|Gtk|widget|vBox|hBox|Lucid|Blaze|Monomer)\b"),
-            # closures: Closures / Anonymous Functions. Anonymous lambda depth.
-            "closures": re.compile(r"\\[a-zA-Z0-9_\'\s(),\[\]]+\s*->|\\cases?"),
-            # globals: Global / Shared State. Top-level state hacks (typically MVars using unsafePerformIO).
-            # BUG FIX: `[^=]*` blocked crossing the `=` that MUST appear
-            # before `unsafePerformIO` in any real usage (the binding's own
-            # implementation line: `counter = unsafePerformIO ...`) -- this
-            # signature could never match a single real occurrence of the
-            # idiom it's meant to detect. Replaced with a bounded
-            # lazy-any-character span ({0,200}?, ReDoS-safe) so it can cross
-            # both `=` and intervening lines (e.g. a `{-# NOINLINE #-}`
-            # pragma between the signature and the binding).
-            "globals": re.compile(
-                r"^[ \t]*[a-z_][a-zA-Z0-9_\']*\s*::\s*(?:IORef|TVar|MVar)[\s\S]{0,200}?unsafePerformIO",
-                re.M,
-            ),
-            # decorators: Decorators / Annotations. GHC pragmas (INLINE, LANGUAGE).
-            "decorators": re.compile(r"\{-#\s*(?:INLINE|NOINLINE|LANGUAGE|OPTIONS_GHC|RULES|MINIMAL)\s+[^#]*#-\}"),
-            # generics: Generics / Type Parameters. forall quantification and constraints.
-            "generics": re.compile(
-                r"\bforall\s+[^.]+\.|\b(?:[A-Z][a-zA-Z0-9_\']*\s+[a-z][a-zA-Z0-9_\']*[ \t]*=>)|\([^)]+\)[ \t]*=>"
-            ),
-            # comprehensions: Iterators / Comprehensions. List comprehensions and dense monad applicatives.
-            "comprehensions": re.compile(r"\[\s*[^|\]]+\s*\|[^\]]+\]|<\$>|<\*>|>>="),
-            # scientific: Numerical / Compute Libraries. Advanced Math and Linear Algebra.
-            "scientific": re.compile(
-                r"\b(Complex|RealFloat|Floating|Numeric\.LinearAlgebra|Matrix|Vector|ad|grad|jacobian|sin|cos|tan|exp|log|pi)\b"
-            ),
-            # heat_triggers: Metaprogramming & Reflection. QuasiQuotes and Template Haskell.
-            "reflection_metaprogramming": re.compile(
-                r"\b(TemplateHaskell|QuasiQuotes|TypeFamilies|GHC\.Generics|Generic)\b|\[[a-z_]+\||\$\([a-zA-Z0-9_\']+\)"
-            ),
-            # import: Dependency Inclusions. Module resolution.
-            "import": re.compile(r"^[ \t]*import\s+(?:qualified[ \t]+)?[A-Z][a-zA-Z0-9_.]*", re.M),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*import\b[\s\S]{0,100}?(?:qualified\b[\s\S]{0,100}?)?([A-Z][a-zA-Z0-9_.]*)", re.M
-            ),
-            # ownership: Authorship indicators in comments.
-            "ownership": re.compile(r"--\s*\|?\s*(?:Author|Maintainer|Copyright|License):\s+([^\n]+)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            "spec_exposure": re.compile(r"\[(?:spec-[0-9]+|audit|rfc)\]", re.I),
-            "ssr_boundaries": re.compile(
-                r"\b(Yesod|Servant|ScottyM|ActionM|lucid|blaze-html|ToJSON|FromJSON|Handler|respond)\b"
-            ),
-            "events": re.compile(
-                r"\b(Event|Behavior|Dynamic|reactive-banana|reflex|frp|stepper|accumE|conduit|Pipes|Stream)\b"
-            ),
-            "dependency_injection": re.compile(r"\b(ReaderT|MonadReader|Has[A-Z][a-zA-Z0-9_\']+|ask|asks|local)\b"),
-            "macros": re.compile(
-                r"\{-#\s*LANGUAGE\s+[^#]*#-\}|\$[(a-z_A-Z0-9\']|^[ \t]*#(?:define|undef|if|ifdef|ifndef|elif|else|endif|include)\b",
-                re.M,
-            ),
-            "pointers": re.compile(r"\b(Ptr|ForeignPtr|FunPtr|StablePtr|peek|poke|castPtr|plusPtr|nullPtr|Storable)\b"),
-            "memory_alloc": re.compile(r"\b(malloc|mallocBytes|alloca|allocaBytes|free|Foreign\.Marshal)\b"),
-            "inline_asm": re.compile(r"\bforeign\s+import\s+(?:ccall|cplusplus|prim|capi)\b"),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # telemetry: Professional structured logging.
-            "telemetry": re.compile(r"\b(?:logDebug|logInfo|logWarn|logError|logOther|katip|MonadLogger|LoggerT)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            "debug_prints": re.compile(r"\b(putStr|putStrLn|print|putChar)\b"),
-            # # # 40. explicit_casts (Explicit Type Casting) "Trust Me" Tax.
-            "explicit_casts": re.compile(
-                r"\b(unsafeCoerce|coerce|fromIntegral|realToFrac|floor|ceiling|truncate|round)\b"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|throwIO|panic|error)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(threadDelay)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(
-                r"\b(?:shift[LR]?|rotate[LR]?|xor|complement|testBit|setBit|clearBit|complementBit)\b|\.&&\.|\|\.\|\|\."
-            ),
-            # sync_locks: Barricades preventing races.
-            "sync_locks": re.compile(r"\b(takeMVar|putMVar|readMVar|swapMVar|atomically|STM|Mutex|lock|unlock)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(pure|return|frozen|immutable|const)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(hClose|close|free|bracket|finally|onException)\b"),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"^[ \t]*module\s+[A-Z][a-zA-Z0-9_.]*\s*\([^)]*\)\s*where", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(subscribe|onEvent|addEventListener|watch)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs) Safety Theater.
-            "test_skip": re.compile(r"\b(ignore|pending|skip|xit|xdescribe)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Haskell Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(Data\.Aeson|decode|decodeStrict|fromJSON|Data\.Binary|Data\.Serialize)\b"
-            ),
-            # `=~` was inside the shared \b...\b wrapper, but \b requires a
-            # word/non-word transition -- since neither `=` nor `~` is a word
-            # character, `\b=~\b` can only match when the operator has no
-            # surrounding whitespace (e.g. "x=~y"), never idiomatic Haskell
-            # like "text =~ pattern" (space on both sides means no boundary
-            # exists at either edge). Split out unguarded.
-            "regex_execution": re.compile(r"\b(Text\.Regex|makeRegex|matchRegex)\b|=~"),
-            "time_date_logic": re.compile(r"\b(getCurrentTime|diffUTCTime|addUTCTime|System\.Time|threadDelay)\b"),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(System\.Process|createProcess|callProcess|callCommand|forkIO|Control\.Concurrent)\b"
-            ),
-        },
-    },
-    "embedded_python": {
-        "_meta": {
-            "target_version": "Embedded Python (MicroPython / CircuitPython / Bare-Metal)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Python suffixes and pre-compiled MicroPython bytecode (.mpy).
-        "extensions": [".py", ".mpy"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: The strict execution entry points for microcontroller boot sequences.
-        "exact_matches": ["boot.py"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, boot sequence files, and the MicroPython package installer (mip) configs.
-        "discriminators": ["boot.py", "mip.json", "upip"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for embedded discovery and cross-compilation.
-        "shebangs": ["micropython", "mpy-cross"],
-        # Instantly claims any .py file utilizing embedded electronics networking or GPIO libraries
-        "internal_discriminator": re.compile(
-            r"^[ \t]*(?:import|from)\s+(?:machine|board|microcontroller|busio|digitalio|analogio|usb_hid|neopixel|rp2|esp32|pyb|wifi|socketpool)\b",
-            re.M,
-        ),
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Uses '#' for line-level literature; multi-line literature
-        # (docstrings) is handled by the Section 2.3.C.3 Heuristic Pass.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Decisions and logical jumps. EXCLUDES raise (bailout_hits).
-            "branch": re.compile(r"\b(if|elif|else|for|while|with|try|finally|match|case|and|or)\b"),
-            # 2. args (Parameters / Coupling)
-            # Parameter blocks of functions/lambdas. Bounded negation to prevent ReDoS.
-            # #1199: the parameter list is now captured in its own group
-            # (group 1 for def/lambda-with-parens, group 2 for bare
-            # lambda params) instead of only ever being reachable via
-            # group(0), which used to include the "def name"/"lambda"
-            # keyword prefix -- that prefix supplied a spurious extra
-            # whitespace-split token that overcounted every zero/one-arg
-            # signature by +1 downstream in detector.py's args-counter.
-            # Group 1's body also steps over one level of nested parens
-            # (the same bounded one-level-nesting idiom RULE 11 already
-            # uses for square brackets above) so a default value that's
-            # itself a call, e.g. `def f(x=foo(1, 2), y=3):`, doesn't
-            # truncate the capture at the default's own closing paren and
-            # silently drop every parameter after it.
-            "args": re.compile(
-                r"(?:async[ \t]+)?def[ \t]+(\w+)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|\blambda\b[ \t]*([^:]*):",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: _private (encapsulation) and Final (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"\b(def|class|return|import|from|as|pass|continue|break|yield|await|assert|del|global|nonlocal|type)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ONLY executable logic blocks. EXCLUDES classes. Steps safely over hardware decorators.
-            "func_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}(?:async[ \t]+)?def[ \t]+(\w+)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*\(",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}class[ \t]+([a-zA-Z_]\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?(?:[ \t]*\(([^)]*)\))?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Hardware watchdogs and standard Python safety checks.
-            "safety": re.compile(
-                r"\b(try|except|finally|assert|machine\.WDT|isinstance|issubclass|hasattr|getattr|alloc_emergency_exception_buf)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Bare excepts and blocking the event loop (detrimental in embedded async).
-            "safety_bypasses": re.compile(
-                r"\bpass\b[ \t]*$|except\s*[:\n]|except\s+(?:Base)?Exception|from\s+[\w.]+\s+import\s+\*|\btime\.sleep(?:_ms|_us)?\b",
-                re.M,
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Hardware resets and raw memory pokes. EXCLUDES TODO (debt) and print (print_hits).
-            "high_risk_execution": re.compile(
-                r"\b(machine\.reset|machine\.deepsleep|machine\.bootloader|machine\.disable_irq|eval|exec|sys\.exit)\b"
-            ),
-            # 9. io (I/O & Network Boundaries)
-            # Hardware Peripherals (I2C, SPI, UART, Pin) and Networking.
-            "io": re.compile(
-                r"\b(open|Pin|I2C|SPI|UART|ADC|PWM|RTC|SDCard|I2S|WLAN|LAN|socket|usocket|uos\.mount|aiohttp)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Implicit public defaults (undercased root defs) + explicit exports.
-            "api": re.compile(
-                r"^[ \t]*(?:async[ \t]+)?def\s+[^_]\w+|^[ \t]*class\s+[^_]\w+|^__all__[ \t]*=",
-                re.M,
-            ),
-            # 11. flux (State Mutation)
-            # State mutation including hardware value toggling.
-            "state_mutation": re.compile(
-                r"\bglobal\b|\bnonlocal\b|\b(?:self|cls)\.\w+[ \t]*=|:=|(?:\.\w+)?\.(?:append|extend|update|pop|remove|insert|clear)\s*\(|\.(?:value|on|off|high|low|toggle)\s*\("
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"#[ \t]*(?:def|class|import|if|for|while|try|print|machine\.Pin)\b"),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r'"""|\'\'\'|:param|:return|:raises|:type|#\s*Pin[ \t]*=|#\s*GPIO'),
-            # 14. test (Testing & Assertions)
-            # BUG FIX: `test_` was wrapped inside the shared `\b(...)\b` group.
-            # `_` is a word character, so the trailing `\b` after `test_` demands
-            # a NON-word character immediately follow -- never true for the
-            # standard pytest convention (`test_login`, `test_parse_url`), where
-            # more word characters always continue the name. Only a bare,
-            # standalone trailing "test_" (unrealistic) ever matched. Anchored
-            # as `def[ \t]+test_` instead (matches python's own fix for the
-            # identical trap), dropping the trailing `\b` so it fires on the
-            # realistic `def test_<name>` shape.
-            "test": re.compile(r"\b(unittest|pytest|assert|setUp|tearDown|Mock)\b|def[ \t]+test_"),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(async|await|uasyncio|asyncio|Timer\.init|_thread|start_new_thread|allocate_lock|gather|create_task|Event|Lock)\b"
-            ),
-            # 16. ui_framework (UI / View Components)
-            # Framebuffers and embedded OLED/TFT drivers.
-            "ui_framework": re.compile(
-                r"\b(framebuf|ssd1306|st7789|ili9341|epaper|lvgl|display|text|fill|pixel|show|scroll)\b"
-            ),
-            # 17. closures (Closures / Anonymous Functions)
-            "closures": re.compile(r"\blambda\b"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(r"\bglobal\b|\bglobals\(\)|\blocals\(\)|\b(sys\.path|sys\.modules|os\.environ)\b"),
-            # 19. decorators (Decorators / Annotations)
-            # Generic decorators. (Specific ASM/Viper optimizations moved to heat_triggers/inline_asm).
-            "decorators": re.compile(
-                r"^[ \t]*@(?!(?:micropython\.viper|micropython\.asm|micropython\.native))[\w.]+",
-                re.M,
-            ),
-            # 20. generics (Generics / Type Parameters)
-            # QUADRATIC BLOWUP FIX: `[^\]]*` was unbounded. On a run of
-            # repeated unclosed openers (e.g. "List[List[List[..."), each
-            # "List[" occurrence is a fresh search start; at every one the
-            # engine greedily consumes to end-of-string then backtracks
-            # character-by-character looking for a "]" that never appears,
-            # O(n) work per start position across O(n) start positions, for
-            # O(n^2) total. Confirmed empirically (~4x runtime per size
-            # doubling at n=2000/4000/8000/16000 on a "List[" * n payload).
-            # Bounded to {0,300}; real generic parameter lists don't get
-            # remotely that long. Post-fix scaling is linear (~2x/doubling).
-            "generics": re.compile(
-                r"\b(?:List|Dict|Set|Tuple|Optional|Union|Any|Callable|Sequence|Iterable)\[[^\]]{0,300}\]|->"
-            ),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # QUADRATIC BLOWUP FIX: the 3 negated-class quantifiers were
-            # unbounded -- on a long run of unclosed brackets/braces/parens
-            # (e.g. "((((((..."), each opening char is tried as a match
-            # start, and each attempt scans to the end of the string looking
-            # for "for" + closer, for O(n^2) total. Bounded to {0,500}; real
-            # comprehensions don't get remotely that long.
-            "comprehensions": re.compile(
-                r"\[[^\]]{0,500}\bfor\b[^\]]{0,500}\]|\{[^}]{0,500}\bfor\b[^}]{0,500}\}|\([^)]{0,500}\bfor\b[^)]{0,500}\)"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            # Math, complex arrays, and ulab (MicroPython's NumPy).
-            "scientific": re.compile(
-                r"\b(math|cmath|ulab|numpy|ndarray|struct\.pack|struct\.unpack|bin|hex|oct|abs|sin|cos|tan)\b"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # High Cognitive Load: Dunder methods and Viper/Native emitters.
-            "reflection_metaprogramming": re.compile(
-                r"__(?:getattr|setattr|new|call|dict|dir|import)__|@(?:staticmethod|classmethod|property)|@micropython\.(?:viper|native)\b|\b(?:getattr|setattr|hasattr)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*(?:import|from)\b\s+[\w.]+", re.M),
-            "_dependency_capture": re.compile(r"^[ \t]*(?:import|from)\b\s+([\w.]+)", re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"(?:__author__[ \t]*=|Author:|Created by:)\s*(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # QUADRATIC BLOWUP FIX: the SPEC alternative's `\d+` was
-            # unbounded and directly precedes `[^\]]*`, an ALSO-unbounded
-            # class whose character set overlaps it (digits satisfy both).
-            # On a long run of digits with no closing "]" (e.g.
-            # "[SPEC-" + "1" * n), `\d+` greedily consumes them all, then
-            # backtracks one digit at a time while `[^\]]*` re-consumes the
-            # released digit and re-fails to find "]" -- classic adjacent
-            # overlapping-quantifier O(n^2). Confirmed empirically (~4x
-            # runtime per size doubling at n=2000/4000/8000/16000). Bounded
-            # `\d+` to `\d{1,10}` (no realistic ticket ID needs more digits)
-            # and `[^\]]*` to `{0,300}`; post-fix scaling is immeasurably
-            # fast even at n=32000.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            # Lightweight web servers (Microdot, Picoweb).
-            # BUG FIX: `@app\.get`/`@app\.post` are `@`-prefixed -- the
-            # shared leading \b could only fire when a word char
-            # immediately preceded the `@`, never true for how route
-            # decorators are actually written. Never matched at all.
-            "ssr_boundaries": re.compile(
-                r"\b(?:microdot|picoweb|MicroWebSrv|tinyweb|render_template|Response)\b|@app\.get|@app\.post"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # Hardware interrupts and async event flags.
-            "events": re.compile(
-                r"\b(irq|Pin\.irq|Timer\.irq|machine\.enable_irq|trigger|set_callback|Event\.set|schedule)\b"
-            ),
-            # 33. dependency_injection
-            "dependency_injection": None,  # MicroPython strictly follows imperative wiring due to RAM limits.
-            # 34. macros
-            # MicroPython's const() acts as a compile-time macro.
-            "macros": re.compile(r"\bconst\s*\([^)]+\)"),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            # Pointer manipulation enabled by Viper/uctypes.
-            "pointers": re.compile(
-                r"\b(uctypes\.addressof|uctypes\.bytearray_at|ptr8|ptr16|ptr32|machine\.mem8|machine\.mem16|machine\.mem32)\b"
-            ),
-            # 36. memory_alloc
-            "memory_alloc": re.compile(r"\b(bytearray|memoryview|alloc_emergency_exception_buf)\b"),
-            # 37. inline_asm (The Bare Metal)
-            "inline_asm": re.compile(r"@(?:micropython\.asm_thumb|micropython\.asm_xtensa|rp2\.asm_pio)\b"),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(logging|logger|ulogging|syslog)\.(?:info|error|warn|warning|debug|trace|critical|exception)\b"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\b(print|input)\s*\("),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\b(int|str|float|list|dict|set|tuple|bool|bytes|cast)\b\s*\("),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(raise|quit|exit|sys\.exit|abort)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(time\.sleep|asyncio\.sleep|Thread\.join)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"<<|>>|(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(Lock|RLock|Semaphore|Event|Condition|allocate_lock)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(Final|frozenset|mappingproxy|immutable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(close|__exit__|del|gc\.collect|cleanup)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b_[a-zA-Z_]\w*\b"),
-            # 48. listeners (Event Listeners / Observers)
-            # Waiting for state broadcast via hardware IRQs or event listeners.
-            "listeners": re.compile(r"\.irq\(|handler=|callback="),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(pytest\.mark\.skip|unittest\.skip|mock\.|MagicMock)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Embedded Python Specifics) ---
-            "serialization_parsing": re.compile(r"\b(ujson\.loads?|ujson\.dumps?|ustruct\.pack|ustruct\.unpack)\b"),
-            "regex_execution": re.compile(r"\b(ure\.compile|ure\.search|ure\.match|ure\.sub)\b"),
-            "time_date_logic": re.compile(r"\b(utime\.sleep_ms|utime\.ticks_ms|utime\.ticks_diff|machine\.RTC)\b"),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(machine\.Pin|machine\.I2C|machine\.UART|network\.WLAN|usocket\.socket|busio\.I2C)\b"
-            ),
-        },
-    },
-    "cobol": {
-        "_meta": {
-            "target_version": "Enterprise COBOL 6.4 (IBM) & GnuCOBOL 3.2",
-            "last_updated": "2026-03-10",
-            "blueprint_version": "v5.1",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard COBOL source files and copybooks (.cpy) which act as legacy header files.
-        "extensions": [".cbl", ".cob", ".cpy", ".cobol", ".pco", ".cut"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Mainframe environments do not typically use extensionless execution scripts.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and Job Control Language (.jcl) files which orchestrated legacy COBOL execution.
-        "discriminators": [".cbl", ".cob", ".cpy", ".jcl"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 (primarily for modern GnuCOBOL scripting).
-        "shebangs": ["cobc"],
-        # UPGRADED: Maps to Family 7 (The Positional Ancients)
-        # Rationale: Strictly fixed-format. The engine must monitor Column 7 for an asterisk '*'
-        # or slash '/' to identify line-level Commented / Non-Executable Text.
-        "lexical_family": "positional_anchored",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: Entscheidungslogik. Control flow that splits execution paths.
-            "branch": re.compile(
-                r"\b(IF|ELSE|EVALUATE|WHEN|PERFORM|UNTIL|VARYING|TIMES|DEPENDING\s+ON|ON\s+EXCEPTION|AT\s+END|INVALID\s+KEY|ON\s+SIZE\s+ERROR|ON\s+OVERFLOW)\b",
-                re.I,
-            ),
-            # 2. args: Parameters / Coupling. Captures USING and RETURNING signatures in PROCEDURE division or CALLs.
-            # BUG FIX (epic #813/#854): the parameter-name repetition had no
-            # exclusion for the literal word "RETURNING" -- so
-            # `PROCEDURE DIVISION USING WS-A RETURNING WS-B.` (declaring both
-            # a parameter AND a return value in one division header,
-            # extremely common real Enterprise COBOL/GnuCOBOL) had USING's
-            # own capture bleed straight through "RETURNING" and swallow
-            # WS-B too, instead of stopping at the clause boundary. Fixed
-            # with a negative lookahead excluding "RETURNING" from the
-            # parameter-name alternative, so `finditer` now correctly yields
-            # two separate matches (USING -> WS-A, RETURNING -> WS-B).
-            "args": re.compile(
-                r"\b(?:USING|RETURNING)\s+((?:(?:BY\s+(?:REFERENCE|CONTENT|VALUE)\s+)?(?!RETURNING\b)[A-Z0-9_-]+\s*,?){0,20})",
-                re.I,
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining straight-line execution flow.
-            # EXCLUDES access modifiers (GLOBAL, EXTERNAL) to prevent Structural Complexity Inflation.
-            "structural_boundaries": re.compile(
-                r"\b(DIVISION|SECTION|EXIT|CONTINUE|GOBACK|ACCEPT|XML\s+PARSE|JSON\s+GENERATE|DISPLAY|STOP\s+RUN)\b",
-                re.I,
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors logic blocks (Paragraphs and Sections).
-            # =====================================================================
-            # [ CONTEXT: COBOL FUNCTION/PARAGRAPH AST EXTRACTOR & REDOS SHIELD]
-            # PURPOSE: Anchors executable logic blocks (Paragraphs and Sections) in COBOL.
-            # VULNERABILITY: COBOL spans 60 years of formatting rules (Fixed vs Free format).
-            #   Without strict column boundaries, standard verbs or data definitions
-            #   (like 01 levels) resting against the margin will hallucinate False Positives.
-            # THE "IRON WALL" FIX: Combines strict leading-margin allowances with
-            #   comprehensive negative lookaheads to explicitly ban COBOL reserved words,
-            #   data structures, and Division headers.
-            # =====================================================================
-            # 4. func_start: Executable Logic Anchors. Anchors logic blocks (Paragraphs and Sections).
-            "func_start": re.compile(
-                # =====================================================================
-                # [ CONTEXT: COBOL FUNCTION/PARAGRAPH AST EXTRACTOR & REDOS SHIELD ]
-                # PURPOSE: Anchors executable logic blocks (Paragraphs and Sections) in COBOL.
-                #
-                # [ THE GREEDY MARGIN TRAP ] (Hard-learned from Pathological Fuzzer):
-                # Legacy COBOL uses a 6-character sequence area. Our regex optionally
-                # eats these 6 characters: `(?:[0-9a-zA-Z \t]{6}[ \-]?)?`.
-                # If a free-format developer writes a paragraph flush against the left
-                # margin (e.g., `TargetFunc.`), the regex greedily eats the first 6
-                # characters (`Target`) as the sequence number, and captures `Func` as
-                # the paragraph name!
-                # THE FIX: We injected a strict word boundary `\b` right before the
-                # identifier capture group. If the margin-eater chops a word in half,
-                # the `\b` fails, forcing the regex engine to backtrack, skip the
-                # optional margin-eater, and correctly capture the full word `TargetFunc`.
-                # =====================================================================
-                # 1. THE HORIZONTAL ANCHOR & FORMAT SHIELD
-                # Safely handles strict 80-column punched card formats (6-char sequence)
-                # and modern free-format code.
-                # The column-7 indicator slot accepts a blank/`-` (continuation), and a
-                # `D`/`d` debug flag ONLY when a name-char immediately follows it
-                # (`064100D` + `DEBUG-LINE-TEST-03-A`, otherwise captured as
-                # `DDEBUG-LINE-TEST-03-A`). The `(?=[A-Za-z])` keeps this narrow: a `D`
-                # followed by whitespace (`064000D        PASS.`) is left to the normal
-                # path so debug-only paragraph *redefinitions* aren't newly counted --
-                # this fix is about a mangled name, not about widening what counts.
-                # `*`/`/` (comment, page-eject) are excluded -- prism.py strips those
-                # first, and a commented-out paragraph is dead_code, not a func_start.
-                # The post-anchor slot is `[ \t]*` -- HORIZONTAL whitespace only, no
-                # `\n`. #2480: the old `[ \t\n]*` let `^` (re.M) match on a blank line
-                # that prism.py leaves behind after stripping the `*` comment lines that
-                # bracket a debug paragraph, then skip forward across the newline INTO
-                # the real content line -- PAST the col-1-6 sequence-area shield -- so the
-                # sequence number + col-7 `D` were swept into the captured name
-                # (`066600DDEBUG-LINE-TEST-05-A` in DB1034.2.cbl:665). Dropping `\n` here
-                # fixes it with no loss: `^` already re-anchors on the real line under
-                # re.M, and the one genuine vertical gap (name and its `SECTION` keyword
-                # on separate physical lines) is consumed by the section-6 lookahead's
-                # own `[ \t\n]+SECTION`, not here. Re-adding a blank-line consumer was
-                # tried and rejected -- every variant either regressed corpus output or
-                # was measurably catastrophic on a whitespace-heavy pathological input.
-                # Confirmed against language-crucible v1.2.0
-                # (che-che4z_nist_ccvs85/DB1024.2.cbl:640, DB1034.2.cbl:665).
-                r"^(?:[0-9a-zA-Z \t]{6}(?:[ \-]|(?<=[0-9])[Dd](?=[A-Za-z]))?)?[ \t]*"
-                # 2. THE DATA DIVISION SHIELD
-                # Explicitly bans data level indicators (01 through 88).
-                # Prevents massive "01 POLICY." data structures from being hallucinated as paragraphs.
-                r"(?!(?:01|02|03|04|05|10|15|20|66|77|88)\s+)"
-                # 3. THE RESERVED VERB & SCOPE TERMINATOR SHIELD
-                # Explicitly bans standard COBOL execution verbs, divisions, and scope terminators (`END-*`).
-                # Prevents rogue commands like "PERFORM." from spawning false positive logic anchors.
-                r"(?!(?:WORKING-STORAGE|LOCAL-STORAGE|DATA|ENVIRONMENT|IDENTIFICATION|ID|LINKAGE|FILE|DECLARATIVES|"
-                r"AUTHOR|DATE-WRITTEN|DATE-COMPILED|INSTALLATION|REMARKS|SECURITY|"
-                # #1949 follow-up: SOURCE-COMPUTER/OBJECT-COMPUTER are CONFIGURATION
-                # SECTION (ENVIRONMENT DIVISION) header paragraphs, never real PROCEDURE
-                # DIVISION logic -- same reserved-header category as INPUT-OUTPUT/
-                # CONFIGURATION two lines below, just missing from this list. Surfaced
-                # once Mode A stopped discarding single-line bodies (real fix for #1949's
-                # own Bug 2): `SOURCE-COMPUTER.  IBM-370.` collapses to one line and was
-                # previously masked by that discard guard, not by this shield --
-                # confirmed false positive against real corpus source
-                # (`cics-banking-sample-application-cbsa/BNKMENU.cbl:23`).
-                r"SOURCE-COMPUTER|OBJECT-COMPUTER|"
-                r"INPUT-OUTPUT|CONFIGURATION|DISPLAY|CALL|MOVE|COMPUTE|PERFORM|ADD|SUBTRACT|MULTIPLY|"
-                r"DIVIDE|INITIALIZE|SET|IF|ELSE|GOBACK|EXIT|STOP|EVALUATE|WHEN|READ|WRITE|REWRITE|"
-                # CONTINUE is a no-op statement (COBOL's `pass`); on its own line
-                # `CONTINUE.` is `<verb>.`, not a paragraph header. Confirmed FP against
-                # language-crucible v1.2.0 (che-che4z_nist_ccvs85/IF4014.2.cbl:30 etc.,
-                # cobol-sample_SAMPLE1.cbl). Same class as LOCAL-STORAGE (#1890).
-                r"DELETE|OPEN|CLOSE|CONTINUE|PROGRAM-ID|CLASS-ID|SECTION|DIVISION|END-[A-Za-z0-9_-]+)(?=[ \t\n.]))"
-                # 4. THE DIVISION/SECTION HEADER SHIELD
-                # Bans any word followed immediately by DIVISION (e.g., "PROCEDURE DIVISION").
-                # Upgraded to `[ \t\n]+` to prevent vertical ghosting.
-                r"(?![A-Za-z0-9_-]+[ \t\n]+DIVISION\b)"
-                # 5. THE IDENTIFIER CAPTURE (FUNCTION IDENTIFIER - GROUP 1)
-                # [ THE GREEDY MARGIN SHIELD ]: The `\b` forces the engine to evaluate the whole word,
-                # preventing the 6-character margin-eater from splitting flush-left identifiers.
-                # The `(?<=[0-9]{6}[ \-Dd])` alternative to `\b` lets the name start
-                # immediately after a real fixed-format col-1-7 prefix (6-digit sequence
-                # + indicator) even when col-7 is a `D` debug flag glued to a word-char
-                # name start (`064100D` + `DEBUG-LINE-TEST-03-A`) -- the digit prefix
-                # proves it's a genuine sequence area, not the greedy-margin trap
-                # (`TargetFunc.`), whose 6 non-digit chars fail this lookbehind.
-                # The name must contain at least one letter: a pure-digit token is a
-                # stray sequence number, not a paragraph name (a real digit-led name
-                # like `0000-MAIN` still matches -- it has letters). Both confirmed FP
-                # against language-crucible v1.2.0 (che-che4z_nist_ccvs85/DB1024.2.cbl:640,
-                # NC1134.2.cbl:118).
-                r"(?:\b|(?<=[0-9]{6}[ \-Dd]))([0-9_-]*[A-Za-z][A-Za-z0-9_-]*)"
-                # 6. THE IGNITION & TRAILING ANCHOR (Lookahead)
-                # Confirms paragraph/section by looking for an optional "SECTION", then a mandatory ".".
-                # Upgraded to `[ \t\n]+` to allow vertical separation between the name and SECTION.
-                # THE "SQL GHOST" FIX: `(?:\s|$)` blocks SQL qualifiers (e.g., "POLICY.CUSTOMERNUMBER").
-                # BUG FIX (epic #813/#854): SECTION had no allowance for a
-                # trailing SEGMENT-NUMBER (`MAIN-PARA SECTION 10.`) -- a real
-                # COBOL-68/74-era feature (program segmentation/overlay
-                # structuring for early mainframes' limited memory) still
-                # accepted by modern compilers for legacy program support.
-                # Without it, any segmented section header was entirely
-                # invisible. Added an optional 1-2-digit segment number.
-                r"(?=(?:[ \t\n]+SECTION(?:[ \t\n]+[0-9]{1,2})?)?[ \t]*\.(?:[ \t\n]|$))",
-                re.I | re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines structural program and modern OO boundaries.
-            # BUG FIX (epic #813/#854), two findings:
-            # 1. The lookahead required the entity name to be IMMEDIATELY
-            #    followed by a period/newline/EOS, with no allowance for the
-            #    standard trailing clauses these paragraphs actually support
-            #    -- `PROGRAM-ID. Foo IS INITIAL PROGRAM.`, `PROGRAM-ID. Foo
-            #    IS COMMON PROGRAM.`, `CLASS-ID. Foo FINAL.`, `CLASS-ID. Foo
-            #    INHERITS Base.`, `INTERFACE-ID. Foo INHERITS Base.` -- all
-            #    real, documented Enterprise COBOL syntax -- were entirely
-            #    invisible. Fixed with a bounded (max 6) run of additional
-            #    space-separated clause words between the captured name and
-            #    the terminating period; the loop can't cross into an
-            #    unrelated following paragraph since it requires whitespace
-            #    before each word and a bare period (not preceded by
-            #    whitespace) always stops it at the real statement boundary.
-            # 2. That widening itself reopened a DIFFERENT false-positive
-            #    vector, caught before shipping: FACTORY./OBJECT. are
-            #    standalone structural markers (never followed by a real
-            #    name), always immediately followed by a division header
-            #    (`FACTORY.\n    IDENTIFICATION DIVISION.`) -- with the
-            #    trailing-clause loop now wide enough to eat one extra word,
-            #    "IDENTIFICATION"/"PROCEDURE"/etc. got captured as the name
-            #    and "DIVISION" got swallowed as if it were a trailing
-            #    clause word. Fixed by excluding "DIVISION" from the
-            #    trailing-clause loop specifically -- no real PROGRAM-ID/
-            #    CLASS-ID/INTERFACE-ID clause ever legitimately contains
-            #    that word, since a division header always starts its own
-            #    separate paragraph.
-            "class_start": re.compile(
-                r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:PROGRAM-ID|CLASS-ID|INTERFACE-ID|FACTORY|OBJECT)\.\s+([A-Za-z0-9_-]+)(?:[ \t\n]+(?!DIVISION\b)[A-Za-z0-9_-]+){0,6}(?=[ \t]*\.|\n|$)",
-                re.I | re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Defensive scope terminators and declarative blocks.
-            "safety": re.compile(
-                r"\b(END-IF|END-PERFORM|END-EVALUATE|END-READ|END-WRITE|END-COMPUTE|END-CALL|DECLARATIVES|VALIDATE|CHECK)\b",
-                re.I,
-            ),
-            # 7. safety_neg: Safety Bypasses. Bypassing logic or unpredictable jumps.
-            "safety_bypasses": re.compile(
-                r"\b(NEXT\s+SENTENCE|GO\s+TO|CORRESPONDING|ANY\s+LENGTH|OMITTED)\b",
-                re.I,
-            ),
-            # 8. danger: High-Risk Execution. Process-stopping commands and self-modifying code (ALTER).
-            "high_risk_execution": re.compile(r"\b(STOP\s+RUN|ALTER|CANCEL)\b", re.I),
-            # 9. io: I/O & Network Boundaries. Disk, Database (SQL), and CICS communication.
-            "io": re.compile(
-                r"\b(READ|WRITE|REWRITE|OPEN|CLOSE|START|DELETE|EXEC\s+SQL|EXEC\s+CICS\s+(?:READ|WRITE|REWRITE|DELETE))\b",
-                re.I,
-            ),
-            # 10. api: Public Surface Area. Exposed linkage points and external entries.
-            "api": re.compile(r"\b(ENTRY|LINKAGE\s+SECTION|CALL|INVOKE|EXPORT)\b", re.I),
-            # 11. flux: State Mutation. State mutation (The core of COBOL data manipulation).
-            "state_mutation": re.compile(
-                r"\b(MOVE|COMPUTE|ADD|SUBTRACT|MULTIPLY|DIVIDE|SET|INITIALIZE|REPLACE|STRING|UNSTRING)\b",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural logic (Column 7 indicator).
-            "dead_code": re.compile(
-                r"^(?:.{6}\*|[ \t]*\*>)[ \t]*(?:MOVE|COMPUTE|IF|PERFORM|CALL|EXEC)\b",
-                re.I | re.M,
-            ),
-            # 13. doc: Structured Documentation. Identification metadata and structured comments.
-            "doc": re.compile(
-                r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:AUTHOR|DATE-WRITTEN|DATE-COMPILED|REMARKS|INSTALLATION)\.|\*>\s*@(?:param|return|author)",
-                re.I | re.M,
-            ),
-            # 14. test: Testing & Assertions. Unit testing framework markers (ZUnit).
-            "test": re.compile(r"\b(ZUNIT|CBLUNIT|ASSERT|TEST-CASE|READY\s+TRACE)\b", re.I),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. CICS Task and resource coordination.
-            "concurrency": re.compile(r"\bEXEC\s+CICS\s+(?:ENQ|DEQ|WAIT|START|DELAY)\b", re.I),
-            # 16. ui_framework: UI / View Components. Screen sections and CICS maps.
-            "ui_framework": re.compile(
-                r"\b(SCREEN\s+SECTION|EXEC\s+CICS\s+SEND\s+MAP|DFHMDF|DFHMDI|DFHMSD)\b",
-                re.I,
-            ),
-            # 17. closures: Closures / Anonymous Functions. (COBOL lacks native lambdas).
-            "closures": None,
-            # 18. globals: Global / Shared State. Global storage and external linkages.
-            "globals": re.compile(r"\b(WORKING-STORAGE\s+SECTION|COMMON|GLOBAL|EXTERNAL)\b", re.I),
-            # 19. decorators: Decorators / Annotations. (COBOL uses compiler directives).
-            "decorators": re.compile(
-                r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*>>\s*(?:IF|ELSE|END-IF|DEFINE|CALL-CONVENTION)",
-                re.I | re.M,
-            ),
-            # 20. generics: Generics / Type Parameters. Parameterized classes (Modern COBOL).
-            "generics": re.compile(r"\bCLASS-ID\.\s+[A-Za-z0-9_-]+\s+USING\s+[A-Za-z0-9_-]+", re.I),
-            # 21. comprehensions: Iterators / Comprehensions. (Not native to COBOL).
-            "comprehensions": None,
-            # 22. scientific: Numerical / Compute Libraries. Intrinsic math functions.
-            "scientific": re.compile(
-                r"\bFUNCTION\s+(?:ACOS|ASIN|ATAN|COS|EXP|FACTORIAL|LOG|LOG10|MOD|RANDOM|SQRT|TAN|VARIANCE)\b",
-                re.I,
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Metaprogramming and memory aliasing.
-            "reflection_metaprogramming": re.compile(
-                r"\b(REDEFINES|RENAMES|OCCURS\s+DEPENDING\s+ON|EVALUATE\s+TRUE|EXEC\s+CICS|EXEC\s+SQL)\b",
-                re.I,
-            ),
-            # 24. import (Dependency Inclusions)
-            # BUG FIX (Strict Feature Parity, Rule 4): this key was missing
-            # entirely (not even explicitly None), despite COBOL clearly
-            # having a real dependency-inclusion mechanism (COPY/INCLUDE
-            # copybooks) -- confirmed by `_dependency_capture` immediately
-            # below already correctly extracting these same targets. Every
-            # language's rules dict is expected to define every baseline
-            # key, using None only where genuinely inapplicable (per
-            # how_to_add_a_language.md's Strict Feature Parity rule); a
-            # silently absent key is a real schema-completeness gap, not an
-            # intentional None.
-            "import": re.compile(r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:COPY|INCLUDE)\b", re.I | re.M),
-            "_dependency_capture": re.compile(
-                r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:COPY|INCLUDE)[ \t\n]+['\"]?([A-Za-z0-9_-]+)['\"]?",
-                re.I | re.M,
-            ),
-            # 25. ownership: Authorship indicators.
-            "ownership": re.compile(r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*AUTHOR\.\s+([^\n]+)", re.I | re.M),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
-            # 31. ssr_boundaries: View Horizon. CICS web endpoints.
-            "ssr_boundaries": re.compile(r"\bEXEC\s+CICS\s+(?:WEB\s+SEND|DOCUMENT|WEB\s+READ)\b", re.I),
-            # 32. events: Pub/Sub Network. Signal handlers and MQ bindings.
-            # BUG FIX: the `CALL 'MQPUT'`/`CALL 'MQGET'` alternative shared a
-            # trailing `\b` with the word-ending EXEC CICS alternative, but
-            # ends in a literal `'` (non-word) -- `\b` right after can only
-            # fire if the next char is a word character, never true for the
-            # realistic form (`CALL 'MQPUT' USING queue-name.`, whitespace
-            # after the closing quote). Pulled out of the shared group.
-            "events": re.compile(
-                r"\bEXEC\s+CICS\s+(?:SIGNAL|HANDLE\s+CONDITION)\b|CALL\s+'(?:MQPUT|MQGET)'",
-                re.I,
-            ),
-            # 33. dependency_injection: Inversion of Control.
-            "dependency_injection": None,
-            # 34. macros: Preprocessor Hooks. DEFINE directives.
-            "macros": re.compile(
-                r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*DEFINE\s+[A-Z0-9_-]+\.|>>DEFINE",
-                re.I | re.M,
-            ),
-            # 35. pointers: Memory Map. Explicit pointer tracking.
-            "pointers": re.compile(
-                r"\b(?:POINTER|PROCEDURE-POINTER|FUNCTION-POINTER)\b|\bADDRESS\s+OF\b",
-                re.I,
-            ),
-            # 36. memory_alloc: Manual Memory Management. Heap and CICS allocation.
-            "memory_alloc": re.compile(r"\b(?:ALLOCATE|FREE|EXEC\s+CICS\s+(?:GETMAIN|FREEMAIN))\b", re.I),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics.
-            "telemetry": re.compile(r"\b(?:EXEC\s+CICS\s+WRITEQ\s+TD|CEE3DMP|CEEMOUT|CEEDUMP)\b", re.I),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(DISPLAY)\b", re.I),
-            # 40. explicit_casts (Explicit Type Casting): Explicit type coercion/casting.
-            "explicit_casts": re.compile(r"\b(REDEFINES)\b", re.I),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution.
-            "panics_and_aborts": re.compile(r"\b(STOP\s+RUN|EXIT\s+PROGRAM|GOBACK)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits).
-            "thread_sleeps": re.compile(r"\bEXEC\s+CICS\s+DELAY\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations) (Modern intrinsic bitwise).
-            "bitwise_ops": re.compile(r"\bFUNCTION\s+(?:BIT-AND|BIT-OR|BIT-XOR|BIT-NOT)\b", re.I),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\bEXEC\s+CICS\s+ENQ\b", re.I),
-            # 45. immutability_locks (Immutability Constraints) Immutability.
-            "immutability_locks": re.compile(r"\b(CONSTANT)\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown) Resource release.
-            "cleanup": re.compile(r"\b(CLOSE|FREE|END-DECLARATIVES)\b", re.I),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"\b(LOCAL-STORAGE\s+SECTION|PRIVATE)\b", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(?:MQGET|EXEC\s+CICS\s+RECEIVE)\b", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(IGNORE)\b", re.I),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (COBOL Specifics) ---
-            "serialization_parsing": re.compile(
-                r"(?i)\b(UNSTRING|STRING|JSON\s+PARSE|JSON\s+GENERATE|XML\s+PARSE|XML\s+GENERATE)\b"
-            ),
-            "regex_execution": re.compile(
-                r"(?i)\b(INSPECT|TALLYING|REPLACING)\b"
-            ),  # COBOL's hardware-level string manipulation engine
-            # BUG FIX (severe ReDoS): `\s+.*\s+FROM` has three adjacent
-            # quantifiers whose character sets overlap (`.` matches
-            # whitespace too), so the engine can partition the space between
-            # the receiving-identifier and the two `\s+`s in exponentially
-            # many ways before finding `FROM` -- confirmed 9+ seconds at just
-            # n=2000 (far worse than the typical ~4x/doubling shape). Real
-            # COBOL syntax only ever has a single identifier there, so
-            # replaced the unbounded `.*` with a real identifier character
-            # class, which is both correct and eliminates the ambiguity.
-            "time_date_logic": re.compile(
-                r"(?i)\bACCEPT\s+[A-Za-z0-9_-]+\s+FROM\s+(?:DATE|TIME|DAY)\b|\b(?:CURRENT-DATE|WHEN-COMPILED)\b"
-            ),
-            # BUG FIX: `CALL\s+` shared a trailing `\b` with word-ending
-            # siblings, but ends in whitespace (non-word) -- broke on the
-            # dominant realistic call form, a quoted program-name literal
-            # (`CALL 'SUBPROGRAM' USING ...`), where a quote (non-word)
-            # follows the consumed whitespace. Only the less-common unquoted
-            # data-name form (`CALL WS-PROGRAM-NAME`) happened to work.
-            "ipc_rpc_bridges": re.compile(r"(?i)\bCALL\s+|\bEXEC\s+CICS\s+(?:LINK|XCTL|START|RETURN)\b|\bEXEC\s+SQL\b"),
-        },
-    },
-    "zig": {
-        "_meta": {
-            "target_version": "Zig 0.15.2 (Modern Comptime, Explicit Allocators, Error Sets)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources and Zig Object Notation (ZON) files which are structurally Zig AST.
-        "extensions": [".zig", ".zon"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: The pure-code build scripts that act as the architectural anchors of a Zig project.
-        "exact_matches": ["build.zig", "build.zig.zon"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Zig's build system files ensure that ambiguous contexts are locked in perfectly.
-        "discriminators": [".zig", "build.zig", "build.zig.zon"],
-        # EXECUTION SIGNATURES: Zig is compiled, but `zig run` can be invoked via shebang in scripting scenarios.
-        "shebangs": ["zig"],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: Zig intentionally omits multi-line block comments to keep parsing simple, exclusively using '//'.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes unique 'orelse' and 'catch' patterns.
-            "branch": re.compile(
-                r"(?<!@\")\b(if|else|switch|while|for|try|catch|orelse|break|continue|return)\b(?!\")|&&|\|\|"
-            ),
-            # 2. args: Parameters / Coupling. Captures parameters in function signatures.
-            "args": re.compile(
-                r"\bfn[ \t\n]*(?:@\"[^\"]+\"|[a-zA-Z_]\w*[ \t\n]*)?\(((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*)\)"
-            ),
-            # #1645: group 1 above captures ONLY the bare inner parameter-list
-            # text -- never a self-wrapped "(...)" pair of its own (unlike
-            # python's args group, this one never shares group(0) with a
-            # "fn name(...)" prefix). Tells detector.py's args-counting to
-            # depth-count top-level commas directly over the whole captured
-            # string instead of either the naive whitespace-split fallback
-            # (which miscounts a single typed param like `self: Default` as 2
-            # tokens) or `_count_top_level_args`'s default wrapper-detection
-            # (which mistakes a param TYPE's own parens -- `ctx: @This()`,
-            # function-pointer params -- for the signature's outer wrapper and
-            # truncates/zeroes the count). See `_args_bare_body_groups` in
-            # detector.py's `_calculate_block_metrics` for the full story.
-            "_args_bare_body_groups": {1},
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and const (freeze_hits).
-            "structural_boundaries": re.compile(
-                r"(?<!@\")\b(var|return|defer|errdefer|unreachable|resume|suspend|await|nosuspend|usingnamespace)\b(?!\")"
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors logic blocks (fn). EXCLUDES struct/enum/union headers.
-            "func_start": re.compile(
-                r"^[ \t]*(?:(?:pub|export(?:[ \t]+\"(?:[^\"\\]|\\.)*\")?|extern(?:[ \t]+\"(?:[^\"\\]|\\.)*\")?|inline|noinline|callconv\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*\)|linksection\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*\)|align\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*\))[ \t\n]+)*fn[ \t\n]+(@\"(?:[^\"\\]|\\.)*\"|[a-zA-Z_]\w*)(?=[ \t\n]*\()",
-                re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines structural entities (struct, enum, union, error, opaque).
-            # #1295: an optional `\(` and/or `\*` step-over added between `=`
-            # and the packed/extern modifier so two real corpus-confirmed
-            # idioms aren't missed: a parenthesized-wrapped anonymous struct
-            # (`const lenAsc = (struct { ... }).lenAsc;`, common for a
-            # struct-as-namespace immediately projecting one declaration out
-            # of itself) and a pointer-to-opaque handle type (`const HMONITOR
-            # = *opaque {};`, the standard idiom for an opaque OS handle).
-            "class_start": re.compile(
-                r"^[ \t]*(?:pub[ \t\n]+)?(?:const|var)[ \t\n]+(@\"[^\"]+\"|[a-zA-Z_]\w*)(?:(?!\b(?:const|var)\b)[^=;]){0,150}=[ \t\n]*(?:List\([ \t\n]*|\[_\][ \t\n]*|if[ \t]*\([^)]*\)[ \t\n]*|(?:[A-Za-z0-9_. \t\n]+\|\|[ \t\n]*)+|(?:\(|\*)[ \t\n]*|(?:packed|extern|inline)[ \t\n]+|align\([^)]*\)[ \t\n]+)*(?:struct|enum|union|error|opaque)(?=[ \t\n]*[{(])",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Error handling, payload capturing (|val|), and debug assertions.
-            "safety": re.compile(r"\b(try|catch|orelse|errdefer|std\.debug\.assert)\b|\|[ \t]*[a-zA-Z_]\w*[ \t]*\|"),
-            # 7. safety_neg: Safety Bypasses. Bypassing safety (undefined, unreachable, raw ptr casting).
-            # BUG FIX: the 6 `@`-prefixed builtins (Zig's cast/truncate
-            # operations are all `@builtin` forms) start with a non-word
-            # char, so the shared leading \b could only fire when a word
-            # char immediately preceded the `@` -- never true for how
-            # builtins are actually written. None of the 6 ever matched.
-            "safety_bypasses": re.compile(
-                r"\b(?:undefined|unreachable)\b"
-                r"|@ptrCast|@intCast|@alignCast|@bitCast|@truncate|@enumFromInt"
-            ),
-            # 8. danger: High-Risk Execution. Forceful panics and process terminations.
-            # BUG FIX: `@panic` is `@`-prefixed -- same leading-\b bug.
-            "high_risk_execution": re.compile(r"\b(?:panic|std\.process\.exit)\b|@panic"),
-            # 9. io: I/O & Network Boundaries. Standard library IO, Network, and Filesystem interactions.
-            "io": re.compile(r"\b(std\.fs|std\.net|std\.io(?!\.getStdOut)|std\.ChildProcess|std\.posix|std\.os)\b"),
-            # 10. api: Public Surface Area. Exposed boundaries via 'pub' and 'export' (C ABI).
-            "api": re.compile(r"\b(pub|export)\b"),
-            # 11. flux: State Mutation. State mutation (var) and pointer dereference assignments (.* =).
-            "state_mutation": re.compile(r"\bvar\b|\.\*[ \t]*=[^=]"),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code.
-            "dead_code": re.compile(r"//[ \t]*(?:fn|const|var|pub|if|for|while|try|catch)\b"),
-            # 13. doc: Structured Documentation. Structured documentation (/// and //!).
-            "doc": re.compile(r"///|//!"),
-            # 14. test: Testing & Assertions. Native test framework blocks.
-            # BUG FIX: `test\s+"[^"]*"` ended on `"`, inside the shared
-            # trailing `\b` group. The char after a closing quote (space,
-            # then `{`) is also non-word, so `\b` between two non-word
-            # chars never fired -- the quoted-test-name form (`test "basic"
-            # {`), Zig's dominant real-world test declaration shape, never
-            # matched at all. Pulled out with no trailing `\b`
-            # (self-delimiting on the closing quote).
-            "test": re.compile(
-                r'test\s+"[^"]*"|\b(?:test\s+[a-zA-Z_]\w*|std\.testing\.expect|std\.testing\.expectEqual)\b'
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Suspend/resume and thread primitives.
-            # BUG FIX: `@atomicLoad`/`@atomicStore`/`@atomicRmw` are
-            # `@`-prefixed builtins -- same leading-\b bug.
-            "concurrency": re.compile(
-                r"\b(?:std\.Thread|std\.Thread\.Mutex|std\.Thread\.RwLock|std\.atomic|suspend|resume|await)\b"
-                r"|@atomicLoad|@atomicStore|@atomicRmw"
-            ),
-            # 16. ui_framework: UI / View Components. (Zig lacks native UI; targets common bindings like Mach/zgui).
-            "ui_framework": re.compile(r"\b(mach\.|zgui\.|zopengl\.|capy\.|vaxis\.|raylib\.)\b"),
-            # 17. closures: Closures / Anonymous Functions. (Zig lacks traditional anonymous closures).
-            "closures": None,
-            # 18. globals: Global / Shared State. Top-level file-scoped state.
-            "globals": re.compile(
-                r"^[ \t]*(?:pub[ \t]+)?(?:threadlocal[ \t]+)?(?:comptime[ \t]+)?(?:const|var)\s+[a-zA-Z_]\w*\s*(?::[^=]+)?=",
-                re.M,
-            ),
-            # 19. decorators: Decorators / Annotations. (Zig uses @builtins instead).
-            "decorators": None,
-            # 20. generics: Generics / Type Parameters. Comptime parameters and 'anytype' duck typing.
-            "generics": re.compile(r"\b(anytype|type)\b|\bcomptime\s+[a-zA-Z_]\w*\s*:\s*type\b"),
-            # 21. comprehensions: Iterators / Comprehensions. (Not native to Zig).
-            "comprehensions": None,
-            # 22. scientific: Numerical / Compute Libraries. Math intrinsics and SIMD @Vector support.
-            # BUG FIX: `@Vector`/`@sqrt`/`@sin`/`@cos`/`@splat`/`@reduce`
-            # are `@`-prefixed builtins -- same leading-\b bug.
-            "scientific": re.compile(r"\b(?:std\.math|f16|f32|f64|f80|f128)\b|@Vector|@sqrt|@sin|@cos|@splat|@reduce"),
-            # 23. heat_triggers: Metaprogramming & Reflection. Comptime metaprogramming and reflection.
-            # BUG FIX: `@Type`/`@typeInfo`/`@compileLog`/`@hasDecl`/
-            # `@hasField` are `@`-prefixed builtins -- same leading-\b bug.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:comptime[ \t]*\{|inline\s+for|inline\s+while)\b|@Type|@typeInfo|@compileLog|@hasDecl|@hasField"
-            ),
-            # 24. import: Dependency Inclusions. Module and C-header bridges.
-            # BUG FIX: all 3 are `@`-prefixed builtins -- same leading-\b
-            # bug. None ever matched.
-            "import": re.compile(r"@import\b|@cImport\b|@cInclude\b"),
-            "_dependency_capture": re.compile(
-                r"(?:^[ \t]*(?:(?:pub[ \t]+)?const[ \t]+(?:@\"[^\"]+\"|[a-zA-Z_]\w*)[ \t]*=[ \t]*|_[ \t]*=[ \t]*)?@import|(?:^[ \t]*(?:const[ \t]+(?:@\"[^\"]+\"|[a-zA-Z_]\w*)[ \t]*=[ \t]*)?@cImport[ \t\n]*\{[ \t\n]*)?@cInclude|[ \t]*@cInclude)[ \t\n]*\([ \t\n]*['\"]([^'\"]+)['\"]",
-                re.M,
-            ),
-            # 25. ownership: Authorship indicators in comments.
-            "ownership": re.compile(r"//\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
-            # 31. ssr_boundaries: View Horizon. Zap/httpz response handlers.
-            "ssr_boundaries": re.compile(r"\b(zap\.Endpoint|zap\.Request|httpz\.Request|std\.http\.Server\.Request)\b"),
-            # 32. events: Pub/Sub Network. OS-level event loops.
-            "events": re.compile(r"\b(std\.posix\.epoll_wait|std\.posix\.kevent|xev\.Loop)\b"),
-            # 33. dependency_injection: Inversion of Control.
-            "dependency_injection": None,
-            # 34. macros: Preprocessor Hooks. (Zig lacks macros).
-            "macros": None,
-            # 35. pointers: Memory Map. Explicit pointer tracking.
-            "pointers": re.compile(
-                r"(?<=[=\s,(])\*(?:const\s+|volatile\s+|allowzero[ \t]+)?[a-zA-Z_]\w*|\[\*c?\][a-zA-Z_]\w*|\.\*"
-            ),
-            # 36. memory_alloc: Manual Memory Management. Allocators bypassing the GC.
-            "memory_alloc": re.compile(
-                r"\b(std\.mem\.Allocator|allocator\.alloc|allocator\.free|allocator\.create|ArenaAllocator|c_allocator|page_allocator)\b"
-            ),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": re.compile(r"\basm\b(?:\s+volatile)?\s*\([^)]+\)"),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics.
-            "telemetry": re.compile(r"\b(?:std\.log\.(?:info|err|warn|debug)|std\.log\.scoped)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(std\.debug\.print)\b"),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit casting.
-            # BUG FIX: all 5 are `@`-prefixed builtins -- same leading-\b
-            # bug. None ever matched.
-            "explicit_casts": re.compile(r"@ptrCast\b|@intCast\b|@alignCast\b|@bitCast\b|@as\b"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting context.
-            # BUG FIX: `@panic` is `@`-prefixed -- same leading-\b bug.
-            "panics_and_aborts": re.compile(r"\b(?:unreachable|return)\b|@panic"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits/sleep).
-            "thread_sleeps": re.compile(r"\b(std\.time\.sleep)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability) Coordinated threading.
-            "sync_locks": re.compile(r"\b(Mutex|RwLock|Semaphore|lock|unlock)\b"),
-            # 45. immutability_locks (Immutability Constraints) Immutability.
-            "immutability_locks": re.compile(r"\bconst\b"),
-            # 46. cleanup (Resource Cleanup / Teardown) Resource release.
-            "cleanup": re.compile(r"\b(deinit|free|destroy|allocator\.free)\b"),
-            # 47. encapsulation Scope hiding (Lack of pub).
-            "encapsulation": re.compile(r"^[ \t]*(?!(?:pub|export|extern)\b)(?:const|var|fn)\s+", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": None,
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(std\.testing\.expect|assume|expectError)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Zig Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(std\.json\.parseFrom(?:Slice|TokenSource)|std\.json\.stringify)\b"
-            ),
-            "regex_execution": re.compile(
-                r"\b(std\.mem\.(?:indexOf|tokenize(?:Any)?|split(?:Sequence|Any)?|replace))\b"
-            ),  # Zig has no native regex!
-            "time_date_logic": re.compile(r"\b(std\.time\.(?:nanoTimestamp|milliTimestamp|Timer|sleep))\b"),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(std\.process\.Child|std\.net\.tcpConnectToHost|std\.Thread\.spawn|std\.posix|std\.os\.execve)\b"
-            ),
-        },
-    },
-    "apex": {
-        "_meta": {
-            "target_version": "Salesforce Apex 24.2 (API v62.0+)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Salesforce classes and database triggers.
-        "extensions": [".cls", ".trigger"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Apex code lives and executes on the Salesforce platform; no extensionless configurations exist.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: .cls is highly contested. Salesforce metadata XMLs and SFDX configs act as absolute gravity anchors.
-        "discriminators": [
-            ".cls-meta.xml",
-            ".trigger-meta.xml",
-            "sfdx-project.json",
-            "package.xml",
-        ],
-        # EXECUTION SIGNATURES: Executed exclusively on the Salesforce platform; no shebangs exist.
-        "shebangs": [],
-        # Rationale: Uses standard '//' for lines and '/*' '*/' for block-level Commented / Non-Executable Text.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes switch on/when and DML try-catch.
-            "branch": re.compile(
-                r"\b(if|else|switch\s+on|when|for|while|do|try|catch|finally|break|continue|return)\b|&&|\|\||\?|\?\?",
-                re.I,
-            ),
-            # 2. args: Parameters / Coupling. Captures method parameters and trigger event signatures.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # both alternatives (was only reachable via group(0), the whole
-            # match including the decorator/modifier/return-type/name prefix,
-            # or for triggers the "trigger name on object" prefix) so
-            # detector.py's counter isolates just "(...)" -- the whole-match
-            # fallback overcounted every zero/one-arg signature by +1 the same
-            # way Python's did (#1199). Name groups added too, purely so
-            # existing extraction tests keep passing.
-            "args": re.compile(
-                # #1963: `new` is a reserved instantiation keyword, never a real return
-                # type/modifier -- excluded from the optional prefix-consuming group so a
-                # line-leading `new ClassName(...)` constructor-call argument (common in
-                # multi-line SObject-builder calls) can't be parsed as "return type = new,
-                # name = ClassName". Mirrors csharp's own GHOST ARGS SHIELD, which already
-                # excludes `new` from its equivalent prefix group.
-                r"^[ \t]*(?:@[\w.]+\b(?:\s*\((?:[^)(]|\([^)(]*\))*\))?\s*){0,5}"
-                r"(?:(?:public|private|global|protected|static|override|virtual|abstract|testMethod)\s+){0,5}"
-                r"(?:(?!new\b)[a-zA-Z_][\w.]*(?:\s*<(?:[^<>]|<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)*>)?(?:\s*\[\s*\])*\s+)?(?!(?:class|interface|enum|if|for|while|switch|catch)\b)([a-zA-Z_]\w*)\s*(\([^)]*\))|"
-                r"^[ \t]*trigger\s+([a-zA-Z_]\w*)\s+on\s+[a-zA-Z_]\w*\s*(\([^)]*\))",
-                re.M | re.I,
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and sharing keywords.
-            "structural_boundaries": re.compile(
-                r"\b(class|interface|trigger|enum|final|transient|implements|extends|virtual|abstract|return)\b",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ReDoS clamped to {0,5}. Strict capture groups and lookaheads for both Methods and Triggers.
-            "func_start": re.compile(
-                # #1221: the method branch used to have no requirement that
-                # ANY of the annotation/modifier/return-type prefixes
-                # actually be present -- all three are individually
-                # optional/zero-allowed, so a bare call statement
-                # (`next();`) with none of them satisfied the rest of the
-                # branch identically to a real signature, since this
-                # branch (like csharp's/apex's siblings) never verifies a
-                # trailing `{`/`;` terminator either (that's left entirely
-                # to the pipeline's own post-hoc brace search, same
-                # historical shape #789 diagnosed for csharp). A real Apex
-                # method/constructor always carries at least one of an
-                # annotation, a modifier, or a return type before its name
-                # (a bare call statement carries none of the three) -- so
-                # gate the whole branch on seeing at least one of those
-                # three shapes before letting the existing (unchanged)
-                # optional-repeat groups consume them. Mirrors this same
-                # regex's own `args` sibling ("GHOST ARGS SHIELD") pattern
-                # of demanding structural proof before treating text as a
-                # definition rather than an invocation.
-                #
-                # #1963: `new` is a reserved instantiation keyword, never a real return
-                # type/modifier -- excluded from both the initial gating lookahead's
-                # bare-identifier alternative and the optional prefix-consuming group so a
-                # line-leading `new ClassName(...)` constructor-call argument (common in
-                # multi-line SObject-builder calls) can't satisfy the #1221 gate as
-                # "return type = new, name = ClassName". Mirrors csharp's own GHOST ARGS
-                # SHIELD, which already excludes `new` from its equivalent prefix group.
-                r"^[ \t]*(?=@|(?:public|private|global|protected|static|override|virtual|abstract|testMethod)\b|(?!new\b)[a-zA-Z_][\w.]*[ \t\n]+)"
-                r"(?:@[\w.]+\b(?:\s*\((?:[^)(]|\([^)(]*\))*\))?\s*){0,5}"
-                r"(?:(?:public|private|global|protected|static|override|virtual|abstract|testMethod)\s+){0,5}"
-                r"(?:(?!new\b)[a-zA-Z_][\w.]*(?:\s*<(?:[^<>]|<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)*>)?(?:\s*\[\s*\])*\s+)?(?!(?:class|interface|enum|if|for|while|switch|catch)\b)([a-zA-Z_]\w*)(?=\s*\()|"
-                r"^[ \t]*trigger\s+([a-zA-Z_]\w*)(?=\s+on\b)",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # ReDoS clamped. Strict capture group and positive lookahead applied.
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+\b(?:\s*\((?:[^)(]|\([^)(]*\))*\))?\s*){0,5}"
-                r"(?:(?:public|private|global|virtual|abstract|with\s+sharing|without\s+sharing|inherited\s+sharing)\s+){0,5}"
-                r"(?:class|interface|enum)\s+([a-zA-Z_]\w*)(?=\s+implements|\s+extends|\s*\{|\n|$)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Sharing rules, FLS checks, and null-safe navigation.
-            "safety": re.compile(
-                r"\b(with\s+sharing|inherited\s+sharing|isAccessible|isCreateable|isUpdateable|isDeletable|StripInaccessible|try|catch|finally|LIMIT\s+\d+|Security\.stripInaccessible)\b|\?\.",
-                re.I,
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing safety (without sharing, raw casting).
-            # BUG FIX: `@SuppressWarnings` is `@`-prefixed -- the shared
-            # leading \b could only fire when a word char immediately
-            # preceded the `@`, never true for how annotations are actually
-            # written. Never matched at all.
-            "safety_bypasses": re.compile(
-                r"\b(?:without\s+sharing|Database\.query(?!\s*\(.*?WITH\s+SECURITY_ENFORCED))\b"
-                r"|@SuppressWarnings|\(\s*[A-Z_]\w*\s*\)\s*[a-z_]\w*",
-                re.I,
-            ),
-            # 8. danger: High-Risk Execution. Dynamic SOQL, mass deletion, and hardcoded IDs.
-            "high_risk_execution": re.compile(
-                r"\b(Database\.query|delete|undelete|emptyRecycleBin|purgeOldAsyncJobs)\b|\'[a-z0-9]{15,18}\'",
-                re.I,
-            ),
-            # 9. io: I/O & Network Boundaries. SOQL/SOSL queries, HTTP callouts, and batch boundaries.
-            "io": re.compile(
-                r"\[\s*(?:SELECT|FIND)\b[^\]]*\]|\b(Http|HttpRequest|HttpResponse|Database\.executeBatch|HTLoad|HTGet|ENQUIRE)\b",
-                re.I,
-            ),
-            # 10. api: Public Surface Area. Exposed global interfaces, REST resources, and UI hooks.
-            "api": re.compile(
-                r"\b(global|webservice)\b|@(?:RestResource|HttpGet|HttpPost|HttpPut|HttpDelete|HttpPatch|AuraEnabled|InvocableMethod|RemoteAction)\b",
-                re.I,
-            ),
-            # 11. flux: State Mutation. State mutation (DML operations and standard assignments).
-            "state_mutation": re.compile(
-                r"\b(insert|update|upsert|delete|merge)\b|^[ \t]*(?:this\.)?[a-z_]\w*\s*[-+*/%]?=|\.(?:add|addAll|remove|put|clear|set)\s*\(",
-                re.I | re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code or queries.
-            "dead_code": re.compile(
-                r"//[ \t]*(?:class|trigger|public|private|if|for|while|System\.debug|\[\s*SELECT|insert|update)\b|/\*[ \t]*(?:class|trigger|\[\s*SELECT)",
-                re.I | re.M,
-            ),
-            # 13. doc: Structured Documentation. ApexDoc annotations and metadata blocks.
-            "doc": re.compile(r"/\*\*|@description|@param|@return|@author|@date|@example", re.I),
-            # 14. test: Testing & Assertions. Salesforce test execution and assertion markers.
-            "test": re.compile(
-                r"@isTest|@TestSetup|@TestVisible|\b(?:Test\.startTest|Test\.stopTest|System\.assert|Assert\.(?:isTrue|isNotNull|areEqual)|Test\.setMock)\b",
-                re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Asynchronous Apex (Future, Queueable, Batch).
-            "concurrency": re.compile(
-                r"@future|\b(Queueable|Schedulable|Batchable|System\.enqueueJob|Database\.executeBatch|System\.schedule)\b",
-                re.I,
-            ),
-            # 16. ui_framework: UI / View Components. Visualforce and LWC bridge components.
-            "ui_framework": re.compile(
-                r"\b(ApexPages|PageReference|StandardController|Dom\.Document|SGML|HyperText|WorldWideWeb|BrowserView)\b",
-                re.I,
-            ),
-            # 17. closures: Closures / Anonymous Functions. (Apex lacks true anonymous closures).
-            "closures": None,
-            # 18. globals: Global / Shared State. Custom Settings, Organization data, and User context.
-            # QUADRATIC BLOWUP FIX: the two `\w+` prefixes before the
-            # required-but-often-absent `__c.getInstance`/`__mdt.getInstance`
-            # suffixes were unbounded with no preceding \b anchor -- O(n^2)
-            # on a long run of word characters with neither suffix present.
-            # Bounded to {1,100}; real custom-object/metadata-type names
-            # don't get remotely that long.
-            "globals": re.compile(
-                r"\b(UserInfo|System\.Label|Organization|Cache\.Org|Cache\.Session)\b|\w{1,100}__c\.getInstance\b|\w{1,100}__mdt\.getInstance\b",
-                re.I,
-            ),
-            # 19. decorators: Decorators / Annotations. Execution context annotations.
-            "decorators": re.compile(r"@[a-z_]\w*(?:\([^)]*\))?", re.I),
-            # 20. generics: Generics / Type Parameters. Parameterized collections (List, Map, Set).
-            "generics": re.compile(r"\b(?:List|Set|Map|Iterable|Iterator)\s*<\s*[a-z_][^>]*>", re.I),
-            # 21. comprehensions: Iterators / Comprehensions. Inline SOQL for-loops act as mappers.
-            "comprehensions": re.compile(r"\bfor\s*\([^)]+:\s*\[\s*SELECT[^\]]+\]\s*\)", re.I),
-            # 22. scientific: Numerical / Compute Libraries. Standard numerical and currency math.
-            "scientific": re.compile(
-                r"\b(Math\.(?:abs|sin|cos|tan|exp|log|pow|sqrt)|Decimal|setScale|setRoundingMode)\b",
-                re.I,
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Dynamic SOQL, Reflection, and Describe calls.
-            "reflection_metaprogramming": re.compile(
-                r"\b(Database\.query|Type\.forName|Schema\.getGlobalDescribe|Schema\.describeSObjects|SObject\.put|SObject\.get|JSON\.deserializeUntyped)\b",
-                re.I,
-            ),
-            # 24. import: Dependency Inclusions.
-            # Apex lacks a native import keyword. Cross-package dependencies are established via
-            # reflection (Type.forName) or explicitly namespaced static invocations.
-            "import": re.compile(
-                r"\bType\.forName\b|(?!(?:System|Database|Schema|Auth|Cache|Chatter|EventBus|Limits|Messaging|RestContext|Test)\b)\b[a-zA-Z_]\w*\.[A-Z]\w*\b",
-                re.I,
-            ),
-            "_dependency_capture": re.compile(
-                r"\bType\s*\.\s*forName\s*\(\s*['\"]([^'\"]+)['\"](?:[ \t\n]*,[ \t\n]*['\"]([^'\"]+)['\"])?\s*\)",
-                re.I,
-            ),
-            # 25. ownership: Authorship indicators.
-            "ownership": re.compile(
-                r"(?:@author|Author|Created by|Maintainer|Copyright|Tim Berners-Lee):\s+([^\n]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags and architecture specs.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]|\b(?:WorldWideWeb|RFC|W3C|CERN|TBL|ENQUIRE)\b",
-                re.I,
-            ),
-            # 31. ssr_boundaries: View Horizon. REST and Visualforce response handlers.
-            "ssr_boundaries": re.compile(
-                r"\b(RestContext\.request|RestContext\.response|RestRequest|RestResponse|renderAs)\b",
-                re.I,
-            ),
-            # 32. events: Pub/Sub Network. Platform Events and Trigger context.
-            "events": re.compile(
-                r"\b(EventBus\.publish|PlatformEvent)\b|trigger\s+[a-zA-Z_]\w+\s+on\s+[a-zA-Z_]\w+Event__e",
-                re.I,
-            ),
-            # 33. dependency_injection: Inversion of Control. Mocking and injection frameworks.
-            "dependency_injection": re.compile(
-                r"\b(fflib_ApexMocks|fflib_SObjectUnitOfWork|Injector|di_Injector|Application\.Service|Type\.newInstance)\b",
-                re.I,
-            ),
-            # 34. macros: Preprocessor Hooks. (Apex lacks a preprocessor).
-            "macros": None,
-            # 35. pointers: Memory Map. (Apex is fully managed with no pointers).
-            "pointers": None,
-            # 36. memory_alloc: Manual Memory Management. Heap observations.
-            "memory_alloc": re.compile(
-                r"\b(Limits\.getHeapSize|Limits\.getLimitHeapSize|new\s+[a-z_]\w*)\b",
-                re.I,
-            ),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics (Structured logs).
-            "telemetry": re.compile(
-                r"\b(Logger|Log|AppLog|NebulaLogger)\.(?:info|error|warn|debug|trace)\b|\binsert\s+new\s+Log__c\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(System\.debug)\b", re.I),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit type coercion.
-            "explicit_casts": re.compile(
-                r"\(\s*(?:[A-Z]\w*|int|Id|String|Decimal|Boolean|Double|Long|Blob|Date|Datetime|Time)\s*\)\s*[a-zA-Z_$]"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution or rollback.
-            "panics_and_aborts": re.compile(r"\b(throw|Database\.rollback|purgeOldAsyncJobs)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Apex has no native sleep/delay).
-            "thread_sleeps": None,
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability) Row-level SOQL locking.
-            "sync_locks": re.compile(r"\bFOR\s+UPDATE\b", re.I),
-            # 45. immutability_locks (Immutability Constraints) Immutability (constants).
-            "immutability_locks": re.compile(r"\b(static\s+final|final|const)\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown) Recycle bin management.
-            "cleanup": re.compile(r"\b(emptyRecycleBin|Database\.rollback|clear)\s*\(", re.I),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"\b(private|protected)\b", re.I),
-            # 48. listeners (Event Listeners / Observers) Triggers listening for events.
-            "listeners": re.compile(r"^[ \t]*trigger\s+[a-z_]\w*\s+on\b", re.I | re.M),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX: `@SuppressWarnings` is `@`-prefixed -- same
-            # leading-\b bug as safety_bypasses above.
-            "test_skip": re.compile(r"\b(?:StubProvider|Test\.setMock)\b|@SuppressWarnings", re.I),
-        },
-    },
-    "dart": {
-        "_meta": {
-            "target_version": "Dart 3.11 (Records, Patterns, Class Modifiers, Macros, FFI)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Dart sources.
-        "extensions": [".dart"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Dart rarely uses extensionless configurations.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, pub package manifests, and analyzer configurations to anchor Flutter/Dart projects.
-        "discriminators": [
-            ".dart",
-            "pubspec.yaml",
-            "pubspec.lock",
-            "analysis_options.yaml",
-            ".metadata",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for standalone Dart scripting.
-        "shebangs": ["dart"],
-        # UPGRADED: Maps to Family 2 (Nested C)
-        # Rationale: (CORRECTION) Like Swift and Rust, Dart officially supports nested multi-line
-        # comments (/* /* */ */). Standard C parsing would prematurely terminate here causing geometry failure.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes modern pattern guards (when) and null-coalescing.
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|while|do|try|catch|finally|break|continue|when)\b|&&|\|\||\?|\?\?",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Captures parameters in function, method, and lambda signatures.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # both alternatives (was only reachable via group(0), the whole
-            # match including the name prefix) so detector.py's counter
-            # isolates just "(...)" -- the whole-match fallback overcounted
-            # every zero/one-arg signature by +1 the same way Python's did
-            # (#1199). Name group added to the first alternative too, purely
-            # so existing extraction tests keep passing.
-            # #2309 (investigated, NOT fixed via this regex -- see detector.py's
-            # dart branch instead): a bodyless (`;`-terminated) `this.`/`super.`-
-            # forwarding constructor (`_DeleteTextAction(this.state, ...);`,
-            # flutter/editable_text.dart:6353) reads 0 args because `func_start`
-            # accepts a bare `;` terminator for these but this SEPARATE
-            # `args`-counting regex never did. Adding `;` to the trailing
-            # lookahead here was tried and reverted: `test_dart_args_invalid`
-            # (`tests/extraction/languages/test_dart.py`) already asserts this
-            # regex must NEVER match a bare call statement (`foo(x);`) --
-            # `func_start`'s own Invocation Shield (#1221) doesn't apply here,
-            # since this regex is also `.search()`ed over the whole function
-            # `block` when dart supplies no `args_search_text` (true before
-            # #2309's own detector.py fix), so a `;`-accepting version matches
-            # the FIRST bare call statement inside a zero-paren declaration's own
-            # body (e.g. `Rect get bounds { ... box.getTransformTo(null); ...
-            # }`, wrongly borrowing 1 arg) just as readily as a real bodyless
-            # ctor. Fixed instead via `args_count_override` in detector.py,
-            # which counts the real parameter list directly for this one shape
-            # without loosening this shared regex's own contract.
-            "args": re.compile(
-                r"(?!(?:if|for|while|switch|catch|case|when|return|throw|new)\b)\b([A-Za-z_$][\w$]*)(?:[ \t\n]*<[^>]*>)?[ \t\n]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))(?=[ \t\n]*(?:\{|=>|:|async|sync))|(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))[ \t\n]*=>",
-                re.I | re.M,
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and const/final.
-            "structural_boundaries": re.compile(
-                r"\b(var|late|return|yield|await|class|mixin|extension|enum|typedef|import|export|part|library|base|sealed|interface|macro)\b|=>",
-                re.I,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # ReDoS clamped to {0,5}. Strict capture group and positive lookahead applied.
-            # #1221: the trailing lookahead's parenthesized alternative
-            # used to be a bare `\(` -- proof a `(` follows, nothing more
-            # -- so a bare call statement at true line start (`next();`)
-            # false-positive-matched as a method/function definition. Dart
-            # has both a genuinely prefixed stub case that ends in bare
-            # `;` with no `{`/`=>` anywhere (`external void
-            # externalFunc();`, has a modifier + return type) and a
-            # legitimate zero-prefix case (the bare constructor shape
-            # `MyClass() {}`, no modifier and no return type) that always
-            # reaches a real `{` anyway -- so, mirroring groovy's #1221
-            # fix, this is split into three alternatives instead of one:
-            # (A) has a modifier (static/external/abstract/covariant/
-            # late), (B) has no modifier but has a return-type-shaped
-            # prefix token -- both keep the original lenient lookahead
-            # (bare `;` still allowed, since a real call statement never
-            # carries a modifier or a return type), or (C) has neither --
-            # must fully close its (non-nested, same bound as `args`)
-            # parameter list and reach a real `=>`/`{`, never a bare `;`
-            # (a bare call and a zero-prefix stub are otherwise
-            # indistinguishable here, but dart's zero-prefix valid cases
-            # are all constructors that always have bodies anyway, so this
-            # loses no coverage).
-            # =====================================================================
-            # [ THE RETURN-TYPE BOUNDARY SHIELD (DART) ]
-            # Issue #1417: The previous return-type token class `[\w<>\[\],?(){}]`
-            # allowed `{`, `}`, `(`, `)` as valid literal characters. Combined with
-            # lazy repetition, this let the return-type guess wander across a real
-            # function's own parameter-list close and body-open `) {` and land on an
-            # unrelated identifier deep inside the body (e.g. `Navigator.of`),
-            # misreporting it as a phantom function definition.
-            # FIX: Tightened the character class to `(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))`
-            # to reject `{`/`}` entirely and only permit `(`/`)` if they are balanced.
-            # This prevents the regex from crossing structural boundaries like `) {`.
-            # =====================================================================
-            "func_start": re.compile(
-                r"^[ \t]*(?!(?:implements|with|extends)\b)(?:@[a-zA-Z_$][\w$]*\b(?:\([^)]*\))?[ \t\n]*){0,5}"
-                r"(?:"
-                r"(?:(?:static|external|abstract|covariant|late)[ \t\n]+){1,5}"
-                r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
-                r"(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,4}?(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+(?<!,)[ \t\n]+))?"
-                r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
-                r"(?:(?:(?P<getA>get)|set|factory|const)[ \t\n]+)?((?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*|operator[ \t\n]+[^\s\w]+)"
-                # #2462: one level of generic-argument nesting in the method's
-                # own type-parameter list (`foo<T extends State<StatefulWidget>>()`)
-                # -- a bare `<[^>]*>` stops at the inner `>` and the whole
-                # generic method is missed.
-                r"(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:\(|=>|\{|(?(getA);|(?!))))"
-                r"|"
-                r"(?:(?:static|external|abstract|covariant|late)[ \t\n]+){0,5}"
-                r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
-                r"(?:(?!\?[ \t\n]+(?:get|set|factory|[a-zA-Z_]))(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,4}?(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+(?<!,)[ \t\n]+)))"
-                r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
-                r"(?:(?:(?P<getB>get)|set|factory|const)[ \t\n]+)?((?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*|operator[ \t\n]+[^\s\w]+)"
-                r"(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:\(|=>|\{|(?(getB);|(?!))))"
-                r"|"
-                # #2308 item 1: `implements`/`with` added to every occurrence of this
-                # keyword-exclusion list (all 8, shared verbatim across all 4
-                # alternatives). The outermost `(?!(?:implements|with|extends)\b)`
-                # guard at this regex's very start only rejects a match that STARTS
-                # on one of these keywords -- it doesn't stop the return-type-prefix
-                # token loop below from swallowing one of them as an ordinary interior
-                # token when the match starts on an earlier line instead (e.g. a
-                # multi-line `class Foo extends Base\n    with\n        MixinA,\n
-                # MixinB\n    implements SomeInterface {` header, where a match
-                # starting on `MixinB`'s own line can consume `implements` as its
-                # final "return-type" token and land on `SomeInterface` as a phantom
-                # function name). Confirmed via flutter/editable_text.dart:2480's
-                # `EditableTextState ... implements AutofillClient {` header.
-                # Deliberately does NOT add `extends` here -- already confirmed unsafe
-                # in this same investigation (#2072 item 1): `extends` also appears
-                # inside a generic method's own type-parameter bound
-                # (`pushNamed<T extends Object?>(...)`), which this token loop cannot
-                # distinguish from a bare class-header continuation without real
-                # bracket-depth tracking. A class header that continues via a bare
-                # `extends` on its own line (rare -- `extends` is almost always
-                # attached to the same line as `class Foo`) can still slip through;
-                # left as a known, documented residual limitation rather than risk
-                # breaking the far more common generic-bound pattern.
-                # #2071: this zero-prefix branch's lookahead used to accept a bare
-                # `=>` unconditionally (no `get` required) and validated a preceding
-                # "parameter list" with a naive, non-balanced-paren `\([^)]*\)` --
-                # together these made Dart 3 switch-expression arms (`Pattern =>
-                # result,`, including bare `_ => result,`) and ordinary call
-                # statements with a lambda argument (`obj.method((x) => ...)`, whose
-                # nested `)` satisfied the naive paren check) false-positive-match as
-                # function/getter definitions. Dart's real grammar has no
-                # parameterless `=> expr` construct without an explicit `get`, so the
-                # bare-arrow alternative is now gated the same way the bare `;`
-                # alternative already is via `(?(getC)...)`. The paren alternative now
-                # reuses the SAME balanced-paren pattern the `args` rule and this
-                # regex's own return-type-prefix groups already use elsewhere, and
-                # rejects a parameter list that opens with `:` (only valid in Dart's
-                # object-destructuring patterns, e.g. `StatefulElement(:final T
-                # state) => state,` -- never a real parameter list).
-                r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
-                r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
-                r"(?:(?:(?P<getC>get)|set|factory|const)[ \t\n]+)?((?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*|operator[ \t\n]+[^\s\w]+)"
-                r"(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:\((?!\s*:)(?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)[ \t\n]*(?:async\*?|sync\*)?[ \t\n]*(?:=>|\{|:)|(?(getC)=>|(?!))|\{))"
-                r"|"
-                r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
-                r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
-                r"(?:const[ \t\n]+)?(_?[A-Z]\w*(?:\.[a-zA-Z_]\w*)?)"
-                # #2308 item 2 / #2462: this alternative originally required
-                # `this.`/`super.` inside the parens. A bodyless DEFAULT/named
-                # constructor with an EMPTY parameter list (`ClassName();`,
-                # `ClassName.foo();` -- e.g. flutter/semantics.dart's
-                # `ChildSemanticsConfigurationsResultBuilder();`) has neither and
-                # never matched. The lookahead now also accepts whitespace-only
-                # parens -- but that form is shape-identical to a bare zero-arg
-                # call statement (`FlutterTimeline.finishSync();`,
-                # `SystemNavigator.selectSingleEntryHistory();`), so detector.py's
-                # dart branch gates the empty-paren case on real brace-depth
-                # tracking: it's kept only when the name's leading segment is the
-                # nearest brace-enclosing class/mixin/enum -- true for a real
-                # constructor, never for a call statement. The `this.`/`super.`
-                # form stays regex-only (unambiguous on its own).
-                r"(?=[ \t\n]*(?:<[^>]*>[ \t\n]*)?\((?:[ \t\n]*|[^)]*(?:this\.|super\.)[^)]*)\)[ \t\n]*;)"
-                r")",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # =====================================================================
-            # [ THE VERTICAL MODIFIER & INHERITANCE SHIELD (DART) ]
-            # Dart allows modifiers to stack (e.g., `abstract base mixin class`)
-            # and extends/implements declarations that broke the rigid trailing lookahead.
-            # FIX: Grouped the class modifiers into a bounded set `(?:(?:abstract|sealed|base|interface|final|macro)[ \t\n]+){0,5}`.
-            # Upgraded all internal spaces to `[ \t\n]+` to jump vertical gaps, and
-            # swapped the rigid lookahead for an optional non-capturing inheritance
-            # group `(?:[ \t\n]+(?:extends|implements|with).*?)?` to handle inheritance paths.
-            # =====================================================================
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+\b(?:\([^)]*\))?[ \t\n]*){0,5}"
-                r"(?:(?:abstract|sealed|base|interface|final|macro|mixin)[ \t\n]+){0,5}"
-                r"(?:class|mixin|enum|extension(?:[ \t\n]+type(?:[ \t\n]+const)?)?|extension)[ \t\n]+(?:/\*.*?\*/[ \t\n]*)?([A-Z_]\w*)(?:[ \t\n]+(?:extends|implements|with)[ \t\n]+[A-Za-z_$][\w_<>, \t\n]*)?",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Null safety boundaries, type assertions, and required parameters.
-            # BUG FIX: `@immutable` and `@mustCallSuper` both start with `@`
-            # (non-word), so the shared leading \b could only fire when a
-            # word char immediately preceded the `@` -- never true for how
-            # annotations are actually written (always preceded by
-            # whitespace or a line start). Both never matched at all.
-            # (`!is` is a separate, harmless case: it still "matches" via
-            # the bare `is` alternative catching its own tail as a
-            # substring, so it isn't a functional miss -- left as-is.)
-            "safety": re.compile(
-                r"\b(?:try|catch|finally|on\s+[A-Z]\w*|assert|required|late|is|!is|SafeArea)\b"
-                r"|@immutable|@mustCallSuper|\?\?|\?.",
-                re.I,
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing sound null safety or static analysis.
-            "safety_bypasses": re.compile(r"!\s*[;,\n)\.\]]|\bdynamic\b|//\s*ignore(?:_for_file)?:\s*\w+"),
-            # 8. danger: High-Risk Execution. Process killers and catastrophic exit commands.
-            "high_risk_execution": re.compile(r"\b(exit|exitCode|Process\.killPid)\b", re.I),
-            # 9. io: I/O & Network Boundaries. Disk, Network, WebSockets, and Uri parsing (Includes legacy CERN triggers).
-            "io": re.compile(
-                r"\b(File|Directory|HttpClient|HttpServer|ServerSocket|WebSocket|Uri\.parse|HtmlDocument|HttpRequest|HttpResponse|HTRequest|Nexus|ENQUIRE)\b",
-                re.I,
-            ),
-            # 10. api: Public Surface Area. Exposed visibility (Lack of _ prefix) and routing decorators.
-            "api": re.compile(
-                r"\b(export|part\s+of)\b|@(Route|Get|Post|Mapping|visibleForTesting|pragma)\b|^[ \t]*(?:class|mixin|enum|extension|typedef)\s+(?![_])[A-Za-z]\w*",
-                re.I | re.M,
-            ),
-            # 11. flux: State Mutation. State mutation (setState and reactive collection mutators).
-            "state_mutation": re.compile(
-                r"\b(setState|notifyListeners|markNeedsBuild|StreamController\.add)\b|[^!=<>\+\-\*\/%&\|\s]=\s*[^=]|(?:\+\+|--)|\.(?:add|addAll|remove|insert|clear|update)\s*\(",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code or dead widgets.
-            "dead_code": re.compile(
-                r"//[ \t]*(?:class|mixin|void|if|for|while|print|Widget|return)\b|/\*[ \t]*(?:class|mixin|void|Widget|if|for)"
-            ),
-            # 13. doc: Structured Documentation. dartdoc annotations and structured comments.
-            "doc": re.compile(r"///|/\*\*|@param|@return"),
-            # 14. test: Testing & Assertions. Flutter test frameworks and standard expect/verify markers.
-            "test": re.compile(
-                r"\b(?:test|testWidgets|group|setUp|tearDown|pumpWidget|pumpAndSettle|find\.(?:byType|text|byKey))\b|\b(?:expect|verify|when)\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Event Loop primitives (Future, Stream, Isolate).
-            # BUG FIX: `sync\*` ended on `*` (non-word) inside the shared
-            # trailing \b group -- the generator-function modifier
-            # `sync* { ... }` never matched (no bare "sync" alternative
-            # exists to mask it, unlike `async*`, which happened to still
-            # match via the bare "async" alternative catching it as a
-            # substring). Pulled both `\*`-suffixed forms out for
-            # consistency.
-            "concurrency": re.compile(
-                r"\b(?:async|await|Future|Stream|Isolate|ReceivePort|SendPort|Completer|Timer|StreamSubscription)\b"
-                r"|\basync\*|\bsync\*",
-                re.I,
-            ),
-            # 16. ui_framework: UI / View Components. Flutter Component trees and DOM nodes (Includes TBL triggers).
-            "ui_framework": re.compile(
-                r"\b(Widget|BuildContext|StatefulWidget|Scaffold|Container|Text|HtmlElementView|RichText|Hyperlink|SGML|HyperText|Browser)\b",
-                re.I,
-            ),
-            # 17. closures: Closures / Anonymous Functions. Fat-arrows and anonymous function blocks.
-            # BUG FIX (ReDoS): `[^)]*` was unbounded. Confirmed quadratic
-            # scaling (0.011s/0.045s/0.179s/0.713s/2.85s for n=5k/10k/20k/
-            # 40k/80k -- ~4x per doubling) against an adversarial run of
-            # unclosed `(` characters: at each of the ~n candidate `(`
-            # start positions, the unbounded class scans to the end of the
-            # string looking for a `)` that never appears, backtracking
-            # across the whole remaining length -- O(n) work at each of
-            # O(n) positions. Bounded to `{0,300}`, the same fix shape used
-            # elsewhere in this sweep.
-            "closures": re.compile(r"=>|\(\s*[^)]{0,300}\)\s*(?:async\*?|sync\*?)?[ \t]*\{"),
-            # 18. globals: Global / Shared State. Static class fields and environmental bindings.
-            "globals": re.compile(
-                r"\b(static\s+final|static\s+const|Platform\.environment|window\.|Zone\.current)\b|^[ \t]*(?:final|const|var)\s+[A-Za-z_$][\w$]*[ \t]*=",
-                re.I | re.M,
-            ),
-            # 19. decorators: Decorators / Annotations. Annotations applied to methods/classes.
-            "decorators": re.compile(r"@[A-Za-z_$][\w$]*(?:\([^)]*\))?"),
-            # 20. generics: Generics / Type Parameters. Parameterized collections and generic classes.
-            "generics": re.compile(r"<\s*[A-Z][^>]*>"),
-            # 21. comprehensions: Iterators / Comprehensions. Collection for/if and functional pipelines.
-            "comprehensions": re.compile(
-                r"\[\s*(?:for|if)\s*\([^)]*\)|\{\s*(?:for|if)\s*\([^)]*\)|\.(?:map|where|reduce|fold|expand|every|any)\s*\("
-            ),
-            # 22. scientific: Numerical / Compute Libraries. math.pi, typed binary arrays, and Matrix4 vectors.
-            "scientific": re.compile(
-                r"\b(math\.sin|math\.cos|math\.sqrt|math\.pi|dart:math|Float64List|Float32List|Int32List|Uint8List|Vector2|Vector3|Matrix4)\b",
-                re.I,
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Reflection, Native Bridges, and code generation markers.
-            "reflection_metaprogramming": re.compile(
-                r'\b(MethodChannel|EventChannel|dart:mirrors|reflect|reflectClass|noSuchMethod|dart:js_interop)\b|part\s+[\'"][^\'"]+\.(?:g|freezed)\.dart[\'"]',
-                re.I,
-            ),
-            # 24. import: Dependency Inclusions. Dependency resolution and library partitions.
-            "import": re.compile(r'^[ \t]*(?:import|export|part|part\s+of)\b\s*[\'"][^\'"]+[\'"]', re.M),
-            "_dependency_capture": re.compile(
-                r"(?:^|[ \t;{}])(?:import|export|part(?:[ \t\n]+of)?)\b[ \t\n]*(?:['\"]([^'\"]+)['\"]|([a-zA-Z_$][\w$]*)[ \t\n]*;)",
-                re.M,
-            ),
-            # 25. ownership: Authorship indicators.
-            "ownership": re.compile(r"//\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags and architecture specs.
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|RFC|W3C|CERN|TBL|ENQUIRE)[^\]]{0,300}\]|\b(?:Tim\s+Berners-Lee|WorldWideWeb|HyperText\s+Proposal)\b",
-                re.I,
-            ),
-            # 31. ssr_boundaries: View Horizon. shelf/Serverpod response handlers.
-            # BUG FIX: `Router\(\)` ends on `)` -- shared trailing \b never
-            # fired. Never matched.
-            "ssr_boundaries": re.compile(
-                r"\b(?:shelf|dart_frog|Serverpod|Response\.(?:ok|internalServerError)|RequestContext|Handler|Serve|renderHtml)\b"
-                r"|Router\(\)",
-                re.I,
-            ),
-            # 32. events: Pub/Sub Network. Stream subscriptions and broadcast observables.
-            "events": re.compile(
-                r"\b(StreamController|EventBus|Subject|BehaviorSubject|PublishSubject|EventEmitter|BlocProvider|notifyListeners)\b|\.listen\s*\(",
-                re.I,
-            ),
-            # 33. dependency_injection: Inversion of Control. GetIt, Provider, and Injectable markers.
-            # BUG FIX: `@injectable` starts with `@` (non-word), so the
-            # shared leading \b could only fire when a word char
-            # immediately preceded the `@` -- never true for how
-            # annotations are actually written. Never matched at all.
-            "dependency_injection": re.compile(
-                r"\b(?:GetIt\.I|GetIt\.instance|Provider\.of|ConsumerWidget|ref\.watch|ref\.read|Injector)\b|@injectable",
-                re.I,
-            ),
-            # 34. macros: Preprocessor Hooks. Modern macros and JsonSerializable generators.
-            "macros": re.compile(
-                r"\bmacro\s+class\b|@(?!(?:override|deprecated|required|protected|visibleForTesting|pragma|immutable))[A-Z]\w*Macro\(\)|@JsonSerializable|@freezed",
-                re.I,
-            ),
-            # 35. pointers: Memory Map. dart:ffi bridging to native memory space.
-            "pointers": re.compile(
-                r"\b(dart:ffi|Pointer<|NativeFunction<|Opaque|ffi\.cast|IntPtr|ffi\.Pointer)\b",
-                re.I,
-            ),
-            # 36. memory_alloc: Manual Memory Management. Allocators bypassing the GC.
-            "memory_alloc": re.compile(
-                r"\b(ffi\.Allocator|malloc\.allocate|calloc\.allocate|malloc\.free|Arena|using\s*\(\s*\(Arena)\b",
-                re.I,
-            ),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics (Structured logs).
-            "telemetry": re.compile(
-                r"\b(developer\.log|Logger|log|FirebaseCrashlytics|Sentry)\.(?:info|error|warn|severe|debug|trace|recordError)\b|\bdart:developer\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(print|debugPrint)\s*\(", re.I),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit casting.
-            "explicit_casts": re.compile(r"\bas\s+[A-Z]\w*|\(\s*[A-Z]\w*\s*\)\s*[a-zA-Z_$]"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting context.
-            "panics_and_aborts": re.compile(r"\b(throw|rethrow|exit|exitCode|Process\.killPid)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits/delays).
-            "thread_sleeps": re.compile(r"\b(sleep|delay|setTimeout|setInterval)\s*\(", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~(?!=|/)"),
-            # 44. sync_locks (Resource Management & Stability) Coordinated threading.
-            "sync_locks": re.compile(r"\b(Mutex|Lock|synchronized|Semaphore|Completer)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints) Immutability.
-            # BUG FIX: `@immutable` starts with `@` (non-word), so the
-            # shared leading \b could only fire when a word char
-            # immediately preceded it -- never true for how annotations are
-            # actually written. Never matched at all.
-            "immutability_locks": re.compile(r"\b(?:const|final|readonly)\b|@immutable", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown) Resource release.
-            "cleanup": re.compile(r"\b(dispose|close|cleanup|cancel|drop|free)\s*\(", re.I),
-            # 47. encapsulation Scope hiding (Underscore prefix).
-            "encapsulation": re.compile(r"\b(_[a-zA-Z0-9_$]+)\b|@protected|@private"),
-            # 48. listeners (Event Listeners / Observers) Waiting for state broadcasts.
-            # BUG FIX: `on\(` ends on `(` (non-word), so the shared trailing
-            # \b could only fire when a word char immediately followed --
-            # never true for the common real call shape `on('event', ...)`,
-            # where a quote follows the paren.
-            "listeners": re.compile(r"\bon\(|\b(?:addEventListener|subscribe|watch|useEffect|listen)\b", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # BUG FIX: `@Ignore` starts with `@` (non-word), so the shared
-            # leading \b could only fire when a word char immediately
-            # preceded it -- never true for how annotations are actually
-            # written. Never matched at all.
-            "test_skip": re.compile(r"@Ignore|\b(?:test\.skip|t\.Skip|xit|mock)\b", re.I),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Dart Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(jsonDecode|jsonEncode|json\.decode|json\.encode|Utf8Decoder|Utf8Encoder)\b"
-            ),
-            "regex_execution": re.compile(r"\b(RegExp\s*\()|\.(hasMatch|allMatches|stringMatch)\b"),
-            # BUG FIX: `Duration\s*\(` ends on `(` (non-word), so the shared
-            # trailing \b only fired when a word char immediately followed
-            # -- true for the common named-argument form (`Duration(seconds:
-            # 5)`) but not for the zero-argument form (`Duration()`), where
-            # `)` (non-word) follows and the boundary fails.
-            "time_date_logic": re.compile(
-                r"\b(?:DateTime\.now|Timer\.run|Timer\.periodic|Stopwatch)\b|\bDuration\s*\("
-            ),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(Isolate\.spawn|ReceivePort|SendPort|Process\.run|Process\.start|HttpClient)\b"
-            ),
-        },
-    },
-    "scala": {
-        "_meta": {
-            "target_version": "Scala 3 (Dotty / Braceless Syntax / Contextual Abstractions)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources, worksheet files (.sc), and pure-Scala build tool configurations (.sbt).
-        "extensions": [".scala", ".sc", ".sbt", ".kojo"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Scala build definitions are typically handled by .sbt extensions rather than extensionless files.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, build files, and Play framework configurations to anchor the ecosystem.
-        "discriminators": [
-            ".scala",
-            "build.sbt",
-            "application.conf",
-            "Dependencies.scala",
-            "project/build.properties",
-            "project/plugins.sbt",
-        ],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for Scala scripting and the Ammonite REPL.
-        "shebangs": ["scala", "amm", "scala-cli"],
-        # UPGRADED: Maps to Family 2 (Nested C)
-        # Rationale: Scala explicitly supports nested multi-line comments (/* /* */ */),
-        # requiring depth-aware stripping to prevent premature termination.
-        "lexical_family": "recursive_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes Scala 3 if-then and match-case.
-            "branch": re.compile(
-                r"\b(if|then|else|match|case|try|catch|finally|for|while|do|throw|yield)\b|&&|\|\|",
-                re.I,
-            ),
-            # 2. args: Parameters / Coupling. Captures parameters in method signatures and lambdas.
-            # RULE 11 FIX (epic #813/#825): the generic-parameter step-over was the flat
-            # `\[[^\]]*\]`, truncating at the FIRST `]` and breaking any nested generic bound
-            # (`def foo[T <: Comparable[T]](x: T): T = {`, a realistic bounded generic method --
-            # the square-bracket variant of the same Rule-11 bug class already fixed for
-            # java/typescript/python/rust/csharp/kotlin/swift).
-            # IDENTIFIER-GRAMMAR FIX (epic #813/#825): the name step-over required a plain
-            # `[a-zA-Z_]\w*`, so any backtick-quoted arbitrary identifier (Scala's escape hatch for
-            # reserved-word/space-containing method names, e.g. `` def `must not fail`(x: Int): Int
-            # = x ``, a realistic idiom for Java-interop/reserved-word names) never matched at all
-            # (doc's Rule 16 shape). Added as an alternative, not a widened class, so it can't loosen
-            # the plain-identifier path.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # all three alternatives (was only reachable via group(0), the
-            # whole match including the "def"/name prefix, or for arrow
-            # functions the trailing "=>") so detector.py's counter isolates
-            # just the real parameter text -- the whole-match fallback
-            # overcounted every zero/one-arg signature by +1 the same way
-            # Python's did (#1199), including the bare single-identifier
-            # arrow form (`x => ...`, always exactly 1 arg). Name group added
-            # to the first alternative too, purely so existing extraction
-            # tests keep passing.
-            "args": re.compile(
-                r"\bdef\s+(`[^`\n]{1,200}`|[a-zA-Z_]\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?\s*(\((?:[^()]|\([^()]*\))*\))|(\((?:[^()]|\([^()]*\))*\))[ \t]*=>|\b([a-zA-Z_]\w*)[ \t]*=>"
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and val/var.
-            "structural_boundaries": re.compile(
-                r"\b(lazy|type|opaque|class|trait|object|enum|extension|import|export|return|extends|with|derives|new|given|using)\b"
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic. EXCLUDES structural headers.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL MODIFIER SHIELD (SCALA) ]
-                # Scala 3 developers frequently stack modifiers (inline, transparent)
-                # and annotations across multiple lines before the `def` keyword.
-                # FIX: Upgraded horizontal spaces `[ \t]+` to vertical spaces `[ \t\n]+`
-                # across the attribute stepper and modifier capture, explicitly allowing
-                # the engine to wrap lines without triggering ReDoS.
-                # =====================================================================
-                # IDENTIFIER-GRAMMAR FIX (epic #813/#825): same backtick-identifier gap as `args`
-                # above (doc's Rule 16) -- added as an alternative capture group, not a widened
-                # class. detector.py already resolves the fired group via `match.lastindex` for
-                # exactly this kind of multi-alternative name capture (see java's `(init)|
-                # (constructor)` groups), so no downstream change is needed.
-                # QUALIFIED-ACCESS FIX (#1266): `private`/`protected` accept an optional
-                # bracketed scope qualifier (`private[kafka]`, `private[this]`,
-                # `protected[network]`) -- a mainstream Scala idiom for package-/
-                # instance-private members, not a rare one (confirmed: every missing
-                # function found investigating #1266's scala recall gap on a real Kafka
-                # corpus file used this form). Without it, the bare `private`/`protected`
-                # alternative consumed nothing (no trailing whitespace immediately
-                # follows before the `[`), so the whole match failed to reach `def` at
-                # all -- not a partial/wrong match, a total miss.
-                r"^[ \t]*(?:@[\w.]+(?:\((?:[^()]|\([^()]*\))*\))?[ \t\n]*){0,5}"
-                r"(?:(?:override|private(?:\[[\w.]+\])?|protected(?:\[[\w.]+\])?|final|implicit|inline|transparent|open|lazy)[ \t\n]+){0,3}"
-                r"def[ \t\n]+(?:`([^`\n]{1,200})`|([a-zA-Z_]\w*))(?=[ \t\n]*[\[(:=]|$)",
-                re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines structural entities and OO boundaries.
-            # BUG FIX (#1295 polish pass): the modifier alternation was missing
-            # private(?:[scope])?/protected(?:[scope])? -- func_start right above already handles
-            # these correctly, class_start just never got the same list. Real recall gap, confirmed
-            # via kafka's `private class LogRecoveryThreadFactory`, `private[kafka] abstract class
-            # Acceptor`, `private[network] case class DelayedCloseSocket`.
-            "class_start": re.compile(
-                r"^[ \t]*(?:@[\w.]+(?:\((?:[^()]|\([^()]*\))*\))?[ \t\n]*){0,5}"
-                r"(?:(?:sealed|abstract|final|case|open|opaque|transparent|private(?:\[[\w.]+\])?|protected(?:\[[\w.]+\])?)[ \t\n]+){0,3}"
-                r"(?:class|trait|object|enum)\s+([A-Za-z_]\w*)(?=[ \t]*[\[({]|\s+extends|\n|$)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Monadic error handling (Option/Try) and assertions.
-            "safety": re.compile(
-                r"\b(Option|Some|None|Try|Success|Failure|Either|Left|Right|sealed|require|assert|assume)\b|\|\s*Null\b"
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing type safety (asInstanceOf, .get).
-            # BUG FIX: `@unchecked` is `@`-prefixed -- the shared leading
-            # \b could only fire when a word char immediately preceded the
-            # `@`, never true for how annotations are actually written.
-            # Never matched at all. (`.get` is left as-is: a leading `.` is
-            # preceded by an identifier in real method-chain usage, so that
-            # leading \b fires correctly.)
-            "safety_bypasses": re.compile(
-                r"\b(?:null|asInstanceOf|isInstanceOf|Any|AnyRef)\b|\.get\b(?!Class)|@unchecked"
-            ),
-            # 8. danger: High-Risk Execution. Process killers and catastrophic exit commands.
-            "high_risk_execution": re.compile(r"\b(System\.exit|sys\.exit|Thread\.stop|Runtime\.getRuntime\.exec)\b"),
-            # 9. io: I/O & Network Boundaries. Filesystem, Network, and Http Clients (Includes CERN triggers).
-            "io": re.compile(
-                r"\b(Source|java\.io|java\.nio|Files\.|Socket|ServerSocket|sttp|Http|WSClient|HTLoad|HTGet|ENQUIRE)\b"
-            ),
-            # 10. api: Public Surface Area. Implicit public visibility and Scala 3 @main entry points.
-            "api": re.compile(
-                r"\b(export)\b|@(?:main|GetMapping|PostMapping|Endpoint|Path)\b|^[ \t]*(?:override\s+|inline\s+|transparent[ \t]+)?def\s+[^_]\w+",
-                re.M,
-            ),
-            # 11. flux: State Mutation. State mutation (var and mutable collection updates).
-            "state_mutation": re.compile(
-                r"\b(var|scala\.collection\.mutable|AtomicReference|AtomicInteger)\b|^[ \t]*[a-zA-Z_]\w*[ \t]*=",
-                re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code or logic trails.
-            "dead_code": re.compile(
-                r"//[ \t]*(?:def|val|var|class|object|trait|if|match|println|import)\b|/\*[ \t]*(?:def|val|class|object)"
-            ),
-            # 13. doc: Structured Documentation. Scaladoc documentation (/**) and annotations.
-            "doc": re.compile(r"/\*\*|@param|@return|@tparam|@throws|@see|@note"),
-            # 14. test: Testing & Assertions. ScalaTest, MUnit, and standard expect/verify markers.
-            # BUG FIX: `test\s*\(` ends on `(` (non-word), so the shared
-            # trailing \b could never fire. Never matched.
-            "test": re.compile(
-                r"\b(?:it\s+should|assertEquals|assertThrows|AnyFunSuite|WordSpec|munit|weaver)\b"
-                r"|\btest\s*\(|\b(?:must|expect|assert)\s*[\(\{]"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Effect systems and Actor paradigms (ZIO, Cats Effect, Akka).
-            "concurrency": re.compile(
-                r"\b(Future|Promise|Await|Actor|Behavior|ZIO|UIO|Task|RIO|cats\.effect\.IO|Fiber|FiberRef|Ref|Deferred|Semaphore)\b"
-            ),
-            # 16. ui_framework: UI / View Components. Scala.js DOM and XML literals (Includes TBL triggers).
-            "ui_framework": re.compile(
-                r"\b(dom\.|Laminar|Tyrian|HtmlElement|Document|Node|SGML|HyperLink|scala\.xml|Elem|XML|WorldWideWeb|BrowserView)\b"
-            ),
-            # 17. closures: Closures / Anonymous Functions. Anonymous function fat-arrows and underscores.
-            "closures": re.compile(r"=>|(?<=\()\s*_\s*(?=[\),])|(?<=\W)_\s*(?=\W)"),
-            # 18. globals: Global / Shared State. Singletons (objects) and JVM environment bindings.
-            "globals": re.compile(
-                r"\b(object\s+[A-Z]\w*|sys\.env|sys\.props|System\.getProperty|scala\.util\.Properties)\b"
-            ),
-            # 19. decorators: Decorators / Annotations. Method and class annotations.
-            "decorators": re.compile(r"@[A-Za-z_]\w*(?:\([^)]*\))?"),
-            # 20. generics: Generics / Type Parameters. Type parameterization and HKT constraints.
-            "generics": re.compile(r"\[\s*[+-]?[A-Z][^\]]*\]|\bF\[_\]|<:|>:|\[[ \t]*_\s*\]"),
-            # 21. comprehensions: Iterators / Comprehensions. For-comprehensions and monadic chains.
-            "comprehensions": re.compile(
-                r"\bfor\s*(?:\{[^}]*\}|\([^)]*\))\s*yield\b|\.(?:map|flatMap|filter|withFilter|foldLeft|reduce|collect)\s*[\(\{]"
-            ),
-            # 22. scientific: Numerical / Compute Libraries. Math library and linear algebra wrappers.
-            "scientific": re.compile(
-                r"\b(scala\.math|breeze\.|spire\.|algebird|Math\.|StrictMath\.|DenseMatrix|DenseVector)\b"
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Contextual abstractions and implicit resolution.
-            "reflection_metaprogramming": re.compile(
-                r"\b(implicit|given|using|inline|extension|TypeTag|ClassTag|scala\.reflect|Typeable|Dynamic|summon|derives)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"\b(?:import|export)\s+[\w.{}\s,]+", re.M),
-            "_dependency_capture": re.compile(
-                # =====================================================================
-                # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (SCALA) ]
-                # PURPOSE: Extracts external dependencies for the Network Graph and Firewall.
-                #
-                # HISTORICAL BUG: Anchored to the start of the line `^[ \t]*`. Scala
-                # developers frequently scope imports locally inside methods, classes,
-                # or traits to prevent namespace pollution. The anchored regex missed
-                # all of these local dependencies.
-                #
-                # THE FIX: Stripped the `^` anchor and rely on the `\b` word boundary.
-                #
-                # [ THE BLOCK DESTRUCTURING SHIELD ]
-                # Scala relies heavily on bracketed block imports: `import java.util.{List, Map}`.
-                # A trailing `{...}` block is captured as its own alternative below so its content
-                # (which may span multiple lines and contain `=>` renames) is swallowed whole. The
-                # downstream parser (galaxyscope.py) flattens this string and splits on commas/
-                # brackets to extract the individual modules.
-                #
-                # BUG FIX (epic #813/#825): the previous capture, `[\w.{}\s,]+`, was a single flat
-                # character class with no statement boundary at all -- since `\s` matches newlines,
-                # it kept consuming across subsequent, unrelated lines (including a SECOND import
-                # statement) until it happened to hit some character outside the class. Confirmed on
-                # a realistic 2-import file: the first match's capture group swallowed the entire
-                # second `import` line plus part of the following `case class` line, so the second
-                # import was never separately detected at all. The same flat class also truncated at
-                # the first `*`/`=`/`>`, so Scala 3 wildcard imports (`import scala.util.chaining.*`)
-                # lost their trailing `*` and `=>`-renamed block imports (`import scala.util.{Try =>
-                # STry}`) were cut off mid-block. Replaced with a properly bounded
-                # segmented-dotted-path grammar: repeat `identifier.` segments, then end on either a
-                # `{...}` block (unrestricted content except braces themselves, so `=>` renames and
-                # multi-line layouts both work) or a bare trailing identifier/wildcard segment
-                # (`[\w*]+`, covering both Scala 2 `_` and Scala 3 `*` wildcards via `\w`/`*`). This
-                # is bounded per-statement by construction -- there is no `\s`/`.` left dangling
-                # outside an explicit brace block for it to bleed through.
-                # =====================================================================
-                r"\b(?:import|export)\s+((?:[\w]+\.)*(?:\{[^{}]*\}|[\w*]+))",
-                re.M,
-            ),
-            # 25. ownership: Authorship indicators.
-            # BUG FIX: the Scaladoc `@author` tag was grouped with
-            # `Created by`/`Maintainer`/`Copyright`, all of which require a
-            # literal `:` -- but Scaladoc's actual convention (matching
-            # Javadoc, and how java's own ownership rule already handles
-            # it) is `@author Jane Doe`, with no colon at all. The colon
-            # requirement meant the real Scaladoc tag never matched.
-            "ownership": re.compile(
-                r"@author\s+([^\n]+)|(?:Created by|Maintainer|Copyright|Tim Berners-Lee):\s+([^\n]+)",
-                re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags and architecture specs.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]|\b(?:WorldWideWeb|HyperText\s+Proposal|NeXTSTEP)\b",
-                re.I,
-            ),
-            # 31. ssr_boundaries: View Horizon. Play Framework and twirl template endpoints.
-            # BUG FIX: `Ok\(`/`BadRequest\(` both end on `(` (non-word), so
-            # the shared trailing \b could never fire. Neither of Play's
-            # two most common Result constructors ever matched.
-            "ssr_boundaries": re.compile(
-                r"\b(?:Action|Controller|HttpRoutes|ServerEndpoint|twirl|html\.[a-zA-Z_]\w*)\b|\bOk\(|\bBadRequest\("
-            ),
-            # 32. events: Pub/Sub Network. Stream processing and event bus signatures.
-            "events": re.compile(r"\b(Source|Flow|Sink|fs2\.Stream|ZStream|EventBus|system\.eventStream|Observable)\b"),
-            # 33. dependency_injection: Inversion of Control. ZLayer and ReaderT patterns.
-            # BUG FIX: `@Inject` is `@`-prefixed -- the shared leading \b
-            # could only fire when a word char immediately preceded the
-            # `@`, never true for how annotations are actually written.
-            # Never matched at all.
-            "dependency_injection": re.compile(
-                r"\b(?:wire\[|ZLayer|ZLayer\.from|provide|provideSome|ReaderT|Kleisli|requires)\b|@Inject"
-            ),
-            # 34. macros: Preprocessor Hooks. Scala 3 inline and quoted metaprogramming.
-            "macros": re.compile(
-                r"\b(inline\s+def|transparent\s+inline|macro|scala\.quoted|Expr|Type|Quotes)\b|\$\{.*?\}|\'\{"
-            ),
-            # 35. pointers: Memory Map. Scala Native C-Interop pointers.
-            # BUG FIX: `Ptr\[[^\]]+\]` ends on the closing `]` (non-word),
-            # so the shared trailing \b could never fire -- unlike
-            # `decode\[` elsewhere (bounded only by the opening `[`, always
-            # followed by a word-char type name), this alternative matches
-            # through the CLOSING bracket, and whatever follows a type
-            # declaration (` = `, `;`, a newline) is never a word
-            # character. Never matched. Also bounded the previously
-            # unbounded `[^\]]+` to `{1,200}`. (`!ptr` is left as-is: it's
-            # harmlessly masked by `ptr\.` matching the same text via its
-            # own valid boundary, since `!` immediately preceding `ptr` is
-            # a valid non-word-to-word transition.)
-            "pointers": re.compile(
-                r"\bPtr\[[^\]]{1,200}\]|\b(?:scala\.scalanative\.unsafe|!ptr|ptr\.|CFuncPtr|CStruct\d+)\b"
-            ),
-            # 36. memory_alloc: Manual Memory Management. Heap and Native allocations.
-            # BUG FIX: `zone[ \t]*\{` ends on `{` and `alloc\[[^\]]+\]` ends
-            # on the closing `]` -- both non-word, so the shared trailing
-            # \b could never fire for either. Neither ever matched. Also
-            # bounded the previously unbounded `[^\]]+` to `{1,200}`.
-            "memory_alloc": re.compile(
-                r"\b(?:Zone|malloc|calloc|free|scala\.scalanative\.libc\.stdlib)\b"
-                r"|zone[ \t]*\{|alloc\[[^\]]{1,200}\]"
-            ),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics (Structured logs).
-            "telemetry": re.compile(
-                r"\b(?:logger|log|ZIO\.log|LoggerFactory|log4cats|slf4j)\.(?:info|error|warn|debug|trace)\b|@Slf4j"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(println|print|Console\.println)\b"),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit type coercion.
-            "explicit_casts": re.compile(
-                r"\basInstanceOf\[[^\]]*\]|\.(?:toInt|toLong|toFloat|toDouble|toByte|toShort)\b"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting context.
-            "panics_and_aborts": re.compile(r"\b(throw|panic|abort|sys\.error|exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits/sleep).
-            "thread_sleeps": re.compile(r"\b(Thread\.sleep|delay|setTimeout|setInterval)\s*\("),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability) Coordinated threading.
-            "sync_locks": re.compile(r"\b(synchronized|volatile|Semaphore|Mutex|lock|unlock)\b"),
-            # 45. immutability_locks (Immutability Constraints) Immutability.
-            "immutability_locks": re.compile(r"\b(val|final|sealed|readonly|Object\.freeze|immutable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown) Resource release.
-            "cleanup": re.compile(r"\b(dispose|close|cleanup|cancel|free|bracket|finally|onException)\b"),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"\b(private|protected)\b|private\[[^\]]+\]"),
-            # 48. listeners (Event Listeners / Observers) Waiting for state broadcasts.
-            # BUG FIX: `on\(` ends on `(` (non-word), so the shared
-            # trailing \b could never fire -- never true for the common
-            # real call shape `on('event', ...)`, where a quote follows.
-            "listeners": re.compile(r"\bon\(|\b(?:addEventListener|subscribe|watch|useEffect|listen)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(ignore|pending|skip|xit|xdescribe)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Scala Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(io\.circe|decode\[|asJson|Json\.parse|Json\.toJson|upickle\.default)\b"
-            ),
-            "regex_execution": re.compile(r'"[^"]+"\.r\b|\bRegex\s*\(|\.(findAllIn|findFirstIn|replaceAllIn)\b'),
-            # BUG FIX: `Duration\s*\(` ends on `(` (non-word), so the
-            # shared trailing \b only fired for the non-empty-argument form
-            # (`Duration(5, SECONDS)`, where a digit follows the paren),
-            # not the empty-argument form (`Duration()`).
-            "time_date_logic": re.compile(
-                r"\b(?:FiniteDuration|System\.currentTimeMillis|LocalDate\.now)\b|\bDuration\s*\("
-            ),
-            # BUG FIX: `Process\s*\(` ends on `(` -- same bug. Never
-            # matched the common `Process("cmd")` form (a quote follows).
-            "ipc_rpc_bridges": re.compile(r"\b(?:ActorSystem|ActorRef|sys\.process\._|Future\.apply)\b|\bProcess\s*\("),
-        },
-    },
-    "dockerfile": {
-        "_meta": {
-            "target_version": "Dockerfile (BuildKit)",
-            "last_updated": "2026-02-27",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard extensions for container definitions across Docker and Podman ecosystems.
-        "extensions": [".dockerfile", ".containerfile"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: The universally recognized, extensionless architectural anchors of containerized environments.
-        "exact_matches": [
-            "Dockerfile",
-            "Containerfile",
-            "Dockerfile.prod",
-            "Dockerfile.dev",
-            "Dockerfile.build",
-            "Dockerfile.test",
-            "Dockerfile.local",
-        ],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Compose files and ignore manifests acting as contextual baselines.
-        "discriminators": [
-            "docker-compose.yml",
-            "docker-compose.yaml",
-            ".dockerignore",
-            "compose.yaml",
-        ],
-        # EXECUTION SIGNATURES: Docker natively uses BuildKit syntax directives instead of traditional shebangs.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Docker natively uses '#' exclusively for line-level comments and parser directives.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Control flow executing inside RUN shell blocks. High density indicates complex embedded shell scripts.
-            "branch": re.compile(
-                r"\b(?:if|elif|else|fi|case|esac|for|while|do|done|until)\b|&&|\|\|",
-                re.I,
-            ),
-            # 2. args (Parameters / Coupling)
-            # Build arguments (`ARG`) passed into the container acting as input parameters to the satellite.
-            "args": re.compile(r"^[ \t]*ARG(?:[ \t]|\\[ \t]*\r?\n)+[a-zA-Z0-9_-]+", re.M | re.I),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries defining straight-line execution and environment contexts.
-            # CRITICAL GUARDRAIL: EXCLUDES `FROM` and `RUN`/`CMD` to maintain geometric stability.
-            "structural_boundaries": re.compile(
-                r"^[ \t]*(?:WORKDIR|USER|VOLUME|STOPSIGNAL|SHELL|LABEL)\b", re.M | re.I
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # CRITICAL GUARDRAIL: Anchors logic blocks. ONLY executable logic blocks.
-            # In Docker, `RUN`, `CMD`, and `ENTRYPOINT` execute logic, generating discrete intermediate image layers.
-            "func_start": re.compile(
-                r"^[ \t]*(RUN|CMD|ENTRYPOINT|HEALTHCHECK)(?=[ \t\[]|\\[ \t]*(?:\r?\n|$))", re.M | re.I
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Defines object-oriented and structural boundaries. Drives API Surface Area math.
-            # `FROM` instantiates a discrete build stage/image boundary, acting as a class wrapper.
-            # Real Dockerfile syntax: `FROM <image>[:<tag>|@<digest>] [AS <stage-name>]`
-            # Extending the regex to capture the stage alias (group 1) if `AS` is present, or fallback
-            # to the base image reference (group 2) for bare forms (`FROM x`).
-            # Flags like `--platform=$VAR` are skipped over (between FROM and image reference).
-            # CRITICAL GUARDRAIL: Restricts character lengths for tokens using char-count bounds
-            # like `[^\s\\]{1,300}` (Rule 5) to prevent catastrophic backtracking on long inputs without delimiters.
-            "class_start": re.compile(
-                r"^[ \t]*FROM(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+--[^\s\\]{1,100}){0,5}(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+)(?:[^\s\\]{1,300}(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+)AS(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+)([a-zA-Z0-9_-]{1,100})|([^\s\\]{1,300}))(?=[ \t]*(?:#|\\[ \t]*(?:\r?\n|$)|\r?\n|$))",
-                re.M | re.I,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming)
-            # Hardening the container. Dropping root privileges (`USER nonroot`), explicit `HEALTHCHECK`,
-            # setting explicit shell crash flags (`set -e`), and safe file ownership (`--chown`).
-            "safety": re.compile(
-                r"^[ \t]*HEALTHCHECK\b|--chown=|^[ \t]*USER[ \t]+(?!root\b|0\b)[a-zA-Z0-9_-]+|\bset[ \t]+-[exuo]\b",
-                re.M | re.I,
-            ),
-            # 7. safety_neg (Safety Bypasses)
-            # Actively bypassing isolation or safety logic.
-            # Using `:latest`, running as root, setting permissions to 777, or blindly curling directly into bash.
-            # CRITICAL GUARDRAIL: Safely bounds the curl/wget pipe `[^|\n]{1,200}` to prevent ReDoS on massive RUN chains.
-            "safety_bypasses": re.compile(
-                r":latest\b|^[ \t]*USER[ \t]+(?:root|0)\b|chmod[ \t]+777|--privileged|--allow-unauthenticated|\b(?:curl|wget)[ \t]+[^|\n]{1,200}\|[ \t]*(?:bash|sh|zsh)\b",
-                re.M | re.I,
-            ),
-            # 8. danger (High-Risk Execution)
-            # Extreme space debris. Destructive recursive removes targeting root, and dangerous dynamic eval.
-            # CRITICAL GUARDRAIL: Raw terminal prints (`echo`) strictly routed to print_hits.
-            # CRITICAL GUARDRAIL (Rule 9): the `rm -rf /` alternative ends on the symbolic
-            # `/` character. A shared trailing `\b` wrapped around the whole group can only
-            # fire when a word char follows -- but the realistic real-world form is `rm -rf /`
-            # followed by nothing (end of instruction), whitespace, or `&&`, none of which are
-            # word chars, so the old pattern could never match the single most catastrophic
-            # command a Dockerfile could contain. Pulled out of the shared group, same as the
-            # Rule 9 playbook's canonical fix.
-            "high_risk_execution": re.compile(r"\brm[ \t]+-rf[ \t]+/(?![A-Za-z])|\beval\b|\bexec\b", re.M | re.I),
-            # 9. io (I/O & Network Boundaries)
-            # Interaction with external networks, copying files from host, or executing package managers.
-            "io": re.compile(
-                r"^[ \t]*(?:COPY|ADD)[ \t]+|\b(?:wget|curl|apt-get|apk|yum|dnf|git[ \t]+clone|tar[ \t]+-[cx]f|unzip|pip[ \t]+install|npm[ \t]+install)\b",
-                re.M | re.I,
-            ),
-            # 10. api (Public Surface Area)
-            # Code exposed to the outside world. Ports explicitly exposed to the host network (`EXPOSE`).
-            "api": re.compile(r"^[ \t]*EXPOSE[ \t]+[0-9]+", re.M | re.I),
-            # 11. flux (State Mutation)
-            # Mutation of state. Setting Environment variables that permanently alter the image layer state.
-            "state_mutation": re.compile(
-                r"^[ \t]*ENV[ \t]+[a-zA-Z0-9_]+|export[ \t]+[a-zA-Z0-9_]+[ \t]*=",
-                re.M | re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out logic, commented-out structural Dockerfile commands.
-            "dead_code": re.compile(
-                r"^[ \t]*#[ \t]*(?:RUN|COPY|ADD|ENV|EXPOSE|FROM|CMD|ENTRYPOINT|WORKDIR)\b",
-                re.M | re.I,
-            ),
-            # 13. doc (Structured Documentation)
-            # Intent documentation meant for developers or image registries.
-            "doc": re.compile(
-                r"^[ \t]*LABEL[ \t]+(?:maintainer|org\.opencontainers|version|description)=|^[ \t]*#[ \t]*(?:Description|Usage|Author|Maintainer):",
-                re.M | re.I,
-            ),
-            # 14. test (Testing & Assertions)
-            # Explicit test runner executions inside the build layer (often used in CI multi-stage pipelines).
-            "test": re.compile(
-                r"\b(?:npm[ \t]+test|yarn[ \t]+test|pytest|go[ \t]+test|cargo[ \t]+test|make[ \t]+test)\b",
-                re.M | re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # Parallelism executed inside the build shell (e.g. compiling with all cores).
-            # CRITICAL GUARDRAIL (Rule 9/10 variant): `make -j`/`xargs -P` end on a word char
-            # (`j`/`P`) that is very commonly followed directly by a digit in real usage
-            # (`make -j4`, `xargs -P4`) -- a shared trailing `\b` around the whole group can't
-            # fire between two adjacent word chars, so the old pattern missed the compact
-            # numeric-suffix form entirely (only the spaced-out `make -j 4` form worked).
-            # Pulled these two out of the shared trailing-`\b` group; `nohup`/`parallel` keep
-            # it since they legitimately end on whitespace/EOL in real usage.
-            "concurrency": re.compile(r"&[ \t]*$|\b(?:nohup|parallel)\b|make[ \t]+-j|xargs[ \t]+-P", re.M),
-            # 16. ui_framework (UI / View Components)
-            # Containerizing GUI applications (X11, Wayland, GTK).
-            # CRITICAL GUARDRAIL: real Debian/Ubuntu package names for these libraries are
-            # almost always `lib`-prefixed (`libgtk-3-dev`, `libx11-6`, `libwayland-client0`)
-            # -- both "lib" and the tag itself are word characters, so the old pattern's
-            # leading `\b` could never fire inside the "lib...gtk"/"lib...x11" substring,
-            # meaning it silently missed the dominant real-world package-name form entirely.
-            "ui_framework": re.compile(r"\b(?:lib)?(?:xvfb|x11|wayland|gtk2?|qt5?)\b|libgl1-mesa", re.I),
-            # 17. closures (Closures / Anonymous Functions)
-            # Dockerfiles are purely declarative structurally; closures do not exist.
-            "closures": None,
-            # 18. globals (Global / Shared State)
-            # Global environment variables mapping structurally.
-            "globals": re.compile(r"^[ \t]*ENV[ \t]+[a-zA-Z0-9_]+", re.M | re.I),
-            # 19. decorators (Decorators / Annotations)
-            # Not natively applicable to Dockerfile architecture.
-            "decorators": None,
-            # 20. generics (Generics / Type Parameters)
-            "generics": None,
-            # 21. comprehensions (Iterators / Comprehensions)
-            "comprehensions": None,
-            # 22. scientific (Numerical / Compute Libraries)
-            # Installing data science, ML base dependencies, or GPU drivers natively into the image.
-            "scientific": re.compile(
-                r"\b(?:nvidia/cuda|pytorch/pytorch|tensorflow/tensorflow|jupyter/)\b",
-                re.I,
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # High Cognitive Load: Advanced BuildKit logic. Mounting caches, secrets, cross-platform builds, or `ONBUILD` (which defers execution to downstream images).
-            "reflection_metaprogramming": re.compile(
-                r"^[ \t]*ONBUILD\b|--mount=type=(?:cache|secret|bind|ssh)|--platform=|<<EOF",
-                re.M | re.I,
-            ),
-            # 24. import (Dependency Inclusions)
-            # Base images or dependencies pulled from other build stages (`COPY --from=`).
-            "import": re.compile(
-                r"^[ \t]*(?:FROM(?:\s+(?:\\\s+)*)(?:--[\w-]+=[^\s]+(?:\s+(?:\\\s+)*))*[a-zA-Z0-9_./:-]+|COPY(?:\s+(?:\\\s+)*)(?:--[\w-]+(?:=[^\s]+)?(?:\s+(?:\\\s+)*))*--from=[a-zA-Z0-9_./:-]+)",
-                re.M | re.I,
-            ),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:FROM(?:\s+(?:\\\s+)*)(?:--[\w-]+=[^\s]+(?:\s+(?:\\\s+)*))*([a-zA-Z0-9_./:-]+)|COPY(?:\s+(?:\\\s+)*)(?:--[\w-]+(?:=[^\s]+)?(?:\s+(?:\\\s+)*))*--from=([a-zA-Z0-9_./:-]+))",
-                re.M | re.I,
-            ),
-            # 25. ownership (Authorship Metadata)
-            # Standard metadata tracing image ownership (legacy MAINTAINER or modern LABEL).
-            "ownership": re.compile(
-                r"^[ \t]*(?:MAINTAINER|LABEL[ \t]+maintainer=|LABEL[ \t]+org\.opencontainers\.image\.authors=)[ \t]*(.*)",
-                re.M | re.I,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(
-                r"\[(?:[ \t]*SPEC[ \t]*-[ \t]*\d{1,10}|spec|audit|CVE-\d{4}-\d+)[^\]]{0,300}\]",
-                re.I,
-            ),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Container lifecycle events explicitly bound to the host OS.
-            "events": re.compile(r"^[ \t]*STOPSIGNAL[ \t]+", re.M | re.I),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # BuildKit secret and SSH mounts injecting external state at compile time securely.
-            "dependency_injection": re.compile(r"--mount=type=(?:secret|ssh)", re.I),
-            # 34. macros (Preprocessor Directives / Macros)
-            # Docker BuildKit `# syntax=` directives which change the parser dynamically at compile-time (just like C-macros).
-            "macros": re.compile(r"^[ \t]*#[ \t]*(?:syntax|escape)[ \t]*=", re.M | re.I),
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": None,
-            # 36. memory_alloc (Manual Memory Management)
-            # Explicit memory limits defined in ENV vars that configure Java/Node runtime heaps natively.
-            "memory_alloc": re.compile(
-                r"\b(?:--memory=|JAVA_OPTS|JAVA_TOOL_OPTIONS|NODE_OPTIONS|--max-old-space-size|-Xmx|-Xms)\b",
-                re.I,
-            ),
-            # 37. inline_asm (The Bare Metal)
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            # Forcing specific logging outputs at the container level or symlinking to stdout for daemon parsing.
-            "telemetry": re.compile(
-                r"\b(?:LOG_LEVEL|--log-level[ \t]+(?:debug|info|warn|error)|ln[ \t]+-sf[ \t]+/dev/stdout)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            # Shell echos used for ad-hoc debugging in the build output log.
-            "debug_prints": re.compile(r"\b(?:echo|printf)\b", re.I),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": None,
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # Hard execution aborts forcing the build to fail dynamically.
-            "panics_and_aborts": re.compile(r"\b(?:exit[ \t]+[1-9]|kill[ \t]+-[0-9]+)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            # Forcing the build thread to sleep (often a hack to wait for a daemon/network).
-            "thread_sleeps": re.compile(r"\bsleep[ \t]+[0-9]+\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": None,
-            # 44. sync_locks (Resource Management & Stability)
-            # Utilizing file locking to prevent parallel build collisions.
-            "sync_locks": re.compile(r"\bflock\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            # Pinning dependencies to immutable SHAs rather than mutable tags. .
-            # CRITICAL GUARDRAIL: real Docker/OCI digest references are ALWAYS written as
-            # `@sha256:<64 hex chars>` -- the algorithm prefix is mandatory syntax, never a
-            # bare `@<64 hex chars>`. The old pattern required the bare (invalid) form and
-            # so could never match a real pinned image reference at all.
-            "immutability_locks": re.compile(r"@sha256:[a-f0-9]{64}\b|--read-only|:ro\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # Explicitly purging apt/apk caches to reduce final container bloat. .
-            "cleanup": re.compile(
-                r"\b(?:apt-get[ \t]+clean|rm[ \t]+-rf[ \t]+/var/lib/apt/lists|apk[ \t]+(?:cache[ \t]+)?clean|yum[ \t]+clean[ \t]+all|npm[ \t]+cache[ \t]+clean)\b",
-                re.I,
-            ),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Explicitly encapsulating logic in multi-stage builds (`AS builder`). Hides intermediate build layers.
-            "encapsulation": re.compile(r"^[ \t]*FROM[ \t]+[^\n]+[ \t]+AS[ \t]+[a-zA-Z0-9_-]+", re.M | re.I),
-            # 48. listeners (Event Listeners / Observers)
-            # Exposing ports for network consumption. .
-            "listeners": re.compile(r"^[ \t]*EXPOSE[ \t]+[0-9]+", re.M | re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # Bypassing package manager tests/audits or using logical OR to ignore failures (`|| true`).
-            "test_skip": re.compile(
-                r"\|\|[ \t]*true\b|\b(?:--passWithNoTests|skipTests|Dmaven\.test\.skip=true|--no-audit)\b",
-                re.I,
-            ),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Dockerfile Specifics) ---
-            # CRITICAL GUARDRAIL: all four sensors below MUST carry re.M -- `(?i)` alone
-            # anchors `^` to the true start of the whole code_stream string (Python re
-            # default), not the start of each line, which silently broke every one of
-            # these on any real Dockerfile (FROM is always the literal first line, so
-            # e.g. ipc_rpc_bridges could never fire at all). The body-scanning sensors
-            # (serialization_parsing/regex_execution/time_date_logic) also now step over
-            # a bounded `\`-line-continuation run ({0,50} continued lines, each itself
-            # unboundedly-but-safely scanned via `[^\n]*`) so a classic multi-line
-            # `RUN a && \` / `    b && \` / `    grep ...` chain is still seen -- the
-            # plain `.*` version only ever looked at the first physical line.
-            "serialization_parsing": re.compile(
-                r"(?im)^(?:ADD|COPY)\s+[^\n]*(?:\\\r?\n[^\n]*){0,50}\.(?:tar\.gz|zip|tgz|tar)\b"
-            ),  # ADD auto-extracts archives
-            "regex_execution": re.compile(
-                r"(?im)^RUN\s+[^\n]*(?:\\\r?\n[^\n]*){0,50}(?:grep|sed|awk)\b"
-            ),  # Catches shell-delegated regex
-            "time_date_logic": re.compile(
-                r"(?im)^(?:HEALTHCHECK[^\n]*(?:\\\r?\n[^\n]*){0,50}(?:--interval|--timeout)"
-                r"|RUN\s+[^\n]*(?:\\\r?\n[^\n]*){0,50}sleep)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(r"(?im)^(?:EXPOSE|VOLUME|ENTRYPOINT|CMD|STOPSIGNAL)\b"),
-        },
-    },
-    "matlab": {
-        "_meta": {
-            "target_version": "MATLAB R2024b",
-            "last_updated": "2026-02-27",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard scripts, functions, and modern Live Scripts (.mlx).
-        "extensions": [".m", ".mlx"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: MATLAB and Octave rely strictly on extensions for execution.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Critical for resolving the massive .m collision with Objective-C. Binary workspace and figure files act as absolute anchors.
-        "discriminators": [".m", ".mat", ".fig", ".mlx", "project.prj"],
-        # #377: this is exactly the "massive .m collision with Objective-C" the
-        # comment above already calls out -- heavy presence of Objective-C's OWN
-        # ecosystem anchors (its own "discriminators", below) elsewhere in the
-        # repo is direct evidence AGAINST an ambiguous .m file being MATLAB.
-        "disqualifiers": [".mm", "project.pbxproj", ".storyboard", ".xib", ".xcworkspace", "Podfile", "Cartfile"],
-        # Instantly claims any .m file that uses MATLAB's unique comment character (%)
-        # or the MATLAB function declaration syntax. Defeats Objective-C gravity theft.
-        # Instantly claims any .m file via a definitive MATLAB section break (%%)
-        # or properly formatted comment. (Removed 'function' to prevent stealing extensionless shell scripts).
-        "internal_discriminator": re.compile(r"^[ \t]*(?:%[ \t]+|%%)", re.M),
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for GNU Octave or headless MATLAB CLI scripts.
-        "shebangs": ["octave", "matlab"],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: (CORRECTION) Uses '%' for lines and '%{ %}' for blocks. Mapping this to
-        # hybrid_dash would cause the engine to look for '--', missing the math entirely.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # branch: MATLAB control flow. EXCLUDES 'error' and 'rethrow' (bailout_hits).
-            "branch": re.compile(r"\b(?:if|elseif|else|switch|case|otherwise|for|while|try|catch)\b|&&|\|\||~="),
-            # args: Captures standard function inputs and return signatures `function [out1, out2] = myFun(in1, in2)`.
-            # CRITICAL GUARDRAIL: Safely bounds `\([^)]*\)` and `\[[^\]]*\]`.
-            # #1209: the trailing input-parameter parens wrapped in its own
-            # capture group (was only reachable via group(0), the whole
-            # match including the "function [outputs] = name" prefix) so
-            # detector.py's counter isolates just the real INPUT arg list --
-            # the whole-match fallback both overcounted zero/one-arg
-            # signatures by +1 like every other language (#1199) AND, worse,
-            # mixed the output-list `[out1, out2]` in as if it were part of
-            # the input signature. Name group added too, purely so existing
-            # extraction tests keep passing.
-            "args": re.compile(
-                r"\bfunction(?:[ \t\n]|\.\.\.[^\n]*\n)+(?:\[[^\]]*\](?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*|[a-zA-Z_]\w*(?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*)?([a-zA-Z_]\w*)(?:[ \t\n]|\.\.\.[^\n]*\n)*(\([^)]*\))|@(?:[ \t\n]|\.\.\.[^\n]*\n)*(\([^)]*\))"
-            ),
-            # linear: Structural boundaries defining straight-line execution.
-            # CRITICAL GUARDRAIL: Access modifiers (private, protected) explicitly omitted.
-            "structural_boundaries": re.compile(
-                r"\b(?:classdef|properties|methods|events|enumeration|return|global|persistent|continue|break|end)\b"
-            ),
-            # func_start: Anchors logic blocks. Exactly anchors executable blocks.
-            # Negative lookahead explicitly prevents control flow or OOP structures from generating false positive logic anchors.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL OUTPUT ARRAY SHIELD (MATLAB) ]
-                # MATLAB functions define their return types *before* the function name
-                # (e.g., `function [out1, out2] = myFunc()`). Developers will frequently
-                # wrap these output arrays across multiple vertical lines.
-                # FIX: Exchanged horizontal `[ \t]*` constraints with `[ \t\n]*` inside
-                # the optional `(?:\[[^\]]*\]...)?` output array matcher, allowing the
-                # regex to crawl down to the assignment operator `=` and map the name.
-                # =====================================================================
-                r"^[ \t]*(?!(?:if|for|while|switch|catch|classdef)\b)function(?:[ \t\n]|\.\.\.[^\n]*\n)+(?:\[[^\]]*\](?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*|[a-zA-Z_]\w*(?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*)?([a-zA-Z_]\w*)(?=(?:[ \t\n]|\.\.\.[^\n]*\n)*(?:\(|%|;|$))",
-                re.M,
-            ),
-            # class_start: Defines an object-oriented boundary.
-            # Safely steps over optional class attributes like `classdef (ConstructOnLoad) MyClass`
-            "class_start": re.compile(
-                r"^[ \t]*classdef(?:(?:[ \t\n]|\.\.\.[^\n]*\n)*\([^)]*\))?(?:[ \t\n]|\.\.\.[^\n]*\n)+([a-zA-Z_]\w*)(?=(?:[ \t\n]|\.\.\.[^\n]*\n)*(?:<|%|;|$))",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # safety: Defensive programming, modern argument validation (`arguments` block), and type/shape checks.
-            "safety": re.compile(
-                r"\b(?:try|catch|narginchk|nargoutchk|validateattributes|validatestring|mustBe[A-Za-z_]\w*|assert|isa|isempty|isnumeric|ischar|isstruct|isfield|iscell|islogical|arguments)\b"
-            ),
-            # safety_neg: Actively bypasses safety via dynamic strings or manipulating the caller workspace.
-            "safety_bypasses": re.compile(r'\b(?:eval|evalin|assignin|evalc)\b|\bwarning[ \t]*\([ \t]*[\'"]off[\'"]'),
-            # danger: Destructive workspace actions and OS bypasses.
-            # CRITICAL GUARDRAIL: Raw terminal prints (`disp`) strictly routed to print_hits.
-            "high_risk_execution": re.compile(
-                r"\b(?:clear[ \t]+all|clc|system|dos|unix|exit|quit|keyboard)\b|^[ \t]*![ \t]*[a-zA-Z_]",
-                re.M | re.I,
-            ),
-            # io: Interactions with disk, hardware, or web.
-            "io": re.compile(
-                r"\b(?:load|save|fopen|fclose|fread|fwrite|fscanf|webread|webwrite|urlread|urlwrite|readtable|writetable|readmatrix|writematrix|serialport|imread|imwrite|audioread)\b"
-            ),
-            # api: Public APIs. We track explicit Methods blocks that don't declare private access.
-            # BUG FIX 1: the bare `methods` literal had no trailing boundary at all
-            # (not even `\b`), so it matched as a false-positive prefix of any
-            # identifier merely starting with "methods" (e.g. `methodsList = ...`).
-            # Added `\b` right after the literal -- "methods" is all word chars, so
-            # a plain `\b` is correct here (not the Rule 9 shared-group trap).
-            # BUG FIX 2 (Rule 1, Semantic Intent): the Access=public check was an
-            # optional *positive* group instead of a *negative* exclusion, so it
-            # never actually gated anything -- `methods (Access = private)` and
-            # `methods (Access = protected)` both still matched via the bare
-            # `methods\b` alone, directly contradicting this rule's own documented
-            # purpose ("don't declare private access"). Replaced with a negative
-            # lookahead that excludes an explicit private/protected declaration
-            # anywhere in a (possibly multi-attribute) attribute list, while still
-            # matching bare `methods` (implicitly public by MATLAB default) and
-            # explicit `Access = public`. Bounded to 200 chars per Rule 5.
-            "api": re.compile(
-                r"^[ \t]*methods\b(?![ \t]*\([^)]{0,200}\bAccess[ \t]*=[ \t]*(?:private|protected)\b)",
-                re.M | re.I,
-            ),
-            # flux: Mutation of state via assignment.
-            # Safely clamped with `[ \t]*=[ \t]*` to avoid newline spirals. Bounded nested fields `{0,5}`.
-            # BUG FIX (Rule 11, nested-delimiter coverage): the flat `[^)]*`/`[^}]*`
-            # classes broke on one level of nested indexing, e.g. `data(idx(1)) = v;`
-            # -- a common, realistic MATLAB pattern (indexing by another array/
-            # function's result). The truncated inner match left a stray closing
-            # bracket unconsumed, which then broke the required trailing `=`, so
-            # the WHOLE assignment went undetected (a true false negative, unlike
-            # a bare boolean-only rule where truncation still finds *a* match).
-            # Widened each segment to tolerate one level of self-nesting, same
-            # non-overlapping-alternatives shape the doc's Rule 11 example uses.
-            "state_mutation": re.compile(
-                r"^[ \t]*[a-zA-Z_]\w*"
-                r"(?:\((?:[^()]|\([^()]*\))*\)|\{(?:[^{}]|\{[^{}]*\})*\}|\.[a-zA-Z_]\w*){0,5}"
-                r"[ \t]*=[ \t]*[^=]|\b(?:clear|clearvars)\b",
-                re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            "dead_code": re.compile(r"^[ \t]*%[ \t]*(?:if|for|while|function|classdef)\b", re.M),
-            # doc: Standard MATLAB Help text (`%%` sections) or typed annotations.
-            "doc": re.compile(
-                r"^[ \t]*%[ \t]*@(?:param|return|author)|^[ \t]*%%[ \t]*[A-Z][A-Z0-9_]*",
-                re.M,
-            ),
-            # test: MATLAB unit testing framework keywords.
-            "test": re.compile(
-                r"\b(?:matlab\.unittest|TestCase|verifyEqual|assertEqual|assertGreaterThan|verifyTrue|verifyFalse|verifyError)\b"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # concurrency: Parallel Computing Toolbox (parallel loops and batch jobs).
-            "concurrency": re.compile(
-                r"\b(?:parfor|parfeval|spmd|batch|createJob|createTask|BackgroundPool|parpool|fetchOutputs)\b"
-            ),
-            # ui_framework: MATLAB UI Figures and App Designer interfaces.
-            "ui_framework": re.compile(
-                r"\b(?:uifigure|uicontrol|uiaxes|uilabel|uibutton|appdesigner|guide|drawnow|msgbox|errordlg|warndlg|figure|plot|scatter|surf)\b"
-            ),
-            # closures: Anonymous functions (MATLAB's lambdas).
-            "closures": re.compile(r"@[ \t]*\([^)]*\)"),
-            # globals: Globals and persistent memory retaining state across calls.
-            "globals": re.compile(r"\b(?:global|persistent|setenv|getenv)\b"),
-            # decorators: MATLAB Property/Method attribute blocks (e.g., `methods (Access = private)`).
-            # Safely bounded with `\([^)]*\)` to avoid ReDoS.
-            "decorators": re.compile(r"^[ \t]*(?:properties|methods|events)[ \t]*\([^)]*\)", re.M),
-            # generics: MATLAB is dynamically typed. Generics do not exist natively.
-            "generics": None,
-            # comprehensions: MATLAB array mapping functions (the closest equivalent to list comprehensions).
-            "comprehensions": re.compile(r"\b(?:arrayfun|cellfun|structfun|rowfun|varfun)\b"),
-            # scientific: The core of MATLAB. High-density built-in numerical solvers and DSP operations.
-            "scientific": re.compile(
-                r"\b(?:fft|ifft|svd|eig|inv|det|polyfit|ode45|ode15s|integral|cross|dot)\b|\.\*|\./|\.\^"
-            ),
-            # heat_triggers: Metaprogramming (feval), implicit expansion (bsxfun), and reflection.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:feval|bsxfun|cell2mat|mat2cell|num2cell|struct2cell|str2func|func2str|meta\.class|metaclass)\b|\?[a-zA-Z_]\w*"
-            ),
-            # import: Namespace/Class loading.
-            "import": re.compile(r"^[ \t]*import[ \t]+[a-zA-Z0-9_.*]+", re.M),
-            "_dependency_capture": re.compile(r"^[ \t]*import(?:[ \t]|\.\.\.[^\n]*\n)+([a-zA-Z0-9_.*]+)", re.M),
-            # ownership: Standard MATLAB comment authorship signatures.
-            "ownership": re.compile(r"^[ \t]*%[ \t]*(?:Author|Created by|Copyright)[ \t]*:(.*)", re.M | re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # BUG FIX: adjacent unbounded quantifiers with overlapping character
-            # sets (`\d+` immediately followed by `[^\]]*`, which also matches
-            # digits) -- the same ReDoS shape already found and fixed
-            # independently in embedded_python, css, and tcl in this epic.
-            # Confirmed via scaling sweep (~4x per doubling before the fix).
-            # Bounded both quantifiers, consistent with the established fix.
-            "spec_exposure": re.compile(r"\[(?:[ \t]*SPEC[ \t]*-[ \t]*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # ssr_boundaries: Web App compiler hooks.
-            "ssr_boundaries": re.compile(r"\b(?:webwindow|htmlTree)\b"),
-            # events: MATLAB Object-Oriented Event triggering.
-            "events": re.compile(r"\b(?:notify|event\.EventData|event\.PropertyEvent)\b"),
-            "dependency_injection": None,
-            "macros": None,
-            # pointers: C/C++ FFI pointer manipulation via MATLAB's `libpointer` or `handle` class.
-            "pointers": re.compile(r"\b(?:libpointer|calllib)\b|<[ \t]*handle\b"),
-            # memory_alloc: Explicit pre-allocation (a critical MATLAB performance mechanism to avoid array resizing).
-            "memory_alloc": re.compile(
-                r"\b(?:zeros|ones|nan|NaN|false|true|cell|struct|prealloc)[ \t]*\([^)]*\)",
-                re.I,
-            ),
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # telemetry: Custom structured logging frameworks.
-            "telemetry": re.compile(
-                r"\b(?:log4m|logger\.(?:info|debug|warn|error)|logDebug|logInfo|logWarn|logError)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            "debug_prints": re.compile(r"\b(?:disp|warning|fprintf(?![ \t]*\([ \t]*[a-zA-Z_]))\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\b(?:cast|typecast|int8|uint8|int16|uint16|int32|uint32|int64|uint64|single|double|logical)\s*\("
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # BUG FIX (Rule 3, Annotation & Execution Isolation): the bare `error`
-            # alternative fired on `logger.error(...)`/`log.error(...)` -- a
-            # custom logging framework's benign structured-logging call (already
-            # captured by `telemetry`), not MATLAB's built-in `error()` function,
-            # which actually throws and halts execution. A dot immediately before
-            # "error" is always a method-call chain, never the standalone
-            # builtin, so excluded via a negative lookbehind.
-            "panics_and_aborts": re.compile(r"\b(?:throw|rethrow|MException|throwAsCaller)\b|(?<!\.)\berror\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\bpause[ \t]*\("),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"\b(?:bitand|bitor|bitxor|bitcmp|bitshift|bitset|bitget)\b"),
-            # sync_locks: Managing parallel data queues and thread pooling barriers.
-            "sync_locks": re.compile(r"\b(?:labBarrier|labSend|labReceive|labBroadcast)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\bConstant\b"),
-            # cleanup: Garbage collection and explicit file/handle destruction.
-            "cleanup": re.compile(r"\b(?:clear|clearvars|delete|close|fclose|onCleanup)\b"),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"Access[ \t]*=[ \t]*(?:private|protected)"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(?:addlistener|event\.listener|event\.proplistener)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs) Safety Theater bypasses.
-            "test_skip": re.compile(r"\b(?:assume|assumeFail|assumeTrue|assumeFalse)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (MATLAB Specifics) ---
-            "serialization_parsing": re.compile(r"\b(jsondecode|jsonencode|xmlread|xmlwrite|load|save|readtable)\b"),
-            "regex_execution": re.compile(r"\b(regexp|regexpi|regexprep)\b"),
-            "time_date_logic": re.compile(r"\b(tic|toc|datetime|clock|now|pause|cputime)\b"),
-            # BUG FIX: missing `re.M` entirely on this `^`-anchored alternative
-            # (epic recurring bug class #6) -- `^` anchored to true string start
-            # only, so the shell-escape `!cmd` form could only ever fire if `!`
-            # were the very first character of the entire file, never on any
-            # later line where a real shell-escape command actually appears in
-            # practice. Also switched `\s*` to `[ \t]*` per Rule 5 (horizontal-
-            # only spacing must not cross newlines under `re.M`).
-            "ipc_rpc_bridges": re.compile(
-                r"\b(system|dos|unix|tcpclient|tcpserver|parpool|parfor)\b|^[ \t]*!",
-                re.M,
-            ),  # '!' is MATLAB's native shell escape
-        },
-    },
-    "livecode": {
-        "_meta": {
-            "target_version": "LiveCode 9.6 / 10.0 (Current Stable/DP)",
-            "last_updated": "2026-02-19",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Includes modern server scripts, builder files, binary stacks, and legacy Revolution stacks.
-        "extensions": [".lc", ".livecodescript", ".lcb", ".livecode", ".stack", ".rev"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: LiveCode environments rarely use extensionless execution scripts.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions to anchor the LiveCode server/builder environment.
-        "discriminators": [".lc", ".livecode", ".lcb", ".livecodescript"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for LiveCode Server environments.
-        "shebangs": ["livecode-server"],
-        # UPGRADED: Maps to Family 1d (multi_style_live)
-        # Rationale: Accepts '--', '//', '#', and '/* */' to support both its legacy HyperTalk roots and modern C-style syntax.
-        "lexical_family": "multi_style_live",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes English-like loops and try-catch.
-            "branch": re.compile(
-                r"\b(if|then|else|switch|case|default|repeat|while|until|times|try|catch|finally|throw|next\s+repeat|and|or|not)\b",
-                re.I,
-            ),
-            # 2. args: Parameters / Coupling. Captures parameters in handlers (on, command, function).
-            # BUG FIX (livecode tri-comparison manual verification, 2026-08-28): this
-            # `^`-anchored per-line pattern was compiled `re.I` only -- missing the
-            # `re.M` its structurally-identical `func_start` sibling below has -- so
-            # `^` only ever matched the very start of the file. Result: at most one
-            # args match per file (only when line 1 is a handler header), and ZERO
-            # across the entire language-crucible/data/livecode corpus (99 files, 781
-            # real handlers). Same one-flag omission class as any `^`-anchored
-            # signal rule; the pattern itself was already correct on a single line.
-            #
-            # #2409: second alternative for LiveCode Builder `.lcb` handlers, whose
-            # param list IS parenthesized and typed (`handler Foo(in x as String,
-            # out y as Integer)`) -- captures the parenthesized body; the generic
-            # per-function derivation then counts the comma-separated `in`/`out`/
-            # `inout` clauses. Single-physical-line only (a `\`-continued multi-line
-            # header still counts group 1 as whatever fit before the break) --
-            # matches how LiveCode Script's own branch already behaves for a
-            # continued line, and good enough for a proxy metric.
-            "args": re.compile(
-                r"^[ \t]*(?:"
-                r"(?:private[ \t]+|public[ \t]+)?(?:on|command|function|getprop|setprop)[ \t]+[a-zA-Z0-9_-]+[ \t]+((?:(?!--|//|#|/\*)[^ \t\r\n])(?:(?!--|//|#|/\*)[^\r\n])*?)(?=[ \t]*(?:--|//|#|/\*|\r|\n|$))"
-                r"|"
-                r"(?:public[ \t]+|private[ \t]+)?handler[ \t]+(?!type[ \t])[a-zA-Z_][a-zA-Z0-9_]*[ \t]*\(([^)\r\n]+)\)"
-                r")",
-                re.I | re.M,
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries and state transformation verbs.
-            # BUG FIX (#593): "constant" used to be listed here too, duplicating
-            # immutability_locks and violating this key's own documented EXCLUDES
-            # rule (immutability keywords belong in immutability_locks, not here).
-            "structural_boundaries": re.compile(
-                r"\b(put|get|set|go|send|dispatch|pass|return|add|subtract|multiply|divide|visual\s+effect|play|sort|find|replace)\b",
-                re.I,
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic blocks (handlers).
-            # Two dialects, one rule (#2409):
-            #   * LiveCode Script (`.livecodescript`/`.lc`) -- `[public|private]
-            #     on|command|function|getprop|setprop <name>` with an
-            #     *unparenthesized* arg list, so the name is followed by
-            #     whitespace/EOL/comment, never `(` (the `("function TargetFunc()",
-            #     None)` invalid case in test_livecode.py stays invalid). Name in group 1.
-            #   * LiveCode Builder (`.lcb`) -- `[public|private] handler <name>(...)`
-            #     with a *parenthesized*, typed param list, or a `\` line
-            #     continuation before the params. Name in group 2. The optional
-            #     `(?:public|private)` prefix followed directly by `handler` (never
-            #     `foreign`) means every `foreign handler` / `public foreign handler`
-            #     FFI *binding declaration* -- C-prototype shaped, `binds to
-            #     "<builtin>"`, no `... end handler` body -- is excluded by
-            #     construction (parallel to a C header prototype not being a
-            #     definition; decided in #2409). detector.py's Mode D naming goes
-            #     through `_extract_semantic_name`, not these groups, so the
-            #     two-group shape only affects the raw `struct_func_start` count.
-            "func_start": re.compile(
-                r"^[ \t]*(?:"
-                r"(?:private[ \t]+|public[ \t]+)?(?:on|command|function|getprop|setprop)[ \t]+([a-zA-Z0-9_-]+)(?=[ \t\r\n]|--|//|#|/\*|$)"
-                r"|"
-                r"(?:public[ \t]+|private[ \t]+)?handler[ \t]+(?!type[ \t])([a-zA-Z_][a-zA-Z0-9_]*)[ \t]*(?=\(|\\[ \t]*(?:\r?\n|$))"
-                r")",
-                re.I | re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines structural entities (Stacks, Behaviors, Widgets).
-            # BUG FIX (#593, Rule 11 nested-delimiter/coverage class): the name
-            # class `["\'a-zA-Z_]\w*` stopped at the first non-word char, so it
-            # could never consume dotted reverse-DNS module names -- LiveCode
-            # Builder's real, dominant declaration form (`module
-            # com.livecode.string`, confirmed against the language-crucible
-            # corpus). The lookahead then required whitespace/EOL immediately
-            # after that partial match, which a `.` never satisfies, so the
-            # whole match failed outright. Widened to allow up to 10 dotted
-            # segments (numerically bounded per Rule 5) and dropped the
-            # never-functional leading quote-char option (a quote immediately
-            # after would break the same lookahead, so it never actually
-            # matched anything either).
-            #
-            # BUG FIX (livecode tri-comparison manual verification, 2026-08-28):
-            # added a real quoted-name alternative as its OWN capture branch
-            # (`"([^"\r\n]{1,200})"`), distinct from the broken char-class option
-            # removed above. A LiveCode Script stack/behavior script exported to a
-            # `.livecodescript` file opens with `script "Name"` (quoted, one per
-            # file) -- the dominant declaration form for the Script half of the
-            # corpus, ~63 files -- and the bareword-only capture matched NONE of
-            # them (struct_class_start was 33, all from `.lcb` `module com.x.y`
-            # bareword decls, 0 from `.livecodescript`). Two capture groups now;
-            # `_resolve_class_start_match` in detector.py already handles the
-            # group-1-or-group-2 alternation shape (same as fortran/lua/abap).
-            "class_start": re.compile(
-                r"^[ \t]*(?:script|behavior|widget|module|library)[ \t]+"
-                r"(?:\"([^\"\r\n]{1,200})\"|([a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*){0,10}))"
-                r"(?=[ \t]*(?:--|//|#|/\*|\r?$))",
-                re.I | re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Defensive programming and screen/message locking.
-            "safety": re.compile(
-                r"\b(try|catch|finally|throw|lock\s+screen|lock\s+messages|lock\s+errordialogs|assert|strict\s+compilation|is\s+a|is\s+strictly)\b",
-                re.I,
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing safety (disabling messages, raw do).
-            # BUG FIX (#593, Rule 9/10-class trailing-boundary bug): the "do"
-            # alternative's own negative lookahead exists specifically to
-            # target "do" followed by a NON-identifier (a raw string/
-            # expression -- the actual dynamic-eval bypass), yet the shared
-            # trailing `\b` on the outer group required a WORD character
-            # right after the consumed whitespace. Since the realistic target
-            # of this alternative is almost always a quote or paren (both
-            # non-word), that trailing boundary could essentially never be
-            # satisfied for the alternative's own intended match --
-            # `do "put 1 into x"` and `do (tExpr)` both silently never
-            # matched. Pulled "do\s+(?!...)" out of the group (the lookahead
-            # already fully delimits it; no trailing \b needed).
-            "safety_bypasses": re.compile(
-                r"\b(disable\s+messages|unlock\s+(?:screen|messages)|global\s+)\b|\bdo\s+(?![a-zA-Z_]\w*\b)",
-                re.I,
-            ),
-            # 8. danger: High-Risk Execution. Process killers and blocking UI alerts in execution flow.
-            "high_risk_execution": re.compile(
-                r"\b(answer|ask|do(?!\s+(?:AppleScript|VBScript))|delete\s+(?:file|folder|url)|quit|exit\s+to\s+top)\b",
-                re.I,
-            ),
-            # 9. io: I/O & Network Boundaries. Disk, Network, and URL fetching.
-            # BUG FIX (#593): "post" used `[^ \t\n]+?` to span the payload
-            # expression before "to url", which excludes spaces -- so any
-            # realistic multi-word payload (`post "action=" & tAction to url
-            # tURL`, string concatenation, function calls with args) never
-            # matched; only a single bare token did. Widened to `[^\n]{1,300}?`
-            # (bounded per Rule 5, still linear) so it spans the whole
-            # single-line expression instead of stopping at the first space.
-            "io": re.compile(
-                r"\b(open\s+(?:file|socket|process)|read\s+from|write\s+to|close\s+(?:file|socket|process)|post\s+[^\n]{1,300}?\s+to\s+url|get\s+url|put\s+url|load\s+url)\b",
-                re.I,
-            ),
-            # 10. api: Public Surface Area. Exposed surface area (Any non-private handler).
-            "api": re.compile(
-                r"^[ \t]*(?:public[ \t]+)?(?!(?:private)[ \t]+)(?:on|command|function|getprop|setprop)[ \t]+[a-zA-Z0-9_-]+",
-                re.I | re.M,
-            ),
-            # 11. flux: State Mutation. State mutation (The 'put into' core of xTalk).
-            # BUG FIX (#593): the put/add/subtract source-expression matchers
-            # used `[^ \t\n]+?`, which excludes spaces -- so the dominant real
-            # form (`put the effective filename of this stack into tPath`,
-            # `add the number of lines of tList to tTotal`, any multi-word
-            # expression before the keyword) never matched; only a single bare
-            # token before "into"/"to"/"from" did. Widened to `[^\n]{1,300}?`
-            # (bounded per Rule 5, still linear) so it spans the whole
-            # single-line expression.
-            "state_mutation": re.compile(
-                r"\b(?:put\s+[^\n]{1,300}?\s+(?:into|after|before)|set\s+(?:the[ \t]+)?[a-zA-Z0-9_.]+\s+to|add\s+[^\n]{1,300}?\s+to|subtract\s+[^\n]{1,300}?\s+from)\b",
-                re.I,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code.
-            "dead_code": re.compile(
-                r"^[ \t]*(?:--|#|//)[ \t]*(?:on|command|function|put|get|set|if|repeat|try|end)\b",
-                re.I | re.M,
-            ),
-            # 13. doc: Structured Documentation. Structured documentation (/** or --@ tags).
-            # BUG FIX (#593, Rule 9/10-class trailing-boundary bug): the
-            # `Description|Purpose|Author|Summary` alternation had a trailing
-            # `\b` placed immediately after the literal `:` it requires. `:`
-            # is a non-word character, so that `\b` only fires if the very
-            # next character is a word character -- but the near-universal
-            # real form is "Author: John Doe" (colon then a space), which is
-            # non-word on both sides of that position, so the boundary never
-            # fired and the tag never matched. `:` is already self-delimiting
-            # (same principle as Rule 10), so the trailing `\b` is dropped.
-            "doc": re.compile(
-                r"^[ \t]*(?:--\||--@|/\*\*|//!).*(?:@param|@return|@author)|\b(?:Description|Purpose|Author|Summary):",
-                re.I | re.M,
-            ),
-            # 14. test: Testing & Assertions. Unit testing framework markers.
-            "test": re.compile(
-                r"\b(command\s+test[a-zA-Z0-9_]*|pass\s+test|fail\s+test|Levure|LcU|runTests)\b",
-                re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Message scheduling and non-blocking waits.
-            # BUG FIX (#593): the "send X in Y seconds" target-message matcher
-            # used `[^ \t\n]+?`, which excludes spaces -- so the dominant real
-            # form (`send "myHandler" to me in 2 seconds`, any multi-word
-            # message/target expression) never matched; only a single bare
-            # token did. Widened to `[^\n]{1,300}?` (bounded per Rule 5, still
-            # linear).
-            "concurrency": re.compile(
-                r"\b(send\s+[^\n]{1,300}?\s+in\s+[^\n]{1,300}?\s+(?:seconds|milliseconds|ticks)|wait\s+(?:for[ \t]+)?\d+\s+[^ \t\n]+?\s+with\s+messages|dispatch|pendingMessages|cancel)\b",
-                re.I,
-            ),
-            # 16. ui_framework: UI / View Components. HyperCard-descendant object hierarchy.
-            "ui_framework": re.compile(
-                r"\b(card|stack|background|bg|button|btn|field|fld|group|grp|graphic|grc|image|img|scrollbar|browser|data\s+grid|widget)\b",
-                re.I,
-            ),
-            # 17. closures: Closures / Anonymous Functions. (LiveCode Script lacks native lambdas).
-            "closures": None,
-            # 18. globals: Global / Shared State. Global state and environmental bindings.
-            # BUG FIX (#593, Rule 9): `$ENV` started with the symbolic `$`,
-            # which can never satisfy the shared leading `\b` -- real usage is
-            # always preceded by whitespace/line-start (non-word on both
-            # sides of that position), so it never matched. Pulled out of the
-            # group with only a trailing `\b` (the `$` is self-delimiting).
-            "globals": re.compile(
-                r"\b(global\s+|the\s+global|the\s+environment|the\s+platform|it)\b|\$ENV\b",
-                re.I,
-            ),
-            # 19. decorators: Decorators / Annotations. LCB attributes.
-            "decorators": re.compile(r"^[ \t]*@(?:metadata|property|type|name|title)\b", re.M),
-            # 20. generics: Generics / Type Parameters. (LCS is dynamically typed).
-            "generics": None,
-            # 21. comprehensions: Iterators / Comprehensions. Implicit list processing.
-            # BUG FIX (#593): the `filter` target matcher used `[^ \t\n]+?`,
-            # which excludes spaces -- so the common multi-word target form
-            # (`filter lines of tData with "*.txt"`) never matched; only a
-            # single bare token did. Widened to `[^\n]{1,300}?` (bounded per
-            # Rule 5, still linear).
-            "comprehensions": re.compile(
-                r"\brepeat\s+for\s+each\s+(?:item|line|word|char|key|element)\b|\bfilter\s+[^\n]{1,300}?\s+(?:with|without)\b",
-                re.I,
-            ),
-            # 22. scientific: Numerical / Compute Libraries. Native math commands.
-            "scientific": re.compile(
-                r"\b(sqrt|exp|ln|log2|log10|sin|cos|tan|asin|acos|atan|atan2|abs|round|trunc|random|any|average|max|min)\b",
-                re.I,
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Dynamic execution and path hijacking.
-            # BUG FIX (#593, Rule 10): `value(` and `evaluate(` end on the
-            # self-delimiting `(`, but the shared trailing `\b` required a
-            # word character immediately after it -- so the dominant real
-            # call shape (a quoted expression, e.g. `value("1+1")`) never
-            # matched; only an unquoted bare-identifier argument
-            # (`value(tExpr)`) did. Pulled both out of the group with the
-            # trailing `\b` dropped. Same defect hit `do\s+`: the dominant
-            # real form of dynamic script execution is `do "some script"`
-            # (a quoted string), but the shared trailing `\b` required a
-            # word character right after the consumed whitespace, which a
-            # quote never satisfies -- only `do <bareIdentifier>` matched.
-            # Pulled "do\s+" out too (already self-delimited by \s+).
-            "reflection_metaprogramming": re.compile(
-                r"\b(the\s+params|the\s+paramcount|frontscripts|backscripts|insert\s+script)\b|\bdo\s+|value\(|evaluate\(",
-                re.I,
-            ),
-            # 24. import: Dependency Inclusions. Library and stack loading.
-            "import": re.compile(r"\b(start\s+using\s+(?:stack|behavior)|require|include|module)\b", re.I),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:start[ \t]+using[ \t]+(?:stack[ \t]+|behavior[ \t]+)?|require[ \t]+|include[ \t]+|module[ \t]+)(?:['\"]([^'\"]+)['\"]|([^'\"\s]+))",
-                re.I | re.M,
-            ),
-            # 25. ownership: Authorship metadata in comments.
-            "ownership": re.compile(
-                r"^[ \t]*(?:--|//|#)\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
-            # 31. ssr_boundaries: View Horizon. Server-side rendering.
-            # BUG FIX: the whole alternation used to be wrapped in \b(...)\b.
-            # \b requires a word/non-word transition; `<?lc`, `?>`, and every
-            # `$_POST`-style superglobal START with a non-word character
-            # (`<` or `$`), so the leading \b could never match once that
-            # symbol was preceded by anything else non-word (e.g. a space or
-            # line start) -- meaning none of those 6 alternatives (everything
-            # except the plain-word "put header") ever actually matched.
-            # Each alternative now carries only the boundary that makes
-            # sense for its own shape.
-            "ssr_boundaries": re.compile(
-                r"<\?lc|\?>|\$_POST|\$_GET|\$_SERVER|\$_COOKIE|\$_SESSION|\bput\s+header\b",
-                re.I,
-            ),
-            # 32. events: Pub/Sub Network. Signal handlers and event brokers.
-            "events": re.compile(
-                r"^[ \t]*on\s+(?:mouseUp|mouseDown|openCard|closeCard|preOpenCard|openStack|closeStack|resizeStack|rawKeyDown|textChanged)\b",
-                re.I | re.M,
-            ),
-            # 33. dependency_injection: Inversion of Control. Service locator patterns.
-            "dependency_injection": re.compile(
-                r"\b(?:set\s+the\s+behavior\s+of|start\s+using\s+(?:stack|behavior)|insert\s+script\s+into\s+(?:front|back))\b",
-                re.I,
-            ),
-            # 34. macros: Preprocessor Hooks.
-            "macros": None,
-            # 35. pointers: Memory Map. Pass by reference in params.
-            # BUG FIX (#593, Rule 9): the leading `\b` sat directly in front
-            # of the symbolic `@` sigil. Real pass-by-reference params are
-            # always preceded by whitespace/comma/paren (non-word on both
-            # sides of that position), so the leading boundary never fired --
-            # `@pList` never matched at all except in the contrived case of a
-            # word character glued directly onto the `@`. Dropped the leading
-            # `\b` (the `@` is self-delimiting); kept the trailing `\b`.
-            "pointers": re.compile(r"@[a-zA-Z_]\w*\b", re.I),
-            # 36. memory_alloc: Manual Memory Management.
-            "memory_alloc": None,
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics.
-            "telemetry": re.compile(
-                r"\b(revLog|syslog|logError|logInfo|logWarn|logDebug|mergLog|rreLog|lcLog)\b",
-                re.I,
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Raw terminal output (puts to message box without target).
-            "debug_prints": re.compile(r'^[ \t]*put\s+(?:"[^"]*"|[a-zA-Z0-9_]+)[ \t]*$', re.I | re.M),
-            # 40. explicit_casts (Explicit Type Casting): English-style type checking.
-            "explicit_casts": re.compile(r"\bis\s+(?:not\s+)?a\b|\bis\s+strictly\b", re.I),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts): Hard detonations.
-            "panics_and_aborts": re.compile(r"\b(exit\s+to\s+top|quit|throw|abort)\b", re.I),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses): Temporal Duct Tape (Blocking wait).
-            "thread_sleeps": re.compile(r"\bwait\s+(?:for[ \t]+)?\d+\s+[^ \t\n]+?(?!\s+with\s+messages)\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"\b(bitAnd|bitOr|bitXor|bitNot|bitShiftLeft|bitShiftRight)\b", re.I),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(lock\s+screen|lock\s+messages|lock\s+errordialogs)\b", re.I),
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": re.compile(r"\b(constant\s+)\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(
-                r"\b(delete\s+variable|close\s+file|stop\s+using|remove\s+script)\b",
-                re.I,
-            ),
-            # 47. encapsulation
-            "encapsulation": re.compile(r"\b(private\s+)\b", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"^[ \t]*on\s+[a-zA-Z0-9_-]+", re.I | re.M),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(skip\s+test)\b", re.I),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (LiveCode Specifics) ---
-            "serialization_parsing": re.compile(
-                r"(?i)\b(jsonImport|jsonExport|arrayEncode|arrayDecode|revXMLCreateTree)\b"
-            ),
-            "regex_execution": re.compile(r"(?i)\b(matchText|matchChunk|replaceText|filter\s+.*\s+with\s+regex)\b"),
-            "time_date_logic": re.compile(
-                r"(?i)\b(the\s+(?:seconds|ticks|time|date|internet date)|wait\s+(?:for|until))\b"
-            ),
-            # BUG FIX (#593, Rule 10): `shell\s*\(` ends on the self-delimiting
-            # `(`, but the shared trailing `\b` required a word character
-            # immediately after it -- so the dominant real call shape (a
-            # quoted command string, e.g. `shell("ls -la")`) never matched;
-            # only an unquoted bare-identifier argument (`shell(tCmd)`) did.
-            # Pulled out of the group with the trailing `\b` dropped. Also
-            # bounded the unbounded `.*` in `post\s+.*to` per Rule 5 (was
-            # already empirically linear here, but bounding it removes the
-            # theoretical risk while this line was already being touched).
-            "ipc_rpc_bridges": re.compile(
-                r"(?i)\b(open\s+socket|read\s+from\s+socket|post\s+[^\n]{0,300}to|get\s+url|open\s+process)\b|shell\s*\("
-            ),
-        },
-    },
-    "solidity": {
-        "_meta": {
-            "target_version": "Solidity 0.8.20+ (Smart Contracts / Foundry / Hardhat)",
-            "last_updated": "2026-04-01",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Solidity contracts and library files.
-        "extensions": [".sol"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Solidity compiles to EVM bytecode; no extensionless scripts exist.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Hardhat, Truffle, and Foundry configurations acting as gravitational anchors.
-        "discriminators": [
-            "hardhat.config.js",
-            "hardhat.config.ts",
-            "truffle-config.js",
-            "foundry.toml",
-            "remappings.txt",
-        ],
-        # EXECUTION SIGNATURES: Smart contracts are compiled; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: Solidity strictly adheres to C-style line (//) and block (/* */) comments.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: Decisions that split flow. Includes Solidity 0.6+ try/catch.
-            "branch": re.compile(r"\b(if|else|for|while|do|break|continue|return|try|catch)\b|\?"),
-            # 2. args: Parameters / Coupling. Captures parameters for functions, errors, events, and modifiers.
-            # Bounded `{0,50}` to prevent ReDoS on massive tuple returns or complex signatures.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # both alternatives (was only reachable via group(0), the whole
-            # match including the "function"/"modifier"/name prefix) so
-            # detector.py's counter isolates just "(...)" -- the whole-match
-            # fallback overcounted every zero/one-arg signature by +1 the same
-            # way Python's did (#1199). Name group added to the first
-            # alternative too, purely so existing extraction tests keep
-            # passing.
-            "args": re.compile(
-                r"\b(?:function|modifier|error|event)\s+([a-zA-Z_]\w*\s*)?(\([^)]{0,500}\))|\b(?:constructor|fallback|receive)\s*(\([^)]{0,500}\))"
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope and data definitions.
-            "structural_boundaries": re.compile(
-                r"\b(pragma|import|contract|interface|library|struct|enum|type|mapping|address|uint\d*|int\d*|bytes\d*|bool|string)\b"
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic (Functions, Modifiers, Custom Errors, Events).
-            # LOOKAHEAD MANDATE APPLIED: Stops exactly at the identifier name before the parenthesis.
-            "func_start": re.compile(
-                r"^[ \t]*(?:function|modifier|error|event)\s+([a-zA-Z_]\w*)(?=\s*\()|^[ \t]*(constructor|fallback|receive)(?=\s*\()",
-                re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines structural entities (Contracts, Interfaces, Libraries).
-            "class_start": re.compile(
-                r"^[ \t]*(?:abstract\s+)?(?:contract|interface|library)\s+([a-zA-Z_]\w*)(?=\s*(?:is|\{))",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. State reversion, assertions, and defensive modifier usage.
-            "safety": re.compile(r"\b(require|assert|revert|modifier|nonReentrant|onlyOwner)\b"),
-            # 7. safety_neg: Safety Bypasses. Bypassing overflow checks (0.8+) or dangerous delegation.
-            "safety_bypasses": re.compile(r"\b(unchecked|assembly|delegatecall)\b"),
-            # 8. danger: High-Risk Execution. Contract destruction and absolute value termination.
-            "high_risk_execution": re.compile(r"\b(selfdestruct|suicide)\b"),
-            # 9. io: I/O & Network Boundaries. EVM blockchains are closed systems. (Cross-contract calls are mapped as API/Generics).
-            "io": None,
-            # 10. api: Public Surface Area. Exposed boundaries to external wallets or contracts.
-            "api": re.compile(r"\b(external|public)\b"),
-            # 11. flux: State Mutation. State mutation. Captures array mutators, payable states, and explicit assignment.
-            "state_mutation": re.compile(r"\b(payable|push|pop)\b|(?<![=<>!])=(?![=])|\+\+|--|\+=|-=|\*=|/="),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out execution flow or structural definitions.
-            "dead_code": re.compile(r"//[ \t]*(?:function|contract|if|require|uint|address)\b"),
-            # 13. doc: Structured Documentation. NatSpec (Ethereum Natural Specification Format).
-            "doc": re.compile(r"///|/\*\*|@(?:param|return|dev|notice|custom|title|author)"),
-            # 14. test: Testing & Assertions. Foundry/Forge testing hooks and assertions.
-            "test": re.compile(
-                r"\b(?:setUp|test[A-Za-z0-9_]*|assertEq|assertTrue|assertFalse|assertGt|assertLt|vm\.expectRevert)\b"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. EVM execution is strictly synchronous per transaction.
-            "concurrency": None,
-            # 16. ui_framework: UI / View Components. Solidity has no UI rendering capacity.
-            "ui_framework": None,
-            # 17. closures: Closures / Anonymous Functions. Solidity lacks native closures/lambdas.
-            "closures": None,
-            # 18. globals: Global / Shared State. Global transaction, block, and message state context variables.
-            "globals": re.compile(
-                r"\b(msg\.(?:sender|value|data|sig)|block\.(?:timestamp|number|chainid|coinbase|difficulty)|tx\.(?:gasprice|origin))\b"
-            ),
-            # 19. decorators: Decorators / Annotations. Modifiers act structurally similar to decorators.
-            "decorators": None,  # Modifiers are inline in Solidity, not on preceding lines.
-            # 20. generics: Generics / Type Parameters. Parameterized K/V associations.
-            # Deeply supports nested mapping structures across vertical lines.
-            # BUG FIX (ReDoS): the nested `[^)]+` was unbounded. Confirmed
-            # quadratic scaling (0.18s/0.72s/2.86s/11.4s for n=5k/10k/20k/40k
-            # -- ~4x per doubling) against a malformed/adversarial run of
-            # `mapping(mapping(uint => ` tokens with no closing paren: at
-            # each of the ~n candidate start positions where the outer
-            # `mapping(` matches, the inner alternative's unbounded
-            # `[^)]+` scans to the end of the string and fails, backtracking
-            # across the whole remaining length -- O(n) work at each of
-            # O(n) positions. Bounded to `{1,200}`, matching this same fix
-            # shape used elsewhere in the sweep (fortran/php/shell/apex/
-            # embedded_python) for "unbounded class immediately followed by
-            # an often-absent literal suffix" ReDoS.
-            "generics": re.compile(
-                r"\bmapping\s*\([ \t\n]*[a-zA-Z0-9_]+\s*=>\s*(?:mapping\s*\([^)]{1,200}\)|[a-zA-Z0-9_]+)[ \t\n]*\)"
-            ),
-            # 21. comprehensions: Iterators / Comprehensions. Solidity lacks native comprehensions.
-            "comprehensions": None,
-            # 22. scientific: Numerical / Compute Libraries. Cryptographic hashing and elliptic curve recovery.
-            "scientific": re.compile(r"\b(keccak256|sha256|ripemd160|ecrecover|addmod|mulmod)\b"),
-            # 23. heat_triggers: Metaprogramming & Reflection. Low-level assembly injections and fallback routers.
-            "reflection_metaprogramming": re.compile(r"\b(fallback|receive|assembly|delegatecall|call|staticcall)\b"),
-            # 24. import: Dependency Inclusions. Resolving dependencies across files.
-            "import": re.compile(
-                r"^[ \t]*import\s+(?:(?:\{[^}]+\}|\*\s+as\s+[a-zA-Z_]\w*)\s+from\s+)?[\"'][^\"']+[\"'](?:\s+as\s+[a-zA-Z_]\w*)?;",
-                re.M,
-            ),
-            # 24b. _dependency_capture: Graph resolution extracting exactly ONE path string.
-            "_dependency_capture": re.compile(
-                r"^[ \t]*import\s+(?:(?:\{[^}]+\}|\*\s+as\s+[a-zA-Z_]\w*)\s+from\s+)?[\"']([^\"']+)[\"'](?:\s+as\s+[a-zA-Z_]\w*)?;",
-                re.M,
-            ),
-            # 25. ownership: Authorship indicators. Strictly targets SPDX license tags and authorship notes.
-            "ownership": re.compile(r"//[ \t]*SPDX-License-Identifier:|(?:@author|Created by):\s+(.*)", re.I),
-            # --- 🌌 PHASE 4: EXTENDED DIMENSIONS (Specialized Sub-Equations) ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 28. private_info: Hardcoded credentials or private keys. Requires assignment.
-            "hardcoded_secrets": re.compile(r"\b(private_key|secret|mnemonic|api_key)\b[ \t]*[:=]", re.I),
-            # 29. spec_exposure: Map vs. Territory. ERC/EIP standards and audit tags.
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d{1,10}|audit)[^\]]{0,300}\]|\b(ERC-\d+|EIP-\d+)\b", re.I
-            ),
-            # 31. ssr_boundaries: View Horizon.
-            "ssr_boundaries": None,
-            # 32. events: Pub/Sub Network. Logging state to the blockchain EVM logs.
-            "events": re.compile(r"\b(emit|event)\b"),
-            # 33. dependency_injection: Inversion of Control.
-            "dependency_injection": None,
-            # 34. macros: Preprocessor Hooks. (Solidity lacks macros).
-            "macros": None,
-            # 35. pointers: Memory Map. Explicit storage vs memory pointer semantics.
-            "pointers": re.compile(r"\b(memory|storage|calldata)\b"),
-            # 36. memory_alloc: Explicit heap generation inside arrays or structs.
-            "memory_alloc": re.compile(r"\b(new)\b"),
-            # 37. inline_asm: Bare Metal Yul integration.
-            "inline_asm": re.compile(r"\bassembly\s*\{"),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics. (Hardhat console logging).
-            "telemetry": re.compile(r"\b(console\.log[a-zA-Z0-9_]*)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output. (Solidity lacks native printing outside Hardhat).
-            "debug_prints": None,
-            # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\b(address|uint\d*|int\d*|bytes\d*|uint|int|bytes)\s*\("),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting transaction state.
-            "panics_and_aborts": re.compile(r"\b(revert)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (EVM cannot sleep).
-            "thread_sleeps": None,
-            # 43. bitwise_ops (Bitwise Operations) Bitwise operations for gas optimization.
-            "bitwise_ops": re.compile(r"<<|>>|\^|~|(?<!&)&(?!&)|(?<!\|)\|(?!\|)"),
-            # 44. sync_locks (Resource Management & Stability) Native Reentrancy guards.
-            "sync_locks": re.compile(r"\b(nonReentrant)\b"),
-            # 45. immutability_locks (Immutability Constraints) Gas-saving immutability constraints.
-            "immutability_locks": re.compile(r"\b(constant|immutable|view|pure)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown) Deleting state variables to claim gas refunds.
-            "cleanup": re.compile(r"\b(delete)\b"),
-            # 47. encapsulation Access limitation to prevent external calls.
-            "encapsulation": re.compile(r"\b(private|internal)\b"),
-            # 48. listeners (Event Listeners / Observers) (Contracts cannot actively listen asynchronously).
-            "listeners": None,
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": None,
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Solidity Specifics) ---
-            "serialization_parsing": re.compile(r"\b(abi\.encode|abi\.encodePacked|abi\.decode)\b"),
-            "regex_execution": re.compile(
-                r"\b(keccak256\s*\(\s*abi\.encodePacked)\b"
-            ),  # Hashes are used instead of regex for complex string matching
-            "time_date_logic": re.compile(r"\b(block\.timestamp|now|\d+\s+(?:days|weeks|years|hours|minutes))\b"),
-            # BUG FIX: `.call{value:` and `emit\s+[A-Z]` were both inside the
-            # shared \b(...)\b wrapper.
-            # - `.call{value:` ends on `:` (non-word), so the trailing \b
-            #   could only fire when a word char immediately followed --
-            #   never true for the idiomatic spaced form
-            #   `target.call{value: amount}(...)`, which is how this is
-            #   always written in real Solidity.
-            # - `emit\s+[A-Z]` only ever consumed a SINGLE uppercase letter
-            #   (the char class has no `+`/`*`), so for any real
-            #   multi-character event name (`emit Transfer(...)`) the char
-            #   right after the matched letter is another word char --
-            #   word-to-word is not a \b transition, so the trailing \b
-            #   failed for every event name longer than one letter, which
-            #   is effectively all of them.
-            "ipc_rpc_bridges": re.compile(
-                r"\b(?:delegatecall|staticcall|selfdestruct)\b|\.call\{value:|\bemit\s+[A-Z]\w*\b"
-            ),
-        },
-    },
-    "objective-c": {
-        "_meta": {
-            "target_version": "Objective-C 2.0 (ARC) & Modern Runtime",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard sources, Objective-C++ files (.mm), and shared C/C++ headers.
-        "extensions": [".m", ".mm", ".h"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Objective-C executes natively on Apple platforms; no extensionless configurations exist.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: The ultimate defense against MATLAB. Apple UI components and Xcode project files act as massive gravity anchors.
-        "discriminators": [
-            ".m",
-            ".mm",
-            "project.pbxproj",
-            ".storyboard",
-            ".xib",
-            ".xcworkspace",
-            "Podfile",
-            "Cartfile",
-        ],
-        # #377: the symmetric counterpart to matlab's disqualifiers above -- heavy
-        # presence of MATLAB's own ecosystem anchors elsewhere in the repo is
-        # direct evidence AGAINST an ambiguous .m file being Objective-C.
-        "disqualifiers": [".mat", ".fig", ".mlx", "project.prj"],
-        # EXECUTION SIGNATURES: Compiled natively via LLVM/Clang; no shebangs exist.
-        "shebangs": [],
-        "internal_discriminator": re.compile(
-            r'^[ \t]*#import\s+[<"][^>"]+\.h[>"]|'
-            r"^[ \t]*@(?:interface|implementation|protocol|property|class)\b",
-            re.M,
-        ),
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: Uses standard '//' for line-level literature and '/*' '*/' for blocks.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: Decisions that split flow. Includes Obj-C specific @try/@catch blocks.
-            # BUG FIX: @try/@catch/@finally were inside the shared \b(...)\b
-            # group. \b requires a word/non-word transition, but `@` is
-            # non-word, so the leading \b could never match once `@` was
-            # preceded by anything else non-word (a space, line start) --
-            # meaning these 3 alternatives never actually matched real code.
-            "branch": re.compile(
-                r"\b(if|else|switch|case|default|for|while|do|break|continue|return|goto)\b|@(try|catch|finally)\b|&&|\|\||\?"
-            ),
-            # 2. args: Parameters / Coupling. Captures method parameters (colons), C-style args, and Blocks (^).
-            "args": re.compile(
-                # =====================================================================
-                # [ THE GHOST ARGS & BLOCK SHIELD (OBJECTIVE-C) ]
-                # Objective-C functions look like standard C functions. The previous regex
-                # `\b[a-zA-Z_]\w*\s*\([^)]*\)\s*(?:\{|;)` hallucinated `if (a) {` as a function.
-                # FIX: Injected `(?!(?:if|for|while|switch|catch|return)\b)` to block control flow.
-                # =====================================================================
-                # #1209: branch 1 (keyword-message selectors) now captures
-                # the WHOLE repeated `label:(Type)name label:(Type)name ...`
-                # span in one group instead of matching just the FIRST
-                # segment on its own -- the old single-segment match had no
-                # way to represent "this method takes 2+ parameters" at all
-                # (no commas exist in this syntax to count), so every
-                # multi-param method silently undercounted to 1 regardless of
-                # its real arity, and the unanchored single-segment form
-                # could even false-match a `:(Type)` cast expression sitting
-                # inside a DIFFERENT method's body. detector.py's
-                # `_count_colon_selector_segments` counts the real parameter
-                # count from this span by counting top-level `:`
-                # occurrences (one per segment) instead of commas. Branches
-                # 2/3 (Blocks and plain C-style functions) get the same
-                # capture-group treatment as every other C-family language.
-                #
-                # #1335: the `(Type)` cast used to be REQUIRED after every
-                # `label:`, so older, still-valid untyped keyword-message
-                # style (`- back:sender`, defaulting to `id`, common in
-                # 1990s NeXTSTEP-era code -- language-crucible/data/
-                # objective-c/worldwideweb/HyperManager.m has ~20 of these
-                # in one file) matched zero segments here and silently
-                # undercounted to args=0. Added a SECOND, separate
-                # alternative for this shape rather than loosening the
-                # existing typed one in place -- the original
-                # `(?:label)?:(Type)name` (label optional, type mandatory)
-                # stays completely unchanged (every pre-#1335 valid/invalid
-                # case for it is untouched), and the new
-                # `label:name` (label MANDATORY, no type) alternative is
-                # additive. The label is mandatory here specifically because
-                # every real keyword-message parameter has one -- this loses
-                # no real match, only narrows what an untyped segment can be.
-                #
-                # This still can't structurally tell a real untyped param
-                # (`back:sender`) apart from a body-only lookalike with the
-                # exact same shape -- a goto label followed by a statement
-                # (`label: statement;`) or a ternary's true-branch read as a
-                # label (`cond ? isOn : isOff`, "isOn" here IS a syntactically
-                # valid label) -- because those are lexically identical to a
-                # real untyped parameter; no local, bounded regex can
-                # distinguish them without knowing it's inside a method
-                # signature already. That's WHY this alternative is safe only
-                # because detector.py's `_slice_by_braces` now bounds the
-                # whole `args` search to the method's own signature text for
-                # objc specifically (never the body), making a body-only
-                # lookalike structurally unreachable in the real pipeline --
-                # see `_calculate_block_metrics`'s `args_search_text` param
-                # and tests/core_engine/test_detector.py's
-                # test_objectivec_args_body_lookalikes_excluded_by_signature_bound.
-                # In ISOLATION (the regex alone, as the adversarial test
-                # gauntlet in tests/extraction/languages/test_objectivec.py
-                # exercises it) these lookalikes DO still match -- a
-                # documented, pipeline-shielded limitation, the same shape as
-                # the pre-existing comment/string-lookalike one just below in
-                # this same file's test suite.
-                r"((?:(?:[a-zA-Z_]\w{0,80}[ \t\n]*)?:\s*\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\)\s*[a-zA-Z_]\w*[ \t\n]*|[a-zA-Z_]\w{0,80}[ \t\n]*:\s*[a-zA-Z_]\w*[ \t\n]*)+)|\^[ \t]*([a-zA-Z_]\w*\s*)?(\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\))|(?!(?:if|for|while|switch|catch|return|sizeof)\b)\b([a-zA-Z_]\w*)[ \t\n]*(\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\))[ \t\n]*(?:\{|;)",
-                re.M,
-            ),
-            # Which `args` capture-group index represents an objc
-            # keyword-message colon-selector span (routes to
-            # `_count_colon_selector_segments` in detector.py rather than
-            # the generic comma/whitespace counters) -- see the comment on
-            # `args` above. Leading underscore excludes this from the
-            # structural-signal scan loop, same convention as haskell's
-            # `_args_arrow_count_groups`.
-            "_args_colon_selector_groups": {1},
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining interface, implementation, and memory types.
-            # BUG FIX: the 8 @-prefixed alternatives never matched -- same
-            # \b-before-@ shape as branch's fix above.
-            "structural_boundaries": re.compile(
-                r"@(interface|implementation|protocol|end|synthesize|dynamic|class|import)\b|\b(typedef|struct|enum|union|__block|__weak|__strong)\b"
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic.
-            # The Critical Fix: Compiled with re.M and optional return types for TBL / NeXTSTEP syntax
-            # #1336: injected a "not a function" shield -- `(?!(?:if|for|...)\b)` -- right before
-            # the C-style alternative's (?:type-token)+ loop. Without it, this alternative already
-            # matched bare two-token call/return statements like `return foo(x);` (any single
-            # leading word satisfies the loop as a fake "return type") -- previously "harmless"
-            # only because detector.py's brace-only fallback silently dropped the match when no
-            # `{` followed nearby, but a `{` from unrelated later code (e.g. a neighboring
-            # `@interface` block's own ivar-list braces) could still get wrongly attributed as
-            # this phantom "function"'s body. `_slice_by_braces`'s objc branch now explicitly
-            # detects and rejects the bodyless-`;` case for this alternative (prototypes have no
-            # body to score, so they're out of func_start's scope, not a recall gap) instead of
-            # falling through to that blind forward search -- this shield is what makes a bare
-            # statement safe to have reach that rejection path at all, rather than being
-            # misidentified as a genuine prototype. Blocks exactly the same control-flow-keyword
-            # set `branch` above already treats as non-function-starting, so real prototypes
-            # (`extern void foo(T x);`, whose leading token is always a type/modifier, never a
-            # keyword) are unaffected.
-            "func_start": re.compile(
-                r"^[ \t]*(?:[A-Z_0-9]+\s+|__attribute__\s*\([^()]*(?:\([^()]*\)[^()]*)*\)\s+)*[-+][ \t\n]*(?:\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\)[ \t\n]*|(?:[a-zA-Z_]\w*[ \t\n]+){1,3})?([a-zA-Z_]\w*)(?=[ \t\n]*(?:__attribute__\s*\([^()]*(?:\([^()]*\)[^()]*)*\)|[A-Z_0-9]+(?:\([^)]*\))?)*[ \t\n]*[:\{;]|$)|"
-                r"^[ \t]*(?:(?:static|inline|extern|__attribute__\s*\([^()]*(?:\([^()]*\)[^()]*)*\)|template\s*<[^>]*>)[ \t\n]+)*"
-                r"(?!(?:if|for|while|switch|return|else|case|default|do|break|continue|goto|sizeof|catch)\b)"
-                r"(?:(?:\b[a-zA-Z_]\w*\b|extern\s+\"C\")[ \t\n]*(?:\*[ \t\n]*)*)+([a-zA-Z_]\w*)(?=[ \t\n]*\()",
-                re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines OO boundaries.
-            "class_start": re.compile(
-                r"^[ \t]*@\s*(?:interface|implementation|protocol)(?:\\?\s)+([a-zA-Z_]\w*)(?=(?:\\?\s)*(?:[:(<{/\n]|$))",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. ARC memory qualifiers and Cocoa/NeXT Assertions.
-            # BUG FIX: @try/@catch/@finally never matched -- same \b-before-@
-            # shape as branch's fix above.
-            "safety": re.compile(
-                r"@(try|catch|finally)\b|\b(__weak|__strong|__auto_type|NSAssert|NSParameterAssert|NSError|nil|Nil)\b"
-            ),
-            # 7. safety_neg: Safety Bypasses. Bypassing ARC, raw void pointers, and dangerous dynamic selectors.
-            # BUG FIX: `void\s*\*` (trailing \b after a literal `*`) and
-            # `performSelector:` (trailing \b after a literal `:`) only
-            # matched when immediately followed by another non-word char
-            # (rare -- an identifier or `@selector(...)` almost always
-            # follows in real code). Dropped the trailing \b for both;
-            # also dropped the now-redundant "performSelector:withObject:"
-            # alternative, since "performSelector:" already matches as its
-            # prefix (alternation tries left-to-right and returns first hit).
-            "safety_bypasses": re.compile(
-                r"\b(__unsafe_unretained|unsafe_unretained|id)\b|void\s*\*|performSelector:|!\s*[;,\]\)\.]|#pragma\s+clang\s+diagnostic\s+ignored"
-            ),
-            # 8. danger: High-Risk Execution. Process killers.
-            "high_risk_execution": re.compile(r"\b(abort|exit)\b"),
-            # 9. io: I/O & Network Boundaries. Disk, Network, and URL fetching (Includes NeXTSTEP NX prefixes & TBL WWW wrappers).
-            "io": re.compile(
-                r"\b(NSFileHandle|NSFileManager|NSURLSession|NSURLConnection|NSData|NXNetPath|NXSocket|NXStream|NXFile|HTLoad|HyperText|HTGet|socket|connect|send|recv)\b"
-            ),
-            # 10. api: Public Surface Area. Exposed interface/C-level exports and Interface Builder hooks.
-            "api": re.compile(
-                r"\b(FOUNDATION_EXPORT|UIKIT_EXTERN|OBJC_EXPORT|extern)\b|@(property)\b|IBOutlet|IBAction"
-            ),
-            # 11. flux: State Mutation. State mutation (Property setters and raw assignments).
-            "state_mutation": re.compile(r"\b(?:self\.)?[a-zA-Z_]\w*[ \t]*=|\[self\s+set[A-Z]\w*:|(?:\+\+|--)"),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code.
-            "dead_code": re.compile(
-                r"//[ \t]*(?:@interface|@implementation|\[|if|NSLog|- \()|/\*[ \t]*(?:@interface|@implementation|\[|if|NSLog|- \()"
-            ),
-            # 13. doc: Structured Documentation. Structured documentation (Includes NeXT style).
-            "doc": re.compile(r"/\*\*|///|/\*!|@param|@return|@brief|@discussion"),
-            # 14. test: Testing & Assertions. Unit testing framework markers (OCUnit/XCTest).
-            "test": re.compile(
-                r"\b(XCTest|XCTestCase|XCTAssert[A-Za-z]*|SenTestCase|STAssert[A-Za-z]*)\b|\b(?:setUp|tearDown)\s*\("
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. GCD (Grand Central Dispatch), NSOperation, and Locks.
-            # BUG FIX: @synchronized never matched -- same \b-before-@ shape
-            # as branch's fix above.
-            "concurrency": re.compile(
-                r"\b(dispatch_async|dispatch_sync|dispatch_once|dispatch_queue_t|NSOperation|NSThread|NSLock|NXConditionLock)\b|@(synchronized)\b"
-            ),
-            # 16. ui_framework: UI / View Components. Cocoa, UIKit, and AppKit hierarchies (Includes legacy NX classes).
-            "ui_framework": re.compile(
-                r"\b(UIView|UIViewController|UIWindow|NSView|NSWindow|NXWindow|NXApp|NXBrowser|NXText|Text|ScrollView|HyperText|WorldWideWeb|SGML)\b"
-            ),
-            # 17. closures: Closures / Anonymous Functions. Objective-C Blocks.
-            "closures": re.compile(r"\^[ \t]*(?:[a-zA-Z_]\w*\s*)?\s*\([^)]*\)[ \t]*\{"),
-            # 18. globals: Global / Shared State. Singleton/Shared instance access.
-            # BUG FIX: the two bracket-message alternatives never matched --
-            # `\b` requires a word/non-word transition, but `[`/`]` are both
-            # non-word, so both the leading and trailing \b could never
-            # match once flanked by anything else non-word (a space,
-            # semicolon, line start). Split them out of the shared wrapper.
-            "globals": re.compile(
-                r"\b(extern|NSUserDefaults|NXDefaults|NXApp)\b|\[UIApplication\s+sharedApplication\]|\[NSWorkspace\s+sharedWorkspace\]"
-            ),
-            # 19. decorators: Decorators / Annotations. Attributes and Property decorators.
-            "decorators": re.compile(r"\b__attribute__\s*\(\([^)]*\)\)|@property\s*\([^)]+\)"),
-            # 20. generics: Generics / Type Parameters. Lightweight generics (introduced in Xcode 7).
-            "generics": re.compile(r"<\s*[A-Z][^>]*\s*\*?\s*>"),
-            # 21. comprehensions: Iterators / Comprehensions. Block-based array/set enumeration.
-            # BUG FIX: the trailing \b (after a literal `:`) never matched --
-            # `:` is non-word, so the boundary only worked when followed by
-            # another non-word char, which is rare in real Obj-C selector
-            # syntax (a block or argument almost always follows). Moved the
-            # \b to before the colon instead, where it correctly applies to
-            # the preceding word character.
-            "comprehensions": re.compile(
-                r"\b(?:enumerateObjectsUsingBlock|filteredArrayUsingPredicate|makeObjectsPerformSelector)\b:"
-            ),
-            # 22. scientific: Numerical / Compute Libraries. C-Math and CoreGraphics structs.
-            "scientific": re.compile(
-                r"\b(math\.h|sin|cos|tan|sqrt|exp|log|abs|NSDecimalNumber|CGVector|CGAffineTransform|CGPoint|CGRect|CGSize|NXRect|NXSize)\b"
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. Objective-C Runtime Swizzling and dynamic messaging.
-            "reflection_metaprogramming": re.compile(
-                r"\b(objc_msgSend|performSelector|method_exchangeImplementations|class_addMethod|objc_allocateClassPair|isa|object_setClass)\b|<objc/runtime\.h>"
-            ),
-            # 24. import: Dependency Inclusions. Module and header inclusion.
-            "import": re.compile(r"^[ \t]*(?:#import|#include|@import)\b", re.M),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:#\s*import|#\s*include)\s*(?:\\?\n\s*)?(?:<([^>]+)>|[\"']([^\"']+)[\"'])|^[ \t]*@\s*import\s+([\w.]+)",
-                re.M,
-            ),
-            # 25. ownership: Authorship metadata.
-            # BUG FIX: `@author` (leading \b before non-word `@`) and
-            # `Author:` (trailing \b after non-word `:`) never matched --
-            # same shape as branch's @try fix above.
-            "ownership": re.compile(r"\b(?:Created by|Copyright|Tim Berners-Lee)\b|@author|\bAuthor:", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|RFC|W3C|CERN|TBL|ENQUIRE)[^\]]{0,300}\]|\b(?:WorldWideWeb|HyperText\s+Proposal|NeXTSTEP\s+Docs)\b",
-                re.I,
-            ),
-            "ssr_boundaries": re.compile(
-                r"\b(WOComponent|WOResponse|WOContext|WOApplication|WODirectAction|WebObjects)\b"
-            ),
-            "events": re.compile(r"\b(NSNotificationCenter|addObserver|postNotification|NXApp\s+run|sendEvent)\b"),
-            # BUG FIX: `inject:`/`initWithDependency:` (trailing \b after a
-            # literal `:`) only matched when immediately followed by another
-            # non-word char -- true for a plain identifier argument, but
-            # false for the equally common `@selector(...)` argument form.
-            # Moved the \b to before the colon instead.
-            "dependency_injection": re.compile(
-                r"\b(TyphoonComponentFactory|TyphoonDefinition|JSObjection)\b|\b(?:inject|initWithDependency)\b:"
-            ),
-            "macros": re.compile(
-                r"^[ \t]*#(?:define|undef|ifdef|ifndef|if|elif|else|endif|pragma)\b",
-                re.M,
-            ),
-            "pointers": re.compile(r"->|&\w+|\b(?:id|Class|SEL|IMP)\b|(?<=[=(,])[ \t]*\*[a-zA-Z_]\w*"),
-            "memory_alloc": re.compile(
-                r"\b(alloc|init|new|copy|mutableCopy|retain|malloc|calloc|NX_MALLOC|NX_ZONEMALLOC|NSZoneMalloc)\b"
-            ),
-            "inline_asm": re.compile(r"\b(?:__asm__|asm|__asm)\b(?:\s+volatile)?\s*\([^)]*\)"),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics.
-            "telemetry": re.compile(r"\b(os_log|OSLog|DDLogInfo|DDLogError|DDLogWarn|DDLogDebug|syslog)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"\b(printf|fprintf|NXPrintf|NSLog)\b"),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit type coercion.
-            "explicit_casts": re.compile(r"\(\s*[A-Za-z_]\w*\s*\*?\s*\)\s*[a-zA-Z_$]|typeof\b"),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution context.
-            # BUG FIX: @throw never matched -- same \b-before-@ shape as
-            # branch's fix above.
-            "panics_and_aborts": re.compile(r"@(throw)\b|\b(abort|exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) Forcing threads to sleep.
-            "thread_sleeps": re.compile(r"\b(sleep|usleep|nanosleep)\s*\("),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
-            # 44. sync_locks (Resource Management & Stability) Coordinated threading logic.
-            # BUG FIX: @synchronized never matched -- same \b-before-@ shape
-            # as branch's fix above.
-            "sync_locks": re.compile(
-                r"@(synchronized)\b|\b(NSLock|NSRecursiveLock|NSConditionLock|dispatch_semaphore_wait)\b"
-            ),
-            # 45. immutability_locks (Immutability Constraints) Immutability.
-            "immutability_locks": re.compile(r"\b(const|readonly|immutable)\b"),
-            # 46. cleanup (Resource Cleanup / Teardown) Resource release (Crucial for MRC NeXT era).
-            "cleanup": re.compile(r"\b(dealloc|release|autorelease|free|NX_FREE)\b"),
-            # 47. encapsulation Hiding logic from the application.
-            # BUG FIX: the leading \b before `@` never matched (same shape as
-            # branch's fix above). The trailing \b is fine as-is (each
-            # keyword ends in a letter).
-            "encapsulation": re.compile(r"@(?:private|protected|package)\b"),
-            # 48. listeners (Event Listeners / Observers) Waiting for state broadcasts.
-            # BUG FIX: trailing \b after a literal `:` only matched when
-            # immediately followed by another non-word char -- true for a
-            # plain identifier argument, false for the equally common
-            # `@selector(...)` argument form. Moved the \b to before the colon.
-            "listeners": re.compile(r"\b(?:addObserver|observeValueForKeyPath|subscribeNext)\b:"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(XCTSkip|xit|xdescribe)\b"),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Objective-C Specifics) ---
-            "serialization_parsing": re.compile(
-                r"\b(NSJSONSerialization|NSKeyedUnarchiver|NSKeyedArchiver|NSXMLParser|NSPropertyListSerialization)\b"
-            ),
-            "regex_execution": re.compile(r"\b(NSRegularExpression|NSRegularExpressionSearch)\b"),
-            "time_date_logic": re.compile(
-                r"\b(NSDate|NSDateFormatter|NSTimer|CFAbsoluteTimeGetCurrent|NSDateComponents)\b"
-            ),
-            "ipc_rpc_bridges": re.compile(
-                r"\b(NSXPCConnection|NSTask|NSPipe|NSURLConnection|NSURLSession|NSMachPort)\b"
-            ),
-        },
-    },
-    "makefile": {
-        "_meta": {
-            "target_version": "GNU Make 4.4+",
-            "last_updated": "2026-02-28",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard make extensions, definitions, and includes.
-        "extensions": [".mk", ".mak", ".make", ".def"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: The universally recognized, extensionless build configurations that are executed as pure code.
-        "exact_matches": [
-            "Makefile",
-            "makefile",
-            "GNUmakefile",
-            "Kbuild",
-            "Makeconf",
-            "Makevars",
-        ],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling configurations acting as disambiguation anchors to resolve ambiguous .mk includes.
-        "discriminators": ["Makefile", "makefile", "configure.ac", "CMakeLists.txt"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for executable make scripts.
-        "shebangs": ["make", "gmake"],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Make natively uses '#' exclusively for line-level comments.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --------------------------------------------------------------------------
-            # 1. GEOMETRY & SHAPE (Geometry & Shape)
-            # --------------------------------------------------------------------------
-            # Captures Make conditionals and typical inline shell conditional branches.
-            "branch": re.compile(
-                r"^[ \t]*(?:ifeq|ifneq|ifdef|ifndef|else|endif)\b(?![ \t]*:)|(?:^[ \t]*(?:@|-|\+)*[ \t]*|[;|&|(][ \t]*)\b(?:if|elif|for|while|case)\b|&&|\|\|",
-                re.M,
-            ),
-            # Make dynamically accesses arguments within $(call macro, args...) or positional $1, $2 inside recipes.
-            # BUG FIX (epic #813/#844): had no awareness of Make's own `$$`
-            # escaping convention (a doubled `$` means "a literal `$`,
-            # unescaped, for whatever consumes this text next"). Recipe lines
-            # commonly write `$$1`/`$$(1)` specifically to pass a literal
-            # `$1` through to the SHELL (the shell's own first positional
-            # parameter, or any other shell variable) -- unrelated to Make's
-            # own macro-call mechanism entirely, since Make's own `$`
-            # expansion already happened one layer up. The old pattern had no
-            # way to tell these apart from a real Make-level reference. Fixed
-            # with a negative lookbehind so a `$` immediately preceded by
-            # another `$` can never start a match.
-            "args": re.compile(r"(?<!\$)\$(?:\([0-9]+\)|\{[0-9]+\}|[0-9]\b|[({]call[ \t]+[a-zA-Z0-9_.-]+)"),
-            # Smooth structural boundaries: variable assignments (:=, =, ?=) and native structural controls like vpath.
-            # Explicitly excludes the append operator `+=` which belongs in flux.
-            "structural_boundaries": re.compile(
-                r"^[ \t]*(?:[a-zA-Z0-9_.-]|\+(?!=))+[ \t]*(?::|\?|::)?=(?![ \t]*=)|^[ \t]*(?:vpath|undefine)\b",
-                re.M,
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Strict capture group and positive lookahead applied for both Obj-C methods and C-functions.
-            # BUG FIX (epic #813/#844), two findings:
-            # 1. The trailing lookahead only checked for a bare `:`/`::`, with
-            #    no exclusion for an immediately-following `=` -- so
-            #    `MY_VAR := value` and `MY_VAR ::= value` (GNU Make's two
-            #    immediate-expansion assignment operators, arguably THE most
-            #    common modern Make idiom) were both misidentified as real
-            #    target declarations. Fixed with a negative lookahead so
-            #    neither colon form can be immediately followed by `=`.
-            # 2. A multi-target rule (`a b c: deps`, a real and common Make
-            #    idiom for sharing one recipe across several targets) wasn't
-            #    detected AT ALL -- the identifier class stopped at the first
-            #    space, then the colon lookahead failed against the next
-            #    target name instead of a colon, and there's no second `^`
-            #    anchor point later on the same line to retry from. Fixed by
-            #    allowing additional space-separated co-target tokens (same
-            #    char class) between the captured first name and the colon
-            #    lookahead -- but this alone reopened a NEW false-positive
-            #    vector: a recipe line with multiple words where a later word
-            #    contains a colon not followed by `=` (a URL's `://`, a bare
-            #    time value `10:30`) would misparse as "co-target tokens then
-            #    a real target-defining colon". Recipe lines are ALWAYS
-            #    tab-indented in Make's own lexical rules (a leading tab means
-            #    "recipe", unconditionally, absent a custom .RECIPEPREFIX) --
-            #    so the leading-whitespace class was narrowed from `[ \t]*` to
-            #    `[ ]*` (spaces only), which structurally excludes every
-            #    recipe line from ever reaching the target-declaration path at
-            #    all, closing the new vector without limiting the multi-target
-            #    fix itself.
-            #
-            # Considered and DELIBERATELY NOT fixed: a variable-referenced
-            # target name (`$(TARGET): $(OBJECTS)`, also common) is still
-            # invisible -- `$`/`(`/`)` are still outside the char class. This
-            # is intentional, not an oversight: tests/extraction/languages/test_makefile_strict
-            # .py's test_makefile_func_start_and_macros_no_false_collision
-            # deliberately locks in that `$(1): $(2)` (a `define...endef`
-            # template's macro-positional-parameter placeholder) must NOT
-            # satisfy func_start, and this rule has no block/context tracking
-            # (line_exclusive lexical family) to distinguish that shape from a
-            # real `$(TARGET):` reference at the regex level. Safely
-            # separating the two would need a structured token (real
-            # variable names vs. bare positional-parameter digits), not a
-            # flat character-class widening -- judged out of scope for this
-            # issue; documented as a known limitation instead.
-            "func_start": re.compile(
-                r"^[ ]*(?!\.(?:PHONY|POSIX|SECONDARY|PRECIOUS|DELETE_ON_ERROR|KEEP_STATE|NOTPARALLEL|WAIT|SILENT|EXPORT_ALL_VARIABLES|IGNORE|SUFFIXES|DEFAULT|INTERMEDIATE|NOTINTERMEDIATE|LOW_RESOLUTION_TIME|ONESHELL|SECONDEXPANSION)\b)"
-                r"([a-zA-Z0-9_./%+-]+)(?:[ \t]+[a-zA-Z0-9_./%+-]+)*(?=[ \t]*(?:::(?!=)|:(?!:?=)))",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Defines OO boundaries. Strict capture group and positive lookahead applied.
-            "class_start": None,
-            # --------------------------------------------------------------------------
-            # 2. STRUCTURAL INTEGRITY & TECH DEBT (Structural Integrity & Tech Debt)
-            # --------------------------------------------------------------------------
-            # Defensive programming: Executing internal logic checks, asserting tool paths, or using safety system states.
-            "safety": re.compile(
-                r"^[ \t]*\.(?:POSIX|SECONDARY|PRECIOUS|DELETE_ON_ERROR|KEEP_STATE)\b|\bcommand[ \t]+-v\b|\$\((?:if|or|and)[ \t]+",
-                re.M,
-            ),
-            # Bypassing safety: Prefixing recipes with `-` to swallow errors, or forcefully exiting true via shell logic.
-            # NOTE: real recipes commonly separate the `-` modifier from the command with
-            # whitespace (e.g. "\t- rm -f build/"); GNU Make strips the modifier and any
-            # following whitespace before invoking the shell, so both "-rm" and "- rm" are
-            # valid, equally common ignore-errors forms.
-            "safety_bypasses": re.compile(r"^\t[ \t]*-[ \t]*[a-zA-Z0-9_./$]|\|\|[ \t]*(?:true|exit[ \t]+0)\b", re.M),
-            # Heavily destructive sequence patterns or overriding permissions. (Eval is categorized under heat_triggers).
-            "high_risk_execution": re.compile(r"\bsudo[ \t]+|\brm[ \t]+-[rR]?[fF][ \t]+(?:/|\$[{(])|\bkill[ \t]+-9\b"),
-            # Interacting directly with outputs, networks, or the disk filesystem.
-            "io": re.compile(
-                r"\$\((?:file|wildcard)[ \t]+|\b(?:curl|wget|scp|rsync|tar|unzip|mkdir|cp|mv)\b|>>?[ \t]*[^ \t\n/]+"
-            ),
-            # Exposed architecture limits (Exporting variables globally or explicit lifecycle public endpoints).
-            "api": re.compile(
-                r"^[ \t]*(?:\.PHONY|export\b|(?:all|install|build|clean|test|run)[ \t]*::?)",
-                re.M,
-            ),
-            # Mutating variable state by appending (+=) or shell assignment (!=). .
-            "state_mutation": re.compile(r"^[ \t]*(?:[a-zA-Z0-9_.-]|\+(?!=))+[ \t]*(?:\+|!)=", re.M),
-            # Commented-out targets, commented out shell logic, or commented conditional Make directives.
-            "dead_code": re.compile(
-                r"^[ \t]*#[ \t]*(?:[a-zA-Z0-9_./%+-]+[ \t]*::?|(?:[a-zA-Z0-9_.-]|\+(?!=))+[ \t]*(?::|\?|::)?=|\b(?:ifeq|ifneq|ifdef|ifndef|include)\b)",
-                re.M,
-            ),
-            # Structured self-documenting makefile comments typically utilizing a double hash block.
-            "doc": re.compile(r"^[ \t]*##[ \t]+[^ \t\n]+", re.M),
-            # Testing endpoints natively executing verifications or launching language-specific test suites.
-            "test": re.compile(
-                r"\b(?:npm[ \t]+test|yarn[ \t]+test|pytest|go[ \t]+test|cargo[ \t]+test|make[ \t]+test)\b",
-                re.M | re.I,
-            ),
-            # --------------------------------------------------------------------------
-            # 3. DOMAIN & ARCHITECTURE (Architectural Style and Abstractions)
-            # --------------------------------------------------------------------------
-            # Setting explicitly threaded job pipelines, detaching processes to background, or asserting waits.
-            "concurrency": re.compile(
-                r"\b(?:make[ \t]+-j|xargs[ \t]+-P|wait)\b|&[ \t]*$|\$\(MAKE\)[ \t]+-j",
-                re.M,
-            ),
-            "ui_framework": None,
-            "closures": None,
-            # Core global state built-in environments spanning the build system.
-            "globals": re.compile(r"\$\((?:MAKE|MAKEFLAGS|MAKECMDGOALS|CURDIR|SHELL|PATH|USER|HOME|PWD|\.VARIABLES)\)"),
-            "decorators": None,
-            "generics": None,
-            # High-density text manipulating algorithms native to GNU Make iterating through variable spaces.
-            "comprehensions": re.compile(
-                r"\$\((?:foreach|filter|filter-out|patsubst|subst|addprefix|addsuffix|words|firstword|lastword|sort|findstring|join)[ \t]+"
-            ),
-            # Launching explicit calculation boundaries outside the Make environment natively.
-            "scientific": re.compile(r"\b(?:bc|expr|awk)\b|\$\(shell[ \t]+expr[ \t]+"),
-            # Extremely dense meta-programming manipulations drastically raising cognitive load during debugging.
-            "reflection_metaprogramming": re.compile(
-                r"\$\((?:eval|call|value|origin|flavor|shell)[ \t]+|\.SECONDEXPANSION:"
-            ),
-            # Linking isolated segments of the graph execution via modular file resolution.
-            "import": re.compile(r"^[ \t]*-?(?:include|sinclude)[ \t]+[^ \t\n]+", re.M),
-            # BUG FIX (epic #813/#844): the leading `[ \t]*` allowed a TAB, but
-            # a tab-initial line is ALWAYS a recipe command in Make's own
-            # lexical rules (never a directive, absent a custom
-            # .RECIPEPREFIX) -- same root cause and fix as func_start's fix
-            # above. A recipe line whose command happens to be literally
-            # named "include"/"sinclude" (e.g. `\tinclude /etc/motd`) was
-            # misidentified as a real include directive. Narrowed to `[ ]*`
-            # (spaces only), matching func_start's fix. `import` (a sibling,
-            # non-gauntlet-scoped rule with the same pattern) deliberately
-            # left unfixed, out of the four-gauntlet scope for this issue --
-            # same precedent as #843's identical call for yaml.
-            "_dependency_capture": re.compile(r"^[ ]*-?(?:include|sinclude)[ \t\n]+([^\s#]+)", re.M),
-            # Metadata anchoring authorship and structural domain owners.
-            "ownership": re.compile(
-                r"^[ \t]*#[ \t]*(?:@author\b|author:|maintainer:|created by:)",
-                re.I | re.M,
-            ),
-            # --------------------------------------------------------------------------
-            # 4. SPECIALIZED EXTRACTIONS (Sub-Equations and Low-Level/System)
-            # --------------------------------------------------------------------------
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            "spec_exposure": re.compile(r"\[(?:spec-[0-9]+|audit|spec)\]", re.I),
-            "ssr_boundaries": None,
-            "events": None,
-            "dependency_injection": None,
-            # Expanding structural blocks dynamically into recipes prior to runtime evaluation.
-            "macros": re.compile(r"^[ \t]*define[ \t]+[a-zA-Z0-9_.-]+", re.M),
-            "pointers": None,
-            "memory_alloc": None,
-            "inline_asm": None,
-            # --------------------------------------------------------------------------
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # --------------------------------------------------------------------------
-            # Emitting pure, safe structural observability that does not risk halting or crashing the graph execution.
-            # NOTE: bounded to one level of nested $(...) (e.g. "$(info Building $(call name))")
-            # instead of a flat [^)\n]* class, which truncated at the first inner ")" and
-            # under-captured the real $(info ...) span on realistic nested-call messages.
-            "telemetry": re.compile(r"\$\(info[ \t]+(?:[^()\n]|\([^()\n]*\))*\)"),
-            # Standard output commands echoing transient debris to the shell execution log.
-            # NOTE: also matches echo/printf immediately after a `;` (the common one-liner
-            # recipe form "target: deps; echo hi"), not just at true line start -- recipes are
-            # frequently written on the same physical line as the target when short.
-            "debug_prints": re.compile(
-                r"^[ \t]*@?(?:echo|printf)[ \t]+|;[ \t]*@?(?:echo|printf)[ \t]+|\$\(warning[ \t]+(?:[^()\n]|\([^()\n]*\))*\)",
-                re.M,
-            ),
-            "explicit_casts": None,
-            # System detonators specifically intended to abort the build flow if preconditions are failed natively or via shell.
-            "panics_and_aborts": re.compile(
-                r"\$\(error[ \t]+(?:[^()\n]|\([^()\n]*\))*\)|\bexit[ \t]+[1-9][0-9]*\b|\bfalse\b"
-            ),
-            # Temporal duct tape strictly applying forced pausing.
-            "thread_sleeps": re.compile(r"\bsleep[ \t]+[0-9]+"),
-            "bitwise_ops": None,  # Kept null as Bash pipe IPC limits logic math precision.
-            # Explicit locks halting temporal thread races. .
-            "sync_locks": re.compile(r"^[ \t]*\.(?:NOTPARALLEL|WAIT)[ \t]*::?|\bflock[ \t]+", re.M),
-            # Enforcing strict immutability bounds on state configuration. .
-            "immutability_locks": re.compile(r"^[ \t]*override[ \t]+[a-zA-Z0-9_.-]+", re.M),
-            # Janitor routines ripping apart build artifacts and cleanly tearing down output paths. .
-            "cleanup": re.compile(r"^[ \t]*(?:dist)?clean[ \t]*::?|\brm[ \t]+-[a-zA-Z]*f[a-zA-Z]*\b", re.M),
-            # The Vault explicitly hiding scope logic away from external API leakage boundaries. .
-            "encapsulation": re.compile(
-                r"^[ \t]*(?:unexport[ \t]+[a-zA-Z0-9_.-]+|[a-zA-Z0-9_.-]+[ \t]*:[ \t]*private[ \t]+|\.SILENT[ \t]*:)",
-                re.M,
-            ),
-            # Subscribing the file system to continuous native observation hooks.
-            "listeners": re.compile(r"\b(?:inotifywait|watch)[ \t]+"),
-            # Safety theater actively bypassing execution verifications during a test endpoint invocation.
-            "test_skip": re.compile(
-                r"\b(?:SKIP(?:_TESTS?)?|XFAIL)[ \t]*=[ \t]*[1TtYy]|\bpytest[ \t]+-k[ \t]+not\b|--skip",
-                re.I,
-            ),
-            # --- PHASE 3: HYBRID DOMAIN SENSORS (Makefile Specifics) ---
-            # NOTE: `^\s*` (matching `\n` under re.M) is a confirmed real O(n^2) ReDoS on a
-            # long run of blank lines with no closing keyword -- each blank-line `^` position
-            # re-scans forward through the rest of the run before failing. Swapped for the
-            # engine's mandated `^[ \t]*` form (Rule 5), which cannot cross a newline and is
-            # therefore bounded to the current line.
-            "serialization_parsing": re.compile(r"(?m)^[ \t]*(?:@|-)?(?:tar|unzip|gunzip|jq|sed|awk)\b"),
-            "regex_execution": re.compile(
-                r"(?m)\$\((?:filter|filter-out|patsubst)\b|^[ \t]*(?:@|-)?(?:grep|egrep|sed)\b"
-            ),
-            "time_date_logic": re.compile(r"(?m)\$\(shell[ \t]+date\b|^[ \t]*(?:@|-)?(?:sleep|date)\b"),
-            "ipc_rpc_bridges": re.compile(r"(?m)\$\(shell\b|^[ \t]*(?:@|-)?(?:curl|wget|ssh|scp|docker|kubectl)\b"),
-        },
-    },
-    "abap": {
-        "_meta": {
-            "target_version": "ABAP 2025 (ABAP Cloud / RAP / Modern 7.5x+ Syntax)",
-            "last_updated": "2026-02-18",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Advanced Business Application Programming sources and modern Core Data Services.
-        "extensions": [".abap", ".asddls"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: ABAP is executed within the SAP environment; no extensionless exact configurations exist.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: SAP deployment artifacts acting as disambiguation anchors.
-        "discriminators": [".abap", "package.devc.xml", ".apc"],
-        # EXECUTION SIGNATURES: Executed exclusively within the SAP NetWeaver/ABAP platform; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 7 (The Positional Ancients)
-        # Rationale: Strictly fixed-format legacy constraints. The engine must monitor Column 1
-        # for an asterisk '*' to identify line-level Commented / Non-Executable Text, while allowing '"' for inline.
-        # ABAP code uses " as inline comment, requiring a specialized positional family
-        "lexical_family": "positional_abap",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch: decisions that split flow. Includes modern COND/SWITCH expressions.
-            "branch": re.compile(
-                r"^[ \t]*(IF|ELSE|ELSEIF|CASE|WHEN|WHILE|DO|LOOP\s+AT|TRY|CATCH|CLEANUP|CHECK|EXIT|CONTINUE|RETURN|COND|SWITCH)\b",
-                re.I | re.M,
-            ),
-            # 2. args: Parameters / Coupling. Captures explicit parameter binding keywords.
-            # BUG FIX (#1917, args regex correctness): two independent issues found while
-            # investigating the tri-comparison chart's per-function args count.
-            #   1. The trailing identifier had no `!?` -- ABAP's classic parameter-name
-            #      escape prefix (`!iv_url TYPE string`, used to avoid a keyword collision,
-            #      extremely common in real code) isn't in `[a-zA-Z_]`, so a clause whose
-            #      FIRST declared parameter uses it failed to match AT ALL, silently making
-            #      the whole clause invisible to this signal (confirmed: `IMPORTING
-            #      !ii_custom_mapping TYPE ...` in abapGit's zcl_abapgit_ajson.clas.abap).
-            #   2. `(?:VALUE\s*\([^)]*\)\s+)?[a-zA-Z_][a-zA-Z0-9_-]*` treated VALUE(...) as
-            #      an OPTIONAL PREFIX before a still-mandatory trailing identifier, instead
-            #      of as its own complete alternative -- so `RETURNING VALUE(ro_instance)
-            #      TYPE ...` matched through to the literal word "TYPE", mis-capturing it as
-            #      if it were a second parameter name. Restructured as a real alternation
-            #      (VALUE(...) OR a bare identifier, never both in sequence) so the match
-            #      ends where the real parameter reference ends.
-            "args": re.compile(
-                r"\b(IMPORTING|EXPORTING|CHANGING|RETURNING|RECEIVING|EXCEPTIONS)\s+(?!TYPE\b)"
-                r"(?:VALUE\s*\([^)]*\)|!?[a-zA-Z_][a-zA-Z0-9_-]*)",
-                re.I,
-            ),
-            # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and constants.
-            "structural_boundaries": re.compile(
-                r"^[ \t]*(DATA|TYPES|FIELD-SYMBOLS|CLASS|INTERFACE|METHOD|FORM|FUNCTION|MODULE|REPORT|PROGRAM|IMPORT|EXPORT)(?![(-])\b",
-                re.I | re.M,
-            ),
-            # 4. func_start: Executable Logic Anchors. Anchors executable logic. EXCLUDES structural headers.
-            "func_start": re.compile(
-                r"^[ \t]*(?!(?:CLASS|INTERFACE|DATA|TYPES|CONSTANTS)\b)(?:METHOD|FORM|FUNCTION|MODULE)\s+([a-zA-Z0-9_~-]+)(?=[ \t\n\.]|$)",
-                re.I | re.M,
-            ),
-            # 5. class_start: Object / Entity Declarations. Defines OO boundaries and RAP CDS Entities.
-            # BUG FIX: `VIEW` and `ENTITY` were mutually-exclusive alternatives,
-            # but the standard modern RAP syntax is `DEFINE VIEW ENTITY <name>`
-            # (both words together, exactly what this dict's target_version
-            # claims to cover) -- so the regex matched `VIEW` as the keyword
-            # and then captured the literal word `ENTITY` as if it were the
-            # entity name. `ENTITY` is now optional after `VIEW`/`PROJECTION
-            # VIEW` instead of a same-tier alternative.
-            "class_start": re.compile(
-                r"^[ \t]*(?:CLASS|INTERFACE)\s+([a-zA-Z0-9_-]+)(?=[ \t]+DEFINITION|[ \t\n\.]|$)"
-                r"|^[ \t]*DEFINE\s+(?:ROOT\s+)?(?:(?:VIEW|PROJECTION\s+VIEW)(?:\s+ENTITY)?|(?:ABSTRACT\s+|CUSTOM\s+)?ENTITY|BEHAVIOR\s+FOR)\s+([a-zA-Z0-9_-]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety: Defensive Programming. Binding checks and authorization boundaries.
-            "safety": re.compile(
-                r"\b(TRY|CATCH|CLEANUP|ASSERT|AUTHORITY-CHECK|IS\s+BOUND|IS\s+ASSIGNED|IS\s+NOT\s+INITIAL|FINAL|READ-ONLY)\b",
-                re.I,
-            ),
-            # 7. safety_neg: Safety Bypasses. Actively bypassing safety (casting/unchecked generics).
-            "safety_bypasses": re.compile(
-                r"\b(UNASSIGNED|TYPE\s+ANY|TYPE\s+REF\s+TO\s+DATA|IGNORE\s+ERRORS)\b|ASSIGN\s+[^\n;]+\s+TO\s+<[^>]+>\s+CASTING",
-                re.I,
-            ),
-            # 8. danger: High-Risk Execution. Raw SQL/Kernel bypasses and mass deletion.
-            "high_risk_execution": re.compile(
-                r"\b(SYSTEM-CALL|EXEC\s+SQL|DELETE\s+FROM|TRUNCATE|GENERATE\s+SUBROUTINE\s+POOL)\b",
-                re.I,
-            ),
-            # 9. io: I/O & Network Boundaries. Database interaction and File datasets.
-            "io": re.compile(
-                r"^[ \t]*(SELECT|INSERT\s+(?:INTO\b)?|UPDATE\b|MODIFY\b|OPEN\s+DATASET|TRANSFER|READ\s+DATASET|CLOSE\s+DATASET|CL_HTTP_CLIENT|CL_WEB_HTTP_CLIENT)\b",
-                re.I | re.M,
-            ),
-            # 10. api: Public Surface Area. Exposed RFCs, OData publishing, and Public sections.
-            # BUG FIX: `@OData\.publish` is `@`-prefixed -- the shared
-            # leading \b could only fire when a word char immediately
-            # preceded the `@`, never true for how this annotation is
-            # actually written. Never matched at all.
-            "api": re.compile(
-                r"\b(?:REMOTE\s+FUNCTION|DEFINE\s+VIEW|DEFINE\s+SERVICE|EXPOSED|PUBLIC\s+SECTION)\b|@OData\.publish",
-                re.I,
-            ),
-            # 11. flux: State Mutation. State mutation (The core of ABAP data manipulation).
-            "state_mutation": re.compile(
-                r"^[ \t]*(MOVE|MOVE-CORRESPONDING|APPEND|MODIFY\s+TABLE|DELETE\s+TABLE)\b|^[ \t]*INSERT\s+[^\n;]+\s+INTO\s+TABLE",
-                re.I | re.M,
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural logic (supports * and ").
-            "dead_code": re.compile(
-                r'^[ \t]*\*[ \t]*(?:DATA|METHOD|IF|SELECT|WRITE)\b|"[ \t]*(?:DATA|METHOD|IF|SELECT|WRITE)\b',
-                re.I | re.M,
-            ),
-            # 13. doc: Structured Documentation. ABAP Doc annotations and metadata headers.
-            # BUG FIX: the trailing `\b` sat right after a literal `:` (Rule 9,
-            # mirror case). Real headers are written as "AUTHOR: Jane Doe" --
-            # the space after `:` means both sides of that position are
-            # non-word, so `\b` never fired and the realistic form never
-            # matched. `:` is already self-delimiting; `\b` dropped.
-            "doc": re.compile(
-                r'^"!\s*@(?:parameter|raising|return)|\b(?:AUTHOR|DESCRIPTION|PURPOSE|REMARKS):',
-                re.I | re.M,
-            ),
-            # 14. test: Testing & Assertions. ABAP Unit markers and test-injection.
-            "test": re.compile(
-                r"\b(FOR\s+TESTING|RISK\s+LEVEL|DURATION\s+SHORT|CL_ABAP_UNIT_ASSERT|ZCL_ABAP_UNIT)\b",
-                re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency: Temporal Static. Async RFCs and background tasks.
-            # BUG FIX (Rule 9, mirror case): ENQUEUE_/DEQUEUE_ end in `_`, a
-            # word character, and real function-module names always continue
-            # with more word characters right after (ENQUEUE_FOO) -- so the
-            # shared trailing `\b` could never fire for them (both sides of
-            # that position are word chars). Pulled out of the group with the
-            # trailing `\b` dropped, since the prefix is already unambiguous.
-            "concurrency": re.compile(
-                r"\b(?:STARTING\s+NEW\s+TASK|WAIT\s+UP\s+TO)\b|\b(?:ENQUEUE_|DEQUEUE_)"
-                r"|CALL\s+FUNCTION\s+[^\n;]+\s+IN\s+BACKGROUND\s+TASK",
-                re.I,
-            ),
-            # 16. ui_framework: UI / View Components. Screen programming and HTML viewers.
-            "ui_framework": re.compile(
-                r"\b(CALL\s+SCREEN|SELECTION-SCREEN|PARAMETERS|WDDOMODIFYVIEW|CL_GUI_HTML_VIEWER|CL_SALV_TABLE)\b",
-                re.I,
-            ),
-            # 17. closures: Closures / Anonymous Functions. (ABAP lacks anonymous closures).
-            "closures": None,
-            # 18. globals: Global / Shared State. Global program data and the system registry.
-            "globals": re.compile(r"\b(TABLES|STATICS|CLASS-DATA|SY-[A-Z0-9_]+)\b", re.I),
-            # 19. decorators: Decorators / Annotations. CDS and class annotations.
-            "decorators": re.compile(r"@[A-Za-z0-9_.]+(?:\([^)]*\))?", re.I),
-            # 20. generics: Generics / Type Parameters. Generic data references and field symbols.
-            "generics": re.compile(
-                r"\b(TYPE\s+ANY(?:\s+TABLE)?|TYPE\s+INDEX\s+TABLE|TYPE\s+STANDARD\s+TABLE|TYPE\s+REF\s+TO\s+DATA)\b",
-                re.I,
-            ),
-            # 21. comprehensions: Iterators / Comprehensions. Modern constructor expressions.
-            "comprehensions": re.compile(
-                r"\b(?:VALUE|REDUCE|FILTER|CORRESPONDING|NEW)\s+#?\s*\(|\bFOR\s+[a-zA-Z_]\w*\s+IN\b",
-                re.I,
-            ),
-            # 22. scientific: Numerical / Compute Libraries. Standard numerical built-ins.
-            "scientific": re.compile(
-                r"\b(ABS|SQRT|LOG|EXP|SIN|COS|TAN|ROUND|CEIL|FLOOR|DECFLOAT16|DECFLOAT34)\b",
-                re.I,
-            ),
-            # 23. heat_triggers: Metaprogramming & Reflection. RTTS and Dynamic assignment logic.
-            "reflection_metaprogramming": re.compile(
-                r"\b(CL_ABAP_TYPEDESCR|CL_ABAP_CLASSDESCR|ASSIGN\s+\([a-zA-Z0-9_-]+\)\s+TO|GENERATE\s+SUBROUTINE\s+POOL)\b",
-                re.I,
-            ),
-            # 24. import: Dependency Inclusions. Includes and type pools.
-            "import": re.compile(r"\b(INCLUDE|TYPE-POOLS)\b", re.I),
-            "_dependency_capture": re.compile(r"^[ \t]*(?:INCLUDE|TYPE-POOLS)[ \t\n]+([A-Za-z0-9_/]+)", re.I | re.M),
-            # 25. ownership: Authorship indicators.
-            "ownership": re.compile(
-                r"(?:AUTHOR|CREATED\s+BY|MAINTAINER|Tim Berners-Lee):\s+([^\n]+)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt: The Promise. Future work markers.
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure: Map vs. Territory. Audit tags and architecture docs.
-            "spec_exposure": re.compile(
-                r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]|\b(?:WorldWideWeb|RFC|W3C|CERN|TBL|ENQUIRE)\b",
-                re.I,
-            ),
-            # 31. ssr_boundaries: View Horizon. ICF and BSP request handlers.
-            "ssr_boundaries": re.compile(
-                r"\b(IF_HTTP_EXTENSION~HANDLE_REQUEST|CL_BSP_CONTEXT|CL_BSP_RUNTIME|IF_HTTP_REQUEST|IF_HTTP_RESPONSE|HTML_STRING)\b",
-                re.I,
-            ),
-            # 32. events: Pub/Sub Network. Native OO event architecture.
-            "events": re.compile(r"\b(RAISE\s+EVENT|SET\s+HANDLER)\b|FOR\s+EVENT\s+[^\n;]+\s+OF", re.I),
-            # 33. dependency_injection: Inversion of Control. BAdIs and Test Doubles.
-            "dependency_injection": re.compile(r"\b(GET\s+BADI|CALL\s+BADI|CL_BADI_BASE|CL_ABAP_TESTDOUBLE)\b", re.I),
-            # 34. macros: Preprocessor Hooks. ABAP macro definitions.
-            "macros": re.compile(
-                r"^[ \t]*DEFINE\s+[a-zA-Z0-9_-]+\.|^[ \t]*END-OF-DEFINITION\s*\.",
-                re.I | re.M,
-            ),
-            # 35. pointers: Memory Map. Field-Symbols and data references.
-            "pointers": re.compile(r"<[A-Za-z0-9_-]+>|->\*|\b(?:GET\s+REFERENCE\s+OF|REF\s+TO)\b", re.I),
-            # 36. memory_alloc: Manual Memory Management. Heap allocations.
-            "memory_alloc": re.compile(r"\b(CREATE\s+OBJECT|CREATE\s+DATA|FREE|CLEAR)\b", re.I),
-            # 37. inline_asm: Bare Metal.
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry: Professional diagnostics.
-            "telemetry": re.compile(r"\b(BAL_LOG_CREATE|BAL_DB_SAVE|CL_BALI_LOG|CL_BALI_MSG_SETTER)\b", re.I),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
-            "debug_prints": re.compile(r"^[ \t]*(WRITE)\b", re.I | re.M),
-            # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit casting and conversions.
-            "explicit_casts": re.compile(
-                r"\b(?:CAST|CONV)\s*[a-zA-Z0-9_~-]*\s*#?\s*\(|ASSIGNING\s+<[^>]+>\s+CASTING",
-                re.I,
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution or error messages.
-            "panics_and_aborts": re.compile(
-                r'\b(RAISE\s+EXCEPTION|MESSAGE\s+[^\n;]+\s+TYPE\s+[\'"][EX][\'"]|LEAVE\s+PROGRAM)\b',
-                re.I,
-            ),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) Thread sleep.
-            "thread_sleeps": re.compile(r"\bWAIT\s+UP\s+TO\b", re.I),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"\b(BIT-AND|BIT-OR|BIT-XOR|BIT-NOT)\b", re.I),
-            # 44. sync_locks (Resource Management & Stability)
-            # BUG FIX (Rule 9, mirror case): see the matching fix in
-            # `concurrency` above -- the trailing `\b` right after `_` could
-            # never fire since real function-module names always continue
-            # with more word characters (ENQUEUE_FOO).
-            "sync_locks": re.compile(r"\b(?:ENQUEUE_|DEQUEUE_)", re.I),
-            # 45. immutability_locks (Immutability Constraints) Immutability (constants).
-            "immutability_locks": re.compile(r"\b(CONSTANTS|FINAL|READ-ONLY)\b", re.I),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"^[ \t]*(FREE|CLEAR|CLOSE\s+DATASET)\b", re.I | re.M),
-            # 47. encapsulation (Encapsulation / Access Modifiers)
-            "encapsulation": re.compile(r"\b(PRIVATE\s+SECTION|PROTECTED\s+SECTION)\b", re.I),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\bFOR\s+EVENT\s+[^\n;]+\s+OF\b", re.I),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"\b(IGNORE)\b", re.I),
-        },
-    },
-    "xml": {
-        "_meta": {
-            "target_version": "Standard XML 1.0 / UI Layouts",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard data, schemas, stylesheets, vector graphics, Apple UI, and config files.
-        "extensions": [
-            ".xml",
-            ".xsd",
-            ".xsl",
-            ".xslt",
-            ".svg",
-            ".storyboard",
-            ".xib",
-            ".plist",
-            ".wsdl",
-            ".config",
-            ".jelly",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Universally recognized XML architectural and build manifests.
-        "exact_matches": ["pom.xml", "build.xml", "AndroidManifest.xml", "phpunit.xml"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions to anchor standard data serialization and frameworks.
-        "discriminators": [".xml", ".xsd", ".xsl", "pom.xml", "build.xml"],
-        # EXECUTION SIGNATURES: XML is declarative data/markup; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: (CORRECTION) Consolidated 'xml_angle' into 'singular'. Like HTML, XML
-        # exclusively uses SGML-style block delimiters () for its Commented / Non-Executable Text.
-        "lexical_family": "block_exclusive",
-        "rules": {},
-    },
-    "markdown": {
-        "_meta": {
-            "target_version": "CommonMark / GitHub Flavored / AsciiDoc",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy extensions, MDX, and AsciiDoc formats.
-        "extensions": [
-            ".md",
-            ".markdown",
-            ".mdown",
-            ".mkd",
-            ".mdx",
-            ".adoc",
-            ".asciidoc",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: The universally recognized, extensionless repository documentation anchors.
-        "exact_matches": ["README", "LICENSE", "CHANGELOG", "CONTRIBUTING", "SECURITY"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Static site generators and documentation build configs acting as disambiguation anchors.
-        "discriminators": [
-            ".md",
-            ".mdx",
-            "mkdocs.yml",
-            "_config.yml",
-            "docusaurus.config.js",
-        ],
-        # EXECUTION SIGNATURES: Markdown is declarative text; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: (CORRECTION) Markdown relies entirely on HTML's SGML-style block comments ().
-        # Mapping this to 'hybrid_dash' would cause the engine to miss hidden documentation mass.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            "lit_code_blocks": re.compile(r"^[ \t]{0,3}```+[^`\r\n]*$", re.M),
-            "lit_diagrams": re.compile(r"^[ \t]{0,3}```+(?:mermaid|plantuml)\b", re.I | re.M),
-            "lit_headers": re.compile(r"^[ \t]{0,3}#{1,6}[ \t]+", re.M),
-            "lit_links": re.compile(r"\[(?:[^\[\]]|\[[^\[\]]*\])+\]\((?:[^()]|\([^()]*\))+\)"),
-        },
-    },
-    "csv": {
-        "_meta": {"target_version": "Comma Separated Values", "status": "production"},
-        # COMPREHENSIVE SURFACE AREA: Comma, tab, and pipe-separated value formats.
-        "extensions": [".csv", ".tsv", ".psv"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Delimited data relies strictly on extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling datasets and data-science logic files acting as disambiguation anchors.
-        "discriminators": [".csv", ".tsv", ".py", ".ipynb", ".R", ".m"],
-        # EXECUTION SIGNATURES: CSV is purely static data; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: While strictly data, when CSVs *do* contain comments (supported by
-        # parsers like Pandas or DuckDB), they almost exclusively use the '#' symbol at the start of a line.
-        "lexical_family": "line_exclusive",
-        "rules": {},
-    },
-    "yaml": {
-        "_meta": {
-            "target_version": "YAML CI/CD (GitHub Actions / GitLab CI)",
-            "status": "production",
-        },
-        "extensions": [".yml", ".yaml", ".yamllint"],
-        "exact_matches": [
-            ".prettierrc",
-            ".stylelintrc",
-            "clang-format",
-            ".clang-format",
-        ],
-        "discriminators": [
-            "docker-compose.yml",
-            ".gitlab-ci.yml",
-            "kubernetes.yaml",
-            "openapi.yaml",
-            ".github/workflows",
-        ],
-        "shebangs": [],
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            "branch": re.compile(r"\b(?:if|else|elif|fi|case|esac|for|while|do|done)\b|&&|\|\|", re.I),
-            # BUG FIX (epic #813/#843): required `with:` to be immediately followed by a newline,
-            # so a trailing same-line comment (`with: # inputs for this action`, a real authoring
-            # style) broke the match entirely -- the block's own header line has to tolerate a
-            # comment the same way a job/step name line would.
-            "args": re.compile(
-                r"^[ \t]*with:[ \t]*(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]+[a-zA-Z0-9_-]+:[ \t]*.*", re.M | re.I
-            ),
-            "structural_boundaries": re.compile(r"^[ \t]*(?:env|needs|runs-on|steps|strategy|matrix):", re.M | re.I),
-            # Executable Logic Anchors: Explicit execution blocks
-            "func_start": re.compile(
-                r"^[ \t]*(?:-?[ \t]*run:|script:|before_script:|after_script:)[ \t]*[|>]*",
-                re.M | re.I,
-            ),
-            # MISSING-DECLARATION-SHAPE FIX (epic #813/#843): the reusable-workflow-call/
-            # container-job detection required `uses:`/`image:` to be the LITERAL FIRST line
-            # after the job name -- but real jobs of this shape routinely have other keys
-            # (`needs:`, `if:`, `permissions:`, etc.) before `uses:`/`image:`, e.g.
-            # `call-workflow:\n  needs: [build]\n  uses: ./reusable.yml`. Added a bounded
-            # (max 10, to stay safely linear -- real jobs never have anywhere near that many
-            # top-level keys before uses:/image:) step-over for intervening key:value lines.
-            "class_start": re.compile(
-                r"^[ \t]*(?:jobs:|workflow_call:"
-                r"|[a-zA-Z0-9_-]+:[ \t]*(?:#.*)?\n(?:(?:[ \t]+[a-zA-Z0-9_-]+:[ \t]*.*|[ \t]*(?:#.*)?)\n){0,10}[ \t]+(?:uses|image):)",
-                re.M | re.I,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            "safety": re.compile(
-                r"^[ \t]*continue-on-error:[ \t]*false|^[ \t]*permissions:[ \t]*\n(?:[ \t]+(?:contents|id-token|actions|security-events):[ \t]*read)",
-                re.M | re.I,
-            ),
-            # Catches the classic curl-to-bash supply chain dropper inside a run block
-            "safety_bypasses": re.compile(
-                r"^[ \t]*continue-on-error:[ \t]*true|chmod[ \t]+777|\b(?:curl|wget)[ \t]+[^|\n]{1,200}\|[ \t]*(?:bash|sh|zsh)\b",
-                re.M | re.I,
-            ),
-            "high_risk_execution": re.compile(r"\brm[ \t]+-rf[ \t]+/(?![A-Za-z])|\beval\b|\bexec\b", re.M | re.I),
-            "io": re.compile(
-                r"\b(?:wget|curl|apt-get|apk|yum|git[ \t]+clone|npm[ \t]+install|pip[ \t]+install)\b",
-                re.M | re.I,
-            ),
-            # Webhook/Workflow triggers
-            "api": re.compile(
-                r"^[ \t]*on:[ \t]*(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]+(?:push|pull_request|workflow_dispatch|issues):",
-                re.M | re.I,
-            ),
-            "state_mutation": re.compile(
-                r"^[ \t]*env:[ \t]*(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]+[a-zA-Z0-9_-]+:[ \t]*.*|export[ \t]+[a-zA-Z0-9_]+[ \t]*=",
-                re.M | re.I,
-            ),
-            "dead_code": re.compile(
-                r"^[ \t]*#[ \t]*(?:-?[ \t]*run:|uses:|jobs:|steps:|script:)",
-                re.M | re.I,
-            ),
-            "doc": re.compile(r"^[ \t]*name:[ \t]+.*|^[ \t]*description:[ \t]+.*", re.M | re.I),
-            "test": re.compile(
-                r"\b(?:npm[ \t]+test|pytest|make[ \t]+test|cargo[ \t]+test|go[ \t]+test)\b",
-                re.M | re.I,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            "concurrency": re.compile(
-                r"^[ \t]*strategy:[ \t]*\n[ \t]+matrix:|^[ \t]*concurrency:",
-                re.M | re.I,
-            ),
-            "ui_framework": None,
-            "closures": None,
-            "globals": re.compile(
-                r"\$\{\{[ \t]*(?:github|env|runner|secrets)\.[a-zA-Z0-9_]+[ \t]*\}\}|\$[A-Z_]+",
-                re.M,
-            ),
-            "decorators": None,
-            "generics": None,
-            "comprehensions": None,
-            "scientific": None,
-            # Catching complex GitHub Expression injection logic
-            "reflection_metaprogramming": re.compile(r"\$\{\{[ \t]*fromJson\(|to[A-Z][a-zA-Z]{0,40}\(", re.M),
-            # The Gravity Links: External dependencies
-            "import": re.compile(
-                r"^[ \t]*(?:-?[ \t]*uses:|image:)[ \t]*(?:(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]*)?(?:[\'\"]?[a-zA-Z0-9_./@:-]+[\'\"]?)",
-                re.M | re.I,
-            ),
-            # BUG FIX (epic #813/#843): the bare capture class required the value to start
-            # immediately with an identifier character, so a quoted `uses:`/`image:` value
-            # (`uses: "actions/checkout@v4"`, a real -- if less common -- authoring style, e.g.
-            # for YAML-lint rules that require consistent scalar quoting) never matched at all,
-            # since the leading quote character isn't in the class. Added quoted alternatives
-            # (permitting the same identifier charset inside real quotes) alongside the original
-            # bare form.
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:-?[ \t]*uses:|image:)[ \t]*(?:(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]*)?"
-                r"(?:'([a-zA-Z0-9_./@:-]+)'|\"([a-zA-Z0-9_./@:-]+)\"|([a-zA-Z0-9_./@:-]+))",
-                re.M | re.I,
-            ),
-            "ownership": None,
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            "hardcoded_secrets": re.compile(
-                r"\b(?:password|secret|token|api[_-]?key|client[_-]?secret|private[_-]?key)[ \t]*:[ \t]*[\"'][A-Za-z0-9\-_+/=]{16,}[\"']",
-                re.I,
-            ),
-            "spec_exposure": None,
-            "ssr_boundaries": None,
-            "events": re.compile(
-                r"^[ \t]*repository_dispatch:|^[ \t]*schedule:|^[ \t]*-?[ \t]*cron:",
-                re.M | re.I,
-            ),
-            # Secrets injection
-            "dependency_injection": re.compile(r"\$\{\{[ \t]*secrets\.[a-zA-Z0-9_]+[ \t]*\}\}", re.M),
-            "macros": None,
-            "pointers": None,
-            "memory_alloc": None,
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            "telemetry": re.compile(r"::(?:debug|warning|error)(?:[ \t]|::)", re.M),
-            "debug_prints": re.compile(r"\b(?:echo|printf)\b", re.I),
-            "explicit_casts": None,
-            # GitHub action specific bailout outputs
-            "panics_and_aborts": re.compile(
-                r"\b(?:exit[ \t]+[1-9]|kill[ \t]+-[0-9]+)\b|^[ \t]*::error::",
-                re.M | re.I,
-            ),
-            "thread_sleeps": re.compile(r"\bsleep[ \t]+[0-9]+\b", re.I),
-            "bitwise_ops": None,
-            "sync_locks": None,
-            # Strict SHA-1 pinning for immutable security
-            "immutability_locks": re.compile(r"@[a-f0-9]{40}\b", re.I),
-            "cleanup": None,
-            "encapsulation": None,
-            "listeners": re.compile(r"^[ \t]*webhook:", re.M | re.I),
-            "test_skip": re.compile(r"\|\|[ \t]*true\b|--passWithNoTests\b|\bskipTests\b|--no-audit\b", re.I),
-        },
-    },
-    "pbtxt": {
-        "_meta": {
-            "target_version": "Protobuf Text Format",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "6.30",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Protobuf text and binary message formats used heavily in Google/Bazel ecosystems.
-        "extensions": [".pbtxt", ".textproto", ".textpb", ".pb"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: PBTXT strictly relies on its extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Standard .proto schema definitions and Bazel build files acting as disambiguation anchors.
-        "discriminators": [".proto", "WORKSPACE", "BUILD.bazel", "BUILD"],
-        # EXECUTION SIGNATURES: PBTXT is purely serialized message data; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: While standard .proto schemas use C-style (//) comments, the instantiated
-        # Text Format (.pbtxt) strictly uses '#' for comments.
-        "lexical_family": "line_exclusive",
-        "rules": {},
-    },
-    "yacc": {
-        "_meta": {
-            "target_version": "GNU Bison / Yacc / Flex",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "v5.1",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Yacc/Bison parser grammars (.y) and Lex/Flex tokenizers (.l), plus their C++ variants (.ypp, .lpp).
-        "extensions": [".y", ".yy", ".ypp", ".l", ".ll", ".lpp"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Parser generators rely strictly on extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: The generated C/C++ outputs and standard build systems acting as disambiguation anchors.
-        "discriminators": [
-            ".c",
-            ".cpp",
-            ".h",
-            "Makefile",
-            "CMakeLists.txt",
-            "configure.ac",
-        ],
-        # EXECUTION SIGNATURES: Grammars are compiled into C/C++ state machines; no shebangs exist.
-        "shebangs": [],
-        # INTERNAL DISCRIMINATOR (Collision Resolution Only): `.y`/`.yy`/`.ypp` (and the lex
-        # `.l` family) collide with C -- the C-action blocks in a real grammar routinely
-        # out-mass the grammar itself, so a plain lexical density scan misclassifies
-        # action-heavy grammars as `c` (confirmed: freebsd's config.y). These line-start
-        # markers are definitive yacc/bison/lex syntax that no plain C file ever contains:
-        # the `%{`/`%}` prologue delimiters, the `%%` section separator, and the `%token`/
-        # `%union`/... declaration keywords. Matches the same collision-resolution role
-        # objective-c/matlab already use for `.m`.
-        "internal_discriminator": re.compile(
-            r"^%\{|^%\}|^%%[ \t]*(?:$|/[/*])"
-            r"|^%(?:token|type|union|left|right|nonassoc|precedence|start|prec|expect(?:-rr)?"
-            r"|define|code|option|name-prefix|pure-parser|glr-parser|parse-param|lex-param"
-            r"|require|language|locations|destructor|printer|initial-action|empty)\b",
-            re.M,
-        ),
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: Yacc and Lex files interleave grammar definitions with pure C/C++ code
-        # blocks (enclosed in %{ %}), relying entirely on standard '/* */' and '//' comments.
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            "branch": re.compile(r"\b(if|else|switch|case|for|while|do)\b|\|"),
-            "args": re.compile(r"(?<!\$)\$(?:<[a-zA-Z_]\w*>)?(?:-?\d+|\$)(?!\$|\w)"),
-            "structural_boundaries": re.compile(
-                r"\b(return|goto|break|continue)\b|%token\b|%type\b|%left\b|%right\b|%nonassoc\b"
-            ),
-            # Executable Logic Anchor: Anchors specifically onto Grammar Rules
-            # Matches "rule_name :" or "rule_name:" at the start of a line.
-            # Excludes C/C++ constructs that share the identical "identifier:" shape
-            # (switch-case default labels, C++ access specifiers in embedded .ypp code).
-            "func_start": re.compile(
-                r"^[ \t]*(?!(?:case|default|public|private|protected)\b)([a-zA-Z_]\w*)(?=(?:[ \t\n]|/\*(?:[^*]|\*[^/])*\*/|//[^\n]*)*:)",
-                re.M,
-            ),
-            "class_start": None,
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            "safety": re.compile(r"\b(assert|YYABORT|YYACCEPT|YYERROR)\b"),
-            "safety_bypasses": re.compile(r"\bgoto\b|\bvoid\s*\*"),
-            "high_risk_execution": re.compile(r"\b(abort|exit|YYNOMEM)\b"),
-            "io": re.compile(r"\b(fopen|fclose|fread|fwrite|yyin|yyout|fprintf)\b"),
-            "api": re.compile(r"%define\b|%code\b|%provides\b|%requires\b"),
-            "state_mutation": re.compile(r"(?<![=!<>])=(?![=])|\+\+|--"),
-            "dead_code": re.compile(
-                r"//[ \t]*(?:if|for|while|return|%token)\b|/\*[ \t]*(?:if|for|while|return|%token)"
-            ),
-            "doc": re.compile(r"/\*\*|@param|@return"),
-            "test": None,
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            "concurrency": None,
-            "ui_framework": None,
-            "closures": None,
-            "globals": re.compile(r"\b(yylval|yylloc|yynerrs|yydebug)\b"),
-            "decorators": None,
-            "generics": re.compile(r"<[a-zA-Z_][a-zA-Z0-9_]*>"),  # Captures %type <val>
-            "comprehensions": None,
-            "scientific": None,
-            "reflection_metaprogramming": re.compile(r"%\{|%\}|%%"),
-            "import": re.compile(r'^[ \t]*#(?:include)\s*[<"][^>"]+[>"]', re.M),
-            "ownership": re.compile(r"(?:@author|Author:|Created by:|Copyright)\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            "ssr_boundaries": None,
-            "events": None,
-            "dependency_injection": None,
-            "macros": re.compile(r"^[ \t]*#(?:define|undef|if|elif|else|endif|pragma)\b", re.M),
-            "pointers": re.compile(r"->|&\w+|(?<=[=(,])[ \t]*\*(?:\s*const\s*)?[a-zA-Z_]\w*"),
-            "memory_alloc": re.compile(r"\b(malloc|calloc|realloc|free|YYMALLOC|YYFREE)\b"),
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            "telemetry": re.compile(r"\b(?:syslog|openlog|log_info|YYDPRINTF)\b"),
-            "debug_prints": re.compile(r"\b(printf|fprintf|vprintf|puts|yyerror)\b"),
-            "explicit_casts": re.compile(
-                r"\([ \t]{0,20}(?:int|char|short|long|float|double|void|unsigned|signed|[A-Z]\w*)"
-                r"[ \t]{0,20}\*?[ \t]{0,20}\)[ \t]{0,20}[a-zA-Z_$]"
-            ),
-            "panics_and_aborts": re.compile(r"\b(abort|exit|YYABORT)\b"),
-            "thread_sleeps": None,
-            "bitwise_ops": re.compile(r"<<|>>|(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~"),
-            "sync_locks": None,
-            "immutability_locks": re.compile(r"\bconst\b"),
-            "cleanup": re.compile(r"\b(free|YYFREE|fclose|destroy)\b\s*\("),
-            "encapsulation": re.compile(r"^[ \t]*static\b", re.M),
-            "listeners": None,
-            "test_skip": None,
-        },
-    },
-    "m4": {
-        "_meta": {
-            "target_version": "GNU M4 1.4+ / Autoconf 2.71+",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "v5.1",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard macros, Autotest suites (.at), Autoconf logic (.ac), and template stubs (.in).
-        "extensions": [".m4", ".at", ".ac", ".in"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: The undeniable structural anchors of the GNU build system.
-        "exact_matches": ["configure.ac", "configure.in"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Automake configurations and standard Makefiles acting as contextual baselines for ambiguous .in templates.
-        "discriminators": [
-            ".m4",
-            "Makefile.am",
-            "Makefile.in",
-            "aclocal.m4",
-            "config.h.in",
-        ],
-        # EXECUTION SIGNATURES: M4 is a macro processor; no traditional shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 8 (Singular/Unique)
-        # Rationale: M4 uniquely uses the `dnl` (Delete to NewLine) macro to act as its
-        # line-level Commented / Non-Executable Text.
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # M4 branching logic and Autoconf shell-generation branches.
-            "branch": re.compile(r"\b(?:ifelse|ifdef|AS_IF|AS_CASE|m4_if|m4_case|m4_cond|m4_ifval|m4_ifblank)\b"),
-            # 2. args (Parameters / Coupling)
-            # M4 positional arguments.
-            "args": re.compile(r"\$[0-9]+|\$[@*#]"),
-            # 3. linear (Sequential Boundaries)
-            # Execution flow diversion and dependency signaling.
-            "structural_boundaries": re.compile(r"\b(?:divert|undivert|m4_divert|m4_undivert|m4_require|AC_REQUIRE)\b"),
-            # 4. func_start (Executable Logic Anchors)
-            # Defining a macro establishes an executable logic block in M4.
-            # BUG FIX (2026-08-20, tri-comparison ledger sweep): the old pattern captured
-            # the DEFUN KEYWORD itself as group 1 (e.g. "AC_DEFUN"), not the macro actually
-            # being defined -- structurally identical to matching "def" as a function's name
-            # instead of what follows it. Now captures the real first-argument macro name,
-            # tolerating all three real m4 quoting conventions seen in production autoconf
-            # code: classic backtick/apostrophe (`name'), bracket (`[name]`, or the more
-            # defensive double-bracket `[[name]]`), and unquoted.
-            "func_start": re.compile(
-                r"^[ \t]*(?:m4_define|define|AC_DEFUN|AC_DEFUN_ONCE|AU_DEFUN|m4_defun)\s*\("
-                r"\s*(?:`([A-Za-z_][A-Za-z0-9_]*)'|\[{1,2}([A-Za-z_][A-Za-z0-9_]*)\]{0,2}|([A-Za-z_][A-Za-z0-9_]*))",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            "class_start": None,  # M4 is a macro processor, lacking objects.
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Autoconf environment checks and M4 assertions.
-            "safety": re.compile(
-                r"\b(?:m4_assert|AS_VERSION_COMPARE|AC_CHECK_PROGS?|AC_CHECK_LIB|AC_CHECK_HEADERS?|AC_CHECK_FUNCS?|m4_warn)\b"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Dynamically altering the quote characters or comment strings breaks the parser context completely.
-            "safety_bypasses": re.compile(r"\b(?:changequote|changecom|m4_changequote|m4_changecom|m4_ignore)\b"),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Executing raw shell commands during macro expansion (not generation).
-            "high_risk_execution": re.compile(r"\b(?:syscmd|esyscmd|m4_syscmd|m4_esyscmd)\b"),
-            # 9. io (I/O & Network Boundaries)
-            # Reading system values, creating temp files, or emitting generated configurations.
-            "io": re.compile(r"\b(?:sysval|mkstemp|maketemp|m4_mkstemp|m4_maketemp|AC_CONFIG_FILES|AC_OUTPUT)\b"),
-            # 10. api (Public Surface Area)
-            # M4 macros are inherently public, but these explicitly export state into the generated Makefile/C headers.
-            "api": re.compile(r"\b(?:AC_SUBST|AC_DEFINE|AC_PROVIDE|m4_provide)\b"),
-            # 11. flux (State Mutation)
-            # Stack-based macro overriding and list appending.
-            "state_mutation": re.compile(
-                r"\b(?:pushdef|popdef|m4_pushdef|m4_popdef|m4_append|m4_append_uniq|m4_combine)\b"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented-out macro definitions.
-            # COMMENT-STYLE COMPLETENESS (Engine Rule 12): GNU M4's actual default
-            # lexer-level comment delimiter is `#`-to-newline (confirmed in the shared
-            # line_exclusive family table in gitgalaxy_config.py, which prism.py uses
-            # to segment the comment stream for every line_exclusive language) --
-            # `dnl` is a separate, macro-level discard-to-newline mechanism. Real
-            # Autoconf/m4 corpus files use `#` comments as heavily as (often more
-            # heavily than) `dnl`. Wired to both prefixes; only checking `dnl` missed
-            # the dominant style.
-            "dead_code": re.compile(r"^[ \t]*(?:dnl[ \t]+|#[ \t]*)(?:m4_define|define|AC_DEFUN|ifelse|AS_IF)\b", re.M),
-            # 13. doc (Structured Documentation)
-            # Documentation blocks or explicit copyright insertions into the output script.
-            # Same comment-style completeness fix as dead_code above.
-            "doc": re.compile(r"^[ \t]*(?:dnl[ \t]+|#[ \t]*)@(?:param|return|brief)|AC_COPYRIGHT\b", re.M),
-            # 14. test (Testing & Assertions)
-            # The GNU Autotest framework.
-            "test": re.compile(r"\b(?:AT_SETUP|AT_CHECK|AT_CLEANUP|AT_INIT|AT_DATA)\b"),
-            # --- 🔬 PHASE 3: SPECIALIZED SENSORS (Architecture & Complexity) ---
-            # 15. concurrency
-            "concurrency": None,
-            # 16. ui_framework
-            "ui_framework": None,
-            # 17. closures
-            "closures": None,
-            # 18. globals (Global / Shared State)
-            # Environment variables mapped into the configure script.
-            "globals": re.compile(r"\b(?:AC_ARG_VAR|AC_ENV_VAR|m4_divert_text)\b"),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions (Iterators / Comprehensions)
-            # M4 map and foreach iterative constructs.
-            "comprehensions": re.compile(r"\b(?:m4_foreach|m4_foreach_w|m4_map|m4_map_sep)\b"),
-            # 22. scientific (Numerical / Compute Libraries)
-            # M4's native integer arithmetic evaluator.
-            "scientific": re.compile(r"\b(?:eval|m4_eval)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Advanced string metaprogramming and regex substitutions.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:translit|patsubst|regexp|m4_translit|m4_bpatsubst|m4_bregexp|m4_pattern_allow)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            # File inclusions.
-            "import": re.compile(r"^[ \t]*(?:include|sinclude|m4_include|m4_sinclude)\b", re.M),
-            # 25. ownership (Authorship Metadata)
-            # Same comment-style completeness fix as dead_code above (Engine Rule 12).
-            "ownership": re.compile(
-                r"^[ \t]*(?:dnl[ \t]+|#[ \t]*)(?:Author|Maintainer|Copyright|License):|AC_COPYRIGHT",
-                re.I | re.M,
-            ),
-            # --- 🌌 PHASE 4: EXTENDED DIMENSIONS (Specialized Sub-Equations) ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure
-            # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
-            # overlapping character sets (`\d+` next to `[^\]]*`) -- the
-            # same ReDoS shape already found and fixed independently in
-            # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
-            # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
-            # Bounded both quantifiers.
-            "spec_exposure": re.compile(
-                r"\[[ \t]*(?:SPEC[ \t]*-[ \t]*\d{1,10}|\b(?:spec|audit)\b)[^\]]{0,300}\]", re.I
-            ),
-            # 31. ssr_boundaries
-            "ssr_boundaries": None,
-            # 32. events
-            "events": None,
-            # 33. dependency_injection
-            # M4 dependency chaining to ensure macros execute in the correct order.
-            "dependency_injection": re.compile(r"\b(?:AC_REQUIRE|m4_require)\b"),
-            # 34. macros (Preprocessor Directives / Macros)
-            # M4 is the macro engine, but this tracks configuring C-level preprocessor hooks.
-            "macros": re.compile(r"\b(?:AC_DEFINE|AC_DEFINE_UNQUOTED|AH_TEMPLATE)\b"),
-            # 35. pointers
-            "pointers": None,
-            # 36. memory_alloc
-            "memory_alloc": None,
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            # Logging configure progress securely to stdout and config.log.
-            "telemetry": re.compile(r"\b(?:AC_MSG_CHECKING|AC_MSG_RESULT|AC_MSG_WARN|AC_MSG_NOTICE)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            # Raw M4 error printing.
-            "debug_prints": re.compile(r"\b(?:errprint|m4_errprint)\b"),
-            # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": None,
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            # Hard aborts.
-            "panics_and_aborts": re.compile(r"\b(?:m4_fatal|AC_MSG_ERROR|AC_MSG_FAILURE|AS_EXIT)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            # Raw sleeps in generated scripts.
-            "thread_sleeps": re.compile(r"\b(?:sleep)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": None,
-            # 44. sync_locks
-            "sync_locks": None,
-            # 45. immutability_locks (Immutability Constraints)
-            "immutability_locks": None,  # M4 macros are mutable by design.
-            # 46. cleanup (Resource Cleanup / Teardown)
-            # Macro unloading and Autotest tear-downs.
-            "cleanup": re.compile(r"\b(?:m4_popdef|popdef|AT_CLEANUP)\b"),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Forbidding specific patterns from reaching the output script.
-            "encapsulation": re.compile(r"\b(?:m4_pattern_forbid)\b"),
-            # 48. listeners
-            "listeners": None,
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # Skipping tests in the Autotest framework.
-            "test_skip": re.compile(r"\b(?:AT_SKIP_IF)\b"),
-        },
-    },
-    "scheme": {
-        "_meta": {
-            "target_version": "R5RS / R6RS / Guile (GnuPG gpgscm)",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Scheme, legacy PLT/Chez suffixes, and Racket sources.
-        "extensions": [".scm", ".ss", ".rkt", ".sch", ".sld", ".sls", ".sps"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Scheme rarely uses extensionless configurations.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Guile build definitions, Racket manifests, and Lisp package formats.
-        "discriminators": [".scm", ".rkt", "info.rkt", "guix.scm"],
-        # EXECUTION SIGNATURES: Interpreters found on Line 1 for shell wrappers invoking Scheme/Guile/Racket.
-        "shebangs": ["guile", "scheme", "csi", "racket", "racketsh"],
-        # BUG FIX (#770): this comment always described a genuine nested
-        # block-comment family ("Perfectly captures the Lisp ecosystem's
-        # reliance on ';' for line-level comments and `#| |#` for nested
-        # block-level Commented / Non-Executable Text"), but the field itself
-        # was left at "line_exclusive" -- which has NO cross-line state at
-        # all (per how_to_add_a_language.md: "no native multi-line block
-        # syntax; the engine ignores closing tags"), the literal opposite of
-        # what this comment claims. Confirmed empirically: a real multi-line
-        # `#| ... |#` block only had its first line recognized as a comment;
-        # every subsequent line up to and including the closing `|#` leaked
-        # into code_stream as live code. Fixed by actually creating the
-        # dedicated family (recursive_block_lisp), reusing the same
-        # iterative-peel algorithm recursive_block_haskell already uses for
-        # {- -}, just with Scheme's own ; / #| / |# tokens.
-        "lexical_family": "recursive_block_lisp",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Lisp control flow branches. Uses custom S-expression boundaries.
-            "branch": re.compile(r"(?<![^ \t\n\r(\[])(if|cond|case|and|or|when|unless)(?![^ \t)\]\n\r])"),
-            # 2. args (Parameters / Coupling)
-            # Captures the parameter list inside a standard function definition: (define (func arg1 arg2) ...)
-            "args": re.compile(
-                # =====================================================================
-                # [ THE S-EXPRESSION ARGS SHIELD (SCHEME) ]
-                # Scheme arguments are inside the same parenthesis as the function name.
-                # FIX 1 (Pathological): Upgraded horizontal spaces to `[ \t\n]*` for vertical layouts.
-                # FIX 2 (Positive): The previous regex strictly required a space and arguments.
-                # Made the argument capture group `(?:[ \t\n]+[^)]*)?` optional so
-                # parameter-less functions like `(define (func))` cleanly pass.
-                # =====================================================================
-                # #1209: name and parameter-list span split into their own
-                # capture groups (was only reachable via group(0), the whole
-                # "(define (name arg1 arg2)" match including the "(define"
-                # prefix and function name) so detector.py's counter isolates
-                # just the space-separated parameter text -- the whole-match
-                # fallback whitespace-split "(define" and the name as
-                # spurious extra args on top of the real ones (the same
-                # overcount shape #1199 fixed for Python, just off by 2 here
-                # instead of 1 since Scheme has two prefix tokens, not one).
-                # REDOS FIX (found verifying #1209, pre-existing -- not
-                # introduced by the groups above): the name class
-                # `[^ \t\n()]+` and the trailing `[^)]*` are adjacent
-                # unbounded quantifiers over near-identical character
-                # classes (the second is a superset of the first), so an
-                # unterminated `(define (xxxx...` with no closing `)`
-                # anywhere made the engine give back the name one char at a
-                # time and re-scan the whole remaining run as the args span
-                # at each step -- O(n^2) confirmed via scaling sweep (247x
-                # time for 16x input). Bounding the name to a realistic
-                # identifier length caps the number of give-back steps to a
-                # constant, restoring linear behavior.
-                r"^[ \t\n]*\([ \t\n]*define[ \t\n]+\([ \t\n]*([^ \t\n()]{1,100})([^)]*)\)",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries defining scope and sequential execution.
-            "structural_boundaries": re.compile(
-                r"(?<![^ \t\n\r(\[])(let|let\*|letrec|letrec\*|begin|do)(?![^ \t)\]\n\r])"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # Anchors logic blocks. Captures the function name immediately following the parenthesis.
-            # BUG FIX: the identifier capture class `[a-zA-Z0-9_!?-]+` excluded
-            # `> < = * + / . ~ $ % ^ &` -- but real Scheme identifiers are
-            # extremely permissive (R7RS special-initial/special-subsequent
-            # chars), and the "X->Y" type-conversion naming convention
-            # (`list->vector`, `string->number`, ...) is idiomatic in the
-            # standard library itself. The truncated capture broke the
-            # following lookahead entirely, so func_start silently failed to
-            # match ANY such definition (`1+`, `foo*`, `list->vector`, etc.),
-            # not just a partial-name capture. Widened to the realistic set.
-            "func_start": re.compile(
-                # =====================================================================
-                # [ THE S-EXPRESSION SHIELD (SCHEME/LISP) ]
-                # S-expressions format heavily around parentheses, often pushing the
-                # `define`, the inner parenthesis `(`, and the identifier onto separate lines.
-                # FIX: Replaced `\s+` and `\s*` with `[ \t\n]+` and `[ \t\n]*` inside
-                # the S-expression structure to ensure the parser can track the
-                # identifier no matter how deeply it is vertically nested.
-                # =====================================================================
-                r"^[ \t\n]*\([ \t\n]*define[ \t\n]+\([ \t\n]*([a-zA-Z0-9_!?*+/<>=.~$%^&:-]+)(?![^ \t\n)\]\r])",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Scheme lacks traditional objects; SRFI-9 Records serve as structural entities.
-            # BUG FIX: same identifier-capture defect as func_start above --
-            # missed the extremely common `<TypeName>` angle-bracket naming
-            # convention for record types (SRFI-9/R6RS idiom, e.g. `<point>`).
-            "class_start": re.compile(
-                r"^[ \t\n]*\([ \t\n]*define-record-type[ \t\n]+(?:\([ \t\n]*)?([a-zA-Z0-9_!?*+/<>=.~$%^&:-]+)(?![^ \t\n)\]\r])",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Continuations, exception guards, and dynamic-wind state protectors.
-            "safety": re.compile(
-                r"(?<![^ \t\n\r(\[])(guard|dynamic-wind|with-exception-handler|call-with-current-continuation|call/cc|assert|check)(?![^ \t)\]\n\r])"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Explicit, raw manipulation of cons cells or unrestricted environments.
-            "safety_bypasses": re.compile(
-                r"(?<![^ \t\n\r(\[])(set-car!|set-cdr!|interaction-environment)(?![^ \t)\]\n\r])"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            # Dynamic code execution and emergency system exits.
-            "high_risk_execution": re.compile(r"(?<![^ \t\n\r(\[])(eval|exit|emergency-exit|quit)(?![^ \t)\]\n\r])"),
-            # 9. io (I/O & Network Boundaries)
-            # File operations and output ports.
-            "io": re.compile(
-                r"(?<![^ \t\n\r(\[])(open-input-file|open-output-file|read|read-char|write|display|newline|call-with-input-file|call-with-output-file|load|format)(?![^ \t)\]\n\r])"
-            ),
-            # 10. api (Public Surface Area)
-            # Module exports defining the public surface.
-            "api": re.compile(r"^[ \t]*\([ \t]*(?:export|define-public)(?![^ \t)\]\n\r])", re.M),
-            # 11. flux (State Mutation)
-            # Mutation of state. In Scheme, all mutating functions end with a bang (!).
-            "state_mutation": re.compile(
-                r"(?<![^ \t\n\r(\[])(set!|vector-set!|string-set!|hash-table-set!|bytevector-u8-set!)(?![^ \t)\]\n\r])"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented out S-expressions.
-            "dead_code": re.compile(
-                r"^[ \t]*;+[ \t]*\([ \t]*(?:define|let|if|cond|lambda)(?![^ \t)\]\n\r])",
-                re.M,
-            ),
-            # 13. doc (Structured Documentation)
-            # Scheme documentation standards (triple semicolons or texinfo).
-            "doc": re.compile(r"^[ \t]*;;;|^[ \t]*;[ \t]*@(?:param|return|author)", re.M),
-            # 14. test (Testing & Assertions)
-            # SRFI-64 and Guile testing frameworks (essential for mapping gpgscm tests).
-            "test": re.compile(
-                r"(?<=\()(test-begin|test-end|test-assert|test-eqv|test-equal|test-eq|check-equal\?|check-true|test)(?![^ \t)\]\n\r])"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # SRFI-18 Multithreading primitives.
-            "concurrency": re.compile(
-                r"(?<![^ \t\n\r(\[])(make-thread|thread-start!|thread-yield!|mutex-lock!|mutex-unlock!|condition-variable-signal!)(?![^ \t)\]\n\r])"
-            ),
-            # 16. ui_framework
-            "ui_framework": None,
-            # 17. closures (Closures / Anonymous Functions)
-            # Anonymous function depth.
-            "closures": re.compile(r"(?<![^ \t\n\r(\[])lambda(?![^ \t)\]\n\r])"),
-            # 18. globals (Global / Shared State)
-            # Top-level state bindings (defines that are NOT functions).
-            # BUG FIX: same identifier-class defect as func_start/class_start --
-            # a top-level binding using the "X->Y" convention (e.g.
-            # `default->value`) failed to match at all.
-            "globals": re.compile(r"^[ \t]*\([ \t]*define\s+[a-zA-Z0-9_!?*+/<>=.~$%^&:-]+\s+[^(\s]", re.M),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions (Iterators / Comprehensions)
-            # Functional list operations (SRFI-1).
-            "comprehensions": re.compile(
-                r"(?<![^ \t\n\r(\[])(map|for-each|filter|fold|reduce|fold-right|fold-left)(?![^ \t)\]\n\r])"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            # Scheme's native mathematical tower.
-            "scientific": re.compile(
-                r"(?<![^ \t\n\r(\[])(sin|cos|tan|asin|acos|atan|exp|log|sqrt|expt|abs|gcd|lcm|numerator|denominator|floor|ceiling|truncate|round|exact->inexact)(?![^ \t)\]\n\r])"
-            ),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Metaprogramming and syntactic abstractions.
-            "reflection_metaprogramming": re.compile(
-                r"(?<![^ \t\n\r(\[])(define-macro|define-syntax|syntax-rules|syntax-case|let-syntax|letrec-syntax)(?![^ \t)\]\n\r])"
-            ),
-            # 24. import (Dependency Inclusions)
-            # Scheme module resolution dependencies.
-            "import": re.compile(r"^[ \t]*\([ \t]*(?:import|use-modules|require)(?![^ \t)\]\n\r])", re.M),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"^[ \t]*;+\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)",
-                re.I | re.M,
-            ),
-            # --- 🌌 PHASE 4: EXTENDED DIMENSIONS (Specialized Sub-Equations) ---
-            # 26. planned_debt
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure
-            # BUG FIX: adjacent unbounded quantifiers with overlapping character
-            # sets (`\d+` immediately followed by `[^\]]*`, which also matches
-            # digits) -- the same ReDoS shape already found and fixed
-            # independently in embedded_python, css, tcl, and matlab earlier in
-            # this epic. Confirmed via scaling sweep (~4x per doubling before,
-            # ~linear after bounding both quantifiers).
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Hook paradigms common in Guile/Emacs environments.
-            "events": re.compile(r"(?<![^ \t\n\r(\[])(hook|add-hook!|run-hooks)(?![^ \t)\]\n\r])"),
-            # 33. dependency_injection
-            "dependency_injection": None,
-            # 34. macros (Preprocessor Directives / Macros)
-            "macros": re.compile(
-                r"(?<![^ \t\n\r(\[])(define-syntax|define-macro|syntax-rules|syntax-case)(?![^ \t)\]\n\r])"
-            ),
-            # 35. pointers
-            "pointers": None,
-            # 36. memory_alloc
-            # Explicit heap instantiations.
-            "memory_alloc": re.compile(
-                r"(?<![^ \t\n\r(\[])(make-vector|make-string|make-bytevector|make-hash-table|cons|list)(?![^ \t)\]\n\r])"
-            ),
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"(?<![^ \t\n\r(\[])(log-info|log-error|log-warn|log-debug|syslog)(?![^ \t)\]\n\r])"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"(?<![^ \t\n\r(\[])(display|write|newline|format\s+#t)(?![^ \t)\]\n\r])"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            # Type coercions crossing memory boundaries.
-            "explicit_casts": re.compile(
-                r"(?<![^ \t\n\r(\[])(number->string|string->number|symbol->string|string->symbol|list->vector|vector->list|char->integer|integer->char)(?![^ \t)\]\n\r])"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"(?<![^ \t\n\r(\[])(error|abort|exit|emergency-exit)(?![^ \t)\]\n\r])"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"(?<![^ \t\n\r(\[])(sleep|usleep|thread-sleep!)(?![^ \t)\]\n\r])"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(
-                r"(?<![^ \t\n\r(\[])(bitwise-and|bitwise-ior|bitwise-xor|bitwise-not|arithmetic-shift|ash)(?![^ \t)\]\n\r])"
-            ),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"(?<![^ \t\n\r(\[])(mutex-lock!|make-mutex)(?![^ \t)\]\n\r])"),
-            # 45. immutability_locks (Immutability Constraints)
-            # Immutable strings and explicit quotations (meaning the list cannot be mutated safely).
-            "immutability_locks": re.compile(
-                r"(?<![^ \t\n\r(\[])(quote|string->immutable-string)(?![^ \t)\]\n\r])|\'(?=\()"
-            ),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(
-                r"(?<![^ \t\n\r(\[])(close-input-port|close-output-port|close-port)(?![^ \t)\]\n\r])"
-            ),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Module-internal definitions.
-            "encapsulation": re.compile(r"^[ \t]*\([ \t]*define-private(?![^ \t)\]\n\r])", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"(?<![^ \t\n\r(\[])(add-hook!)(?![^ \t)\]\n\r])"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"(?<![^ \t\n\r(\[])(test-skip|test-expect-fail)(?![^ \t)\]\n\r])"),
-        },
-    },
-    "mlir": {
-        "_meta": {
-            "target_version": "LLVM MLIR",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "1.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: The standard dialect and transformation format for MLIR.
-        "extensions": [".mlir"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: IR files strictly rely on their extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: LLVM TableGen definitions, core LLVM IR, and CMake configs anchoring the compiler toolchain.
-        "discriminators": [".mlir", ".td", ".ll", "CMakeLists.txt"],
-        # EXECUTION SIGNATURES: MLIR is ingested by tools like mlir-opt; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: MLIR intentionally adopts standard LLVM assembly syntax conventions,
-        # using '//' exclusively for line comments to maintain C++ ecosystem familiarity.
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "proto": {
-        "_meta": {
-            "target_version": "Protocol Buffers 3 (proto3)",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "1.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard Protocol Buffer schema definition files.
-        "extensions": [".proto"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Schemas strictly rely on their extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: Buf configuration files, Bazel build files, and generated code markers acting as anchors.
-        "discriminators": [
-            ".proto",
-            "buf.yaml",
-            "buf.gen.yaml",
-            "WORKSPACE",
-            "BUILD.bazel",
-            "BUILD",
-        ],
-        # EXECUTION SIGNATURES: Protobuf is a declarative schema language; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: Protobuf schemas strictly use standard '//' and '/* */' comments.
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "hlo": {
-        "_meta": {
-            "target_version": "XLA High-Level Optimizer IR",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "1.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard XLA HLO intermediate representation text formats.
-        "extensions": [".hlo"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: IR text files strictly rely on their extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: JAX, TensorFlow, and MLIR toolchain markers acting as disambiguation anchors for ML compilers.
-        "discriminators": [".hlo", ".mlir", ".pbtxt", ".py", "BUILD.bazel", "BUILD"],
-        # EXECUTION SIGNATURES: HLO is compiler intermediate representation; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: HLO text format exclusively utilizes '//' for line-level comments, maintaining C++ ecosystem alignment.
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "td": {
-        "_meta": {
-            "target_version": "LLVM TableGen",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "1.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard LLVM TableGen record definition files.
-        "extensions": [".td"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: TableGen relies entirely on its extensions.
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION: LLVM/Clang core C++ source files, generated includes (.inc), and CMake configs anchoring the compiler backend.
-        "discriminators": [
-            ".td",
-            ".cpp",
-            ".h",
-            ".inc",
-            "CMakeLists.txt",
-            "LLVMBuild.txt",
-        ],
-        # EXECUTION SIGNATURES: TableGen is processed by the llvm-tblgen backend during build time; no shebangs exist.
-        "shebangs": [],
-        # UPGRADED: Maps to Family 1 (Standard C-Style)
-        # Rationale: TableGen was built to integrate seamlessly into LLVM's C++ codebase, natively supporting '//' and '/* */' comments.
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "plaintext": {
-        "_meta": {
-            "target_version": "Universal Plaintext & ASCII Secrets",
-            "last_updated": "2026-04-01",
-            "blueprint_version": "1.1",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard text, log outputs, and UNIX man pages.
-        # FIX: Removed JCL/BMS (executable) and p12/pfx/jks/kdbx (lethal binary blobs).
-        "extensions": [
-            ".txt",
-            ".text",
-            ".log",
-            ".out",
-            ".err",
-            ".nfo",
-            ".golden",
-            ".properties",
-            ".1",
-            ".2",
-            ".3",
-            ".4",
-            ".5",
-            ".6",
-            ".7",
-            ".8",
-            ".9",
-        ],
-        # ABSOLUTE IDENTITY: The universally recognized, extensionless plaintext anchors.
-        # FIX: Added ubiquitous community files. Removed binary keystore exact matches.
-        "exact_matches": [
-            "AUTHORS",
-            "NOTICE",
-            "COPYING",
-            "INSTALL",
-            "acknowledgements",
-            "CHANGELOG",
-            "CONTRIBUTING",
-            "CODE_OF_CONDUCT",
-            "SECURITY",
-            "MAINTAINERS",
-        ],
-        # ECOSYSTEM ANCHORS: Universal fallback discriminators.
-        "discriminators": [".txt", ".md", "README", "LICENSE"],
-        # EXECUTION SIGNATURES: Plaintext is unexecuted raw string data.
-        "shebangs": [],
-        # THE FIX: Plaintext is mathematically inert. It has no lexical family.
-        "lexical_family": "non_lexical",
-        "rules": {},
-    },
-    "tcl": {
-        "_meta": {
-            "target_version": "Tcl 8.6 / SQLite Test Suite",
-            "last_updated": "2026-03-11",
-            "blueprint_version": "",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard scripts and Tcl modules.
-        "extensions": [".tcl", ".itcl", ".tbc", ".tm"],  # Removed .test
-        # ABSOLUTE IDENTITY & EXACT FILENAMES:
-        "exact_matches": ["tclIndex", "pkgIndex.tcl"],
-        # ECOSYSTEM ANCHORS: Added .test here so it only anchors, but doesn't claim globally.
-        "discriminators": [".tcl", "tclIndex", ".test", "Makefile"],
-        # EXECUTION SIGNATURES: Standard interpreters found on Line 1.
-        "shebangs": ["tclsh", "wish", "bin/expect", "jimsh"],
-        # UPGRADED: Maps to Family 3 (Pure Hash)
-        # Rationale: Tcl natively uses '#' exclusively for line-level comments. It does not
-        # have native block comments (developers sometimes hack `if 0 { ... }`, but `#` is the standard).
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            # Tcl control flow keywords.
-            "branch": re.compile(r"\b(?:if|elseif|else|switch|while|for|foreach|catch|try|trap|finally)\b"),
-            # 2. args (Parameters / Coupling)
-            # Safely captures the parameter list `{...}` immediately following a proc name.
-            "args": re.compile(
-                # =====================================================================
-                # [ THE VERTICAL PROC SHIELD (TCL) ]
-                # Tcl developers can break the `proc`, name, and argument brace `{}`
-                # across newlines.
-                # FIX: Upgraded horizontal `[ \t]+` constraints to vertical `[ \t\n]+`.
-                # =====================================================================
-                # BUG FIX: Expanded to support 3 levels of nesting to handle deeply nested default values.
-                # BUG FIX: Expanded name character set to include -, !, ?
-                r"^[ \t]*proc[ \t\n]+[a-zA-Z0-9_:\-!?]+[ \t\n]+\{((?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*)\}",
-                re.M,
-            ),
-            # Tcl default-value argument lists (#1512): opt-in for depth-aware braced parameter parsing.
-            "_args_tcl_pattern_list_groups": {1},
-            # 3. linear (Sequential Boundaries)
-            # Structural boundaries. EXCLUDES: global/upvar (globals/heat).
-            "structural_boundaries": re.compile(r"\b(?:proc|return|break|continue|namespace|variable|yield)\b"),
-            # 4. func_start (Executable Logic Anchors)
-            # MUST HAVE EXACTLY ONE CAPTURE GROUP.
-            # Captures standard procs and namespaced procs (e.g., `proc ::my::func`).
-            # BUG FIX: Expanded name character set to include -, !, ?
-            "func_start": re.compile(
-                r"^[ \t]*proc[ \t\n]+([a-zA-Z0-9_:\-!?]+)(?:[ \t\n]+\{(?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*\})?(?=[ \t\n]*\{|[ \t\n]|$)",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            # Captures TclOO, Snit, and Itcl class definitions.
-            # BUG FIX: Expanded name character set to include -, !, ?
-            "class_start": re.compile(
-                r"^[ \t]*(?:oo::class[ \t\n]+create|snit::type|itcl::class)[ \t\n]+([a-zA-Z0-9_:\-!?]+)(?=[ \t]*\{|[ \t\n]|$)",
-                re.M,
-            ),
-            # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
-            # 6. safety (Defensive Programming / Validation)
-            # Safe evaluation and error catching.
-            "safety": re.compile(r"\b(?:catch|try|trap|finally|info[ \t]+exists|assert)\b"),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            # Unrestricted evaluation and context manipulation.
-            "safety_bypasses": re.compile(r"\b(?:eval|uplevel|upvar)\b"),
-            # 8. danger (High-Risk Execution / System Calls)
-            # OS command execution and process termination.
-            "high_risk_execution": re.compile(r"\b(?:exec|exit)\b|file[ \t]+delete[ \t]+-force"),
-            # 9. io (I/O & Network Boundaries)
-            # File system, sockets, and configuration. (Excludes puts which is mapped to print_hits).
-            "io": re.compile(r"\b(?:open|close|read|gets|socket|fconfigure|file|source|vfs::)\b"),
-            # 10. api (Public Surface Area)
-            # Exposing packages or namespace exports.
-            "api": re.compile(r"^[ \t]*(?:package[ \t]+provide|namespace[ \t]+export)\b", re.M),
-            # 11. flux (State Mutation)
-            # Variable state mutations.
-            "state_mutation": re.compile(
-                r"\b(?:set|lappend|dict[ \t]+set|array[ \t]+set|incr|append)\b[ \t]+[a-zA-Z0-9_:]+"
-            ),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Commented out structural code.
-            "dead_code": re.compile(r"^[ \t]*#[ \t]*(?:proc|set|if|while|foreach|return)\b", re.M),
-            # 13. doc (Structured Documentation)
-            # Tcl doc blocks.
-            "doc": re.compile(r"^[ \t]*#[ \t]*@(?:param|return|brief|author)", re.M),
-            # 14. test (Testing & Assertions)
-            # *THE SQLITE MEGA-SENSOR*: Accurately maps the SQLite custom test harnesses alongside standard tcltest.
-            "test": re.compile(
-                r"\b(?:do_test|do_execsql_test|do_catchsql_test|do_eqp_test|do_ioerr_test|do_faultsim_test|test\s+[a-zA-Z0-9_-]+|tcltest::|finish_test)\b"
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            # Event loops, delays, and threads.
-            "concurrency": re.compile(r"\b(?:vwait|after|thread::|coroutine|yield)\b"),
-            # 16. ui_framework (UI / View Components)
-            # Tkinter/Tk graphical elements.
-            "ui_framework": re.compile(r"\b(?:button|pack|grid|place|canvas|frame|label|ttk::)\b"),
-            # 17. closures (Closures / Anonymous Functions)
-            # Tcl 8.6 anonymous functions.
-            "closures": re.compile(r"\bapply[ \t]+\{"),
-            # 18. globals (Global / Shared State)
-            # Tcl relies heavily on global imports and environment arrays.
-            # BUG FIX: `::env` starts with `::` (non-word) inside the
-            # shared `\b(...)\b` group. Real usage (`$::env(HOME)`) always
-            # precedes it with `$`, also non-word -- `\b` between two
-            # non-word chars can never fire, so `::env` never matched.
-            # Pulled out with no leading `\b` (self-delimiting on `::`).
-            "globals": re.compile(r"\bglobal\b|::env\b|upvar[ \t]+#0"),
-            # 19. decorators
-            "decorators": None,
-            # 20. generics
-            "generics": None,
-            # 21. comprehensions
-            # Tcl 8.6 list map.
-            "comprehensions": re.compile(r"\blmap\b"),
-            # 22. scientific (Numerical / Compute Libraries)
-            # Explicit math invocations via expr.
-            "scientific": re.compile(r"\b(?:expr|math::)\b|\b(?:sin|cos|tan|sqrt|exp|log|pow)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # High Cognitive Load: Intercepting variables, tracking execution, and runtime aliasing.
-            "reflection_metaprogramming": re.compile(
-                r"\b(?:trace[ \t]+add|rename|interp[ \t]+create|interp[ \t]+alias)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            # Package and module loading.
-            "import": re.compile(r"^[ \t]*(?:package[ \t]+require|source|load)\b", re.M),
-            "dependency_injection": None,
-            "_dependency_capture": re.compile(
-                r"^[ \t]*(?:package[ \t\n]+require|source|load)[ \t\n]+(?:-exact[ \t\n]+)?(?:\{?[\"']?)([^\"'\s#{}]+)",
-                re.M,
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(
-                r"^[ \t]*#[ \t]*(?:Author|Created by|Maintainer|Copyright):\s+(.*)",
-                re.I | re.M,
-            ),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # BUG FIX: confirmed O(n^2) ReDoS -- the SPEC alternative's
-            # unbounded `\d+` sits directly adjacent to the also-unbounded
-            # `[^\]]*`, whose charset fully overlaps digits. Same bug shape
-            # already found and fixed in embedded_python's and css's
-            # independent copies of this pattern. Measured ~4x runtime per
-            # doubling. Bounded `\d+` to `\d{1,10}` and `[^\]]*` to
-            # `{0,300}`.
-            "spec_exposure": re.compile(r"\[(?:[ \t]*SPEC[ \t]*-[ \t]*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
-            "ssr_boundaries": None,
-            # 32. events (Event Emitters / Pub-Sub)
-            # Tcl event bindings and file event handlers.
-            "events": re.compile(r"\b(?:bind|fileevent|vwait|trace[ \t]+add)\b"),
-            "macros": None,
-            "pointers": None,
-            "memory_alloc": None,
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(r"\b(?:log::log|logger::|syslog)\b"),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
-            "debug_prints": re.compile(r"\bputs\b"),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(r"\bexpr[ \t]+(?:int|double|wide)\("),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(?:error|exit)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\bafter[ \t]+[0-9]+\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~|<<|>>"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(?:thread::mutex|thread::rwmutex|thread::cond)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            # Tcl lacks `const`, but setting a trace to prevent writes is the Tcl idiom for freezing.
-            "immutability_locks": re.compile(r"\btrace[ \t]+add[ \t]+variable[ \t]+[a-zA-Z0-9_:]+[ \t]+write\b"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r'\b(?:close|unset)\b|rename[ \t]+[a-zA-Z0-9_:]+[ \t]+""'),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            # Internal namespaces and private `_` prefixed procs.
-            "encapsulation": re.compile(r"\bnamespace[ \t]+eval\b|^[ \t]*proc[ \t]+_[a-zA-Z0-9_:]+", re.M),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(?:bind|fileevent)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            # Using TclTest constraints to silently skip tests on certain OS environments.
-            "test_skip": re.compile(r"-constraints[ \t]+[a-zA-Z0-9_]+\b|\btestConstraint\b"),
-        },
-    },
-    "groovy": {
-        "_meta": {
-            "target_version": "Groovy 4.0 / Gradle 8+",
-            "last_updated": "2026-03-12",
-            "blueprint_version": "v5.0",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA
-        "extensions": [".groovy", ".gradle", ".gvy", ".gy", ".gsh"],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES
-        "exact_matches": ["Jenkinsfile"],
-        # ECOSYSTEM ANCHORS & DISAMBIGUATION
-        "discriminators": [
-            "build.gradle",
-            "settings.gradle",
-            "gradle.properties",
-            "pom.xml",
-            ".java",
-        ],
-        # EXECUTION SIGNATURES
-        "shebangs": ["groovy"],
-        # LEXICAL FAMILY
-        "lexical_family": "standard_block",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # 1. branch (Control Flow / Branching)
-            "branch": re.compile(r"\b(if|else|switch|case|default|for|while|in|try|catch|finally)\b|\?"),
-            # 2. args (Parameters / Coupling)
-            # Captures standard method arguments and Groovy closures (x, y ->)
-            # CRITICAL FIX: Anchored the parenthesis capture to method signatures so it
-            # doesn't hallucinate every standard method call or if-statement in the file.
-            # QUADRATIC BLOWUP FIX: the closure form's bare-identifier branch
-            # (`[a-zA-Z_$][\w_$]*` with no \b anchor) got retried at every
-            # position in a long `->`-less line -- O(n^2) (same bug found and
-            # fixed in javascript's args). Bounded to {0,100}.
-            # BUG FIX: the return-type stepper required an uppercase first
-            # char, so lowercase primitive/void return types (`void foo()`,
-            # `int add()`) never matched at all. It also excluded `,`, so
-            # multi-param generic return types (`Map<String, Integer> foo()`)
-            # broke after the first type param. Added a primitive-keyword
-            # alternative and `,` to the class (same technique already used
-            # by C#'s func_start for this exact bug class).
-            # NESTED-DELIMITER FIX: the flat `[^)]*` param-list matcher broke
-            # on one-level-nested calls in default values (`int y =
-            # Math.max(3, 4)`), truncating at the inner `)`. Swapped for a
-            # bounded one-level-nesting form.
-            # BUG FIX (ambiguity sweep): despite the "CRITICAL FIX" comment's
-            # claim, this had no exclusion for control-flow keywords at all,
-            # so `if (x) {`, `while (x) {`, `switch (x) {`, `for (i in ...) {`,
-            # `catch (Exception e) {`, and `synchronized(lock) {` were all
-            # hallucinated as method parameter blocks (the condition
-            # misread as an argument list). Added the same style of negative
-            # lookahead func_start already uses.
-            # #1209: parameter-list span wrapped in its own capture group in
-            # both branches (was only reachable via group(0), the whole match
-            # including the modifier/return-type/name prefix, or for
-            # closures the leading "{") so detector.py's counter isolates
-            # just the real parameter text -- the whole-match fallback
-            # overcounted every zero/one-arg signature by +1 the same way
-            # Python's did (#1199). Name group added to branch 1 too, purely
-            # so existing extraction tests keep passing.
-            "args": re.compile(
-                r"^[ \t]*(?:(?:public|private|protected|static|final|def|abstract|@[A-Za-z0-9_.]+(?:\([^)]*\))?)[ \t\n]+){0,10}"
-                r"(?:(?:(?:void|int|long|short|byte|char|float|double|boolean)(?:\[\])?|[a-zA-Z_][a-zA-Z0-9_<>\[\]?,\.]*)[ \t]+){0,3}"
-                r"(?!(?:if|for|while|switch|catch|synchronized)\b)"
-                r"([A-Za-z_$][\w_$]*|\"[^\"]*\"|'[^']*')[ \t\n]*(\((?:[^()]|\([^()]*\))*\))"
-                r"|(?:\{[ \t\n]*)?(\((?:[^()]|\([^()]*\))*\)|[a-zA-Z_$][\w_$]{0,100}|)[ \t\n]*->",
-                re.M,
-            ),
-            # 3. linear (Sequential Boundaries)
-            "structural_boundaries": re.compile(
-                r"\b(def|class|interface|trait|enum|record|import|package|extends|implements|return|yield|sealed|permits|non-sealed)\b"
-            ),
-            # 4. func_start (Executable Logic Anchors)
-            # HIGHLY TUNED: Uses Negative Lookahead to explicitly ignore Gradle DSL keywords (implementation, api, task)
-            # Uses Positive Lookahead (?=[ \t]*\() to stop exactly at the function name without consuming punctuation.
-            # BUG FIX: same return-type stepper bug as `args` above -- lowercase
-            # primitive/void return types and multi-param generic return types
-            # (`Map<String, Integer> foo()`) never matched. See `args` comment.
-            # BUG FIX (ambiguity sweep): `synchronized` was missing from the
-            # exclusion list, so a synchronized block (`synchronized(lock) {
-            # ... }`) had the identical `identifier(...) {` shape as a real
-            # method and was misclassified as a method declaration named
-            # "synchronized". Confirmed pre-existing (not introduced by the
-            # return-type fix above); added to the exclusion list alongside
-            # the other control-flow-shaped keywords.
-            # #1221: func_start used to have one unified branch whose
-            # annotation/modifier prefix, generic bound, and return-type
-            # were all independently optional -- so a bare call statement
-            # (`next();`, zero prefix tokens) satisfied the exact same
-            # shape as a real signature, since (like csharp/apex before
-            # their own #789/#1221 fixes) this branch never verified a
-            # trailing `{`/`;` terminator either, deferring entirely to
-            # the pipeline's post-hoc brace search. Unlike apex (whose
-            # func_start has NO legitimate zero-prefix case, so a simple
-            # prefix-presence gate sufficed) groovy also has to keep
-            # matching a genuinely bare constructor shape with no
-            # modifier/return-type at all (`MyClass(String arg) {`,
-            # covered by test_groovy.py) *and* a fully-prefixed signature
-            # with no terminator at all (`abstract Map<String, Integer>
-            # calculateTotals(List<Item> items)`, covered by
-            # test_groovy_strict.py's deep-signature sweep) -- so neither
-            # "always require closure" (javascript's/java's fix shape) nor
-            # "always require a prefix" (apex's) works alone here. Split
-            # instead: branch 1 requires >=1 prefix token (merging
-            # modifier/annotation/generic-bound/return-type into one
-            # alternation so "at least one of any kind" is expressible as
-            # a single `{1,18}` repeat) and keeps the original lenient,
-            # no-terminator-required lookahead; branch 2 requires
-            # PRECISELY ZERO prefix tokens and, in exchange, must close
-            # its (non-nested, same bound as `args`) parameter list and
-            # reach a real `{` -- `next();` has neither a prefix nor a
-            # closing `{`, so it satisfies neither branch.
-            "func_start": re.compile(
-                r"^[ \t]*(?:"
-                r"(?:(?:public|private|protected|static|final|def|abstract|@[A-Za-z0-9_.]+(?:\([^)]*\))?|<[^>]{0,100}(?:<[^>]{0,100}>[^>]{0,100}){0,5}>|(?:void|int|long|short|byte|char|float|double|boolean)(?:\[\])?|[a-zA-Z_][a-zA-Z0-9_<>\[\]?,\.]*)[ \t\n]+){1,18}"
-                r"(?!(?:if|for|while|switch|catch|synchronized|new|return|class|interface|enum|trait|implementation|testImplementation|api|compileOnly|runtimeOnly|classpath|dependency|from|file|mavenCentral|plugins|dependencies|repositories|task|project|allprojects|subprojects|ext)\b)"
-                r"([A-Za-z_$][\w_$]*|\"[^\"]*\"|'[^']*')(?=[ \t\n]*\()"
-                r"|"
-                r"(?!(?:if|for|while|switch|catch|synchronized|new|return|class|interface|enum|trait|implementation|testImplementation|api|compileOnly|runtimeOnly|classpath|dependency|from|file|mavenCentral|plugins|dependencies|repositories|task|project|allprojects|subprojects|ext)\b)"
-                r"([A-Za-z_$][\w_$]*|\"[^\"]*\"|'[^']*')(?=[ \t\n]*\([^)]*\)[ \t\n]*(?:throws[ \t\n]+[\w.,<> \t\n]+)?[ \t\n]*\{)"
-                r")",
-                re.M,
-            ),
-            # 5. class_start (Object / Entity Declarations)
-            "class_start": re.compile(
-                r"^[ \t]*(?:(?:public|private|protected|static|final|abstract|sealed|non-sealed|@[A-Za-z0-9_.]+(?:\([^)]*\))?)[ \t\n]+){0,10}"
-                r"(?:class|interface|trait|enum|record)\s+[A-Za-z_$][\w_$]*",
-                re.M,
-            ),
-            # --- PHASE 2: RISK ENGINE (Structural Integrity) ---
-            # 6. safety (Defensive Programming / Validation)
-            "safety": re.compile(
-                r"\b(try|catch|finally|assert|instanceof|Optional)\b|@(?:Valid|Validated|NotNull|NonNull|Immutable)"
-            ),
-            # 7. safety_neg (Safety Bypasses / Unchecked Types)
-            "safety_bypasses": re.compile(
-                r"\b(null)\b|return\s+null|catch\s*\(\s*(?:Exception|Throwable)\b|@SuppressWarnings|@SneakyThrows|\.get\(\)"
-            ),
-            # 8. danger (High-Risk Execution / System Calls)
-            "high_risk_execution": re.compile(r"\b(System\.exit|Runtime\.getRuntime\(\)\.exec|execute)\b"),
-            # 9. io (I/O & Network Boundaries)
-            "io": re.compile(
-                r"\b(File|Files|Paths|FileReader|FileWriter|file|copy|sync|uri|url|Socket|Connection|ResultSet)\b"
-            ),
-            # 10. api (Public Surface Area)
-            # Groovy classes/methods are implicitly public by default, making the whole file highly exposed.
-            "api": re.compile(
-                r"\b(public)\b|@(RestController|Controller|Service|Component|Bean|RequestMapping|GetMapping|PostMapping|PutMapping|DeleteMapping|PatchMapping)\b"
-            ),
-            # 11. flux (State Mutation)
-            # BUG FIX: the trailing bare `=` matched the first `=` of `==`,
-            # miscounting every equality comparison (`result == expected`) as
-            # an assignment. Added a negative lookahead to exclude `==`.
-            "state_mutation": re.compile(r"^[ \t]*\w+(?:\.\w+)*[ \t]*=(?!=)|@(?:Setter|Data)\b", re.M),
-            # 12. dead_code (Commented Logic / Deprecated Trails)
-            # Tuned to catch dead Gradle definitions and Groovy logic.
-            # BUG FIX (Rule 12): groovy is `standard_block` (both `//` and
-            # `/* */`), but this only ever fired on `//` -- every block-
-            # commented-out construct (`/* class Foo {} */`) silently never
-            # matched.
-            "dead_code": re.compile(
-                r"(?://|/\*)[ \t]*(?:def|class|void|if|for|while|import|implementation|compile|api|testImplementation)\b"
-            ),
-            # 13. doc (Structured Documentation)
-            "doc": re.compile(r"/\*\*|@param|@return|@throws|@deprecated|@see"),
-            # 14. test (Testing & Assertions)
-            # Integrates Spock Framework keywords (given:, when:, then:, expect:) alongside JUnit.
-            # BUG FIX (Rule 5): `^\s*` matches newlines in re.M mode, so the
-            # Spock-label anchor could stretch across blank lines. Bounded to
-            # `[ \t]*` (same-line whitespace only).
-            "test": re.compile(
-                r"@(?:Test|Before|After|BeforeEach|AfterEach|Mock)|assert\w*\s*\(|^[ \t]*(?:given|when|then|expect|setup|cleanup|where):",
-                re.M,
-            ),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # 15. concurrency (Asynchronous Execution)
-            "concurrency": re.compile(
-                r"\b(synchronized|Thread|Runnable|Future|ExecutorService|Promise|Atomic\w+|task)\b|@(?:Async|Scheduled)"
-            ),
-            # 16. ui_framework (UI / View Components)
-            "ui_framework": re.compile(r"\b(SwingBuilder|JFrame|JPanel|ModelAndView|ModelMap|Model|UIComponent)\b"),
-            # 17. closures (Closures / Anonymous Functions)
-            # REDOS FIX: `[\w\s,]+` followed by a separate trailing `\s*`
-            # let both consume the same whitespace run -- an unclosed `{`
-            # followed by thousands of spaces caused catastrophic
-            # backtracking (confirmed hang at n=2000). Collapsed into one
-            # bounded, non-overlapping class before the required `->`
-            # (same technique as kotlin's closures fix).
-            # BUG FIX: idiomatic paren-less trailing closures (`list.each {
-            # it }`, `.collect { it * 2 }`) have no `->` at all and never
-            # matched either alternative, missing Groovy's single most
-            # common closure shape. Added a dot-method-call-into-brace form.
-            "closures": re.compile(r"\.\w+[ \t]*\{|\{[ \t\n]*[a-zA-Z_][a-zA-Z0-9_ \t\n,]{0,150}?->|->"),
-            # 18. globals (Global / Shared State)
-            "globals": re.compile(r"\b(System\.getProperty|System\.getenv|project\.ext)\b|@Value"),
-            # 19. decorators (Decorators / Annotations)
-            # NESTED-DELIMITER FIX (Rule 11): the flat `[^)]*` broke on one-
-            # level-nested annotation args (`@Grab(..., version=resolve())`),
-            # truncating at the inner `)`. Swapped for a bounded
-            # one-level-nesting form.
-            "decorators": re.compile(r"^[ \t]*@[\w.]+(?:\((?:[^()]|\([^()]*\))*\))?", re.M),
-            # 20. generics (Generics / Type Parameters)
-            # NESTED-DELIMITER FIX (Rule 11): the flat `[^>]*` broke on one-
-            # level-nested generics (`Map<String, List<Id>>`), truncating at
-            # the first `>` and leaving the real closing `>` unconsumed.
-            # Swapped for a bounded one-level-nesting form.
-            "generics": re.compile(r"<\s*[A-Z?][^<>]{0,100}(?:<[^<>]{0,100}>[^<>]{0,100})*>"),
-            # 21. comprehensions (Iterators / Comprehensions)
-            # BUG FIX: required a literal `(` right after the method name,
-            # but Groovy's idiomatic call form for these is a paren-less
-            # trailing closure (`list.each { it }`, `.collect { it * 2 }`)
-            # -- the far more common shape never matched at all.
-            "comprehensions": re.compile(
-                r"\.(?:collect|find|findAll|grep|inject|each|eachWithIndex|map|filter|reduce)[ \t]*[({]"
-            ),
-            # 22. scientific (Numerical / Compute Libraries)
-            "scientific": re.compile(r"\b(Math\.|BigDecimal|BigInteger|Random|SecureRandom)\b"),
-            # 23. heat_triggers (Metaprogramming & Reflection)
-            # Groovy's highly dynamic Meta-Object Protocol (MOP).
-            "reflection_metaprogramming": re.compile(
-                r"\b(invokeMethod|getProperty|setProperty|methodMissing|propertyMissing|ExpandoMetaClass|metaClass)\b"
-            ),
-            # 24. import (Dependency Inclusions)
-            "import": re.compile(r"^[ \t]*import\s+(?:static[ \t]+)?[\w.]+;?", re.M),
-            # BUG FIX: this key was entirely absent (not `None`), so Groovy
-            # imports never fed the dependency graph at all -- unlike every
-            # other JVM-family language here (e.g. java), which pairs
-            # `import` with a `_dependency_capture` group. Groovy imports
-            # follow the identical syntax, so this was a coverage gap, not
-            # an intentional Strict-Feature-Parity `None`.
-            "_dependency_capture": re.compile(
-                r"^[ \t]*import[ \t\n\\]+(?:static[ \t\n\\]+)?([\w*]+(?:[ \t\n]*\.[ \t\n]*[\w*]+)*)[ \t]*;?", re.M
-            ),
-            # 25. ownership (Authorship Metadata)
-            "ownership": re.compile(r"@author\s+(.*)", re.I),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            # 26. planned_debt (Annotated Debt / TODOs)
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # 29. spec_exposure (Spec / Audit Traceability)
-            # QUADRATIC BLOWUP FIX: `\d+` and the trailing `[^\]]*` both
-            # greedily match digits with no closing `]` ever present, so an
-            # unclosed `[SPEC-11111...` tag backtracks by re-scanning an
-            # ever-shrinking suffix -- O(n^2) (confirmed ~4x slowdown per
-            # input-size doubling; same bug class already fixed for shell
-            # and sqlite's spec_exposure elsewhere in this file). Bounded to
-            # {0,300}; real spec/audit tags don't get remotely that long.
-            "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)[^\]]{0,300}\]", re.I),
-            # 31. ssr_boundaries (Server-Side Rendering)
-            # BUG FIX: `@ResponseBody` is `@`-prefixed -- the shared leading
-            # \b could only fire when a word char immediately preceded the
-            # `@`, never true for how annotations are actually written.
-            # Never matched at all.
-            "ssr_boundaries": re.compile(
-                r"\b(?:MarkupBuilder|StreamingMarkupBuilder|TemplateEngine|HttpServletRequest|HttpServletResponse)\b"
-                r"|@ResponseBody"
-            ),
-            # 32. events (Event Emitters / Pub-Sub)
-            # BUG FIX: `@EventListener` is `@`-prefixed -- same bug.
-            "events": re.compile(r"\b(?:ApplicationEvent|ApplicationListener|publishEvent)\b|@EventListener"),
-            # 33. dependency_injection (Dependency Injection / IoC)
-            # Heavily captures Gradle plugin and dependency architecture.
-            # BUG FIX: 7 of the 10 alternatives are `@`-prefixed Spring
-            # annotations -- same bug, at scale.
-            # BUG FIX (Rule 9): `plugins\s*\{` and `dependencies\s*\{` both
-            # end on `{`, a non-word char, so the shared trailing `\b` could
-            # never fire (no word/non-word transition between `{` and
-            # whatever follows it) -- `plugins {` / `dependencies {` never
-            # matched at all, the two most common Gradle DSL entry points.
-            "dependency_injection": re.compile(
-                r"\bapply\s+plugin\b|\bplugins\s*\{|\bdependencies\s*\{"
-                r"|@Autowired|@Inject|@Component|@Service|@Repository|@Bean|@Configuration"
-            ),
-            # 34. macros
-            "macros": None,
-            # 35. pointers (Pointer Arithmetic / Memory Addressing)
-            "pointers": None,
-            # 36. memory_alloc
-            "memory_alloc": None,
-            # 37. inline_asm
-            "inline_asm": None,
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # 38. telemetry (Structured Logging / Telemetry)
-            "telemetry": re.compile(
-                r"\b(log|logger|LOGGER|LoggerFactory)\.(?:info|error|warn|warning|debug|trace)\b|@Slf4j|@Log4j2|@Log"
-            ),
-            # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
-            # BUG FIX: `\.printStackTrace\(\)` ends on `)` (non-word), so
-            # the shared trailing \b could never fire. Never matched.
-            "debug_prints": re.compile(
-                r"\b(?:println|print|printf|System\.out\.print|System\.err\.print)\b|\.printStackTrace\(\)"
-            ),
-            # # 40. explicit_casts (Explicit Type Casting)
-            "explicit_casts": re.compile(
-                r"\bas\s+[A-Z]\w*|\(\s*(?:int|long|short|byte|char|float|double|boolean|[A-Z][A-Za-z0-9_]*)\s*\)\s*[a-zA-Z_$]"
-            ),
-            # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
-            "panics_and_aborts": re.compile(r"\b(throw|System\.exit|GradleException)\b"),
-            # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
-            "thread_sleeps": re.compile(r"\b(Thread\.sleep|sleep)\b"),
-            # 43. bitwise_ops (Bitwise Operations)
-            # EXCLUDES `<<` and `>>` because Groovy heavily overloads `<<` for list/stream appending.
-            "bitwise_ops": re.compile(r"\^|~"),
-            # 44. sync_locks (Resource Management & Stability)
-            "sync_locks": re.compile(r"\b(synchronized|ReentrantLock|ReadWriteLock|Semaphore|Lock|Mutex)\b"),
-            # 45. immutability_locks (Immutability Constraints)
-            # BUG FIX: `@Immutable` is `@`-prefixed -- same leading-\b bug.
-            "immutability_locks": re.compile(r"\bfinal\b|@Immutable"),
-            # 46. cleanup (Resource Cleanup / Teardown)
-            "cleanup": re.compile(r"\b(close|dispose|shutdown)\b\s*\("),
-            # 47. encapsulation (Access Modifiers / Encapsulation)
-            "encapsulation": re.compile(r"\b(private|protected)\b"),
-            # 48. listeners (Event Listeners / Observers)
-            "listeners": re.compile(r"\b(addListener|on[A-Z]\w*|subscribe)\b"),
-            # 49. test_skip (Bypassed Tests / Ignored Specs)
-            "test_skip": re.compile(r"@(?:Ignore|Disabled|PendingFeature)\b|mock\s*\(|spy\s*\("),
-        },
-    },
-    "json": {
-        "_meta": {
-            "target_version": "Modern JSON & Configuration Ecosystem",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: Standard, commented, line-delimited, and geospatial JSON.
-        "extensions": [
-            ".json",
-            ".arb",
-            ".jsonc",
-            ".json5",
-            ".jsonl",
-            ".ndjson",
-            ".geojson",
-            ".topojson",
-        ],
-        # ABSOLUTE IDENTITY & EXACT FILENAMES: Extended modern web/node tooling.
-        "exact_matches": [
-            ".prettierrc",
-            ".eslintrc",
-            ".babelrc",
-            ".stylelintrc",
-            ".bowerrc",
-            ".hintrc",
-            ".nycrc",
-            ".lintstagedrc",
-            ".swcrc",
-        ],
-        "discriminators": [".json", ".jsonc", ".json5", ".arb"],
-        "shebangs": [],
-        # THE FIX: JSON with comments relies on C-style comment structures, not Python/Ruby hashes.
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "glsl": {
-        "_meta": {"target_version": "OpenGL Shading Language", "status": "production"},
-        "extensions": [".glsl", ".vert", ".frag", ".geom", ".comp"],
-        "exact_matches": [],
-        "discriminators": [".glsl", ".vert", ".frag"],
-        "shebangs": [],
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "nix": {
-        "_meta": {"target_version": "Nix Expression Language", "status": "production"},
-        "extensions": [".nix"],
-        "exact_matches": [],
-        "discriminators": ["flake.nix", "default.nix", "shell.nix"],
-        "shebangs": [],
-        "lexical_family": "line_exclusive",
-        "rules": {},
-    },
-    "blp": {
-        "_meta": {"target_version": "Blueprint UI Markup", "status": "production"},
-        "extensions": [".blp"],
-        "exact_matches": [],
-        "discriminators": [".blp", ".ui"],
-        "shebangs": [],
-        "lexical_family": "standard_block",
-        "rules": {},
-    },
-    "batch": {
-        "_meta": {"target_version": "Windows CMD/Batch", "status": "production"},
-        "extensions": [".bat", ".cmd"],
-        "exact_matches": [],
-        "discriminators": [],
-        "shebangs": [],
-        "lexical_family": "line_exclusive",
-        "rules": {},
-    },
-    "jcl": {
-        "_meta": {
-            "target_version": "IBM z/OS JCL",
-            "status": "production",
-        },
-        "extensions": [".jcl", ".prc", ".bms"],
-        "exact_matches": [],
-        "discriminators": [".cbl", ".cob", ".cpy"],
-        "shebangs": [],
-        "lexical_family": "line_exclusive",
-        "rules": {
-            # Control flow in JCL (IF/THEN/ELSE/ENDIF)
-            "branch": re.compile(r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+(?:IF|ELSE|ENDIF)\b", re.M | re.I),
-            # Extract arguments from EXEC PARM= strings or PROC symbolics definitions.
-            # #2482: PARM= routinely sits on a JCL continuation line, not the EXEC
-            # line itself -- a trailing comma on a `//` statement line means "this
-            # statement keeps going on the next `//` line," and real corpus JCL
-            # chains this more than once before PARM= appears (cics-genapp's
-            # CICSTS56.jcl: EXEC line ends in a comma, then a COND=(...) continuation
-            # line ALSO ends in a comma, and only the third line carries PARM=).
-            # `(?:\n//[ \t]*(?:[^\n]*,[ \t]*\n//[ \t]*){0,7})?` models this: the whole
-            # thing is optional (same-line PARM=, the common case, is untouched), but
-            # once triggered it crosses at least one continuation boundary
-            # (`\n//[ \t]*`) and then allows up to 7 more hops, each of which must
-            # itself end in a real trailing comma (`[^\n]*,` -- greedy, so it lands on
-            # the LAST comma on that line, the actual continuation indicator, not an
-            # incidental earlier one) before crossing again. Every repeated unit is
-            # bounded to a single physical line (`[^\n]*` cannot cross a newline), so
-            # this cannot backtrack catastrophically even on adversarial input -- see
-            # test_jcl_args_parm_continuation_line_regression's ReDoS case. The value
-            # capture itself (`\([^)]*\)` / `'...'`) already spanned newlines before
-            # this fix (`[^)]*`/`[^']*` don't exclude `\n`), so a PARM=(...) that
-            # keeps going across further continuation lines (cics-genapp's
-            # defdrep.jcl, 5 more lines after the opening paren) is captured whole --
-            # EXCEPT when the value itself contains a nested, unquoted `(...)` (e.g.
-            # `'AMODE(31)'` inside a larger PARM=(...) list), where the capture still
-            # stops at that inner `)` -- a separate, pre-existing limitation this
-            # issue doesn't attempt to fix (nested-paren balancing isn't expressible
-            # in a single bounded regex pass the way this engine requires).
-            "args": re.compile(
-                r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+"
-                r"(?:EXEC(?:[ \t].*?)?,[ \t]*(?:\n//[ \t]*(?:[^\n]*,[ \t]*\n//[ \t]*){0,7})?"
-                r"PARM=('(?:[^']|'')*'|\([^)]*\)|[^ \t\n,]+)"
-                r"|PROC[ \t]+(\S.*))",
-                re.M | re.I,
-            ),
-            # Structural boundaries (Any line starting with // and a command)
-            # BUG FIX (2 issues): (1) the name segment was required (`+`), missing
-            # the very common unnamed continuation-DD form (`//         DD DSN=...`,
-            # concatenating a dataset onto the preceding DD with no ddname of its
-            # own) -- a real, everyday JCL idiom, not an edge case. Name is now
-            # optional (`*`). (2) the gap before the keyword was `\s+`, which
-            # includes `\n` under re.M -- confirmed this lets a name on one line
-            # falsely bind to a keyword starting a *different* line with no `//`
-            # prefix of its own (e.g. "//STEP01\nEXEC PGM=FOO" incorrectly reads as
-            # a real EXEC step). JCL statements don't span a physical line via bare
-            # whitespace, so bounded to `[ \t]+` instead.
-            "structural_boundaries": re.compile(
-                r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+(?:DD|INCLUDE|SET|PROC|PEND)\b", re.M | re.I
-            ),
-            # Functions (EXEC steps). Same `\s+` -> `[ \t]+` cross-line fix as above.
-            # BUG FIX: stepname is optional (`*` not `+`), unnamed EXEC steps are valid.
-            "func_start": re.compile(r"^[ \t]*//([A-Za-z0-9_#$@]*)[ \t]+EXEC\b", re.M | re.I),
-            # Classes/Entities (JOB cards). Same `\s+` -> `[ \t]+` cross-line fix as above.
-            "class_start": re.compile(r"^[ \t]*//([A-Za-z0-9_#$@]+)[ \t]+JOB\b", re.M | re.I),
-            # Danger (Execution of arbitrary programs)
-            "high_risk_execution": re.compile(r"\bPGM=[A-Za-z0-9_#$@]+\b", re.I),
-            # I/O (Data Set Names and Sysouts)
-            "io": re.compile(r"\b(DSN|DSNAME|SYSOUT|SYSPRINT|DISP=)\b", re.I),
-            # JCL doesn't have traditional code equivalents for these, keep them null to prevent crashes
-            "safety": None,
-            "api": None,
-            # BUG FIX: unanchored -- `\bSET\s+NAME=` matched "SET" anywhere in the
-            # file, including inline SYSIN card data (`//SYSIN DD *` ... `/*`) that
-            # isn't a JCL statement at all (e.g. an embedded SQL/shell/config
-            # payload that happens to contain "SET X=1"). Anchored to a real JCL
-            # statement line, mirroring structural_boundaries' own SET handling;
-            # both `\s+` gaps bounded to `[ \t]+` for the same cross-line reason.
-            "state_mutation": re.compile(r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+SET[ \t]+[A-Za-z0-9_#$@]+=", re.M | re.I),
-            "concurrency": None,
-            "ui_framework": None,
-            "closures": None,
-            "globals": None,
-            "decorators": None,
-            "generics": None,
-            "comprehensions": None,
-            "scientific": None,
-            "reflection_metaprogramming": None,
-            # BUG FIX: name segment was required (`+`); INCLUDE statements, like DD,
-            # are commonly written unnamed (`//         INCLUDE MEMBER=...`). Name
-            # now optional (`*`); `\s+` -> `[ \t]+` for the same cross-line reason as
-            # structural_boundaries/func_start/class_start above.
-            "import": re.compile(r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+INCLUDE\b", re.M | re.I),
-            # _dependency_capture was missing entirely for jcl (unlike nearly every
-            # other language with a non-None `import`), so the dependency graph never
-            # captured which member a JCL job/proc pulls in via INCLUDE. Captures the
-            # MEMBER= name for the network/blast-radius graph. Also captures dataset
-            # names in DD statements and JCLLIB orders, ignoring temporary/internal ptrs (&&, *).
-            "_dependency_capture": re.compile(
-                r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+(?:INCLUDE[ \t]+MEMBER=([A-Za-z0-9_#$@]+)|JCLLIB[ \t]+ORDER=\(?([A-Za-z0-9_#$@.]+)\)?|DD[ \t]+(?:.*?[ \t,])?DSN(?:AME)?=(?!(?:&&|\*))([A-Za-z0-9_#$@.&()]+))",
-                re.M | re.I,
-            ),
-            # BUG FIX: `\s+` before the capture group could cross a newline (re.M),
-            # so an Author line with the value wrapped to the next physical line
-            # captured garbage from that *different* line (including its own "//*"
-            # prefix) instead of correctly failing to match. Bounded to `[ \t]+`.
-            "ownership": re.compile(r"^//\*[ \t]*(?:Author|Created by|Maintainer):[ \t]+(.*)", re.I | re.M),
-            "telemetry": None,
-            "debug_prints": None,
-        },
-    },
-    "ada": {
-        "_meta": {
-            "target_version": "Ada 2012 / SPARK 2014 (GNAT Pro / GNAT CE)",
-            "last_updated": "2026-08-07",
-            "blueprint_version": "v6.3",
-            "status": "production",
-        },
-        # COMPREHENSIVE SURFACE AREA: .ads (package/subprogram specs), .adb
-        # (bodies), and the historic single-extension convention .ada.
-        "extensions": [".adb", ".ads", ".ada"],
-        "exact_matches": [],
-        # ECOSYSTEM ANCHORS: GNAT project files (.gpr) are the dominant
-        # Ada build-system anchor (GPRbuild/GNAT Studio), the closest
-        # analogue to a manifest file for disambiguation purposes.
-        "discriminators": [".adb", ".ads", ".gpr"],
-        # EXECUTION SIGNATURES: Ada is compiled; there is no interpreter
-        # shebang convention in real-world use.
-        "shebangs": [],
-        # Rationale (Lexical-family sanity check, how_to_add_a_language.md
-        # Step 4 item 8): issue #76 / epic #75 both label this "hybrid_dash",
-        # but Ada genuinely has no block-comment form at all -- "no native
-        # block comments historically" is stated directly in #76's own
-        # checklist, which contradicts the "hybrid_dash" name it also asks
-        # for. Reusing the existing "line_exclusive" family was also
-        # rejected: that family's shared delimiter list is consumed by a
-        # literal-string family-name check in prism.py, and several of its
-        # existing members (Perl, Assembly) use `--` as a real
-        # operator/decrement -- widening that shared list would silently
-        # truncate real code in unrelated languages (the exact failure mode
-        # #621 already fixed once by narrowing "standard_block"). Registered
-        # a new, properly-wired "line_exclusive_dash" family instead (single
-        # `--` delimiter, no block form) -- see gitgalaxy_config.py's
-        # LEXICAL_FAMILY_HEURISTICS and prism.py's _compile_regex_matrix.
-        "lexical_family": "line_exclusive_dash",
-        "rules": {
-            # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
-            # branch: Ada's short-circuit forms are the two-word "and then"/
-            # "or else" (no && / || symbols exist in Ada).
-            "branch": re.compile(
-                r"\b(?:if|elsif|else|case|when|for|while|loop|exit)\b|\band[ \t]+then\b|\bor[ \t]+else\b",
-                re.I,
-            ),
-            # args: parameter profile following a procedure/function name.
-            # Bounded 3-level nested-paren capture (Rule 11) since default
-            # expressions routinely contain nested calls/aggregates, e.g.
-            # `Y : Integer := Compute(A, (B + C))`.
-            "args": re.compile(
-                r"\b(?:procedure|function)\b[ \t\n]+[A-Za-z_][A-Za-z0-9_]*[ \t\n]*"
-                r"\(((?:[^()]|\((?:[^()]|\([^()]*\))*\))*)\)",
-                re.I,
-            ),
-            # structural_boundaries: procedure/function/begin/end (per #76's
-            # explicit checklist) plus package (Ada's module/namespace
-            # boundary keyword) and return (statement form, distinct from
-            # func_start's own "return TYPE" clause).
-            "structural_boundaries": re.compile(r"\b(?:procedure|function|package|begin|end|return)\b", re.I),
-            # func_start: STRICT EXECUTION ANCHORING (Rule 7) -- only a real
-            # subprogram BODY, not a bare spec-only declaration. Ada's spec
-            # declaration ends `;` right after the profile/return type with
-            # no "is"; a body always has a literal "is" there instead. Must
-            # also exclude "is abstract"/"is null" (null procedures, both
-            # still declarations, not bodies) and "is new" (generic
-            # subprogram instantiation, not a body either). SPARK code
-            # commonly attaches `with Pre => ..., Post => ...` aspect
-            # clauses directly on a body between the profile and "is" --
-            # bounded (not unbounded `.*`) so it can't cross a statement
-            # terminator or blow up on an adversarial payload.
-            "func_start": re.compile(
-                r"\b(?:procedure|function)[ \t\n]+([A-Za-z_][A-Za-z0-9_]*)"
-                r"(?:[ \t\n]*\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))?"
-                r"(?:[ \t\n]+return[ \t\n]+[A-Za-z_][A-Za-z0-9_.]*)?"
-                r"(?:[ \t\n]+with[ \t\n]+[^;{}]{0,300}?)?"
-                r"[ \t\n]*is\b(?![ \t\n]*(?:abstract|null|new)\b)",
-                re.I,
-            ),
-            # class_start: Ada's OOP entity is a *tagged* type, either a root
-            # declaration (`type Foo is tagged record ...`) or a derived/
-            # extended one (`type Dog is new Animal with record ...` --
-            # inheritance is expressed via "is new BASE with", the literal
-            # word "tagged" is NOT repeated on a derived type, so both forms
-            # need their own alternative or the (more common, in an
-            # OOP-heavy codebase) derived form is entirely invisible).
-            "class_start": re.compile(
-                r"\btype[ \t]+([A-Za-z_][A-Za-z0-9_]*)[ \t\n]+is[ \t\n]+"
-                r"(?:(?:abstract[ \t\n]+)?(?:limited[ \t\n]+)?tagged\b"
-                r"|(?:abstract[ \t\n]+)?new[ \t\n]+[A-Za-z_][A-Za-z0-9_.]*[ \t\n]+with\b)",
-                re.I,
-            ),
-            # --- PHASE 2: SAFETY & EXECUTION RISK ---
-            # safety: per #76's explicit ask -- strict-typing range
-            # constraints (`type ... is range`, but also the equally common
-            # `subtype X is Base range Lo .. Hi` form, where "is" and
-            # "range" are NOT adjacent -- matching only "is range" verbatim
-            # would miss the subtype form entirely) and safety-oriented
-            # pragmas/aspects (Assert, Precondition, Postcondition,
-            # Invariant, Predicate) -- deliberately NOT bare "pragma" (Rule
-            # 1: many pragmas, e.g. Pack or Import, have nothing to do with
-            # safety; matching all of them would be keyword-stuffing, not
-            # semantic intent). Also real exception-handling constructs.
-            # (?<!') on "range" excludes the unrelated `Arr'Range` attribute
-            # (array index-range query), which shares the bare word but has
-            # nothing to do with a type's strict-typing constraint.
-            "safety": re.compile(
-                r"\bexception\b|\bwhen[ \t]+others\b"
-                r"|\bpragma[ \t]+(?:Assert|Assertion_Policy|Precondition|Postcondition|Invariant|Predicate)\b"
-                r"|(?<!')\brange\b",
-                re.I,
-            ),
-            # safety_bypasses: Unchecked_Conversion (raw memory
-            # reinterpretation -- Rule 2's own canonical example),
-            # pragma Suppress (disables compiler-inserted runtime checks),
-            # pragma Import (FFI boundary bypassing Ada's normal safety),
-            # and the GNAT-specific 'Unrestricted_Access attribute
-            # (bypasses accessibility/aliasing rules entirely).
-            "safety_bypasses": re.compile(
-                r"\bUnchecked_Conversion\b|\bpragma[ \t]+Suppress\b|\bpragma[ \t]+Import\b"
-                r"|'Unrestricted_Access\b",
-                re.I,
-            ),
-            # high_risk_execution: GNAT.OS_Lib.OS_Exit is Ada's real
-            # equivalent of process.exit -- an immediate, uncatchable
-            # process termination (distinct from `raise`/`abort`, which are
-            # ordinary language-level exception/task-termination constructs
-            # routed to panics_and_aborts per the branch/func_start
-            # exclusion notes above).
-            "high_risk_execution": re.compile(r"\bOS_Exit\b|\bGNAT\.OS_Lib\.OS_Exit\b", re.I),
-            # io: disk/network/external-system boundaries. EXCLUDES
-            # Put_Line/Put (stdout -- debug_prints below).
-            "io": re.compile(
-                r"\bAda\.Text_IO\.(?:Open|Create|Close|Delete|Reset)\b"
-                r"|\bAda\.Directories\b|\bAda\.Streams\b|\bAda\.Direct_IO\b"
-                r"|\bAda\.Sequential_IO\b|\bGNAT\.Sockets\b",
-                re.I,
-            ),
-            # api: per #76's explicit ask -- package specifications. EXCLUDES
-            # "package body" (private implementation, not a public spec) and
-            # "package X is new ..." (generic package instantiation, not a
-            # spec declaration -- both use negative lookaheads, not an
-            # optional group, per Rule 15).
-            "api": re.compile(
-                r"\bpackage[ \t]+(?!body\b)(?:private[ \t]+)?([A-Za-z_][A-Za-z0-9_.]*)[ \t\n]+is\b(?![ \t\n]*new\b)",
-                re.I,
-            ),
-            # state_mutation: Ada's assignment operator `:=` is lexically
-            # distinct from `=` (equality) -- no ambiguity to guard against.
-            "state_mutation": re.compile(r":="),
-            # dead_code: commented-out structural code (line_exclusive_dash
-            # has exactly one comment style, so no completeness gap per
-            # Rule 12).
-            "dead_code": re.compile(r"--[ \t]*(?:procedure|function|if|for|while|begin|end|type|package)\b", re.I),
-            # doc: structured doc-comment conventions (GNATdoc-style tags;
-            # Ada has no single standardized docstring format).
-            "doc": re.compile(
-                r"--[ \t]*(?:@param|@return|@exception|Purpose:|Parameters?:|Returns?:|Preconditions?:|Postconditions?:)",
-                re.I,
-            ),
-            # test: AUnit (the dominant Ada unit-testing framework) and the
-            # standard-library Ada.Assertions.Assert.
-            "test": re.compile(r"\bAUnit\b|\bAda\.Assertions\b|\bAssert[ \t]*\(", re.I),
-            # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
-            # concurrency: Ada's built-in hardware concurrency model --
-            # tasks, protected objects, the select/accept rendezvous, and
-            # delay. Broad domain signal, intentionally overlapping the more
-            # specific sync_locks/thread_sleeps/events/listeners below (same
-            # design already established for COBOL's EXEC CICS ENQ/DELAY).
-            "concurrency": re.compile(r"\btask\b|\bprotected\b|\bselect\b|\bdelay\b|\baccept\b|\bentry\b", re.I),
-            # ui_framework: no idiomatic built-in UI paradigm (GtkAda exists
-            # but isn't a realistic default host -- Strict Feature Parity,
-            # Rule 4: an empty/never-matching rule is worse than an absent
-            # one, since it implies detection coverage that doesn't exist).
-            "ui_framework": None,
-            # closures: Ada has no anonymous-function/lambda literal syntax.
-            "closures": None,
-            # globals: SPARK's own Global aspect explicitly declares a
-            # subprogram's global-state dependencies -- a direct, idiomatic
-            # match for this key. pragma Volatile marks genuinely shared
-            # (e.g. memory-mapped hardware register) state.
-            "globals": re.compile(r"\bGlobal[ \t]*=>|\bpragma[ \t]+Volatile\b", re.I),
-            # decorators: Ada 2012 aspect specifications (`with Pre => ...`)
-            # attached to a declaration, PLUS SPARK's data-flow refinement
-            # aspects (Abstract_State/Initializes/Refined_Global/
-            # Refined_Post/Refined_State/Refined_Depends -- how a package's
-            # private state gets formally modeled for the prover; common in
-            # real SPARK code, distinct from the Pre/Post/Global/Depends
-            # contract basics above) and the `pragma SPARK_Mode (On);` form
-            # (a structurally different shape from the `with SPARK_Mode`
-            # aspect form -- both are real and common). Must NOT overlap the
-            # plain `with` import clause below -- distinguished by a fixed,
-            # known aspect-mark vocabulary rather than by punctuation, since
-            # several boolean aspects (Inline, Pure, ...) have no `=>` at
-            # all and would otherwise be lexically identical to a bare
-            # package-name import list. Keep this list in sync with
-            # import/_dependency_capture's exclusion lookahead below.
-            "decorators": re.compile(
-                r"\bwith[ \t]+(?:Pre|Post|Invariant|Static_Predicate|Dynamic_Predicate|Global|Depends"
-                r"|Convention|Import|Export|Inline|Volatile|Atomic|Pack|SPARK_Mode|No_Return"
-                r"|Pure|Preelaborate|Elaborate_Body"
-                r"|Abstract_State|Initializes|Refined_Global|Refined_Post|Refined_State|Refined_Depends)\b"
-                r"|\bpragma[ \t]+SPARK_Mode\b",
-                re.I,
-            ),
-            # generics: `generic` keyword, and instantiation scoped to
-            # `package|procedure|function NAME is new ...` specifically --
-            # NOT bare "is new" alone, which would collide with
-            # class_start's tagged-type derivation (`type Dog is new Animal
-            # with ...`), a genuinely different construct sharing the same
-            # two words.
-            "generics": re.compile(
-                r"\bgeneric\b|\b(?:package|procedure|function)\b[ \t]+[A-Za-z_][A-Za-z0-9_]*[ \t\n]+is[ \t\n]+new\b",
-                re.I,
-            ),
-            # comprehensions: Ada 2012 quantified expressions (`for all` /
-            # `for some`), the closest analogue to an inline iterator/
-            # comprehension.
-            "comprehensions": re.compile(r"\bfor[ \t]+(?:all|some)\b", re.I),
-            # scientific: Ada.Numerics and its generic elementary-functions
-            # children.
-            "scientific": re.compile(r"\bAda\.Numerics\b", re.I),
-            # reflection_metaprogramming: tagged-type dispatch/RTTI --
-            # 'Class and 'Tag attributes, Ada.Tags.
-            "reflection_metaprogramming": re.compile(r"'Class\b|'Tag\b|\bAda\.Tags\b", re.I),
-            # import: context-clause `with` (compilation-unit dependency),
-            # explicitly excluding the same known aspect-mark vocabulary
-            # decorators uses above so a `with Pre => ...` aspect clause on
-            # a declaration is never miscounted as a dependency.
-            "import": re.compile(
-                r"^[ \t]*with[ \t\n]+(?!(?:Pre|Post|Invariant|Static_Predicate|Dynamic_Predicate|Global|Depends"
-                r"|Convention|Import|Export|Inline|Volatile|Atomic|Pack|SPARK_Mode|No_Return"
-                r"|Pure|Preelaborate|Elaborate_Body"
-                r"|Abstract_State|Initializes|Refined_Global|Refined_Post|Refined_State|Refined_Depends)\b)"
-                r"[A-Za-z_][A-Za-z0-9_.]*(?:[ \t\n]*,[ \t\n]*[A-Za-z_][A-Za-z0-9_.]*){0,20}[ \t\n]*;",
-                re.I | re.M,
-            ),
-            "_dependency_capture": re.compile(
-                r"^[ \t]*with[ \t\n]+(?!(?:Pre|Post|Invariant|Static_Predicate|Dynamic_Predicate|Global|Depends"
-                r"|Convention|Import|Export|Inline|Volatile|Atomic|Pack|SPARK_Mode|No_Return"
-                r"|Pure|Preelaborate|Elaborate_Body"
-                r"|Abstract_State|Initializes|Refined_Global|Refined_Post|Refined_State|Refined_Depends)\b)"
-                r"([A-Za-z_][A-Za-z0-9_.]*)",
-                re.I | re.M,
-            ),
-            # ownership: header comment convention, same shape as the JCL/
-            # COBOL entries.
-            "ownership": re.compile(r"^[ \t]*--[ \t]*(?:Author|Created by|Maintainer)[ \t]*:[ \t]*(.*)$", re.I | re.M),
-            # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
-            "planned_debt": GLOBAL_PLANNED_DEBT,
-            "fragile_debt": GLOBAL_FRAGILE_DEBT,
-            # hardcoded_secrets: assigned Ada string-literal declarations
-            # for common secret-shaped identifiers.
-            "hardcoded_secrets": re.compile(
-                r"\b(?:password|secret|token|api[_-]?key|private[_-]?key|client[_-]?secret)\b"
-                r"[ \t]*:[ \t]*(?:constant[ \t]+)?[A-Za-z_][A-Za-z0-9_.]*[ \t]*:=[ \t]*\"[^\"]{8,}\"",
-                re.I,
-            ),
-            "spec_exposure": re.compile(r"\[(?:SPEC[ \t]*-[ \t]*\d{1,6}|spec|audit)\]", re.I),
-            # ssr_boundaries: no idiomatic Ada web-application framework
-            # (Strict Feature Parity, Rule 4).
-            "ssr_boundaries": None,
-            # events: a task/protected object *accepting* an entry call --
-            # the moment a message/event is actually handled. Intentionally
-            # overlaps concurrency's broader domain signal above.
-            "events": re.compile(r"\baccept\b", re.I),
-            # dependency_injection: no idiomatic IoC/DI framework or
-            # convention in Ada (generics already cover its real compile-
-            # time parameterization mechanism).
-            "dependency_injection": None,
-            # macros: gnatprep, GNAT's optional conditional-compilation
-            # preprocessor (`#if` / `#elsif` / `#else` / `#end if;`) --
-            # real and commonly used in embedded/avionics Ada for
-            # per-target-hardware conditional builds.
-            "macros": re.compile(r"^[ \t]*#[ \t]*(?:if|elsif|else|end[ \t]+if)\b", re.I | re.M),
-            # pointers: Ada access types -- declarations, `access all`/
-            # `access constant`, and the 'Access/'Unchecked_Access
-            # attributes.
-            "pointers": re.compile(
-                r"\bis[ \t]+access\b|\baccess[ \t]+all\b|\baccess[ \t]+constant\b"
-                r"|'Access\b|'Unchecked_Access\b",
-                re.I,
-            ),
-            # memory_alloc: the `new` allocator.
-            "memory_alloc": re.compile(r"\bnew[ \t]+[A-Za-z_]", re.I),
-            # inline_asm: System.Machine_Code's Asm construct -- a real,
-            # if niche, GNAT-standard extension used in kernel/embedded Ada.
-            "inline_asm": re.compile(r"\bSystem\.Machine_Code\b|\bAsm[ \t]*\(", re.I),
-            # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
-            # telemetry: GNATCOLL.Traces, the de facto AdaCore-ecosystem
-            # tracing/logging library.
-            "telemetry": re.compile(r"\bGNATCOLL\.Traces\b", re.I),
-            # debug_prints: Ada.Text_IO's Put_Line/Put/New_Line -- the
-            # stdout-print idiom, distinct from io's file/network calls
-            # above.
-            "debug_prints": re.compile(r"\bPut_Line\b|\bPut[ \t]*\(|\bNew_Line\b", re.I),
-            # explicit_casts: Ada qualified-expression syntax
-            # `Type_Name'(Expr)` -- a real, lexically-unambiguous marker for
-            # explicit type conversion/qualification (unlike a bare type
-            # conversion `T(Expr)`, which is syntactically identical to a
-            # function call and can't be told apart without semantic info).
-            "explicit_casts": re.compile(r"\b[A-Za-z_][A-Za-z0-9_.]*'\(", re.I),
-            # panics_and_aborts: `raise` (exception propagation) and
-            # `abort` (forceful task termination -- the schema's own
-            # baseline definition lists "abort()" as a canonical example).
-            "panics_and_aborts": re.compile(r"\braise\b|\babort\b", re.I),
-            # thread_sleeps: the `delay` statement.
-            "thread_sleeps": re.compile(r"\bdelay\b", re.I),
-            # bitwise_ops: Interfaces' Shift_Left/Shift_Right/Rotate_Left/
-            # Rotate_Right, and `xor` (unlike bare `and`/`or`, `xor` has no
-            # short-circuit "and then"/"or else"-style logical variant in
-            # Ada, so it's unambiguously the bitwise/boolean-parity
-            # operator, not a branch-control keyword).
-            "bitwise_ops": re.compile(r"\bShift_Left\b|\bShift_Right\b|\bRotate_Left\b|\bRotate_Right\b|\bxor\b", re.I),
-            # sync_locks: protected objects/types are Ada's built-in
-            # monitor/mutex primitive. Intentionally overlaps concurrency.
-            "sync_locks": re.compile(r"\bprotected\b|\bSuspension_Object\b", re.I),
-            # immutability_locks: the `constant` keyword.
-            "immutability_locks": re.compile(r"\bconstant\b", re.I),
-            # cleanup: Ada.Unchecked_Deallocation (the generic instantiated
-            # to build a "Free" procedure) and Ada.Finalization/Finalize
-            # (RAII-style teardown). Deliberately NOT paired with
-            # Unchecked_Conversion in safety_bypasses above -- this mirrors
-            # C's free()/dispose(), a normal cleanup action, not a type-
-            # safety bypass.
-            "cleanup": re.compile(r"\bAda\.Unchecked_Deallocation\b|\bFinalize\b|\bAda\.Finalization\b", re.I),
-            # encapsulation: the `private` keyword (package private parts,
-            # private type declarations).
-            "encapsulation": re.compile(r"\bprivate\b", re.I),
-            # listeners: a task entry declaration -- the endpoint waiting to
-            # receive an external call, before it's actually accepted
-            # (events, above).
-            "listeners": re.compile(r"\bentry\b", re.I),
-            # test_skip: no native language/AUnit-standard skip primitive;
-            # falls back to a comment-marker convention.
-            "test_skip": re.compile(r"--[ \t]*(?:SKIP|SKIPPED|DISABLED)\b", re.I),
-            # --- HYBRID DOMAIN SENSORS ---
-            # serialization_parsing: GNATCOLL.JSON and XML/Ada (DOM/SAX).
-            "serialization_parsing": re.compile(r"\bGNATCOLL\.JSON\b|\bDOM\.Core\b|\bInput_Sources\b", re.I),
-            # regex_execution: GNAT.Regpat / GNAT.Regexp, GNAT's native
-            # regex engines.
-            "regex_execution": re.compile(r"\bGNAT\.Regpat\b|\bGNAT\.Regexp\b", re.I),
-            # time_date_logic: Ada.Calendar / Ada.Real_Time.
-            "time_date_logic": re.compile(r"\bAda\.Calendar\b|\bAda\.Real_Time\b|\bClock\b", re.I),
-            # ipc_rpc_bridges: the Distributed Systems Annex (Annex E)
-            # pragmas and PolyORB (Ada's CORBA-like ORB), used in real
-            # distributed defense/aerospace Ada systems.
-            "ipc_rpc_bridges": re.compile(
-                r"\bpragma[ \t]+Remote_Call_Interface\b|\bpragma[ \t]+Remote_Types\b"
-                r"|\bpragma[ \t]+Shared_Passive\b|\bPolyORB\b",
-                re.I,
-            ),
-        },
-    },
-}
-
-# ------------------------------------------------------------------------------
-# DIALECTS (Project-Specific Overrides)
-# ------------------------------------------------------------------------------
-PROJECT_OVERRIDES = {
-    "freebsd-src": {
-        "objective-c": {"extensions": [".mm", ".h"]},
-        "c": {
-            "extensions": [
-                ".c",
-                ".h",
-                ".cl",
-                ".inc",
-                ".y",
-                ".idc",
-                ".cats",
-                ".m",
-                ".dts",
-                ".dtsi",
-            ]
-        },
-    },
-    "wrf-fortran": {
-        "_shield_": {"unban_directories": ["var", "external", "test"]},
-        "fortran": {
-            "concurrency": re.compile(
-                r"\b(COARRAY|SYNC\s+ALL|CRITICAL|MPI_[A-Za-z_]+|wrf_dm[A-Za-z0-9_]*|RSL[A-Za-z0-9_]*)\b|!\$(?:OMP|ACC)\b",
-                re.I,
-            )
-        },
-    },
-    "Apollo-11": {
-        "agc_assembly": {
-            "_meta_purpose_block": re.compile(r"^[ \t]*(?:FUNCTIONAL|PROGRAM)\s+DESCRIPTION\b", re.I),
-            "_meta_purpose_line": re.compile(r"^[ \t]*Purpose[\s:\-]*(.*)", re.I),
-            "_meta_boundary": re.compile(
-                r"^[ \t]*(?:Assembler|Filename|Pages|Website|Mod history|Copyright|Reference|PROGRAM NAME)[\s:\-]+",
-                re.I,
-            ),
-        }
-    },
-    "cpython": {
-        "_shield_": {
-            "exclude_paths": ["Lib/pydoc_data/topics.py", "configure"],
-            "exclude_dirs": ["Modules/clinic"],
-        }
-    },
-    "AppFlowy": {
-        "_shield_": {
-            "exclude_dirs": ["scripts", "integration_test"],
-            "exclude_paths": ["install.sh"],
-        }
-    },
-    "ansible": {"_shield_": {"exclude_dirs": [".azure-pipelines", ".github"]}},
-    "bugzilla": {
-        "html": {
-            "extensions": [
-                ".html",
-                ".htm",
-                ".xhtml",
-                ".cshtml",
-                ".vue",
-                ".svelte",
-                ".astro",
-                ".ejs",
-                ".hbs",
-                ".twig",
-                ".erb",
-                ".tmpl",
-            ]
-        }
-    },
-    "bun": {"_shield_": {"exclude_dirs": ["scripts"]}},
-    "curl": {
-        "plaintext": {
-            "extensions": [
-                ".txt",
-                ".text",
-                ".log",
-                ".out",
-                ".err",
-                ".nfo",
-                ".1",
-                ".3",
-                ".d",
-            ]
-        }
-    },
-    "discourse": {
-        "_shield_": {"exclude_paths": ["config/unicorn_launcher", "pnpm-lock.yaml", "yarn.lock"]},
-        "javascript": {"extensions": [".js", ".jsx", ".mjs", ".cjs", ".gjs"]},
-    },
-    "elasticsearch": {"plaintext": {"extensions": [".txt", ".text", ".log", ".json", ".yaml", ".yml"]}},
-    "exiftool": {"plaintext": {"extensions": [".txt", ".text", ".out", ".args", ".fmt", ".xmp"]}},
-    "express": {"html": {"extensions": [".html", ".htm", ".ejs", ".tmpl"]}},
-    "fieldtrip": {"_shield_": {"exclude_dirs": ["external"]}},
-    "jenkins": {"_shield_": {"exclude_paths": ["translation-tool.pl", "core/report-l10n.rb"]}},
-    "redis": {"_shield_": {"exclude_dirs": ["deps/lua", "deps/jemalloc", "deps/hiredis"]}},
-}
diff --git a/gitgalaxy/standards/language_standards/__init__.py b/gitgalaxy/standards/language_standards/__init__.py
new file mode 100644
index 000000000..e93fc92cc
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/__init__.py
@@ -0,0 +1,204 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+# galaxyscope:ignore sec_hardcoded_secrets, secrets_risk
+
+"""
+language_standards.py
+Phase 2 & 3: The Lexical Registry & Syntax Dictionaries.
+
+This file contains the compiled regular expressions, mechanical delimiters,
+and language-specific rules used to physically slice, parse, and identify
+source code across the repository.
+
+## Tree-sitter Accuracy Audit Summary
+This data is automatically generated by `tests/tools/tree_sitter_accuracy_audit.py --summary-table`
+from the committed `tests/tree_sitter_accuracy_baseline_<lang>.json` files -- do not hand-edit the
+table below, regenerate it instead (a stale table fails the tree-sitter-accuracy-audit CI check).
+The script analyzes the GitGalaxy regex engine's performance against the empirical AST
+ground truth provided by `tree_sitter_language_pack`, using the `language-crucible` corpus.
+Recall is calculated as (found / real). Precision is calculated as (found / (found + extra)).
+A language only appears once it has a committed baseline -- see docs/self_scan/tree_sitter_accuracy_history.csv
+for the same metrics tracked over time across pushes to main.
+
+<!-- TREE_SITTER_ACCURACY_TABLE:BEGIN -->
+| Language | Func Recall | Func Precision | Class Recall | Class Precision |
+| -------- | ----------- | -------------- | ------------ | --------------- |
+| Apex | 100.0% | 100.0% | 100.0% | 100.0% |
+| C | 100.0% | 99.5% | 100.0% | 100.0% |
+| Cpp | 100.0% | 100.0% | 100.0% | 100.0% |
+| Csharp | 100.0% | 100.0% | 100.0% | 100.0% |
+| Css | 100.0% | 100.0% | N/A | N/A |
+| Dart | 100.0% | 100.0% | 100.0% | 100.0% |
+| Fortran | 100.0% | 100.0% | 100.0% | 100.0% |
+| Go | 100.0% | 100.0% | 100.0% | 100.0% |
+| Groovy | N/A | 0.0% | N/A | N/A |
+| Haskell | 100.0% | 99.3% | 100.0% | 100.0% |
+| Html | 100.0% | 100.0% | N/A | N/A |
+| Java | 100.0% | 100.0% | 100.0% | 100.0% |
+| Javascript | 100.0% | 98.0% | 100.0% | 100.0% |
+| Kotlin | 100.0% | 100.0% | 100.0% | 100.0% |
+| Lua | 100.0% | 100.0% | N/A | 0.0% |
+| Makefile | 100.0% | 100.0% | N/A | N/A |
+| Matlab | 100.0% | 100.0% | N/A | N/A |
+| Objective-C | 100.0% | 99.4% | 100.0% | 100.0% |
+| Perl | 100.0% | 100.0% | 100.0% | 100.0% |
+| Php | 100.0% | 99.9% | 100.0% | 100.0% |
+| Powershell | 100.0% | 100.0% | 100.0% | 100.0% |
+| Python | 100.0% | 99.6% | 100.0% | 100.0% |
+| Ruby | 100.0% | 100.0% | 100.0% | 100.0% |
+| Rust | 100.0% | 100.0% | 100.0% | 100.0% |
+| Scala | 100.0% | 100.0% | 100.0% | 100.0% |
+| Shell | 99.8% | 97.0% | N/A | N/A |
+| Solidity | 100.0% | 94.3% | 100.0% | 100.0% |
+| Swift | 100.0% | 99.2% | 100.0% | 100.0% |
+| Tcl | 100.0% | 99.1% | N/A | N/A |
+| Typescript | 100.0% | 100.0% | 100.0% | 100.0% |
+| Zig | 100.0% | 100.0% | 100.0% | 100.0% |
+<!-- TREE_SITTER_ACCURACY_TABLE:END -->
+"""
+
+from typing import Any
+
+from ._lens_config import LENS_CONFIG, LensConfig
+from ._overrides import PROJECT_OVERRIDES
+from ._prism_config import PRISM_CONFIG, PrismConfigSchema
+from ._shared_patterns import HTML_NONEXECUTABLE_SCRIPT_TAG
+from .languages import abap as _abap
+from .languages import ada as _ada
+from .languages import agc_assembly as _agc_assembly
+from .languages import apex as _apex
+from .languages import assembly as _assembly
+from .languages import batch as _batch
+from .languages import blp as _blp
+from .languages import c as _c
+from .languages import cobol as _cobol
+from .languages import cpp as _cpp
+from .languages import csharp as _csharp
+from .languages import css as _css
+from .languages import csv as _csv
+from .languages import dart as _dart
+from .languages import dockerfile as _dockerfile
+from .languages import embedded_python as _embedded_python
+from .languages import fortran as _fortran
+from .languages import glsl as _glsl
+from .languages import go as _go
+from .languages import groovy as _groovy
+from .languages import haskell as _haskell
+from .languages import hlo as _hlo
+from .languages import html as _html
+from .languages import java as _java
+from .languages import javascript as _javascript
+from .languages import jcl as _jcl
+from .languages import json as _json
+from .languages import kotlin as _kotlin
+from .languages import livecode as _livecode
+from .languages import lua as _lua
+from .languages import m4 as _m4
+from .languages import makefile as _makefile
+from .languages import markdown as _markdown
+from .languages import matlab as _matlab
+from .languages import mlir as _mlir
+from .languages import nix as _nix
+from .languages import objectivec as _objectivec
+from .languages import pbtxt as _pbtxt
+from .languages import perl as _perl
+from .languages import php as _php
+from .languages import plaintext as _plaintext
+from .languages import powershell as _powershell
+from .languages import proto as _proto
+from .languages import python as _python
+from .languages import ruby as _ruby
+from .languages import rust as _rust
+from .languages import scala as _scala
+from .languages import scheme as _scheme
+from .languages import shell as _shell
+from .languages import solidity as _solidity
+from .languages import sqlite as _sqlite
+from .languages import swift as _swift
+from .languages import tcl as _tcl
+from .languages import td as _td
+from .languages import typescript as _typescript
+from .languages import xml as _xml
+from .languages import yacc as _yacc
+from .languages import yaml as _yaml
+from .languages import zig as _zig
+
+__all__ = [
+    "HTML_NONEXECUTABLE_SCRIPT_TAG",
+    "LANGUAGE_DEFINITIONS",
+    "LENS_CONFIG",
+    "PRISM_CONFIG",
+    "PROJECT_OVERRIDES",
+    "LensConfig",
+    "PrismConfigSchema",
+]
+
+LANGUAGE_DEFINITIONS: dict[str, Any] = {
+    "python": _python.DEFINITION,
+    "javascript": _javascript.DEFINITION,
+    "typescript": _typescript.DEFINITION,
+    "java": _java.DEFINITION,
+    "csharp": _csharp.DEFINITION,
+    "go": _go.DEFINITION,
+    "rust": _rust.DEFINITION,
+    "cpp": _cpp.DEFINITION,
+    "c": _c.DEFINITION,
+    "php": _php.DEFINITION,
+    "powershell": _powershell.DEFINITION,
+    "shell": _shell.DEFINITION,
+    "ruby": _ruby.DEFINITION,
+    "swift": _swift.DEFINITION,
+    "kotlin": _kotlin.DEFINITION,
+    "sqlite": _sqlite.DEFINITION,
+    "html": _html.DEFINITION,
+    "css": _css.DEFINITION,
+    "fortran": _fortran.DEFINITION,
+    "assembly": _assembly.DEFINITION,
+    "agc_assembly": _agc_assembly.DEFINITION,
+    "lua": _lua.DEFINITION,
+    "perl": _perl.DEFINITION,
+    "haskell": _haskell.DEFINITION,
+    "embedded_python": _embedded_python.DEFINITION,
+    "cobol": _cobol.DEFINITION,
+    "zig": _zig.DEFINITION,
+    "apex": _apex.DEFINITION,
+    "dart": _dart.DEFINITION,
+    "scala": _scala.DEFINITION,
+    "dockerfile": _dockerfile.DEFINITION,
+    "matlab": _matlab.DEFINITION,
+    "livecode": _livecode.DEFINITION,
+    "solidity": _solidity.DEFINITION,
+    "objective-c": _objectivec.DEFINITION,
+    "makefile": _makefile.DEFINITION,
+    "abap": _abap.DEFINITION,
+    "xml": _xml.DEFINITION,
+    "markdown": _markdown.DEFINITION,
+    "csv": _csv.DEFINITION,
+    "yaml": _yaml.DEFINITION,
+    "pbtxt": _pbtxt.DEFINITION,
+    "yacc": _yacc.DEFINITION,
+    "m4": _m4.DEFINITION,
+    "scheme": _scheme.DEFINITION,
+    "mlir": _mlir.DEFINITION,
+    "proto": _proto.DEFINITION,
+    "hlo": _hlo.DEFINITION,
+    "td": _td.DEFINITION,
+    "plaintext": _plaintext.DEFINITION,
+    "tcl": _tcl.DEFINITION,
+    "groovy": _groovy.DEFINITION,
+    "json": _json.DEFINITION,
+    "glsl": _glsl.DEFINITION,
+    "nix": _nix.DEFINITION,
+    "blp": _blp.DEFINITION,
+    "batch": _batch.DEFINITION,
+    "jcl": _jcl.DEFINITION,
+    "ada": _ada.DEFINITION,
+}
diff --git a/gitgalaxy/standards/language_standards/_lens_config.py b/gitgalaxy/standards/language_standards/_lens_config.py
new file mode 100644
index 000000000..b44480eb8
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/_lens_config.py
@@ -0,0 +1,131 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any, TypedDict
+
+
+class LensConfig(TypedDict):
+    # LENS_CONFIG's mixed set/dict/list values were widening to
+    # Collection[object] under mypy, so every .get()/.items() call on it
+    # throughout language_lens.py errored (#431). HANDSHAKE_REGISTRY's
+    # inner dicts stay Dict[str, Any] rather than their own TypedDict --
+    # "pair" is None for two of the three current entries and a tuple for
+    # the third, and nothing here needs to type-check their contents,
+    # only LENS_CONFIG's own top-level shape.
+    COLLISION_FREQUENCIES: set[str]
+    PROSE_ANCHORS: set[str]
+    DISQUALIFIERS: dict[str, str]
+    HANDSHAKE_REGISTRY: list[dict[str, Any]]
+    THRESHOLDS: dict[str, float]
+
+
+LENS_CONFIG: LensConfig = {
+    "COLLISION_FREQUENCIES": {".inc", ".h", ".py", ".cshtml", ".c", ".y", ".m"},
+    "PROSE_ANCHORS": {
+        "README",
+        "LICENSE",
+        "LICENCE",
+        "CONTRIBUTING",
+        "CHANGELOG",
+        "AUTHORS",
+        "INSTALL",
+        "NOTICE",
+        "COPYING",
+        "TODO",
+        "FAQ",
+        "NOTES",
+        "CREDITS",
+        "HISTORY",
+        "MANIFEST",
+        "FILES",
+        "FILES2",
+        "ACKNOWLEDGEMENTS",
+        "AGREEMENT",
+        "CONTRIBUTORS",
+        "HACKING",
+        "HACKERS",
+        "AUTHOR",
+        "CHANGES",
+        "NEWS",
+        "RELEASE_NOTES",
+        "RELEASENOTES",
+        "UPGRADE",
+        "UPGRADING",
+        "VERSION",
+        "BUGS",
+        "FEATURES",
+        "ARCHITECTURE",
+        "DESIGN",
+        "GUIDE",
+        "USAGE",
+        "TUTORIAL",
+        "DOCS",
+        "CODE_OF_CONDUCT",
+        "SECURITY",
+        "SUPPORT",
+        "COPYRIGHT",
+        "PATENTS",
+        "LEGAL",
+        "THANKS",
+        "OWNERS",
+        "CODEOWNERS",
+        "MAINTAINERS",
+        "POSTAMBLE",
+        "README_BUFRLIB",
+    },
+    "DISQUALIFIERS": {
+        "single_line_only": r"(?:^\s*using\s+namespace\b|^\s*public\s+(?:class|interface)\b|<\?php)",
+        "column_sensitive": r"(?:^\s*(?:import|export)\s+\{|<html\b|<\?php|^\s*namespace\s+\w+)",
+        "c_style_comment": r"(?:<\?php|^\s*IDENTIFICATION\s*DIVISION\.)",
+        "recursive_c_style": r"(?:<\?php|<html\b|^\s*IDENTIFICATION\s*DIVISION\.)",
+        "multi_style_dash": r"(?:^\s*public\s+class\b|<\?php|<html\b)",
+        "embedded_syntax": r"^\s*IDENTIFICATION\s*DIVISION\.",
+    },
+    "HANDSHAKE_REGISTRY": [
+        {
+            "trigger": r"^[ \t]*<script\b",
+            "end": r"</script>",
+            "target": "javascript",
+            "pair": None,
+        },
+        {
+            "trigger": r"^[ \t]*<style\b",
+            "end": r"</style>",
+            "target": "css",
+            "pair": None,
+        },
+        {
+            # #1198: same drift #1183 fixed for <script>/<style> -- this
+            # was still unanchored, so a bare "asm!(" substring anywhere in
+            # a file (e.g. a Python string literal like 'asm!("nop")' in a
+            # Rust structural-signature test fixture) falsely triggered the
+            # embedded-language handshake and misrouted the rest of the
+            # file to assembly's rules. Line-anchoring it like the other
+            # two entries means real inline-asm usage (always its own
+            # statement, optionally indented) still matches while fixture
+            # data describing it as a string does not.
+            "trigger": r"^[ \t]*(?:asm!\s*\(|__asm__)",
+            "end": r"\)",
+            "target": "assembly",
+            "pair": ("(", ")"),
+        },
+    ],
+    "THRESHOLDS": {
+        "INTENSITY_FLOOR": 0.78,
+        "FLOOR_TIER_4": 0.92,
+        "PROSE_CONFIDENCE": 0.95,
+        "MIN_OUTLIER_MARGIN": 1.15,
+        "PROSE_BASELINE_SIGNAL": 3.0,
+        "HANDSHAKE_LOOKAHEAD_LIMIT": 50000,
+        "ECOSYSTEM_DOMINANCE_MIN": 0.70,
+        "TIER_4_MIN_LINES": 100,
+        "TIER_4_OUTLIER_MARGIN": 1.3,
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/_overrides.py b/gitgalaxy/standards/language_standards/_overrides.py
new file mode 100644
index 000000000..fc67c111a
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/_overrides.py
@@ -0,0 +1,107 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+
+PROJECT_OVERRIDES = {
+    "freebsd-src": {
+        "objective-c": {"extensions": [".mm", ".h"]},
+        "c": {
+            "extensions": [
+                ".c",
+                ".h",
+                ".cl",
+                ".inc",
+                ".y",
+                ".idc",
+                ".cats",
+                ".m",
+                ".dts",
+                ".dtsi",
+            ]
+        },
+    },
+    "wrf-fortran": {
+        "_shield_": {"unban_directories": ["var", "external", "test"]},
+        "fortran": {
+            "concurrency": re.compile(
+                r"\b(COARRAY|SYNC\s+ALL|CRITICAL|MPI_[A-Za-z_]+|wrf_dm[A-Za-z0-9_]*|RSL[A-Za-z0-9_]*)\b|!\$(?:OMP|ACC)\b",
+                re.I,
+            )
+        },
+    },
+    "Apollo-11": {
+        "agc_assembly": {
+            "_meta_purpose_block": re.compile(r"^[ \t]*(?:FUNCTIONAL|PROGRAM)\s+DESCRIPTION\b", re.I),
+            "_meta_purpose_line": re.compile(r"^[ \t]*Purpose[\s:\-]*(.*)", re.I),
+            "_meta_boundary": re.compile(
+                r"^[ \t]*(?:Assembler|Filename|Pages|Website|Mod history|Copyright|Reference|PROGRAM NAME)[\s:\-]+",
+                re.I,
+            ),
+        }
+    },
+    "cpython": {
+        "_shield_": {
+            "exclude_paths": ["Lib/pydoc_data/topics.py", "configure"],
+            "exclude_dirs": ["Modules/clinic"],
+        }
+    },
+    "AppFlowy": {
+        "_shield_": {
+            "exclude_dirs": ["scripts", "integration_test"],
+            "exclude_paths": ["install.sh"],
+        }
+    },
+    "ansible": {"_shield_": {"exclude_dirs": [".azure-pipelines", ".github"]}},
+    "bugzilla": {
+        "html": {
+            "extensions": [
+                ".html",
+                ".htm",
+                ".xhtml",
+                ".cshtml",
+                ".vue",
+                ".svelte",
+                ".astro",
+                ".ejs",
+                ".hbs",
+                ".twig",
+                ".erb",
+                ".tmpl",
+            ]
+        }
+    },
+    "bun": {"_shield_": {"exclude_dirs": ["scripts"]}},
+    "curl": {
+        "plaintext": {
+            "extensions": [
+                ".txt",
+                ".text",
+                ".log",
+                ".out",
+                ".err",
+                ".nfo",
+                ".1",
+                ".3",
+                ".d",
+            ]
+        }
+    },
+    "discourse": {
+        "_shield_": {"exclude_paths": ["config/unicorn_launcher", "pnpm-lock.yaml", "yarn.lock"]},
+        "javascript": {"extensions": [".js", ".jsx", ".mjs", ".cjs", ".gjs"]},
+    },
+    "elasticsearch": {"plaintext": {"extensions": [".txt", ".text", ".log", ".json", ".yaml", ".yml"]}},
+    "exiftool": {"plaintext": {"extensions": [".txt", ".text", ".out", ".args", ".fmt", ".xmp"]}},
+    "express": {"html": {"extensions": [".html", ".htm", ".ejs", ".tmpl"]}},
+    "fieldtrip": {"_shield_": {"exclude_dirs": ["external"]}},
+    "jenkins": {"_shield_": {"exclude_paths": ["translation-tool.pl", "core/report-l10n.rb"]}},
+    "redis": {"_shield_": {"exclude_dirs": ["deps/lua", "deps/jemalloc", "deps/hiredis"]}},
+}
diff --git a/gitgalaxy/standards/language_standards/_prism_config.py b/gitgalaxy/standards/language_standards/_prism_config.py
new file mode 100644
index 000000000..8c5650915
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/_prism_config.py
@@ -0,0 +1,31 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import TypedDict
+
+
+class PrismConfigSchema(TypedDict):
+    # Same widening problem as LensConfig above: the mixed str/set/dict
+    # values were collapsing to Collection[str] under mypy, breaking every
+    # .get()/re.compile() call on PRISM_CONFIG throughout prism.py.
+    SHIELD_PATTERN: str
+    PYTHON_DOC_PATTERN: str
+    PHP_HEREDOC_PATTERN: str
+    POSITIONAL_ANCHORS: set[str]
+    THRESHOLDS: dict[str, int]
+
+
+PRISM_CONFIG: PrismConfigSchema = {
+    "SHIELD_PATTERN": r'((?<!\\)"(?:\\.|[^"\\])*"|(?<!\\)\'(?:\\.|[^\'\\])*\'|(?<!\\)`(?:\\.|[^`\\])*`)',
+    "PYTHON_DOC_PATTERN": r'(?m)^\s*(?:"""[\s\S]*?"""|\'\'\'[\s\S]*?\'\'\')',
+    "PHP_HEREDOC_PATTERN": r'<<<[ \t]*([\'"]?)([a-zA-Z_]\w*)\1[ \t]*\r?\n[\s\S]*?\n[ \t]*\2;?',
+    "POSITIONAL_ANCHORS": {"*", "C", "c", "/", "!"},
+    "THRESHOLDS": {"NESTED_PEEL_LIMIT": 500},
+}
diff --git a/gitgalaxy/standards/language_standards/_shared_patterns.py b/gitgalaxy/standards/language_standards/_shared_patterns.py
new file mode 100644
index 000000000..7b232b694
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/_shared_patterns.py
@@ -0,0 +1,120 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+
+# ------------------------------------------------------------------------------
+# 3. UNIVERSAL DOMAIN SENSORS (Applied to ALL languages)
+# Consumed by: detector.py (LogicSplicer)
+# ------------------------------------------------------------------------------
+# ==============================================================================
+# GLOBAL LOCALIZATION DICTIONARIES (Cross-Cultural Tech Debt)
+# Consumed by: All languages in LANGUAGE_DEFINITIONS
+# ==============================================================================
+
+# --- 1. PLANNED DEBT (TODOs, WIPs, Promises) ---
+_SPACED_PLANNED = (
+    r"\b("
+    r"TODO|WIP|STUB|IMPLEMENT|@todo|"  # English
+    r"POR HACER|A IMPLEMENTAR|PENDIENTE|"  # Spanish
+    r"A FAZER|PENDENTE|TAREFA|"  # Portuguese
+    r"A FAIRE|A IMPLEMENTER|EN ATTENTE|"  # French
+    r"ZU ERLEDIGEN|MACHEN|OFFEN|IMPLEMENTIEREN|"  # German
+    r"СДЕЛАТЬ|ДОДЕЛАТЬ|ПЛАН|РЕАЛИЗОВАТЬ|"  # Russian
+    r"DA FARE|DA IMPLEMENTARE|"  # Italian
+    r"DO ZROBIENIA|DO POPRAWY|"  # Polish
+    r"TE DOEN|NOG DOEN|"  # Dutch
+    r"HARUS DIBUAT|UNTUK DIBUAT"  # Indonesian
+    r")\b"
+)
+_DENSE_PLANNED = (
+    r"(?:"
+    r"待办|未完成|将来做|需要优化|暂未实现|"  # Mandarin
+    r"後でやる|未実装|実装予定|"  # Japanese
+    r"할일|할 일|미구현|나중에|"  # Korean
+    r"करना है|बाद में|"  # Hindi (Devanagari)
+    r"للقيام به|لاحقا|يجب عمله"  # Arabic
+    r")"
+)
+GLOBAL_PLANNED_DEBT = re.compile(f"{_SPACED_PLANNED}|{_DENSE_PLANNED}", re.I)
+
+
+# --- 2. FRAGILE DEBT (Hacks, FIXMEs, Code Smells) ---
+_SPACED_FRAGILE = (
+    r"\b("
+    r"HACK|FIXME|XXX|BUG|KLUDGE|UGLY|WTF|"  # English
+    r"PARCHE|ARREGLAR|TRUCO|FEO|CHAPUZA|"  # Spanish (Chapuza = Shoddy fix)
+    r"GAMBIARRA|CONSERTAR|REPARAR|FEIO|REMENDO|"  # Portuguese (Gambiarra = Duct-tape hack)
+    r"BIDOUILLE|A CORRIGER|REPARER|MOCHE|"  # French (Bidouille = Hack)
+    r"KAPUTT|REPARIEREN|PFUSCH|MÜLL|"  # German (Pfusch = Botch job)
+    r"КОСТЫЛЬ|ИСПРАВИТЬ|УБРАТЬ|ФИКС|ГРЯЗНО|"  # Russian (Kostyl = Crutch/Workaround)
+    r"SISTEMARE|PEZZA|ORRIBILE|DA FIXARE|"  # Italian (Pezza = Patch)
+    r"OBEJŚCIE|TYMCZASOWE|NAPRAWIĆ|"  # Polish (Obejście = Workaround)
+    r"FIXEN|TIJDELIJK|LELIJK|OPLOSSING|"  # Dutch
+    r"PERBAIKI|SEMENTARA|JELEK"  # Indonesian
+    r")\b"
+)
+_DENSE_FRAGILE = (
+    r"(?:"
+    r"修复|临时代码|黑客做法|丑陋|坑|写死|硬编码|"  # Mandarin
+    r"修正|ハック|一時的|汚い|やばい|"  # Japanese
+    r"수정|임시|꼼수|버그|"  # Korean
+    r"जुगाड़|ठीक करना|अस्थाई|"  # Hindi (Jugaad = Hack/Workaround)
+    r"مؤقت|إصلاح|ترقيع"  # Arabic (Tarqie = Patching/Hacking)
+    r")"
+)
+GLOBAL_FRAGILE_DEBT = re.compile(f"{_SPACED_FRAGILE}|{_DENSE_FRAGILE}", re.I)
+
+
+# --- 3. AI / LLM & ML SDK DETECTION (split by SIGNAL_SCHEMA category) ---
+# Mirrors GLOBAL_PLANNED_DEBT/GLOBAL_FRAGILE_DEBT: compiled once here and
+# referenced identically by every language block that wants it, instead of
+# being hand-pasted per-language (see #322).
+_IMPORT_WRAPPER = r"\b(?:import|require|from)\b.*?(?:{names})\b"
+
+_LLM_API_NAMES = r"openai|anthropic"
+_LLM_ORCHESTRATOR_NAMES = r"langchain|llama_index"
+_LLM_VECTOR_STORE_NAMES = r"chromadb|pinecone"
+_ML_TRADITIONAL_NAMES = r"sklearn"
+_DL_FRAMEWORKS_NAMES = r"tensorflow|torch|keras"
+
+GLOBAL_LLM_API = re.compile(_IMPORT_WRAPPER.format(names=_LLM_API_NAMES))
+GLOBAL_LLM_ORCHESTRATOR = re.compile(_IMPORT_WRAPPER.format(names=_LLM_ORCHESTRATOR_NAMES))
+GLOBAL_LLM_VECTOR_STORE = re.compile(_IMPORT_WRAPPER.format(names=_LLM_VECTOR_STORE_NAMES))
+GLOBAL_ML_TRADITIONAL = re.compile(_IMPORT_WRAPPER.format(names=_ML_TRADITIONAL_NAMES))
+GLOBAL_DL_FRAMEWORKS = re.compile(_IMPORT_WRAPPER.format(names=_DL_FRAMEWORKS_NAMES))
+
+# A `<script>` whose `type` attribute is any of these carries NO executable logic
+# -- a browser treats every `type` outside the JS-MIME / `module` / bare set as an
+# inert data block and never runs it. Real corpus cases: reveal.js
+# `text/template` slide samples (literal `function` text shown as a code listing),
+# `x-shader/x-vertex` / `x-shader/x-fragment` GLSL sources, `math/tex` (MathJax),
+# JSON `application/ld+json`. GitGalaxy's polyglot detector must not descend into
+# them and its html `func_start` must not anchor a function-analog on them (#2492).
+# The list is the denylist complement of tree_sitter_accuracy_audit.py's own
+# `_EXECUTABLE_SCRIPT_TYPES` allowlist -- keep the two in sync.
+_HTML_NONEXECUTABLE_SCRIPT_TYPES = (
+    r"text/template|text/x-template|text/x-handlebars-template|text/html|"
+    r"application/json|application/ld\+json|x-shader/x-[a-z]+|math/tex"
+)
+# Matches a `<script ...>` OPEN TAG carrying a non-executable `type`. Used by
+# detector.py's Mode B slicer to drop such a match after `_build_brace_safe_stream`
+# has blanked the quoted `type` value out of the stream `func_start` is matched
+# against (so `func_start`'s own negative lookahead below can't see it there).
+# `[^>]*` stays inside the tag (Rule 5 negated class); one unbounded quantifier.
+HTML_NONEXECUTABLE_SCRIPT_TAG = re.compile(
+    r"<script\b[^>]*?\btype[ \t\n\r\f]*=[ \t\n\r\f]*[\"']?(?:" + _HTML_NONEXECUTABLE_SCRIPT_TYPES + r")",
+    re.IGNORECASE,
+)
+
+# ------------------------------------------------------------------------------
+# 4. LANGUAGE DEFINITIONS (The Structural Signature Matrix)
+# Consumed by: detector.py, language_lens.py, prism.py
+# ------------------------------------------------------------------------------
diff --git a/gitgalaxy/standards/language_standards/languages/__init__.py b/gitgalaxy/standards/language_standards/languages/__init__.py
new file mode 100644
index 000000000..7b5b433e0
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/__init__.py
@@ -0,0 +1,9 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
diff --git a/gitgalaxy/standards/language_standards/languages/abap.py b/gitgalaxy/standards/language_standards/languages/abap.py
new file mode 100644
index 000000000..79d4017c1
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/abap.py
@@ -0,0 +1,260 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "ABAP 2025 (ABAP Cloud / RAP / Modern 7.5x+ Syntax)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Advanced Business Application Programming sources and modern Core Data Services.
+    "extensions": [".abap", ".asddls"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: ABAP is executed within the SAP environment; no extensionless exact configurations exist.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: SAP deployment artifacts acting as disambiguation anchors.
+    "discriminators": [".abap", "package.devc.xml", ".apc"],
+    # EXECUTION SIGNATURES: Executed exclusively within the SAP NetWeaver/ABAP platform; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 7 (The Positional Ancients)
+    # Rationale: Strictly fixed-format legacy constraints. The engine must monitor Column 1
+    # for an asterisk '*' to identify line-level Commented / Non-Executable Text, while allowing '"' for inline.
+    # ABAP code uses " as inline comment, requiring a specialized positional family
+    "lexical_family": "positional_abap",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes modern COND/SWITCH expressions.
+        "branch": re.compile(
+            r"^[ \t]*(IF|ELSE|ELSEIF|CASE|WHEN|WHILE|DO|LOOP\s+AT|TRY|CATCH|CLEANUP|CHECK|EXIT|CONTINUE|RETURN|COND|SWITCH)\b",
+            re.I | re.M,
+        ),
+        # 2. args: Parameters / Coupling. Captures explicit parameter binding keywords.
+        # BUG FIX (#1917, args regex correctness): two independent issues found while
+        # investigating the tri-comparison chart's per-function args count.
+        #   1. The trailing identifier had no `!?` -- ABAP's classic parameter-name
+        #      escape prefix (`!iv_url TYPE string`, used to avoid a keyword collision,
+        #      extremely common in real code) isn't in `[a-zA-Z_]`, so a clause whose
+        #      FIRST declared parameter uses it failed to match AT ALL, silently making
+        #      the whole clause invisible to this signal (confirmed: `IMPORTING
+        #      !ii_custom_mapping TYPE ...` in abapGit's zcl_abapgit_ajson.clas.abap).
+        #   2. `(?:VALUE\s*\([^)]*\)\s+)?[a-zA-Z_][a-zA-Z0-9_-]*` treated VALUE(...) as
+        #      an OPTIONAL PREFIX before a still-mandatory trailing identifier, instead
+        #      of as its own complete alternative -- so `RETURNING VALUE(ro_instance)
+        #      TYPE ...` matched through to the literal word "TYPE", mis-capturing it as
+        #      if it were a second parameter name. Restructured as a real alternation
+        #      (VALUE(...) OR a bare identifier, never both in sequence) so the match
+        #      ends where the real parameter reference ends.
+        "args": re.compile(
+            r"\b(IMPORTING|EXPORTING|CHANGING|RETURNING|RECEIVING|EXCEPTIONS)\s+(?!TYPE\b)"
+            r"(?:VALUE\s*\([^)]*\)|!?[a-zA-Z_][a-zA-Z0-9_-]*)",
+            re.I,
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and constants.
+        "structural_boundaries": re.compile(
+            r"^[ \t]*(DATA|TYPES|FIELD-SYMBOLS|CLASS|INTERFACE|METHOD|FORM|FUNCTION|MODULE|REPORT|PROGRAM|IMPORT|EXPORT)(?![(-])\b",
+            re.I | re.M,
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic. EXCLUDES structural headers.
+        "func_start": re.compile(
+            r"^[ \t]*(?!(?:CLASS|INTERFACE|DATA|TYPES|CONSTANTS)\b)(?:METHOD|FORM|FUNCTION|MODULE)\s+([a-zA-Z0-9_~-]+)(?=[ \t\n\.]|$)",
+            re.I | re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines OO boundaries and RAP CDS Entities.
+        # BUG FIX: `VIEW` and `ENTITY` were mutually-exclusive alternatives,
+        # but the standard modern RAP syntax is `DEFINE VIEW ENTITY <name>`
+        # (both words together, exactly what this dict's target_version
+        # claims to cover) -- so the regex matched `VIEW` as the keyword
+        # and then captured the literal word `ENTITY` as if it were the
+        # entity name. `ENTITY` is now optional after `VIEW`/`PROJECTION
+        # VIEW` instead of a same-tier alternative.
+        "class_start": re.compile(
+            r"^[ \t]*(?:CLASS|INTERFACE)\s+([a-zA-Z0-9_-]+)(?=[ \t]+DEFINITION|[ \t\n\.]|$)"
+            r"|^[ \t]*DEFINE\s+(?:ROOT\s+)?(?:(?:VIEW|PROJECTION\s+VIEW)(?:\s+ENTITY)?|(?:ABSTRACT\s+|CUSTOM\s+)?ENTITY|BEHAVIOR\s+FOR)\s+([a-zA-Z0-9_-]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Binding checks and authorization boundaries.
+        "safety": re.compile(
+            r"\b(TRY|CATCH|CLEANUP|ASSERT|AUTHORITY-CHECK|IS\s+BOUND|IS\s+ASSIGNED|IS\s+NOT\s+INITIAL|FINAL|READ-ONLY)\b",
+            re.I,
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing safety (casting/unchecked generics).
+        "safety_bypasses": re.compile(
+            r"\b(UNASSIGNED|TYPE\s+ANY|TYPE\s+REF\s+TO\s+DATA|IGNORE\s+ERRORS)\b|ASSIGN\s+[^\n;]+\s+TO\s+<[^>]+>\s+CASTING",
+            re.I,
+        ),
+        # 8. danger: High-Risk Execution. Raw SQL/Kernel bypasses and mass deletion.
+        "high_risk_execution": re.compile(
+            r"\b(SYSTEM-CALL|EXEC\s+SQL|DELETE\s+FROM|TRUNCATE|GENERATE\s+SUBROUTINE\s+POOL)\b",
+            re.I,
+        ),
+        # 9. io: I/O & Network Boundaries. Database interaction and File datasets.
+        "io": re.compile(
+            r"^[ \t]*(SELECT|INSERT\s+(?:INTO\b)?|UPDATE\b|MODIFY\b|OPEN\s+DATASET|TRANSFER|READ\s+DATASET|CLOSE\s+DATASET|CL_HTTP_CLIENT|CL_WEB_HTTP_CLIENT)\b",
+            re.I | re.M,
+        ),
+        # 10. api: Public Surface Area. Exposed RFCs, OData publishing, and Public sections.
+        # BUG FIX: `@OData\.publish` is `@`-prefixed -- the shared
+        # leading \b could only fire when a word char immediately
+        # preceded the `@`, never true for how this annotation is
+        # actually written. Never matched at all.
+        "api": re.compile(
+            r"\b(?:REMOTE\s+FUNCTION|DEFINE\s+VIEW|DEFINE\s+SERVICE|EXPOSED|PUBLIC\s+SECTION)\b|@OData\.publish",
+            re.I,
+        ),
+        # 11. flux: State Mutation. State mutation (The core of ABAP data manipulation).
+        "state_mutation": re.compile(
+            r"^[ \t]*(MOVE|MOVE-CORRESPONDING|APPEND|MODIFY\s+TABLE|DELETE\s+TABLE)\b|^[ \t]*INSERT\s+[^\n;]+\s+INTO\s+TABLE",
+            re.I | re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural logic (supports * and ").
+        "dead_code": re.compile(
+            r'^[ \t]*\*[ \t]*(?:DATA|METHOD|IF|SELECT|WRITE)\b|"[ \t]*(?:DATA|METHOD|IF|SELECT|WRITE)\b',
+            re.I | re.M,
+        ),
+        # 13. doc: Structured Documentation. ABAP Doc annotations and metadata headers.
+        # BUG FIX: the trailing `\b` sat right after a literal `:` (Rule 9,
+        # mirror case). Real headers are written as "AUTHOR: Jane Doe" --
+        # the space after `:` means both sides of that position are
+        # non-word, so `\b` never fired and the realistic form never
+        # matched. `:` is already self-delimiting; `\b` dropped.
+        "doc": re.compile(
+            r'^"!\s*@(?:parameter|raising|return)|\b(?:AUTHOR|DESCRIPTION|PURPOSE|REMARKS):',
+            re.I | re.M,
+        ),
+        # 14. test: Testing & Assertions. ABAP Unit markers and test-injection.
+        "test": re.compile(
+            r"\b(FOR\s+TESTING|RISK\s+LEVEL|DURATION\s+SHORT|CL_ABAP_UNIT_ASSERT|ZCL_ABAP_UNIT)\b",
+            re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Async RFCs and background tasks.
+        # BUG FIX (Rule 9, mirror case): ENQUEUE_/DEQUEUE_ end in `_`, a
+        # word character, and real function-module names always continue
+        # with more word characters right after (ENQUEUE_FOO) -- so the
+        # shared trailing `\b` could never fire for them (both sides of
+        # that position are word chars). Pulled out of the group with the
+        # trailing `\b` dropped, since the prefix is already unambiguous.
+        "concurrency": re.compile(
+            r"\b(?:STARTING\s+NEW\s+TASK|WAIT\s+UP\s+TO)\b|\b(?:ENQUEUE_|DEQUEUE_)"
+            r"|CALL\s+FUNCTION\s+[^\n;]+\s+IN\s+BACKGROUND\s+TASK",
+            re.I,
+        ),
+        # 16. ui_framework: UI / View Components. Screen programming and HTML viewers.
+        "ui_framework": re.compile(
+            r"\b(CALL\s+SCREEN|SELECTION-SCREEN|PARAMETERS|WDDOMODIFYVIEW|CL_GUI_HTML_VIEWER|CL_SALV_TABLE)\b",
+            re.I,
+        ),
+        # 17. closures: Closures / Anonymous Functions. (ABAP lacks anonymous closures).
+        "closures": None,
+        # 18. globals: Global / Shared State. Global program data and the system registry.
+        "globals": re.compile(r"\b(TABLES|STATICS|CLASS-DATA|SY-[A-Z0-9_]+)\b", re.I),
+        # 19. decorators: Decorators / Annotations. CDS and class annotations.
+        "decorators": re.compile(r"@[A-Za-z0-9_.]+(?:\([^)]*\))?", re.I),
+        # 20. generics: Generics / Type Parameters. Generic data references and field symbols.
+        "generics": re.compile(
+            r"\b(TYPE\s+ANY(?:\s+TABLE)?|TYPE\s+INDEX\s+TABLE|TYPE\s+STANDARD\s+TABLE|TYPE\s+REF\s+TO\s+DATA)\b",
+            re.I,
+        ),
+        # 21. comprehensions: Iterators / Comprehensions. Modern constructor expressions.
+        "comprehensions": re.compile(
+            r"\b(?:VALUE|REDUCE|FILTER|CORRESPONDING|NEW)\s+#?\s*\(|\bFOR\s+[a-zA-Z_]\w*\s+IN\b",
+            re.I,
+        ),
+        # 22. scientific: Numerical / Compute Libraries. Standard numerical built-ins.
+        "scientific": re.compile(
+            r"\b(ABS|SQRT|LOG|EXP|SIN|COS|TAN|ROUND|CEIL|FLOOR|DECFLOAT16|DECFLOAT34)\b",
+            re.I,
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. RTTS and Dynamic assignment logic.
+        "reflection_metaprogramming": re.compile(
+            r"\b(CL_ABAP_TYPEDESCR|CL_ABAP_CLASSDESCR|ASSIGN\s+\([a-zA-Z0-9_-]+\)\s+TO|GENERATE\s+SUBROUTINE\s+POOL)\b",
+            re.I,
+        ),
+        # 24. import: Dependency Inclusions. Includes and type pools.
+        "import": re.compile(r"\b(INCLUDE|TYPE-POOLS)\b", re.I),
+        "_dependency_capture": re.compile(r"^[ \t]*(?:INCLUDE|TYPE-POOLS)[ \t\n]+([A-Za-z0-9_/]+)", re.I | re.M),
+        # 25. ownership: Authorship indicators.
+        "ownership": re.compile(
+            r"(?:AUTHOR|CREATED\s+BY|MAINTAINER|Tim Berners-Lee):\s+([^\n]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags and architecture docs.
+        "spec_exposure": re.compile(
+            r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]|\b(?:WorldWideWeb|RFC|W3C|CERN|TBL|ENQUIRE)\b",
+            re.I,
+        ),
+        # 31. ssr_boundaries: View Horizon. ICF and BSP request handlers.
+        "ssr_boundaries": re.compile(
+            r"\b(IF_HTTP_EXTENSION~HANDLE_REQUEST|CL_BSP_CONTEXT|CL_BSP_RUNTIME|IF_HTTP_REQUEST|IF_HTTP_RESPONSE|HTML_STRING)\b",
+            re.I,
+        ),
+        # 32. events: Pub/Sub Network. Native OO event architecture.
+        "events": re.compile(r"\b(RAISE\s+EVENT|SET\s+HANDLER)\b|FOR\s+EVENT\s+[^\n;]+\s+OF", re.I),
+        # 33. dependency_injection: Inversion of Control. BAdIs and Test Doubles.
+        "dependency_injection": re.compile(r"\b(GET\s+BADI|CALL\s+BADI|CL_BADI_BASE|CL_ABAP_TESTDOUBLE)\b", re.I),
+        # 34. macros: Preprocessor Hooks. ABAP macro definitions.
+        "macros": re.compile(
+            r"^[ \t]*DEFINE\s+[a-zA-Z0-9_-]+\.|^[ \t]*END-OF-DEFINITION\s*\.",
+            re.I | re.M,
+        ),
+        # 35. pointers: Memory Map. Field-Symbols and data references.
+        "pointers": re.compile(r"<[A-Za-z0-9_-]+>|->\*|\b(?:GET\s+REFERENCE\s+OF|REF\s+TO)\b", re.I),
+        # 36. memory_alloc: Manual Memory Management. Heap allocations.
+        "memory_alloc": re.compile(r"\b(CREATE\s+OBJECT|CREATE\s+DATA|FREE|CLEAR)\b", re.I),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics.
+        "telemetry": re.compile(r"\b(BAL_LOG_CREATE|BAL_DB_SAVE|CL_BALI_LOG|CL_BALI_MSG_SETTER)\b", re.I),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"^[ \t]*(WRITE)\b", re.I | re.M),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit casting and conversions.
+        "explicit_casts": re.compile(
+            r"\b(?:CAST|CONV)\s*[a-zA-Z0-9_~-]*\s*#?\s*\(|ASSIGNING\s+<[^>]+>\s+CASTING",
+            re.I,
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution or error messages.
+        "panics_and_aborts": re.compile(
+            r'\b(RAISE\s+EXCEPTION|MESSAGE\s+[^\n;]+\s+TYPE\s+[\'"][EX][\'"]|LEAVE\s+PROGRAM)\b',
+            re.I,
+        ),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) Thread sleep.
+        "thread_sleeps": re.compile(r"\bWAIT\s+UP\s+TO\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"\b(BIT-AND|BIT-OR|BIT-XOR|BIT-NOT)\b", re.I),
+        # 44. sync_locks (Resource Management & Stability)
+        # BUG FIX (Rule 9, mirror case): see the matching fix in
+        # `concurrency` above -- the trailing `\b` right after `_` could
+        # never fire since real function-module names always continue
+        # with more word characters (ENQUEUE_FOO).
+        "sync_locks": re.compile(r"\b(?:ENQUEUE_|DEQUEUE_)", re.I),
+        # 45. immutability_locks (Immutability Constraints) Immutability (constants).
+        "immutability_locks": re.compile(r"\b(CONSTANTS|FINAL|READ-ONLY)\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"^[ \t]*(FREE|CLEAR|CLOSE\s+DATASET)\b", re.I | re.M),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"\b(PRIVATE\s+SECTION|PROTECTED\s+SECTION)\b", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\bFOR\s+EVENT\s+[^\n;]+\s+OF\b", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(IGNORE)\b", re.I),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/ada.py b/gitgalaxy/standards/language_standards/languages/ada.py
new file mode 100644
index 000000000..4cf7cbcec
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/ada.py
@@ -0,0 +1,365 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Ada 2012 / SPARK 2014 (GNAT Pro / GNAT CE)",
+        "last_updated": "2026-08-07",
+        "blueprint_version": "v6.3",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: .ads (package/subprogram specs), .adb
+    # (bodies), and the historic single-extension convention .ada.
+    "extensions": [".adb", ".ads", ".ada"],
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS: GNAT project files (.gpr) are the dominant
+    # Ada build-system anchor (GPRbuild/GNAT Studio), the closest
+    # analogue to a manifest file for disambiguation purposes.
+    "discriminators": [".adb", ".ads", ".gpr"],
+    # EXECUTION SIGNATURES: Ada is compiled; there is no interpreter
+    # shebang convention in real-world use.
+    "shebangs": [],
+    # Rationale (Lexical-family sanity check, how_to_add_a_language.md
+    # Step 4 item 8): issue #76 / epic #75 both label this "hybrid_dash",
+    # but Ada genuinely has no block-comment form at all -- "no native
+    # block comments historically" is stated directly in #76's own
+    # checklist, which contradicts the "hybrid_dash" name it also asks
+    # for. Reusing the existing "line_exclusive" family was also
+    # rejected: that family's shared delimiter list is consumed by a
+    # literal-string family-name check in prism.py, and several of its
+    # existing members (Perl, Assembly) use `--` as a real
+    # operator/decrement -- widening that shared list would silently
+    # truncate real code in unrelated languages (the exact failure mode
+    # #621 already fixed once by narrowing "standard_block"). Registered
+    # a new, properly-wired "line_exclusive_dash" family instead (single
+    # `--` delimiter, no block form) -- see gitgalaxy_config.py's
+    # LEXICAL_FAMILY_HEURISTICS and prism.py's _compile_regex_matrix.
+    "lexical_family": "line_exclusive_dash",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # branch: Ada's short-circuit forms are the two-word "and then"/
+        # "or else" (no && / || symbols exist in Ada).
+        "branch": re.compile(
+            r"\b(?:if|elsif|else|case|when|for|while|loop|exit)\b|\band[ \t]+then\b|\bor[ \t]+else\b",
+            re.I,
+        ),
+        # args: parameter profile following a procedure/function name.
+        # Bounded 3-level nested-paren capture (Rule 11) since default
+        # expressions routinely contain nested calls/aggregates, e.g.
+        # `Y : Integer := Compute(A, (B + C))`.
+        "args": re.compile(
+            r"\b(?:procedure|function)\b[ \t\n]+[A-Za-z_][A-Za-z0-9_]*[ \t\n]*"
+            r"\(((?:[^()]|\((?:[^()]|\([^()]*\))*\))*)\)",
+            re.I,
+        ),
+        # structural_boundaries: procedure/function/begin/end (per #76's
+        # explicit checklist) plus package (Ada's module/namespace
+        # boundary keyword) and return (statement form, distinct from
+        # func_start's own "return TYPE" clause).
+        "structural_boundaries": re.compile(r"\b(?:procedure|function|package|begin|end|return)\b", re.I),
+        # func_start: STRICT EXECUTION ANCHORING (Rule 7) -- only a real
+        # subprogram BODY, not a bare spec-only declaration. Ada's spec
+        # declaration ends `;` right after the profile/return type with
+        # no "is"; a body always has a literal "is" there instead. Must
+        # also exclude "is abstract"/"is null" (null procedures, both
+        # still declarations, not bodies) and "is new" (generic
+        # subprogram instantiation, not a body either). SPARK code
+        # commonly attaches `with Pre => ..., Post => ...` aspect
+        # clauses directly on a body between the profile and "is" --
+        # bounded (not unbounded `.*`) so it can't cross a statement
+        # terminator or blow up on an adversarial payload.
+        "func_start": re.compile(
+            r"\b(?:procedure|function)[ \t\n]+([A-Za-z_][A-Za-z0-9_]*)"
+            r"(?:[ \t\n]*\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))?"
+            r"(?:[ \t\n]+return[ \t\n]+[A-Za-z_][A-Za-z0-9_.]*)?"
+            r"(?:[ \t\n]+with[ \t\n]+[^;{}]{0,300}?)?"
+            r"[ \t\n]*is\b(?![ \t\n]*(?:abstract|null|new)\b)",
+            re.I,
+        ),
+        # class_start: Ada's OOP entity is a *tagged* type, either a root
+        # declaration (`type Foo is tagged record ...`) or a derived/
+        # extended one (`type Dog is new Animal with record ...` --
+        # inheritance is expressed via "is new BASE with", the literal
+        # word "tagged" is NOT repeated on a derived type, so both forms
+        # need their own alternative or the (more common, in an
+        # OOP-heavy codebase) derived form is entirely invisible).
+        "class_start": re.compile(
+            r"\btype[ \t]+([A-Za-z_][A-Za-z0-9_]*)[ \t\n]+is[ \t\n]+"
+            r"(?:(?:abstract[ \t\n]+)?(?:limited[ \t\n]+)?tagged\b"
+            r"|(?:abstract[ \t\n]+)?new[ \t\n]+[A-Za-z_][A-Za-z0-9_.]*[ \t\n]+with\b)",
+            re.I,
+        ),
+        # --- PHASE 2: SAFETY & EXECUTION RISK ---
+        # safety: per #76's explicit ask -- strict-typing range
+        # constraints (`type ... is range`, but also the equally common
+        # `subtype X is Base range Lo .. Hi` form, where "is" and
+        # "range" are NOT adjacent -- matching only "is range" verbatim
+        # would miss the subtype form entirely) and safety-oriented
+        # pragmas/aspects (Assert, Precondition, Postcondition,
+        # Invariant, Predicate) -- deliberately NOT bare "pragma" (Rule
+        # 1: many pragmas, e.g. Pack or Import, have nothing to do with
+        # safety; matching all of them would be keyword-stuffing, not
+        # semantic intent). Also real exception-handling constructs.
+        # (?<!') on "range" excludes the unrelated `Arr'Range` attribute
+        # (array index-range query), which shares the bare word but has
+        # nothing to do with a type's strict-typing constraint.
+        "safety": re.compile(
+            r"\bexception\b|\bwhen[ \t]+others\b"
+            r"|\bpragma[ \t]+(?:Assert|Assertion_Policy|Precondition|Postcondition|Invariant|Predicate)\b"
+            r"|(?<!')\brange\b",
+            re.I,
+        ),
+        # safety_bypasses: Unchecked_Conversion (raw memory
+        # reinterpretation -- Rule 2's own canonical example),
+        # pragma Suppress (disables compiler-inserted runtime checks),
+        # pragma Import (FFI boundary bypassing Ada's normal safety),
+        # and the GNAT-specific 'Unrestricted_Access attribute
+        # (bypasses accessibility/aliasing rules entirely).
+        "safety_bypasses": re.compile(
+            r"\bUnchecked_Conversion\b|\bpragma[ \t]+Suppress\b|\bpragma[ \t]+Import\b"
+            r"|'Unrestricted_Access\b",
+            re.I,
+        ),
+        # high_risk_execution: GNAT.OS_Lib.OS_Exit is Ada's real
+        # equivalent of process.exit -- an immediate, uncatchable
+        # process termination (distinct from `raise`/`abort`, which are
+        # ordinary language-level exception/task-termination constructs
+        # routed to panics_and_aborts per the branch/func_start
+        # exclusion notes above).
+        "high_risk_execution": re.compile(r"\bOS_Exit\b|\bGNAT\.OS_Lib\.OS_Exit\b", re.I),
+        # io: disk/network/external-system boundaries. EXCLUDES
+        # Put_Line/Put (stdout -- debug_prints below).
+        "io": re.compile(
+            r"\bAda\.Text_IO\.(?:Open|Create|Close|Delete|Reset)\b"
+            r"|\bAda\.Directories\b|\bAda\.Streams\b|\bAda\.Direct_IO\b"
+            r"|\bAda\.Sequential_IO\b|\bGNAT\.Sockets\b",
+            re.I,
+        ),
+        # api: per #76's explicit ask -- package specifications. EXCLUDES
+        # "package body" (private implementation, not a public spec) and
+        # "package X is new ..." (generic package instantiation, not a
+        # spec declaration -- both use negative lookaheads, not an
+        # optional group, per Rule 15).
+        "api": re.compile(
+            r"\bpackage[ \t]+(?!body\b)(?:private[ \t]+)?([A-Za-z_][A-Za-z0-9_.]*)[ \t\n]+is\b(?![ \t\n]*new\b)",
+            re.I,
+        ),
+        # state_mutation: Ada's assignment operator `:=` is lexically
+        # distinct from `=` (equality) -- no ambiguity to guard against.
+        "state_mutation": re.compile(r":="),
+        # dead_code: commented-out structural code (line_exclusive_dash
+        # has exactly one comment style, so no completeness gap per
+        # Rule 12).
+        "dead_code": re.compile(r"--[ \t]*(?:procedure|function|if|for|while|begin|end|type|package)\b", re.I),
+        # doc: structured doc-comment conventions (GNATdoc-style tags;
+        # Ada has no single standardized docstring format).
+        "doc": re.compile(
+            r"--[ \t]*(?:@param|@return|@exception|Purpose:|Parameters?:|Returns?:|Preconditions?:|Postconditions?:)",
+            re.I,
+        ),
+        # test: AUnit (the dominant Ada unit-testing framework) and the
+        # standard-library Ada.Assertions.Assert.
+        "test": re.compile(r"\bAUnit\b|\bAda\.Assertions\b|\bAssert[ \t]*\(", re.I),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # concurrency: Ada's built-in hardware concurrency model --
+        # tasks, protected objects, the select/accept rendezvous, and
+        # delay. Broad domain signal, intentionally overlapping the more
+        # specific sync_locks/thread_sleeps/events/listeners below (same
+        # design already established for COBOL's EXEC CICS ENQ/DELAY).
+        "concurrency": re.compile(r"\btask\b|\bprotected\b|\bselect\b|\bdelay\b|\baccept\b|\bentry\b", re.I),
+        # ui_framework: no idiomatic built-in UI paradigm (GtkAda exists
+        # but isn't a realistic default host -- Strict Feature Parity,
+        # Rule 4: an empty/never-matching rule is worse than an absent
+        # one, since it implies detection coverage that doesn't exist).
+        "ui_framework": None,
+        # closures: Ada has no anonymous-function/lambda literal syntax.
+        "closures": None,
+        # globals: SPARK's own Global aspect explicitly declares a
+        # subprogram's global-state dependencies -- a direct, idiomatic
+        # match for this key. pragma Volatile marks genuinely shared
+        # (e.g. memory-mapped hardware register) state.
+        "globals": re.compile(r"\bGlobal[ \t]*=>|\bpragma[ \t]+Volatile\b", re.I),
+        # decorators: Ada 2012 aspect specifications (`with Pre => ...`)
+        # attached to a declaration, PLUS SPARK's data-flow refinement
+        # aspects (Abstract_State/Initializes/Refined_Global/
+        # Refined_Post/Refined_State/Refined_Depends -- how a package's
+        # private state gets formally modeled for the prover; common in
+        # real SPARK code, distinct from the Pre/Post/Global/Depends
+        # contract basics above) and the `pragma SPARK_Mode (On);` form
+        # (a structurally different shape from the `with SPARK_Mode`
+        # aspect form -- both are real and common). Must NOT overlap the
+        # plain `with` import clause below -- distinguished by a fixed,
+        # known aspect-mark vocabulary rather than by punctuation, since
+        # several boolean aspects (Inline, Pure, ...) have no `=>` at
+        # all and would otherwise be lexically identical to a bare
+        # package-name import list. Keep this list in sync with
+        # import/_dependency_capture's exclusion lookahead below.
+        "decorators": re.compile(
+            r"\bwith[ \t]+(?:Pre|Post|Invariant|Static_Predicate|Dynamic_Predicate|Global|Depends"
+            r"|Convention|Import|Export|Inline|Volatile|Atomic|Pack|SPARK_Mode|No_Return"
+            r"|Pure|Preelaborate|Elaborate_Body"
+            r"|Abstract_State|Initializes|Refined_Global|Refined_Post|Refined_State|Refined_Depends)\b"
+            r"|\bpragma[ \t]+SPARK_Mode\b",
+            re.I,
+        ),
+        # generics: `generic` keyword, and instantiation scoped to
+        # `package|procedure|function NAME is new ...` specifically --
+        # NOT bare "is new" alone, which would collide with
+        # class_start's tagged-type derivation (`type Dog is new Animal
+        # with ...`), a genuinely different construct sharing the same
+        # two words.
+        "generics": re.compile(
+            r"\bgeneric\b|\b(?:package|procedure|function)\b[ \t]+[A-Za-z_][A-Za-z0-9_]*[ \t\n]+is[ \t\n]+new\b",
+            re.I,
+        ),
+        # comprehensions: Ada 2012 quantified expressions (`for all` /
+        # `for some`), the closest analogue to an inline iterator/
+        # comprehension.
+        "comprehensions": re.compile(r"\bfor[ \t]+(?:all|some)\b", re.I),
+        # scientific: Ada.Numerics and its generic elementary-functions
+        # children.
+        "scientific": re.compile(r"\bAda\.Numerics\b", re.I),
+        # reflection_metaprogramming: tagged-type dispatch/RTTI --
+        # 'Class and 'Tag attributes, Ada.Tags.
+        "reflection_metaprogramming": re.compile(r"'Class\b|'Tag\b|\bAda\.Tags\b", re.I),
+        # import: context-clause `with` (compilation-unit dependency),
+        # explicitly excluding the same known aspect-mark vocabulary
+        # decorators uses above so a `with Pre => ...` aspect clause on
+        # a declaration is never miscounted as a dependency.
+        "import": re.compile(
+            r"^[ \t]*with[ \t\n]+(?!(?:Pre|Post|Invariant|Static_Predicate|Dynamic_Predicate|Global|Depends"
+            r"|Convention|Import|Export|Inline|Volatile|Atomic|Pack|SPARK_Mode|No_Return"
+            r"|Pure|Preelaborate|Elaborate_Body"
+            r"|Abstract_State|Initializes|Refined_Global|Refined_Post|Refined_State|Refined_Depends)\b)"
+            r"[A-Za-z_][A-Za-z0-9_.]*(?:[ \t\n]*,[ \t\n]*[A-Za-z_][A-Za-z0-9_.]*){0,20}[ \t\n]*;",
+            re.I | re.M,
+        ),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*with[ \t\n]+(?!(?:Pre|Post|Invariant|Static_Predicate|Dynamic_Predicate|Global|Depends"
+            r"|Convention|Import|Export|Inline|Volatile|Atomic|Pack|SPARK_Mode|No_Return"
+            r"|Pure|Preelaborate|Elaborate_Body"
+            r"|Abstract_State|Initializes|Refined_Global|Refined_Post|Refined_State|Refined_Depends)\b)"
+            r"([A-Za-z_][A-Za-z0-9_.]*)",
+            re.I | re.M,
+        ),
+        # ownership: header comment convention, same shape as the JCL/
+        # COBOL entries.
+        "ownership": re.compile(r"^[ \t]*--[ \t]*(?:Author|Created by|Maintainer)[ \t]*:[ \t]*(.*)$", re.I | re.M),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # hardcoded_secrets: assigned Ada string-literal declarations
+        # for common secret-shaped identifiers.
+        "hardcoded_secrets": re.compile(
+            r"\b(?:password|secret|token|api[_-]?key|private[_-]?key|client[_-]?secret)\b"
+            r"[ \t]*:[ \t]*(?:constant[ \t]+)?[A-Za-z_][A-Za-z0-9_.]*[ \t]*:=[ \t]*\"[^\"]{8,}\"",
+            re.I,
+        ),
+        "spec_exposure": re.compile(r"\[(?:SPEC[ \t]*-[ \t]*\d{1,6}|spec|audit)\]", re.I),
+        # ssr_boundaries: no idiomatic Ada web-application framework
+        # (Strict Feature Parity, Rule 4).
+        "ssr_boundaries": None,
+        # events: a task/protected object *accepting* an entry call --
+        # the moment a message/event is actually handled. Intentionally
+        # overlaps concurrency's broader domain signal above.
+        "events": re.compile(r"\baccept\b", re.I),
+        # dependency_injection: no idiomatic IoC/DI framework or
+        # convention in Ada (generics already cover its real compile-
+        # time parameterization mechanism).
+        "dependency_injection": None,
+        # macros: gnatprep, GNAT's optional conditional-compilation
+        # preprocessor (`#if` / `#elsif` / `#else` / `#end if;`) --
+        # real and commonly used in embedded/avionics Ada for
+        # per-target-hardware conditional builds.
+        "macros": re.compile(r"^[ \t]*#[ \t]*(?:if|elsif|else|end[ \t]+if)\b", re.I | re.M),
+        # pointers: Ada access types -- declarations, `access all`/
+        # `access constant`, and the 'Access/'Unchecked_Access
+        # attributes.
+        "pointers": re.compile(
+            r"\bis[ \t]+access\b|\baccess[ \t]+all\b|\baccess[ \t]+constant\b"
+            r"|'Access\b|'Unchecked_Access\b",
+            re.I,
+        ),
+        # memory_alloc: the `new` allocator.
+        "memory_alloc": re.compile(r"\bnew[ \t]+[A-Za-z_]", re.I),
+        # inline_asm: System.Machine_Code's Asm construct -- a real,
+        # if niche, GNAT-standard extension used in kernel/embedded Ada.
+        "inline_asm": re.compile(r"\bSystem\.Machine_Code\b|\bAsm[ \t]*\(", re.I),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # telemetry: GNATCOLL.Traces, the de facto AdaCore-ecosystem
+        # tracing/logging library.
+        "telemetry": re.compile(r"\bGNATCOLL\.Traces\b", re.I),
+        # debug_prints: Ada.Text_IO's Put_Line/Put/New_Line -- the
+        # stdout-print idiom, distinct from io's file/network calls
+        # above.
+        "debug_prints": re.compile(r"\bPut_Line\b|\bPut[ \t]*\(|\bNew_Line\b", re.I),
+        # explicit_casts: Ada qualified-expression syntax
+        # `Type_Name'(Expr)` -- a real, lexically-unambiguous marker for
+        # explicit type conversion/qualification (unlike a bare type
+        # conversion `T(Expr)`, which is syntactically identical to a
+        # function call and can't be told apart without semantic info).
+        "explicit_casts": re.compile(r"\b[A-Za-z_][A-Za-z0-9_.]*'\(", re.I),
+        # panics_and_aborts: `raise` (exception propagation) and
+        # `abort` (forceful task termination -- the schema's own
+        # baseline definition lists "abort()" as a canonical example).
+        "panics_and_aborts": re.compile(r"\braise\b|\babort\b", re.I),
+        # thread_sleeps: the `delay` statement.
+        "thread_sleeps": re.compile(r"\bdelay\b", re.I),
+        # bitwise_ops: Interfaces' Shift_Left/Shift_Right/Rotate_Left/
+        # Rotate_Right, and `xor` (unlike bare `and`/`or`, `xor` has no
+        # short-circuit "and then"/"or else"-style logical variant in
+        # Ada, so it's unambiguously the bitwise/boolean-parity
+        # operator, not a branch-control keyword).
+        "bitwise_ops": re.compile(r"\bShift_Left\b|\bShift_Right\b|\bRotate_Left\b|\bRotate_Right\b|\bxor\b", re.I),
+        # sync_locks: protected objects/types are Ada's built-in
+        # monitor/mutex primitive. Intentionally overlaps concurrency.
+        "sync_locks": re.compile(r"\bprotected\b|\bSuspension_Object\b", re.I),
+        # immutability_locks: the `constant` keyword.
+        "immutability_locks": re.compile(r"\bconstant\b", re.I),
+        # cleanup: Ada.Unchecked_Deallocation (the generic instantiated
+        # to build a "Free" procedure) and Ada.Finalization/Finalize
+        # (RAII-style teardown). Deliberately NOT paired with
+        # Unchecked_Conversion in safety_bypasses above -- this mirrors
+        # C's free()/dispose(), a normal cleanup action, not a type-
+        # safety bypass.
+        "cleanup": re.compile(r"\bAda\.Unchecked_Deallocation\b|\bFinalize\b|\bAda\.Finalization\b", re.I),
+        # encapsulation: the `private` keyword (package private parts,
+        # private type declarations).
+        "encapsulation": re.compile(r"\bprivate\b", re.I),
+        # listeners: a task entry declaration -- the endpoint waiting to
+        # receive an external call, before it's actually accepted
+        # (events, above).
+        "listeners": re.compile(r"\bentry\b", re.I),
+        # test_skip: no native language/AUnit-standard skip primitive;
+        # falls back to a comment-marker convention.
+        "test_skip": re.compile(r"--[ \t]*(?:SKIP|SKIPPED|DISABLED)\b", re.I),
+        # --- HYBRID DOMAIN SENSORS ---
+        # serialization_parsing: GNATCOLL.JSON and XML/Ada (DOM/SAX).
+        "serialization_parsing": re.compile(r"\bGNATCOLL\.JSON\b|\bDOM\.Core\b|\bInput_Sources\b", re.I),
+        # regex_execution: GNAT.Regpat / GNAT.Regexp, GNAT's native
+        # regex engines.
+        "regex_execution": re.compile(r"\bGNAT\.Regpat\b|\bGNAT\.Regexp\b", re.I),
+        # time_date_logic: Ada.Calendar / Ada.Real_Time.
+        "time_date_logic": re.compile(r"\bAda\.Calendar\b|\bAda\.Real_Time\b|\bClock\b", re.I),
+        # ipc_rpc_bridges: the Distributed Systems Annex (Annex E)
+        # pragmas and PolyORB (Ada's CORBA-like ORB), used in real
+        # distributed defense/aerospace Ada systems.
+        "ipc_rpc_bridges": re.compile(
+            r"\bpragma[ \t]+Remote_Call_Interface\b|\bpragma[ \t]+Remote_Types\b"
+            r"|\bpragma[ \t]+Shared_Passive\b|\bPolyORB\b",
+            re.I,
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/agc_assembly.py b/gitgalaxy/standards/language_standards/languages/agc_assembly.py
new file mode 100644
index 000000000..05bb0d077
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/agc_assembly.py
@@ -0,0 +1,250 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Apollo Guidance Computer (Luminary 099 / Comanche 055 - Apollo 11)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Apollo Guidance Computer digitized source files.
+    "extensions": [".agc"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: AGC code is hardware-level; no extensionless exact configurations exist.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and emulator/assembler tools to lock in the historical context.
+    "discriminators": [".agc", "yaYUL"],
+    # EXECUTION SIGNATURES: AGC code is hardware-level or emulator-resident; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Digitized source uses '#' for line-level Commented / Non-Executable Text.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES fatal alarms (bailout_hits).
+        "branch": re.compile(
+            r"\b(TC|TCF|BZF|BZMF|BZE|BMN|BPL|BMI|CCS|RESUME|RETURN|TCR|OVSK|BVBZ|CALL|GOTO)\b",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Safely captures hardware registers (A, Q, L, Z) ONLY when they are
+        # explicitly coupled to an AGC mathematical/memory opcode.
+        # Also captures the Bank assignment declarations.
+        # BUG FIX (epic #813/#857): AUG/DIM/INCR (real register-mutating
+        # instructions already recognized by this file's own
+        # `state_mutation` rule) were missing from the opcode list, so
+        # `AUG A`/`DIM Q`/`INCR A` -- real, common coupling of a hardware
+        # register to an instruction -- were invisible.
+        "args": re.compile(
+            r"\b(?:[EFB]BANK)="
+            r"|"
+            r"\b(?:CA|CS|TS|AD|SU|MULT|DV|MASK|DXCH|LXCH|QXCH|XCH|INDEX|AUG|DIM|INCR|CCS)[ \t]+(?:A|Q|L|Z)\b",
+            re.I,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Standard instruction flow and data markers.
+        "structural_boundaries": re.compile(
+            r"\b(CA|CAF|CS|TS|DXCH|LXCH|QXCH|XCH|AD|SU|MULT|DV|MASK|CCS|SETLOC|BANK|COUNT|ADRES|OCTAL|2OCT|DEC|2DEC|BLOCK|ERASE)\b",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Subroutine entry points anchoring logic blocks.
+        # BUG FIX: the lookahead's `\s+` can cross a newline (Rule 5),
+        # so a bare label on its own line (nothing else on that line)
+        # could get falsely bound to an unrelated opcode several blank
+        # lines later -- confirmed "MYLABEL\n\n\n\tTC INTERNAL\n"
+        # incorrectly captured MYLABEL. Real AGC label+opcode pairs are
+        # always on the same physical line (fixed-column YUL/GAP
+        # format); bounded to `[ \t]+`.
+        # BUG FIX (epic #813/#857): the opcode whitelist was a small,
+        # ad hoc subset of the real AGC instruction set -- missing
+        # instructions this SAME file's own sibling rules already
+        # recognize as legitimate (`args`'s CA|CS|TS|AD|SU|MULT|DV|MASK|
+        # DXCH|LXCH|QXCH|XCH|INDEX, `branch`'s TCF|BZE|BMN|RESUME|
+        # RETURN|TCR|GOTO|OVSK|BVBZ, `safety`'s RELINT|EDRUPT,
+        # `state_mutation`'s INCR|AUG|DIM|DAS), so a label followed by
+        # ANY of these real, common opcodes was invisible as a
+        # subroutine entry. Confirmed empirically against the real
+        # Apollo 11 (Luminary/Comanche) source corpus in
+        # language-crucible: the old pattern matched 609 label+opcode
+        # pairs across the corpus; `CAF` alone (Clear and Add Fixed --
+        # arguably the single most common AGC instruction after
+        # TC/CS/TS/CA, 94 occurrences in this corpus) was entirely
+        # missing. Widened to the union of opcodes already vetted
+        # elsewhere in this file, confirmed against the real corpus to
+        # raise total matches to 812 (+33%) with zero new false
+        # positives against data/constant pseudo-ops (OCT/OCTAL/DEC/
+        # 2DEC/ADRES/CADR/EQUALS/etc. all correctly stay excluded --
+        # those mark data declarations, not subroutine entries).
+        "func_start": re.compile(
+            r"^([A-Z0-9_-]+)(?=[ \t]+(?:TC|TCF|CA|CAF|CS|TS|DXCH|LXCH|QXCH|XCH|CCS|DLOAD|STORE|CALL|INDEX|"
+            r"EXTEND|INHINT|RELINT|EDRUPT|BZF|BZMF|BPL|BMI|BZE|BMN|RESUME|RETURN|TCR|GOTO|OVSK|BVBZ|"
+            r"AD|ADS|SU|MULT|DV|MASK|INCR|AUG|DIM|DAS|RVQ)\b)",
+            re.M | re.I,
+        ),
+        # 5. class_start
+        # AGC lacks native objects.
+        "class_start": None,
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Real-time safety guards and interrupt control.
+        "safety": re.compile(
+            r"\b(INHINT|RELINT|TC\s+DOWNRUPT|CS\s+ERESTORE|MUST\s+RESTORE|EDRUPT)\b",
+            re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Bypassing predictable flow or task management risks.
+        "safety_bypasses": re.compile(r"\b(TC\s+JOBSLEEP|TC\s+JOBWAKE|TCF\s+2|TASKOVER|TCF\s+ADRERR)\b", re.I),
+        # 8. danger (High-Risk Execution / System Calls)
+        # High-risk failure states and alarms. EXCLUDES MOD history (Phase 2 debt).
+        "high_risk_execution": re.compile(r"\b(CURTAINS|SOFTWARE\s+RESTART|SYSTEM_FAILURE|WHIMPER|HALT)\b", re.I),
+        # 9. io (I/O & Network Boundaries)
+        # Hardware I/O bridging to the Command/Lunar Module.
+        "io": re.compile(r"\b(DSKY|CHANNEL|READ|WRITE|V\d+N\d+|OUT\d+|IN\d+)\b", re.I),
+        # 10. api (Public Surface Area)
+        # Global labels and externally visible entry points.
+        "api": re.compile(
+            r"^[A-Z0-9_-]+\s+EQUALS|^[ \t]*(?:SUBROUTINE|BEXT|EXTEND)\b",
+            re.M | re.I,
+        ),
+        # 11. flux (State Mutation)
+        # Direct state mutation and register storage.
+        "state_mutation": re.compile(
+            r"\b(TS|DXCH|LXCH|QXCH|XCH|INCR|AUG|DIM|WRSUB|AUGMENT|DIMINISH|STORE|STQ|STCALL|DAS)\b",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"(?i)#[ \t]*(?:TCF|CCS|INDEX|BZF|BZN|CA|CS)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(
+            r"^#\s*(?:Page|MOD\s+(?:BY|NO)|FUNCTIONAL\s+DESCRIPTION|SUBROUTINE|PURPOSE|CALLING\s+SEQUENCE|AUTHOR|PROGRAM|REVISION)",
+            re.M | re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        # System integrity verifications and self-checks.
+        "test": re.compile(
+            r"\b(TC\s+ALARM2|SELFCHECK|ROPECHK|ERASCHK|CNTRCHK|CHECK|TC\s+BANKJUMP)\b",
+            re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # Priority multitasking scheduler and task management.
+        "concurrency": re.compile(
+            r"\b(PRIO[1-9]|EXEC|TC\s+NOVAC|TC\s+WAITLIST|TC\s+FINDVAC|ENDOFJOB|PHASCHNG|AWAKE|SLEEP|VARDELAY)\b",
+            re.I,
+        ),
+        # 16. ui_framework (UI / View Components)
+        # DSKY (Display/Keyboard) UI verbs and nouns.
+        "ui_framework": re.compile(r"\b(V\s+\d+|N\s+\d+|NOUN|VERB|ENTER|PROCEED)\b", re.I),
+        # 17. closures
+        "closures": None,
+        # 18. globals (Global / Shared State)
+        # Memory division markers.
+        "globals": re.compile(
+            r"\b(ERASABLE\s+MEMORY|FIXED\s+MEMORY|WORKING-STORAGE|COMMON|FLAGWRD\d+|BIT\d+)\b",
+            re.I,
+        ),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions
+        "comprehensions": None,
+        # 22. scientific (Numerical / Compute Libraries)
+        # Vector math and orbital navigation interpreter routines.
+        "scientific": re.compile(
+            r"\b(VAD|VSUB|BDSU|DDV|DMP|DSU|SQRT|NORM|SIGN|ABS|SIN|COS|ASIN|ACOS|SPCOS|SPSIN|DOT|CROSS|UNIT|ABVAL|VXV|VXM|MXV)\b",
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Self-modifying logic and VM entry.
+        "reflection_metaprogramming": re.compile(r"\b(INDEX|TC\s+INTPRET|DXCH\s+0000|RVQ)\b", re.I),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"\b(BANK|SETLOC|EBANK=)\b", re.I),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:BANK[ \t\n]+|SETLOC[ \t\n]+|EBANK=[ \t\n]*)([A-Za-z0-9_]+)",
+            re.I | re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"^#\s*(?:MOD\s+BY|AUTHOR|CREATED\s+BY|MAINTAINER|Contact)\s*[:\-]\s*(.*)",
+            re.M | re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # Linkage to MIT GSOP or mission versions.
+        "spec_exposure": re.compile(
+            r"\b(GSOP|LUMINARY|COMANCHE|COLOSSUS|SUNDISK|SUNBURST|PCR\s*\d+|PCN\s*\d+|SPEC\s*-\s*\d+|#\s*REF:)\b",
+            re.I,
+        ),
+        # 31. ssr_boundaries
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Hardware interrupt vectors (Rupts).
+        "events": re.compile(
+            r"\b(RUPT|TIME1|TIME2|KEYRUPT|UPRUPT|DOWNRUPT|RADAR|OPTIC|HANDRUPT|ERRUPT)\b",
+            re.I,
+        ),
+        # 33. dependency_injection
+        "dependency_injection": None,
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(r"^[ \t]*(?:MACRO|ENDMAC|DEFINE)\b", re.M | re.I),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": re.compile(r"\b(?:INDEX|INDIRECT|POINTER|CADR|FCADR|ECADR)\b|\*[A-Z0-9_-]+", re.I),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(r"\b(?:ERASABLE|FIXED|EQUALS|SHARE)\b", re.I),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        # Spacecraft downlink routines.
+        "telemetry": re.compile(r"\b(DNTM|DOWNLINK|TELEM|TM|DUMPTEL|TM\s+WORD)\b", re.I),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        "debug_prints": re.compile(r"\b(?:FLASH|PINBALL|OUT\d+)\b", re.I),
+        # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\bEXTEND\b", re.I),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(POODOO|BAILOUT|TC\s+ALARM|ABORT)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(TC\s+JOBSLEEP|VARDELAY)\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"\b(MASK|AD|SU|MULT|DV)\b", re.I),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(INHINT|RELINT|LOCK|UNLOCK)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\bFIXED\s+MEMORY\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(ENDOFJOB|RESUME|EXIT)\b", re.I),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Internal task-local labels or non-global tags.
+        # BUG FIX: required a lowercase-starting label, but authentic
+        # AGC assembly source is uppercase-only (per this section's own
+        # convention -- every other rule here uses `re.I`, and
+        # func_start's own capture class is `[A-Z0-9_-]+`) -- confirmed
+        # a realistic label ("MYLABEL") never matched at all. Widened
+        # to accept any case.
+        "encapsulation": re.compile(r"^[ \t]*[A-Za-z0-9_][a-zA-Z0-9_.]*", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(EVENT\s+WAIT|TC\s+WAITLIST)\b", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": None,
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/apex.py b/gitgalaxy/standards/language_standards/languages/apex.py
new file mode 100644
index 000000000..f6cd5ce4f
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/apex.py
@@ -0,0 +1,290 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Salesforce Apex 24.2 (API v62.0+)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Salesforce classes and database triggers.
+    "extensions": [".cls", ".trigger"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Apex code lives and executes on the Salesforce platform; no extensionless configurations exist.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: .cls is highly contested. Salesforce metadata XMLs and SFDX configs act as absolute gravity anchors.
+    "discriminators": [
+        ".cls-meta.xml",
+        ".trigger-meta.xml",
+        "sfdx-project.json",
+        "package.xml",
+    ],
+    # EXECUTION SIGNATURES: Executed exclusively on the Salesforce platform; no shebangs exist.
+    "shebangs": [],
+    # Rationale: Uses standard '//' for lines and '/*' '*/' for block-level Commented / Non-Executable Text.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes switch on/when and DML try-catch.
+        "branch": re.compile(
+            r"\b(if|else|switch\s+on|when|for|while|do|try|catch|finally|break|continue|return)\b|&&|\|\||\?|\?\?",
+            re.I,
+        ),
+        # 2. args: Parameters / Coupling. Captures method parameters and trigger event signatures.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # both alternatives (was only reachable via group(0), the whole
+        # match including the decorator/modifier/return-type/name prefix,
+        # or for triggers the "trigger name on object" prefix) so
+        # detector.py's counter isolates just "(...)" -- the whole-match
+        # fallback overcounted every zero/one-arg signature by +1 the same
+        # way Python's did (#1199). Name groups added too, purely so
+        # existing extraction tests keep passing.
+        "args": re.compile(
+            # #1963: `new` is a reserved instantiation keyword, never a real return
+            # type/modifier -- excluded from the optional prefix-consuming group so a
+            # line-leading `new ClassName(...)` constructor-call argument (common in
+            # multi-line SObject-builder calls) can't be parsed as "return type = new,
+            # name = ClassName". Mirrors csharp's own GHOST ARGS SHIELD, which already
+            # excludes `new` from its equivalent prefix group.
+            r"^[ \t]*(?:@[\w.]+\b(?:\s*\((?:[^)(]|\([^)(]*\))*\))?\s*){0,5}"
+            r"(?:(?:public|private|global|protected|static|override|virtual|abstract|testMethod)\s+){0,5}"
+            r"(?:(?!new\b)[a-zA-Z_][\w.]*(?:\s*<(?:[^<>]|<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)*>)?(?:\s*\[\s*\])*\s+)?(?!(?:class|interface|enum|if|for|while|switch|catch)\b)([a-zA-Z_]\w*)\s*(\([^)]*\))|"
+            r"^[ \t]*trigger\s+([a-zA-Z_]\w*)\s+on\s+[a-zA-Z_]\w*\s*(\([^)]*\))",
+            re.M | re.I,
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and sharing keywords.
+        "structural_boundaries": re.compile(
+            r"\b(class|interface|trigger|enum|final|transient|implements|extends|virtual|abstract|return)\b",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ReDoS clamped to {0,5}. Strict capture groups and lookaheads for both Methods and Triggers.
+        "func_start": re.compile(
+            # #1221: the method branch used to have no requirement that
+            # ANY of the annotation/modifier/return-type prefixes
+            # actually be present -- all three are individually
+            # optional/zero-allowed, so a bare call statement
+            # (`next();`) with none of them satisfied the rest of the
+            # branch identically to a real signature, since this
+            # branch (like csharp's/apex's siblings) never verifies a
+            # trailing `{`/`;` terminator either (that's left entirely
+            # to the pipeline's own post-hoc brace search, same
+            # historical shape #789 diagnosed for csharp). A real Apex
+            # method/constructor always carries at least one of an
+            # annotation, a modifier, or a return type before its name
+            # (a bare call statement carries none of the three) -- so
+            # gate the whole branch on seeing at least one of those
+            # three shapes before letting the existing (unchanged)
+            # optional-repeat groups consume them. Mirrors this same
+            # regex's own `args` sibling ("GHOST ARGS SHIELD") pattern
+            # of demanding structural proof before treating text as a
+            # definition rather than an invocation.
+            #
+            # #1963: `new` is a reserved instantiation keyword, never a real return
+            # type/modifier -- excluded from both the initial gating lookahead's
+            # bare-identifier alternative and the optional prefix-consuming group so a
+            # line-leading `new ClassName(...)` constructor-call argument (common in
+            # multi-line SObject-builder calls) can't satisfy the #1221 gate as
+            # "return type = new, name = ClassName". Mirrors csharp's own GHOST ARGS
+            # SHIELD, which already excludes `new` from its equivalent prefix group.
+            r"^[ \t]*(?=@|(?:public|private|global|protected|static|override|virtual|abstract|testMethod)\b|(?!new\b)[a-zA-Z_][\w.]*[ \t\n]+)"
+            r"(?:@[\w.]+\b(?:\s*\((?:[^)(]|\([^)(]*\))*\))?\s*){0,5}"
+            r"(?:(?:public|private|global|protected|static|override|virtual|abstract|testMethod)\s+){0,5}"
+            r"(?:(?!new\b)[a-zA-Z_][\w.]*(?:\s*<(?:[^<>]|<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)*>)?(?:\s*\[\s*\])*\s+)?(?!(?:class|interface|enum|if|for|while|switch|catch)\b)([a-zA-Z_]\w*)(?=\s*\()|"
+            r"^[ \t]*trigger\s+([a-zA-Z_]\w*)(?=\s+on\b)",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # ReDoS clamped. Strict capture group and positive lookahead applied.
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+\b(?:\s*\((?:[^)(]|\([^)(]*\))*\))?\s*){0,5}"
+            r"(?:(?:public|private|global|virtual|abstract|with\s+sharing|without\s+sharing|inherited\s+sharing)\s+){0,5}"
+            r"(?:class|interface|enum)\s+([a-zA-Z_]\w*)(?=\s+implements|\s+extends|\s*\{|\n|$)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Sharing rules, FLS checks, and null-safe navigation.
+        "safety": re.compile(
+            r"\b(with\s+sharing|inherited\s+sharing|isAccessible|isCreateable|isUpdateable|isDeletable|StripInaccessible|try|catch|finally|LIMIT\s+\d+|Security\.stripInaccessible)\b|\?\.",
+            re.I,
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing safety (without sharing, raw casting).
+        # BUG FIX: `@SuppressWarnings` is `@`-prefixed -- the shared
+        # leading \b could only fire when a word char immediately
+        # preceded the `@`, never true for how annotations are actually
+        # written. Never matched at all.
+        "safety_bypasses": re.compile(
+            r"\b(?:without\s+sharing|Database\.query(?!\s*\(.*?WITH\s+SECURITY_ENFORCED))\b"
+            r"|@SuppressWarnings|\(\s*[A-Z_]\w*\s*\)\s*[a-z_]\w*",
+            re.I,
+        ),
+        # 8. danger: High-Risk Execution. Dynamic SOQL, mass deletion, and hardcoded IDs.
+        "high_risk_execution": re.compile(
+            r"\b(Database\.query|delete|undelete|emptyRecycleBin|purgeOldAsyncJobs)\b|\'[a-z0-9]{15,18}\'",
+            re.I,
+        ),
+        # 9. io: I/O & Network Boundaries. SOQL/SOSL queries, HTTP callouts, and batch boundaries.
+        "io": re.compile(
+            r"\[\s*(?:SELECT|FIND)\b[^\]]*\]|\b(Http|HttpRequest|HttpResponse|Database\.executeBatch|HTLoad|HTGet|ENQUIRE)\b",
+            re.I,
+        ),
+        # 10. api: Public Surface Area. Exposed global interfaces, REST resources, and UI hooks.
+        "api": re.compile(
+            r"\b(global|webservice)\b|@(?:RestResource|HttpGet|HttpPost|HttpPut|HttpDelete|HttpPatch|AuraEnabled|InvocableMethod|RemoteAction)\b",
+            re.I,
+        ),
+        # 11. flux: State Mutation. State mutation (DML operations and standard assignments).
+        "state_mutation": re.compile(
+            r"\b(insert|update|upsert|delete|merge)\b|^[ \t]*(?:this\.)?[a-z_]\w*\s*[-+*/%]?=|\.(?:add|addAll|remove|put|clear|set)\s*\(",
+            re.I | re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code or queries.
+        "dead_code": re.compile(
+            r"//[ \t]*(?:class|trigger|public|private|if|for|while|System\.debug|\[\s*SELECT|insert|update)\b|/\*[ \t]*(?:class|trigger|\[\s*SELECT)",
+            re.I | re.M,
+        ),
+        # 13. doc: Structured Documentation. ApexDoc annotations and metadata blocks.
+        "doc": re.compile(r"/\*\*|@description|@param|@return|@author|@date|@example", re.I),
+        # 14. test: Testing & Assertions. Salesforce test execution and assertion markers.
+        "test": re.compile(
+            r"@isTest|@TestSetup|@TestVisible|\b(?:Test\.startTest|Test\.stopTest|System\.assert|Assert\.(?:isTrue|isNotNull|areEqual)|Test\.setMock)\b",
+            re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Asynchronous Apex (Future, Queueable, Batch).
+        "concurrency": re.compile(
+            r"@future|\b(Queueable|Schedulable|Batchable|System\.enqueueJob|Database\.executeBatch|System\.schedule)\b",
+            re.I,
+        ),
+        # 16. ui_framework: UI / View Components. Visualforce and LWC bridge components.
+        "ui_framework": re.compile(
+            r"\b(ApexPages|PageReference|StandardController|Dom\.Document|SGML|HyperText|WorldWideWeb|BrowserView)\b",
+            re.I,
+        ),
+        # 17. closures: Closures / Anonymous Functions. (Apex lacks true anonymous closures).
+        "closures": None,
+        # 18. globals: Global / Shared State. Custom Settings, Organization data, and User context.
+        # QUADRATIC BLOWUP FIX: the two `\w+` prefixes before the
+        # required-but-often-absent `__c.getInstance`/`__mdt.getInstance`
+        # suffixes were unbounded with no preceding \b anchor -- O(n^2)
+        # on a long run of word characters with neither suffix present.
+        # Bounded to {1,100}; real custom-object/metadata-type names
+        # don't get remotely that long.
+        "globals": re.compile(
+            r"\b(UserInfo|System\.Label|Organization|Cache\.Org|Cache\.Session)\b|\w{1,100}__c\.getInstance\b|\w{1,100}__mdt\.getInstance\b",
+            re.I,
+        ),
+        # 19. decorators: Decorators / Annotations. Execution context annotations.
+        "decorators": re.compile(r"@[a-z_]\w*(?:\([^)]*\))?", re.I),
+        # 20. generics: Generics / Type Parameters. Parameterized collections (List, Map, Set).
+        "generics": re.compile(r"\b(?:List|Set|Map|Iterable|Iterator)\s*<\s*[a-z_][^>]*>", re.I),
+        # 21. comprehensions: Iterators / Comprehensions. Inline SOQL for-loops act as mappers.
+        "comprehensions": re.compile(r"\bfor\s*\([^)]+:\s*\[\s*SELECT[^\]]+\]\s*\)", re.I),
+        # 22. scientific: Numerical / Compute Libraries. Standard numerical and currency math.
+        "scientific": re.compile(
+            r"\b(Math\.(?:abs|sin|cos|tan|exp|log|pow|sqrt)|Decimal|setScale|setRoundingMode)\b",
+            re.I,
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Dynamic SOQL, Reflection, and Describe calls.
+        "reflection_metaprogramming": re.compile(
+            r"\b(Database\.query|Type\.forName|Schema\.getGlobalDescribe|Schema\.describeSObjects|SObject\.put|SObject\.get|JSON\.deserializeUntyped)\b",
+            re.I,
+        ),
+        # 24. import: Dependency Inclusions.
+        # Apex lacks a native import keyword. Cross-package dependencies are established via
+        # reflection (Type.forName) or explicitly namespaced static invocations.
+        "import": re.compile(
+            r"\bType\.forName\b|(?!(?:System|Database|Schema|Auth|Cache|Chatter|EventBus|Limits|Messaging|RestContext|Test)\b)\b[a-zA-Z_]\w*\.[A-Z]\w*\b",
+            re.I,
+        ),
+        "_dependency_capture": re.compile(
+            r"\bType\s*\.\s*forName\s*\(\s*['\"]([^'\"]+)['\"](?:[ \t\n]*,[ \t\n]*['\"]([^'\"]+)['\"])?\s*\)",
+            re.I,
+        ),
+        # 25. ownership: Authorship indicators.
+        "ownership": re.compile(
+            r"(?:@author|Author|Created by|Maintainer|Copyright|Tim Berners-Lee):\s+([^\n]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags and architecture specs.
+        "spec_exposure": re.compile(
+            r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]|\b(?:WorldWideWeb|RFC|W3C|CERN|TBL|ENQUIRE)\b",
+            re.I,
+        ),
+        # 31. ssr_boundaries: View Horizon. REST and Visualforce response handlers.
+        "ssr_boundaries": re.compile(
+            r"\b(RestContext\.request|RestContext\.response|RestRequest|RestResponse|renderAs)\b",
+            re.I,
+        ),
+        # 32. events: Pub/Sub Network. Platform Events and Trigger context.
+        "events": re.compile(
+            r"\b(EventBus\.publish|PlatformEvent)\b|trigger\s+[a-zA-Z_]\w+\s+on\s+[a-zA-Z_]\w+Event__e",
+            re.I,
+        ),
+        # 33. dependency_injection: Inversion of Control. Mocking and injection frameworks.
+        "dependency_injection": re.compile(
+            r"\b(fflib_ApexMocks|fflib_SObjectUnitOfWork|Injector|di_Injector|Application\.Service|Type\.newInstance)\b",
+            re.I,
+        ),
+        # 34. macros: Preprocessor Hooks. (Apex lacks a preprocessor).
+        "macros": None,
+        # 35. pointers: Memory Map. (Apex is fully managed with no pointers).
+        "pointers": None,
+        # 36. memory_alloc: Manual Memory Management. Heap observations.
+        "memory_alloc": re.compile(
+            r"\b(Limits\.getHeapSize|Limits\.getLimitHeapSize|new\s+[a-z_]\w*)\b",
+            re.I,
+        ),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics (Structured logs).
+        "telemetry": re.compile(
+            r"\b(Logger|Log|AppLog|NebulaLogger)\.(?:info|error|warn|debug|trace)\b|\binsert\s+new\s+Log__c\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(System\.debug)\b", re.I),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit type coercion.
+        "explicit_casts": re.compile(
+            r"\(\s*(?:[A-Z]\w*|int|Id|String|Decimal|Boolean|Double|Long|Blob|Date|Datetime|Time)\s*\)\s*[a-zA-Z_$]"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution or rollback.
+        "panics_and_aborts": re.compile(r"\b(throw|Database\.rollback|purgeOldAsyncJobs)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Apex has no native sleep/delay).
+        "thread_sleeps": None,
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability) Row-level SOQL locking.
+        "sync_locks": re.compile(r"\bFOR\s+UPDATE\b", re.I),
+        # 45. immutability_locks (Immutability Constraints) Immutability (constants).
+        "immutability_locks": re.compile(r"\b(static\s+final|final|const)\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown) Recycle bin management.
+        "cleanup": re.compile(r"\b(emptyRecycleBin|Database\.rollback|clear)\s*\(", re.I),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"\b(private|protected)\b", re.I),
+        # 48. listeners (Event Listeners / Observers) Triggers listening for events.
+        "listeners": re.compile(r"^[ \t]*trigger\s+[a-z_]\w*\s+on\b", re.I | re.M),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX: `@SuppressWarnings` is `@`-prefixed -- same
+        # leading-\b bug as safety_bypasses above.
+        "test_skip": re.compile(r"\b(?:StubProvider|Test\.setMock)\b|@SuppressWarnings", re.I),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/assembly.py b/gitgalaxy/standards/language_standards/languages/assembly.py
new file mode 100644
index 000000000..7cea13263
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/assembly.py
@@ -0,0 +1,291 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "x86-64 (NASM/GAS) & ARMv8 (AArch64) - Backwards Compatible",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard assembly, GNU Assembler, NASM, MASM, and architecture-specific extensions.
+    "extensions": [
+        ".asm",
+        ".s",
+        ".S",
+        ".inc",
+        ".nasm",
+        ".s64",
+        ".masm",
+        ".arm",
+        ".a51",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Assembly is assembled directly to machine code; no extensionless exact configurations exist.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, linker scripts (.ld), and build systems acting as disambiguation anchors to resolve .inc or .s files.
+    "discriminators": [
+        ".asm",
+        ".s",
+        ".S",
+        ".c",
+        ".cpp",
+        ".ld",
+        "Makefile",
+        "CMakeLists.txt",
+    ],
+    # EXECUTION SIGNATURES: Assembly is compiled/assembled to binary; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: Uses unique line delimiters ';' (NASM/Intel) and '#' (GAS/ARM).
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES system exits/halts (bailout_hits).
+        "branch": re.compile(
+            r"\b(jmp|je|jne|jz|jnz|ja|jb|jl|jg|jge|jle|jae|jbe|call|ret|b|bl|bx|blr|cbz|cbnz|tbz|tbnz|beq|bne|loop)\b",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Assembly uses ABI registers for parameter coupling. Also covers the
+        # legacy 8/16-bit x86 register forms (al/ah/ax, etc.) and the r8/r9
+        # sub-register suffixes (r8d/r8w/r8b), since this language's own
+        # _meta declares it "Backwards Compatible" and real corpus code
+        # (e.g. 16-bit real-mode bootloaders) uses exactly these forms for
+        # register-coupling. (#856 follow-up) Previously `[er][89]` matched
+        # the nonexistent registers "e8"/"e9" while failing to match the
+        # real r8d/r9d/r8w/r9w/r8b/r9b forms, since the trailing `\b` never
+        # fires between two word characters (the digit and the size suffix).
+        "args": re.compile(
+            r"\b([er]di|[er]si|[er]dx|[er]cx|r[89][dwb]?|x[0-7]|w[0-7]|v[0-7]|xmm[0-7]|r[0-7]"
+            r"|a[xhl]|b[xhl]|c[xhl]|d[xhl]|si|di)\b",
+            re.I,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Data movement and arithmetic primitives. EXCLUDES: Linker visibility (api) and sections (globals).
+        "structural_boundaries": re.compile(
+            r"\b(mov(?:abs|[sz]x|[bwlq]|aps|ups|dqu)?|vmov[a-z]+|lea|ldr[s]?[bhw]?|str[bhw]?|push|pop|add|sub|inc|dec|mul|imul|div|idiv|nop|ldp|stp)\b",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Subroutine entry points. EXCLUDES data labels or local loop markers.
+        # The trailing negative lookahead is the generic-assembly counterpart to
+        # agc_assembly's "label must be followed by a real opcode" positive lookahead,
+        # inverted for the own-line-label convention this dialect uses: a label whose
+        # colon is followed (same line, or the very next line) only by a pure
+        # data-emission / location-counter directive (`.asciz`, `.byte`, `.org`,
+        # `.endobj`, NASM `db`/`resb`/`times`, ...) is a data object, not a subroutine
+        # entry -- e.g. cosmopolitan/ape.S's `ape.mbrpad:` / `.org 0x1b4`
+        # (assembly/function/existence/agree[gitgalaxy]_vs[ctags], the mirror of
+        # agc_assembly's own data-label win). Section/visibility/type/align directives
+        # are deliberately NOT in the list -- those legitimately sit between a real
+        # function's label and its first instruction.
+        "func_start": re.compile(
+            r"^[ \t]*(?!\.L|\.LC|\d|\.text|\.data|\.bss)([a-zA-Z_?@.][a-zA-Z0-9_.$?@]*)(?=[ \t]*:)"
+            r"(?![ \t]*:[ \t]*(?:\r?\n[ \t]*)?"
+            r"(?:\.(?:org|endobj|asciz|ascii|string|byte|hword|short|word|long|int|value"
+            r"|quad|octa|single|double|float|fill|space|skip|zero|incbin)"
+            r"|d[bwdq]|res[bwdq]|times)\b)",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Maps to assembler structure definition macros.
+        "class_start": re.compile(
+            r"^[ \t]*(?:(?:struc|STRUCT|\.struct)[ \t]+[a-zA-Z_?@.][a-zA-Z0-9_.$?@]*|[a-zA-Z_?@.][a-zA-Z0-9_.$?@]*[ \t]+(?:struc|STRUCT|\.struct))\b",
+            re.M | re.I,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Stack preservation and defensive frame setups.
+        "safety": re.compile(
+            r"\b(enter|leave|endbr64|paciasp|autiasp|bti|retab|\.align|\.p2align)\b|\b(?:stp|ldp)\s+x29,\s*x30",
+            re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Indirect jumps and hardware interrupt disabling.
+        "safety_bypasses": re.compile(
+            r"\b(?:jmp|call)\s+(?:\*|\[|[er]?[abcd]x|r\d+)\b|\bbr\s+[xw]\d+\b|\b(cli|msr\s+daifclr)\b",
+            re.I,
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # CPU halts and debug traps. EXCLUDES prints (Phase 5).
+        "high_risk_execution": re.compile(r"\b(hlt|int\s+3|brk|ud2|sys_exit|sys_kill)\b", re.I),
+        # 9. io (I/O & Network Boundaries)
+        # System calls and hardware I/O ports.
+        "io": re.compile(
+            r"\b(in|out|ins[bdw]|outs[bdw]|syscall|svc\b|int\s+0x80|sys_read|sys_open)\b",
+            re.I,
+        ),
+        # 10. api (Public Surface Area)
+        # Linker-visible global exports.
+        "api": re.compile(
+            r"^[ \t]*(?:\.global|\.globl|global|EXPORT|PUBLIC|EXTERN|IMPORT)\b",
+            re.M | re.I,
+        ),
+        # 11. flux (State Mutation)
+        # Explicit memory/register swaps and atomic increments.
+        "state_mutation": re.compile(r"\b(xchg|cmpxchg|inc|dec)\b", re.I),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"(?i)(?:;|#|//)[ \t]*(?:jmp|call|mov|push|pop|cmp|add|sub)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"^[;#@/|]+\s*@(?:param|return|brief|author|note)", re.M | re.I),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(r"(?i)\b(?:describe|expect|assert|TestCase)\b|\bit[ \t]*\("),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(lock|xadd|mfence|lfence|sfence|dmb|dsb|isb|ldxr|stxr|ldaxr|stlxr)\b",
+            re.I,
+        ),
+        # 16. ui_framework
+        "ui_framework": None,
+        # 17. closures
+        "closures": None,
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"^[ \t]*(?:\.data|\.bss|\.rodata|\.comm|section\s+\.data|section\s+\.bss)\b",
+            re.M | re.I,
+        ),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Instruction repetition prefixes.
+        "comprehensions": re.compile(
+            r"^[ \t]*(?:%rep|\.rept|\.irp)\b|\b(?:rep|repe|repne|repz|repnz)\b",
+            re.M | re.I,
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        # FPU, SSE, AVX, and NEON instructions.
+        "scientific": re.compile(
+            r"\b(fadd|fsub|fmul|fdiv|fsqrt|vadd[ps][sd]|vsub[ps][sd]|vmul[ps][sd]|fmla|fmov)\b",
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Complex SIB addressing and block replication.
+        "reflection_metaprogramming": re.compile(r"\[\s*[a-zA-Z0-9_]+\s*\+\s*[a-zA-Z0-9_]+\s*\*\s*\d+", re.I),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*(?:%include|\.include|\.incbin|INCLUDE|INCLUDELIB)\b", re.M | re.I),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:%include|\.include|\.incbin|INCLUDE|INCLUDELIB)\s+(?:['\"]([^'\"]+)['\"]|([^'\"\s]+))",
+            re.M | re.I,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"^[;#@/|]+\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)",
+            re.M | re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|rfc)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Interrupt vectors and exception handlers.
+        "events": re.compile(
+            r"\b(int\s+(?:0x)?[0-9a-fA-F]+|iret[qd]?|reti|svc|hvc|smc)\b|^[ \t]*(?:vector|handler|isr)_[a-zA-Z0-9_]+:",
+            re.M | re.I,
+        ),
+        # 33. dependency_injection
+        "dependency_injection": None,
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"^[ \t]*(?:%macro|\.macro|%endmacro|\.endm|%define|\.equ|\.set|#define)\b",
+            re.M | re.I,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Raw memory addressing and dereferencing.
+        "pointers": re.compile(r"(?i)(?:byte|word|dword|qword)[ \t]+ptr[ \t]*\[[^\]]*\]|\[[^\]]+\]"),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(
+            r"\b(?:call|bl)\s+(?:_?malloc|_?calloc)\b|\b(?:sys_mmap|sys_brk)\b",
+            re.I,
+        ),
+        # 37. inline_asm
+        "inline_asm": None,  # This is base assembly.
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:call|bl)\s+(?:log_info|log_error|log_warn|log_debug|syslog)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(?:call|bl)\s+(?:printf|puts|sys_write)\b", re.I),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"(?i)\b(?:byte|word|dword|qword)[ \t]+ptr\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # Hard execution destruction and unrecoverable hardware exceptions. [cite: 780]
+        "panics_and_aborts": re.compile(r"(?i)\b(?:hlt|ud2|brk|svc|int[ \t]+3)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        # Forcing hardware threads to sleep or pause execution. [cite: 781]
+        "thread_sleeps": re.compile(r"(?i)\b(?:pause|hlt|wfi|wfe)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        # Low-level byte manipulation natively supported by the instruction set. [cite: 782]
+        "bitwise_ops": re.compile(r"(?i)\b(?:and|or|xor|not|shl|shr|sal|sar|rol|ror|lsl|lsr|asr)\b"),
+        # 44. sync_locks (Resource Management & Stability)
+        # Explicit hardware coordination to prevent race conditions (e.g., atomic instructions, memory barriers). [cite: 783]
+        "sync_locks": re.compile(r"(?i)\b(?:lock|xchg|cmpxchg|stxr|ldxr|dmb|dsb|isb)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        # Explicit locking of data to prevent mutation (e.g., read-only data sections or constants). [cite: 784]
+        "immutability_locks": re.compile(r"(?i)\b(?:equ|\.rodata|\.rdata)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # Assembly relies on manual memory management via standard instructions, lacking dedicated cleanup APIs. [cite: 785]
+        "cleanup": re.compile(r"\b(?:call|bl)\s+_?free\b", re.I),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Logic hidden from view via visibility directives. [cite: 786]
+        "encapsulation": re.compile(r"^[ \t]*(?:\.local|\.private)\b", re.M | re.I),
+        # 48. listeners (Event Listeners / Observers)
+        # Assembly relies on hardware interrupts rather than high-level listener subscriptions. [cite: 787]
+        "listeners": None,
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # Framework code that explicitly bypasses verification. [cite: 788]
+        "test_skip": None,
+        # --- HYBRID DOMAIN SENSORS ---
+        # serialization_parsing: Assembly has no native or universal JSON/XML/YAML
+        # parsing construct -- unlike malloc/free/printf there is no single
+        # ubiquitous libc convention for this, so per Strict Feature Parity
+        # (Rule 4) this stays None rather than forcing a fit.
+        "serialization_parsing": None,
+        # regex_execution: No native regex instruction; the realistic native
+        # equivalent is a call into the POSIX libc regex API.
+        "regex_execution": re.compile(
+            r"\b(?:call|bl)\s+_?(?:regcomp|regexec|regfree|re_search|re_match)\b",
+            re.I,
+        ),
+        # time_date_logic: rdtsc/rdtscp are real native timestamp-counter
+        # instructions; also covers calls into the libc time API.
+        "time_date_logic": re.compile(
+            r"\brdtscp?\b|\b(?:call|bl)\s+_?(?:time|clock|clock_gettime|gettimeofday)\b",
+            re.I,
+        ),
+        # ipc_rpc_bridges: Raw process/IPC syscalls and their libc wrappers.
+        # Distinct from `io`'s generic sys_read/sys_open/syscall tokens.
+        "ipc_rpc_bridges": re.compile(
+            r"\b(?:call|bl)\s+_?(?:fork|execve|pipe|socket|clone)\b|\bsys_(?:fork|execve|pipe|clone)\b",
+            re.I,
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/batch.py b/gitgalaxy/standards/language_standards/languages/batch.py
new file mode 100644
index 000000000..a72f0ec73
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/batch.py
@@ -0,0 +1,21 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {"target_version": "Windows CMD/Batch", "status": "production"},
+    "extensions": [".bat", ".cmd"],
+    "exact_matches": [],
+    "discriminators": [],
+    "shebangs": [],
+    "lexical_family": "line_exclusive",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/blp.py b/gitgalaxy/standards/language_standards/languages/blp.py
new file mode 100644
index 000000000..4b335150c
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/blp.py
@@ -0,0 +1,21 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {"target_version": "Blueprint UI Markup", "status": "production"},
+    "extensions": [".blp"],
+    "exact_matches": [],
+    "discriminators": [".blp", ".ui"],
+    "shebangs": [],
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/c.py b/gitgalaxy/standards/language_standards/languages/c.py
new file mode 100644
index 000000000..8f1d13b58
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/c.py
@@ -0,0 +1,330 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "C23 (ISO/IEC 9899:2024 - constexpr, #embed, [[attributes]], nullptr, typeof)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources, headers, OpenCL kernels, Yacc grammars, and C-like scripting/ATS language files.
+    # THE FIX: Added .dts and .dtsi (Device Tree Source) to parse hardware maps.
+    "extensions": [
+        ".c",
+        ".h",
+        ".cl",
+        ".inc",
+        ".y",
+        ".idc",
+        ".cats",
+        ".dts",
+        ".dtsi",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files (like .h or .inc).
+    "discriminators": [
+        ".c",
+        "Makefile",
+        "configure.ac",
+        "configure.in",
+        "configure",
+        "CMakeLists.txt",
+        "Kconfig",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["tcc", "picoc", "cscript"],
+    # UPGRADED: Maps to Family 1 (Standard C)
+    # Rationale: Uses '//' for line-level literature; multi-line literature
+    # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and jumps. EXCLUDES exit/abort (bailout_hits).
+        "branch": re.compile(r"\b(if|else|switch|case|default|for|while|do|break|continue|goto)\b|&&|\|\||\?"),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks. Bounded negation [^)]* to prevent ReDoS on massive param lists.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE NESTED POINTER SHIELD (C) ]
+            # Standard parameter capture `[^)]*` fails instantly on function pointers
+            # like `void (*cb)(int)`.
+            # FIX: Replaced `[^)]*` with the 1-Level Nesting Trick `(?:[^)(]+|\([^)]*\))*`
+            # to safely swallow function pointer parameters without triggering ReDoS.
+            # Upgraded horizontal `[ \t*]*` to `[ \t\n*]*` to support vertical signatures.
+            # =====================================================================
+            # #1209: parameter-list span wrapped in its own capture group
+            # (was the whole match, "name(...)") so detector.py's counter
+            # isolates just "(...)" instead of falling back to whitespace-
+            # splitting the name-plus-parens text, which overcounted every
+            # zero/one-arg signature by +1 the same way Python's did (#1199).
+            # BUG FIX (#1282): the typed-parameter-list requirement only ever
+            # recognized C's builtin primitive keywords -- a parameter typed
+            # as a custom typedef/struct name (`PyThreadState *tstate`,
+            # `FILE *fp`, `size_t n`; the overwhelming majority of real-world C
+            # signatures, confirmed against cpython/ceval.c) never matched at
+            # all, so `_calculate_block_metrics` fell through to args_count's
+            # 0 default for functions with real, nonzero arity. cpp's own args
+            # rule already carries this exact fallback (`[A-Z]\w*` for
+            # PascalCase/typedef'd types, `[a-z_]\w*_t` for the `_t` typedef
+            # convention); mirrored here, plus `_*` ahead of the PascalCase
+            # branch for C's leading-underscore "reserved identifier"
+            # convention (`_PyStackRef`, `_Bool`, ...), extremely common in
+            # cpython internals and not covered by cpp's own version of this
+            # fallback.
+            r"(?!(?:if|for|while|switch|return|sizeof|typeof|_Alignof|__typeof__|__builtin_[a-zA-Z0-9_]+)\b)\b([a-zA-Z_]\w*)[ \t\n*]*(\(\s*(?:const\s+|volatile\s+)?(?:int|char|void|float|double|long|short|unsigned|signed|struct|enum|_*[A-Z]\w*|[a-z_]\w*_t|[a-z_]\w*\s+[*&]*\s*[a-zA-Z_]\w*)\b(?:[^)(]|\([^)]*\))*\))",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(struct|union|enum|typedef|return|void|restrict|auto|bool|true|false|_BitInt|alignas|alignof)\b"
+        ),
+        "func_start": re.compile(
+            # =====================================================================
+            # [ CRITICAL ROADMAP FOR FUTURE LLMs & MAINTAINERS: THE REDOS IRON WALL ]
+            # PURPOSE: Anchors executable logic blocks (functions) in C.
+            #
+            # 1. THE K&R AMBIGUITY TRAP (The Original Fix):
+            #    The engine was consuming `BEGIN` as a parameter type (e.g. `BEGIN i;`).
+            #    When it failed to find a semicolon, it backtracked through 15 loops of
+            #    whitespace combinations causing 34-second ReDoS hangs.
+            #    RULE: The K&R gap MUST use `(?!(?:BEGIN...)\b)[a-zA-Z_]` to instantly reject.
+            #    RULE: NO OVERLAPPING WHITESPACE: `\s+` exclusively owns all spaces.
+            #
+            # 2. [ THE COMPILER ATTRIBUTE SHIELD ] (Hard-learned from Pathological Fuzzer):
+            #    Kernel and embedded C code frequently stack `__attribute__((...))`
+            #    definitions across multiple vertical lines before the function signature.
+            #    FIX: Injected a dedicated, bounded `__attribute__` scanner `(?:__attribute__\s*\([^)]*\)\s*){0,5}`
+            #    at the start of the pipeline. This explicitly permits multi-line `\s*` traversal
+            #    without triggering Catastrophic Backtracking against the modifiers.
+            # =====================================================================
+            # 1. The Horizontal Anchor
+            r"^[ \t]*"
+            # [ THE COMPILER ATTRIBUTE SHIELD ]: Safely consumes GCC/Clang attributes across newlines.
+            # #2460: also a SAL / entry-point annotation macro before the return type
+            # (`__control_entrypoint(DllExport) STDAPI Foo()`, `_Ret_maybenull_`) --
+            # a `__`- or `_Uppercase`-prefixed identifier, optionally with a bracketed
+            # argument. Naming-shape bounded so it can't eat an ordinary function call.
+            r"(?:(?:__attribute__\s*\((?:[^)(]|\((?:[^)(]|\([^)]*\))*\))*\)|(?:__[a-z]\w*|_[A-Z][A-Za-z0-9]*_)(?:\s*\((?:[^)(]|\([^)]*\))*\))?)\s*){0,5}"
+            # 2. Modifiers (Strictly bounded)
+            r"(?:(?:static|inline|extern|_Noreturn|__inline__|__forceinline|constexpr)\s+){0,3}"
+            # 3. Complex types
+            r"(?:(?:struct|union|enum)\s+)?"
+            # 4. Return type (Strictly linear)
+            r"(?:[a-zA-Z_]\w+\s+){0,3}[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)"
+            # [ MACRO SHIELD ]: Support macros between return type and function name (e.g. PyAPI_FUNC(int) or _Py_HOT_FUNCTION)
+            r"(?:[a-zA-Z_]\w+(?:\s*\([^)]*\))?\s+){0,5}"
+            # 5. The "Not a Function" Shield
+            r"(?!(?:if|for|while|switch|return|sizeof)\b)"
+            # 6. The Identifier Capture (Satellite Name - Group 1)
+            r"([a-zA-Z_]\w*)"
+            # [NESTED PARENTHESIS FIX]: Uses 1-Level Nesting Trick to swallow function pointers and macros without ReDoS.
+            r"\s*\((?:[^)(]|\([^)]*\))*\)"
+            # 8. The K&R C Parameter Gap (Legacy support for DOOM/MS-DOS)
+            # [IRON WALL FIX]: Forces instant failure if it encounters BEGIN or control flow.
+            r"(?:\s+(?!(?:BEGIN|if|for|while|switch|return)\b)[a-zA-Z_][^;{]{0,150};){0,15}"
+            # 9. The Ignition (Includes the MS-DOS 'BEGIN' macro)
+            r"\s*(?:\{|BEGIN\b)",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # C uses structs/unions/enums as the primary entity entities.
+        # BUG FIX (epic #813/#822): the tag name was mandatory, so anonymous typedef'd structs
+        # (`typedef struct { ... } MyStruct;`, an extremely common real C idiom) never matched
+        # at all -- undercounting this structural signature. Made the tag name optional.
+        # NOTE: a trailing-`{` requirement was tried and reverted -- it would have "fixed" this
+        # rule matching bare variable declarations of an existing struct type
+        # (`struct foo_ops ops;`), but test_c_intentional_double_classification_sweep
+        # (tests/extraction/languages/test_c_strict.py) documents that co-firing as DELIBERATE: it's how
+        # the `_ops`-vtable-style dependency_injection heuristic pairs with class_start for
+        # exactly this shape. Any future change here must keep that test passing.
+        "class_start": re.compile(r"^[ \t]*(?:typedef[ \t]+)?(?:struct|union|enum)\b(?:\s+([a-zA-Z_]\w*))?", re.M),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(assert|static_assert|_Static_assert|size_t|snprintf|strncat|strncpy|calloc|nullptr|unreachable|ckd_add|ckd_sub|ckd_mul)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Dangerous legacy functions and raw void manipulation.
+        "safety_bypasses": re.compile(r"\b(strcpy|strcat|sprintf|gets|alloca)\b|\([a-zA-Z_]\w*\s*\*\)\s*[a-zA-Z_]\w*"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and context switches. EXCLUDES prints (Phase 5).
+        "high_risk_execution": re.compile(r"\b(system|popen|execl|execv|fork|longjmp|setjmp)\b"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(fopen|fclose|fread|fwrite|fscanf|sscanf|socket|recv|send|open|read|write|close|stat|fseek|remove|rename)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Linker-visible global exports.
+        "api": re.compile(
+            # =====================================================================
+            # [ROADMAP: AMBIGUITY OVERLAP AVOIDANCE]
+            # Previously used `[ \t*]+` between words. If a string failed to match,
+            # the engine backtracked to see if it should assign spaces to the left
+            # word, right word, or the wildcard.
+            # FIX: We now use strict O(1) alternation `(?:\s*[*&]+\s*|\s+)` which
+            # forces the engine to choose exactly one path and never backtrack.
+            # =====================================================================
+            # BUG FIX (Rule 9): `__declspec(dllexport)` and
+            # `__attribute__((visibility("default")))` both end in `)`
+            # (non-word) but shared a trailing `\b` with word-ending
+            # `extern` -- `\b` right after can only fire if the next char
+            # is a word character, never true for the realistic form
+            # (whitespace/newline before the return type follows). Pulled
+            # both out of the shared boundary group.
+            r"\bextern\b|__declspec\(dllexport\)|"
+            r'__attribute__\(\(visibility\("default"\)\)\)|'
+            r"^[ \t]*(?!static\b)[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)[a-zA-Z_]\w*(?:\[[^\]]*\])?\s*=?|"
+            r"^[ \t]*[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)[a-zA-Z_]\w*\s*\([^)]*\)\s*;",
+            re.M,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES const/constexpr (freeze_hits).
+        "state_mutation": re.compile(r"(?<![=!<>])=(?![=])|\*(?!\s*const)\w+[ \t]*=|(?:\+\+|--)"),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"(?://|/\*)[ \t]*(?:if|for|while|struct|union|enum|void|int|return)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"///|/\*\*|@param|@return|@brief|@details|\\param|\\return|\\brief|\\details"),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r"\b(?:TEST|TEST_F|TEST_CASE|CU_ASSERT|RUN_TEST|EXPECT_[A-Z_]+|ASSERT_[A-Z_]+)\b|\bassert\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(thrd_create|thrd_join|mtx_lock|pthread_create|pthread_mutex_lock|atomic_int|_Atomic|memory_order_[a-z]+|thread_local)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r"\b(GtkWidget|CreateWindow|MessageBox|XOpenDisplay|gtk_window_new|Fl_Window|initscr|wprintw)\b"
+        ),
+        # 17. closures
+        "closures": None,  # Strict C23 lacks native closures (blocks are non-standard).
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            # =====================================================================
+            # [ROADMAP: AMBIGUITY OVERLAP AVOIDANCE]
+            # Same strict O(1) alternation fix applied here as in the `api` rule
+            # to prevent exponential space/asterisk evaluation.
+            # =====================================================================
+            r"^[ \t]*(?:static\s+|extern[ \t]+)?[a-zA-Z_]\w*(?:\s*[*&]+\s*|\s+)[a-zA-Z_]\w*(?:\[[^\]]*\])?\s*=(?![ \t]*==)",
+            re.M,
+        ),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"\[\[\s*[a-zA-Z_:][^\]]*\s*\]\]"),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"\b_Generic\s*\([^)]*\)"),
+        # 21. comprehensions
+        "comprehensions": None,
+        # 22. scientific (Numerical / Compute Libraries)
+        # BUG FIX (Rule 9): `cblas_` ends in `_` (a word char) and was
+        # clearly intended as a prefix match for any BLAS routine
+        # (`cblas_dgemm`, `cblas_sgemm`, ...), but shared a trailing `\b`
+        # with word-ending siblings -- real usage always continues with
+        # more word characters right after (`cblas_dgemm`), so the
+        # boundary could never fire (both sides word chars). Pulled out
+        # of the shared group with only a leading `\b`.
+        "scientific": re.compile(
+            r"\b(?:math\.h|tgmath\.h|complex\.h|dgemm|sin|cos|tan|exp|log|sqrt|complex|I|_Float\d+|__m\d+)\b|\bcblas_"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Macros with args and unstructured jumps.
+        "reflection_metaprogramming": re.compile(r"^#\s*define\s+[a-zA-Z_]\w*\([^)]*\)|\bgoto\b", re.M),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r'^[ \t]*#[ \t]*(?:include|embed)\s*[<"][^>"]+[>"]', re.M),
+        "_dependency_capture": re.compile(r'^[ \t]*#[ \t\n]*(?:include|embed)[ \t\n]*[<"]([^>"]+)[>"]', re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:@author|\\author|Author:|Created by:|Copyright)\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, and
+        # rust earlier in this epic. Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(r"\b(FCGI_Accept|khttp_parse|MHD_start_daemon|facil\.io)\b"),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(epoll_wait|epoll_ctl|kqueue|kevent|select|poll|libev|libuv)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(r"\b(plugin_register|vtable|struct\s+[a-zA-Z_]\w*_ops)\b"),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"^[ \t]*#[ \t]*(?:define|undef|if|elif|else|endif|pragma|warning|error)\b",
+            re.M,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": re.compile(
+            r"->|\b(?:uintptr_t|intptr_t|ptrdiff_t|size_t)\b|(?<=[=\s,(])&\w+|(?<=[=\s,(])\*(?:\s*const\s*)?\w+"
+        ),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(r"\b(malloc|calloc|realloc|free|aligned_alloc|mmap|alloca)\b"),
+        # 37. inline_asm (The Bare Metal)
+        "inline_asm": re.compile(
+            r"\b(?:__asm__|asm|__asm)\b(?:\s+(?:volatile|__volatile__))?\s*\(|\b(?:__asm__|asm|__asm)\b[ \t]*\{"
+        ),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(r"\b(?:syslog|openlog|log_info|log_error|log_warn|log_debug|vsyslog)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(printf|fprintf|vprintf|puts|putchar|perror)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            # =====================================================================
+            # [ROADMAP: NESTED OPTIONAL SPACES (ReDoS TRAP)]
+            # FIX 2: `\s*[*]*\s*` is highly vulnerable to ReDoS if the payload
+            # is spaced asterisks like `(int * * *)`. Flattened to strictly linear
+            # `[ \t\n]*(?:\*[ \t\n]*)*` to prevent any overlapping whitespace matching.
+            # =====================================================================
+            r"\(\s*(?:int|float|double|char|bool|long|short|unsigned|signed|void)[ \t\n]*(?:\*[ \t\n]*)*\)\s*[a-zA-Z_]"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(abort|exit|_Exit|quick_exit|return\s+-1)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(sleep|usleep|nanosleep|thrd_sleep)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|\^|(?<![=!])~|<<=|>>=|&=|\|=|\^="),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(mtx_lock|mtx_unlock|pthread_mutex_lock|atomic_flag_test_and_set|atomic_store)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|constexpr|alignas|restrict)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(free|fclose|close|munmap|destroy|shutdown)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Physical Reality: Static functions/variables are internal/private to the translation unit.
+        "encapsulation": re.compile(r"^[ \t]*static\b", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(on_event|handler|callback|signal\(|sigaction\()"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX (Rule 10): `mock\(`/`fake\(` end in a literal `(` but
+        # shared a trailing `\b` with word-ending siblings -- broke on
+        # the truly-empty-argument call form (`mock()`), where the next
+        # char after `(` is `)`, not a word char.
+        "test_skip": re.compile(r"\b(?:IGNORE_TEST|test\.skip)\b|mock\(|fake\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (C Specifics) ---
+        "serialization_parsing": re.compile(r"\b(cJSON_Parse|json_loads|xmlReadMemory|xmlParseFile|jansson)\b"),
+        "regex_execution": re.compile(r"\b(regcomp|regexec|regfree)\b"),
+        "time_date_logic": re.compile(r"\b(time_t|clock_gettime|gettimeofday|localtime_r?|strftime)\b"),
+        "ipc_rpc_bridges": re.compile(r"\b(fork|pipe|shmget|shmat|mmap|socket|bind|listen|accept)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/cobol.py b/gitgalaxy/standards/language_standards/languages/cobol.py
new file mode 100644
index 000000000..0bdb91e1e
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/cobol.py
@@ -0,0 +1,385 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Enterprise COBOL 6.4 (IBM) & GnuCOBOL 3.2",
+        "last_updated": "2026-03-10",
+        "blueprint_version": "v5.1",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard COBOL source files and copybooks (.cpy) which act as legacy header files.
+    "extensions": [".cbl", ".cob", ".cpy", ".cobol", ".pco", ".cut"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Mainframe environments do not typically use extensionless execution scripts.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and Job Control Language (.jcl) files which orchestrated legacy COBOL execution.
+    "discriminators": [".cbl", ".cob", ".cpy", ".jcl"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 (primarily for modern GnuCOBOL scripting).
+    "shebangs": ["cobc"],
+    # UPGRADED: Maps to Family 7 (The Positional Ancients)
+    # Rationale: Strictly fixed-format. The engine must monitor Column 7 for an asterisk '*'
+    # or slash '/' to identify line-level Commented / Non-Executable Text.
+    "lexical_family": "positional_anchored",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: Entscheidungslogik. Control flow that splits execution paths.
+        "branch": re.compile(
+            r"\b(IF|ELSE|EVALUATE|WHEN|PERFORM|UNTIL|VARYING|TIMES|DEPENDING\s+ON|ON\s+EXCEPTION|AT\s+END|INVALID\s+KEY|ON\s+SIZE\s+ERROR|ON\s+OVERFLOW)\b",
+            re.I,
+        ),
+        # 2. args: Parameters / Coupling. Captures USING and RETURNING signatures in PROCEDURE division or CALLs.
+        # BUG FIX (epic #813/#854): the parameter-name repetition had no
+        # exclusion for the literal word "RETURNING" -- so
+        # `PROCEDURE DIVISION USING WS-A RETURNING WS-B.` (declaring both
+        # a parameter AND a return value in one division header,
+        # extremely common real Enterprise COBOL/GnuCOBOL) had USING's
+        # own capture bleed straight through "RETURNING" and swallow
+        # WS-B too, instead of stopping at the clause boundary. Fixed
+        # with a negative lookahead excluding "RETURNING" from the
+        # parameter-name alternative, so `finditer` now correctly yields
+        # two separate matches (USING -> WS-A, RETURNING -> WS-B).
+        "args": re.compile(
+            r"\b(?:USING|RETURNING)\s+((?:(?:BY\s+(?:REFERENCE|CONTENT|VALUE)\s+)?(?!RETURNING\b)[A-Z0-9_-]+\s*,?){0,20})",
+            re.I,
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining straight-line execution flow.
+        # EXCLUDES access modifiers (GLOBAL, EXTERNAL) to prevent Structural Complexity Inflation.
+        "structural_boundaries": re.compile(
+            r"\b(DIVISION|SECTION|EXIT|CONTINUE|GOBACK|ACCEPT|XML\s+PARSE|JSON\s+GENERATE|DISPLAY|STOP\s+RUN)\b",
+            re.I,
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors logic blocks (Paragraphs and Sections).
+        # =====================================================================
+        # [ CONTEXT: COBOL FUNCTION/PARAGRAPH AST EXTRACTOR & REDOS SHIELD]
+        # PURPOSE: Anchors executable logic blocks (Paragraphs and Sections) in COBOL.
+        # VULNERABILITY: COBOL spans 60 years of formatting rules (Fixed vs Free format).
+        #   Without strict column boundaries, standard verbs or data definitions
+        #   (like 01 levels) resting against the margin will hallucinate False Positives.
+        # THE "IRON WALL" FIX: Combines strict leading-margin allowances with
+        #   comprehensive negative lookaheads to explicitly ban COBOL reserved words,
+        #   data structures, and Division headers.
+        # =====================================================================
+        # 4. func_start: Executable Logic Anchors. Anchors logic blocks (Paragraphs and Sections).
+        "func_start": re.compile(
+            # =====================================================================
+            # [ CONTEXT: COBOL FUNCTION/PARAGRAPH AST EXTRACTOR & REDOS SHIELD ]
+            # PURPOSE: Anchors executable logic blocks (Paragraphs and Sections) in COBOL.
+            #
+            # [ THE GREEDY MARGIN TRAP ] (Hard-learned from Pathological Fuzzer):
+            # Legacy COBOL uses a 6-character sequence area. Our regex optionally
+            # eats these 6 characters: `(?:[0-9a-zA-Z \t]{6}[ \-]?)?`.
+            # If a free-format developer writes a paragraph flush against the left
+            # margin (e.g., `TargetFunc.`), the regex greedily eats the first 6
+            # characters (`Target`) as the sequence number, and captures `Func` as
+            # the paragraph name!
+            # THE FIX: We injected a strict word boundary `\b` right before the
+            # identifier capture group. If the margin-eater chops a word in half,
+            # the `\b` fails, forcing the regex engine to backtrack, skip the
+            # optional margin-eater, and correctly capture the full word `TargetFunc`.
+            # =====================================================================
+            # 1. THE HORIZONTAL ANCHOR & FORMAT SHIELD
+            # Safely handles strict 80-column punched card formats (6-char sequence)
+            # and modern free-format code.
+            # The column-7 indicator slot accepts a blank/`-` (continuation), and a
+            # `D`/`d` debug flag ONLY when a name-char immediately follows it
+            # (`064100D` + `DEBUG-LINE-TEST-03-A`, otherwise captured as
+            # `DDEBUG-LINE-TEST-03-A`). The `(?=[A-Za-z])` keeps this narrow: a `D`
+            # followed by whitespace (`064000D        PASS.`) is left to the normal
+            # path so debug-only paragraph *redefinitions* aren't newly counted --
+            # this fix is about a mangled name, not about widening what counts.
+            # `*`/`/` (comment, page-eject) are excluded -- prism.py strips those
+            # first, and a commented-out paragraph is dead_code, not a func_start.
+            # The post-anchor slot is `[ \t]*` -- HORIZONTAL whitespace only, no
+            # `\n`. #2480: the old `[ \t\n]*` let `^` (re.M) match on a blank line
+            # that prism.py leaves behind after stripping the `*` comment lines that
+            # bracket a debug paragraph, then skip forward across the newline INTO
+            # the real content line -- PAST the col-1-6 sequence-area shield -- so the
+            # sequence number + col-7 `D` were swept into the captured name
+            # (`066600DDEBUG-LINE-TEST-05-A` in DB1034.2.cbl:665). Dropping `\n` here
+            # fixes it with no loss: `^` already re-anchors on the real line under
+            # re.M, and the one genuine vertical gap (name and its `SECTION` keyword
+            # on separate physical lines) is consumed by the section-6 lookahead's
+            # own `[ \t\n]+SECTION`, not here. Re-adding a blank-line consumer was
+            # tried and rejected -- every variant either regressed corpus output or
+            # was measurably catastrophic on a whitespace-heavy pathological input.
+            # Confirmed against language-crucible v1.2.0
+            # (che-che4z_nist_ccvs85/DB1024.2.cbl:640, DB1034.2.cbl:665).
+            r"^(?:[0-9a-zA-Z \t]{6}(?:[ \-]|(?<=[0-9])[Dd](?=[A-Za-z]))?)?[ \t]*"
+            # 2. THE DATA DIVISION SHIELD
+            # Explicitly bans data level indicators (01 through 88).
+            # Prevents massive "01 POLICY." data structures from being hallucinated as paragraphs.
+            r"(?!(?:01|02|03|04|05|10|15|20|66|77|88)\s+)"
+            # 3. THE RESERVED VERB & SCOPE TERMINATOR SHIELD
+            # Explicitly bans standard COBOL execution verbs, divisions, and scope terminators (`END-*`).
+            # Prevents rogue commands like "PERFORM." from spawning false positive logic anchors.
+            r"(?!(?:WORKING-STORAGE|LOCAL-STORAGE|DATA|ENVIRONMENT|IDENTIFICATION|ID|LINKAGE|FILE|DECLARATIVES|"
+            r"AUTHOR|DATE-WRITTEN|DATE-COMPILED|INSTALLATION|REMARKS|SECURITY|"
+            # #1949 follow-up: SOURCE-COMPUTER/OBJECT-COMPUTER are CONFIGURATION
+            # SECTION (ENVIRONMENT DIVISION) header paragraphs, never real PROCEDURE
+            # DIVISION logic -- same reserved-header category as INPUT-OUTPUT/
+            # CONFIGURATION two lines below, just missing from this list. Surfaced
+            # once Mode A stopped discarding single-line bodies (real fix for #1949's
+            # own Bug 2): `SOURCE-COMPUTER.  IBM-370.` collapses to one line and was
+            # previously masked by that discard guard, not by this shield --
+            # confirmed false positive against real corpus source
+            # (`cics-banking-sample-application-cbsa/BNKMENU.cbl:23`).
+            r"SOURCE-COMPUTER|OBJECT-COMPUTER|"
+            r"INPUT-OUTPUT|CONFIGURATION|DISPLAY|CALL|MOVE|COMPUTE|PERFORM|ADD|SUBTRACT|MULTIPLY|"
+            r"DIVIDE|INITIALIZE|SET|IF|ELSE|GOBACK|EXIT|STOP|EVALUATE|WHEN|READ|WRITE|REWRITE|"
+            # CONTINUE is a no-op statement (COBOL's `pass`); on its own line
+            # `CONTINUE.` is `<verb>.`, not a paragraph header. Confirmed FP against
+            # language-crucible v1.2.0 (che-che4z_nist_ccvs85/IF4014.2.cbl:30 etc.,
+            # cobol-sample_SAMPLE1.cbl). Same class as LOCAL-STORAGE (#1890).
+            r"DELETE|OPEN|CLOSE|CONTINUE|PROGRAM-ID|CLASS-ID|SECTION|DIVISION|END-[A-Za-z0-9_-]+)(?=[ \t\n.]))"
+            # 4. THE DIVISION/SECTION HEADER SHIELD
+            # Bans any word followed immediately by DIVISION (e.g., "PROCEDURE DIVISION").
+            # Upgraded to `[ \t\n]+` to prevent vertical ghosting.
+            r"(?![A-Za-z0-9_-]+[ \t\n]+DIVISION\b)"
+            # 5. THE IDENTIFIER CAPTURE (FUNCTION IDENTIFIER - GROUP 1)
+            # [ THE GREEDY MARGIN SHIELD ]: The `\b` forces the engine to evaluate the whole word,
+            # preventing the 6-character margin-eater from splitting flush-left identifiers.
+            # The `(?<=[0-9]{6}[ \-Dd])` alternative to `\b` lets the name start
+            # immediately after a real fixed-format col-1-7 prefix (6-digit sequence
+            # + indicator) even when col-7 is a `D` debug flag glued to a word-char
+            # name start (`064100D` + `DEBUG-LINE-TEST-03-A`) -- the digit prefix
+            # proves it's a genuine sequence area, not the greedy-margin trap
+            # (`TargetFunc.`), whose 6 non-digit chars fail this lookbehind.
+            # The name must contain at least one letter: a pure-digit token is a
+            # stray sequence number, not a paragraph name (a real digit-led name
+            # like `0000-MAIN` still matches -- it has letters). Both confirmed FP
+            # against language-crucible v1.2.0 (che-che4z_nist_ccvs85/DB1024.2.cbl:640,
+            # NC1134.2.cbl:118).
+            r"(?:\b|(?<=[0-9]{6}[ \-Dd]))([0-9_-]*[A-Za-z][A-Za-z0-9_-]*)"
+            # 6. THE IGNITION & TRAILING ANCHOR (Lookahead)
+            # Confirms paragraph/section by looking for an optional "SECTION", then a mandatory ".".
+            # Upgraded to `[ \t\n]+` to allow vertical separation between the name and SECTION.
+            # THE "SQL GHOST" FIX: `(?:\s|$)` blocks SQL qualifiers (e.g., "POLICY.CUSTOMERNUMBER").
+            # BUG FIX (epic #813/#854): SECTION had no allowance for a
+            # trailing SEGMENT-NUMBER (`MAIN-PARA SECTION 10.`) -- a real
+            # COBOL-68/74-era feature (program segmentation/overlay
+            # structuring for early mainframes' limited memory) still
+            # accepted by modern compilers for legacy program support.
+            # Without it, any segmented section header was entirely
+            # invisible. Added an optional 1-2-digit segment number.
+            r"(?=(?:[ \t\n]+SECTION(?:[ \t\n]+[0-9]{1,2})?)?[ \t]*\.(?:[ \t\n]|$))",
+            re.I | re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines structural program and modern OO boundaries.
+        # BUG FIX (epic #813/#854), two findings:
+        # 1. The lookahead required the entity name to be IMMEDIATELY
+        #    followed by a period/newline/EOS, with no allowance for the
+        #    standard trailing clauses these paragraphs actually support
+        #    -- `PROGRAM-ID. Foo IS INITIAL PROGRAM.`, `PROGRAM-ID. Foo
+        #    IS COMMON PROGRAM.`, `CLASS-ID. Foo FINAL.`, `CLASS-ID. Foo
+        #    INHERITS Base.`, `INTERFACE-ID. Foo INHERITS Base.` -- all
+        #    real, documented Enterprise COBOL syntax -- were entirely
+        #    invisible. Fixed with a bounded (max 6) run of additional
+        #    space-separated clause words between the captured name and
+        #    the terminating period; the loop can't cross into an
+        #    unrelated following paragraph since it requires whitespace
+        #    before each word and a bare period (not preceded by
+        #    whitespace) always stops it at the real statement boundary.
+        # 2. That widening itself reopened a DIFFERENT false-positive
+        #    vector, caught before shipping: FACTORY./OBJECT. are
+        #    standalone structural markers (never followed by a real
+        #    name), always immediately followed by a division header
+        #    (`FACTORY.\n    IDENTIFICATION DIVISION.`) -- with the
+        #    trailing-clause loop now wide enough to eat one extra word,
+        #    "IDENTIFICATION"/"PROCEDURE"/etc. got captured as the name
+        #    and "DIVISION" got swallowed as if it were a trailing
+        #    clause word. Fixed by excluding "DIVISION" from the
+        #    trailing-clause loop specifically -- no real PROGRAM-ID/
+        #    CLASS-ID/INTERFACE-ID clause ever legitimately contains
+        #    that word, since a division header always starts its own
+        #    separate paragraph.
+        "class_start": re.compile(
+            r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:PROGRAM-ID|CLASS-ID|INTERFACE-ID|FACTORY|OBJECT)\.\s+([A-Za-z0-9_-]+)(?:[ \t\n]+(?!DIVISION\b)[A-Za-z0-9_-]+){0,6}(?=[ \t]*\.|\n|$)",
+            re.I | re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Defensive scope terminators and declarative blocks.
+        "safety": re.compile(
+            r"\b(END-IF|END-PERFORM|END-EVALUATE|END-READ|END-WRITE|END-COMPUTE|END-CALL|DECLARATIVES|VALIDATE|CHECK)\b",
+            re.I,
+        ),
+        # 7. safety_neg: Safety Bypasses. Bypassing logic or unpredictable jumps.
+        "safety_bypasses": re.compile(
+            r"\b(NEXT\s+SENTENCE|GO\s+TO|CORRESPONDING|ANY\s+LENGTH|OMITTED)\b",
+            re.I,
+        ),
+        # 8. danger: High-Risk Execution. Process-stopping commands and self-modifying code (ALTER).
+        "high_risk_execution": re.compile(r"\b(STOP\s+RUN|ALTER|CANCEL)\b", re.I),
+        # 9. io: I/O & Network Boundaries. Disk, Database (SQL), and CICS communication.
+        "io": re.compile(
+            r"\b(READ|WRITE|REWRITE|OPEN|CLOSE|START|DELETE|EXEC\s+SQL|EXEC\s+CICS\s+(?:READ|WRITE|REWRITE|DELETE))\b",
+            re.I,
+        ),
+        # 10. api: Public Surface Area. Exposed linkage points and external entries.
+        "api": re.compile(r"\b(ENTRY|LINKAGE\s+SECTION|CALL|INVOKE|EXPORT)\b", re.I),
+        # 11. flux: State Mutation. State mutation (The core of COBOL data manipulation).
+        "state_mutation": re.compile(
+            r"\b(MOVE|COMPUTE|ADD|SUBTRACT|MULTIPLY|DIVIDE|SET|INITIALIZE|REPLACE|STRING|UNSTRING)\b",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural logic (Column 7 indicator).
+        "dead_code": re.compile(
+            r"^(?:.{6}\*|[ \t]*\*>)[ \t]*(?:MOVE|COMPUTE|IF|PERFORM|CALL|EXEC)\b",
+            re.I | re.M,
+        ),
+        # 13. doc: Structured Documentation. Identification metadata and structured comments.
+        "doc": re.compile(
+            r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:AUTHOR|DATE-WRITTEN|DATE-COMPILED|REMARKS|INSTALLATION)\.|\*>\s*@(?:param|return|author)",
+            re.I | re.M,
+        ),
+        # 14. test: Testing & Assertions. Unit testing framework markers (ZUnit).
+        "test": re.compile(r"\b(ZUNIT|CBLUNIT|ASSERT|TEST-CASE|READY\s+TRACE)\b", re.I),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. CICS Task and resource coordination.
+        "concurrency": re.compile(r"\bEXEC\s+CICS\s+(?:ENQ|DEQ|WAIT|START|DELAY)\b", re.I),
+        # 16. ui_framework: UI / View Components. Screen sections and CICS maps.
+        "ui_framework": re.compile(
+            r"\b(SCREEN\s+SECTION|EXEC\s+CICS\s+SEND\s+MAP|DFHMDF|DFHMDI|DFHMSD)\b",
+            re.I,
+        ),
+        # 17. closures: Closures / Anonymous Functions. (COBOL lacks native lambdas).
+        "closures": None,
+        # 18. globals: Global / Shared State. Global storage and external linkages.
+        "globals": re.compile(r"\b(WORKING-STORAGE\s+SECTION|COMMON|GLOBAL|EXTERNAL)\b", re.I),
+        # 19. decorators: Decorators / Annotations. (COBOL uses compiler directives).
+        "decorators": re.compile(
+            r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*>>\s*(?:IF|ELSE|END-IF|DEFINE|CALL-CONVENTION)",
+            re.I | re.M,
+        ),
+        # 20. generics: Generics / Type Parameters. Parameterized classes (Modern COBOL).
+        "generics": re.compile(r"\bCLASS-ID\.\s+[A-Za-z0-9_-]+\s+USING\s+[A-Za-z0-9_-]+", re.I),
+        # 21. comprehensions: Iterators / Comprehensions. (Not native to COBOL).
+        "comprehensions": None,
+        # 22. scientific: Numerical / Compute Libraries. Intrinsic math functions.
+        "scientific": re.compile(
+            r"\bFUNCTION\s+(?:ACOS|ASIN|ATAN|COS|EXP|FACTORIAL|LOG|LOG10|MOD|RANDOM|SQRT|TAN|VARIANCE)\b",
+            re.I,
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Metaprogramming and memory aliasing.
+        "reflection_metaprogramming": re.compile(
+            r"\b(REDEFINES|RENAMES|OCCURS\s+DEPENDING\s+ON|EVALUATE\s+TRUE|EXEC\s+CICS|EXEC\s+SQL)\b",
+            re.I,
+        ),
+        # 24. import (Dependency Inclusions)
+        # BUG FIX (Strict Feature Parity, Rule 4): this key was missing
+        # entirely (not even explicitly None), despite COBOL clearly
+        # having a real dependency-inclusion mechanism (COPY/INCLUDE
+        # copybooks) -- confirmed by `_dependency_capture` immediately
+        # below already correctly extracting these same targets. Every
+        # language's rules dict is expected to define every baseline
+        # key, using None only where genuinely inapplicable (per
+        # how_to_add_a_language.md's Strict Feature Parity rule); a
+        # silently absent key is a real schema-completeness gap, not an
+        # intentional None.
+        "import": re.compile(r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:COPY|INCLUDE)\b", re.I | re.M),
+        "_dependency_capture": re.compile(
+            r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*(?:COPY|INCLUDE)[ \t\n]+['\"]?([A-Za-z0-9_-]+)['\"]?",
+            re.I | re.M,
+        ),
+        # 25. ownership: Authorship indicators.
+        "ownership": re.compile(r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*AUTHOR\.\s+([^\n]+)", re.I | re.M),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
+        # 31. ssr_boundaries: View Horizon. CICS web endpoints.
+        "ssr_boundaries": re.compile(r"\bEXEC\s+CICS\s+(?:WEB\s+SEND|DOCUMENT|WEB\s+READ)\b", re.I),
+        # 32. events: Pub/Sub Network. Signal handlers and MQ bindings.
+        # BUG FIX: the `CALL 'MQPUT'`/`CALL 'MQGET'` alternative shared a
+        # trailing `\b` with the word-ending EXEC CICS alternative, but
+        # ends in a literal `'` (non-word) -- `\b` right after can only
+        # fire if the next char is a word character, never true for the
+        # realistic form (`CALL 'MQPUT' USING queue-name.`, whitespace
+        # after the closing quote). Pulled out of the shared group.
+        "events": re.compile(
+            r"\bEXEC\s+CICS\s+(?:SIGNAL|HANDLE\s+CONDITION)\b|CALL\s+'(?:MQPUT|MQGET)'",
+            re.I,
+        ),
+        # 33. dependency_injection: Inversion of Control.
+        "dependency_injection": None,
+        # 34. macros: Preprocessor Hooks. DEFINE directives.
+        "macros": re.compile(
+            r"^(?:[0-9a-zA-Z \t]{6}[ \-]?)?[ \t]*DEFINE\s+[A-Z0-9_-]+\.|>>DEFINE",
+            re.I | re.M,
+        ),
+        # 35. pointers: Memory Map. Explicit pointer tracking.
+        "pointers": re.compile(
+            r"\b(?:POINTER|PROCEDURE-POINTER|FUNCTION-POINTER)\b|\bADDRESS\s+OF\b",
+            re.I,
+        ),
+        # 36. memory_alloc: Manual Memory Management. Heap and CICS allocation.
+        "memory_alloc": re.compile(r"\b(?:ALLOCATE|FREE|EXEC\s+CICS\s+(?:GETMAIN|FREEMAIN))\b", re.I),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics.
+        "telemetry": re.compile(r"\b(?:EXEC\s+CICS\s+WRITEQ\s+TD|CEE3DMP|CEEMOUT|CEEDUMP)\b", re.I),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(DISPLAY)\b", re.I),
+        # 40. explicit_casts (Explicit Type Casting): Explicit type coercion/casting.
+        "explicit_casts": re.compile(r"\b(REDEFINES)\b", re.I),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution.
+        "panics_and_aborts": re.compile(r"\b(STOP\s+RUN|EXIT\s+PROGRAM|GOBACK)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits).
+        "thread_sleeps": re.compile(r"\bEXEC\s+CICS\s+DELAY\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations) (Modern intrinsic bitwise).
+        "bitwise_ops": re.compile(r"\bFUNCTION\s+(?:BIT-AND|BIT-OR|BIT-XOR|BIT-NOT)\b", re.I),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\bEXEC\s+CICS\s+ENQ\b", re.I),
+        # 45. immutability_locks (Immutability Constraints) Immutability.
+        "immutability_locks": re.compile(r"\b(CONSTANT)\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown) Resource release.
+        "cleanup": re.compile(r"\b(CLOSE|FREE|END-DECLARATIVES)\b", re.I),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"\b(LOCAL-STORAGE\s+SECTION|PRIVATE)\b", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(?:MQGET|EXEC\s+CICS\s+RECEIVE)\b", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(IGNORE)\b", re.I),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (COBOL Specifics) ---
+        "serialization_parsing": re.compile(
+            r"(?i)\b(UNSTRING|STRING|JSON\s+PARSE|JSON\s+GENERATE|XML\s+PARSE|XML\s+GENERATE)\b"
+        ),
+        "regex_execution": re.compile(
+            r"(?i)\b(INSPECT|TALLYING|REPLACING)\b"
+        ),  # COBOL's hardware-level string manipulation engine
+        # BUG FIX (severe ReDoS): `\s+.*\s+FROM` has three adjacent
+        # quantifiers whose character sets overlap (`.` matches
+        # whitespace too), so the engine can partition the space between
+        # the receiving-identifier and the two `\s+`s in exponentially
+        # many ways before finding `FROM` -- confirmed 9+ seconds at just
+        # n=2000 (far worse than the typical ~4x/doubling shape). Real
+        # COBOL syntax only ever has a single identifier there, so
+        # replaced the unbounded `.*` with a real identifier character
+        # class, which is both correct and eliminates the ambiguity.
+        "time_date_logic": re.compile(
+            r"(?i)\bACCEPT\s+[A-Za-z0-9_-]+\s+FROM\s+(?:DATE|TIME|DAY)\b|\b(?:CURRENT-DATE|WHEN-COMPILED)\b"
+        ),
+        # BUG FIX: `CALL\s+` shared a trailing `\b` with word-ending
+        # siblings, but ends in whitespace (non-word) -- broke on the
+        # dominant realistic call form, a quoted program-name literal
+        # (`CALL 'SUBPROGRAM' USING ...`), where a quote (non-word)
+        # follows the consumed whitespace. Only the less-common unquoted
+        # data-name form (`CALL WS-PROGRAM-NAME`) happened to work.
+        "ipc_rpc_bridges": re.compile(r"(?i)\bCALL\s+|\bEXEC\s+CICS\s+(?:LINK|XCTL|START|RETURN)\b|\bEXEC\s+SQL\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/cpp.py b/gitgalaxy/standards/language_standards/languages/cpp.py
new file mode 100644
index 000000000..b5757d9fb
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/cpp.py
@@ -0,0 +1,480 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "C++23 (Modules, Concepts, Coroutines, Ranges, std::print)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources, headers, template implementations, inline implementations, and legacy UNIX casing conventions.
+    "extensions": [
+        ".cpp",
+        ".cc",
+        ".cxx",
+        ".c++",
+        ".hpp",
+        ".hh",
+        ".hxx",
+        ".h++",
+        ".tpp",
+        ".inc",
+        ".inl",
+        ".ipp",
+        ".cp",
+        ".C",
+        ".H",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files (like .h or .inc).
+    "discriminators": [
+        ".cpp",
+        ".cc",
+        ".cxx",
+        "CMakeLists.txt",
+        "conanfile.txt",
+        "vcpkg.json",
+        "Makefile",
+        "BUILD.bazel",
+        "WORKSPACE",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["cling", "cint"],
+    # UPGRADED: Maps to Family 1 (Standard C)
+    # Rationale: Uses '//' for line-level literature; multi-line literature
+    # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "standard_block",
+    "rules": {
+        # 1. branch (Control Flow / Branching)
+        # Control flow jumps. Includes modern coroutine jumps (co_yield, co_await).
+        # EXCLUDES exceptions (bailout_hits).
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|while|do|catch|break|continue|goto|co_yield|co_await)\b|&&|\|\||\?"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks of functions and lambdas. Bounded to prevent ReDoS on massive signatures.
+        # OUT-OF-LINE OPERATOR + RULE 11 FIX (epic #813/#821): same gaps as func_start -- no
+        # allowance for a class-qualified operator name (`TargetClass::operator=`) at all, and
+        # the method's own template-argument step-over was the flat `<[^>]*>`, breaking a
+        # nested type arg (`Foo::Bar<Baz<int>>(...)`, an explicit template specialization).
+        # #1209: parameter-list span wrapped in its own capture group (was
+        # only ever reachable via group(0), the whole match including the
+        # name/template/return-type-keyword prefix) so detector.py's
+        # counter isolates just "(...)" -- the whole-match fallback
+        # overcounted every zero/one-arg signature by +1 the same way
+        # Python's did (#1199), including a genuinely empty lambda
+        # `[]()`. A name group (group 1) is added too, ahead of the
+        # args-list groups, purely so the existing extraction tests
+        # (which check the captured name) keep passing -- detector.py
+        # already picks the highest-numbered participating group via
+        # `lastindex`, so it still resolves to the args group either way.
+        # #1883: the first-parameter type gate also accepts leading-underscore
+        # Windows SAL annotation macros (`_In_`, `_Out_`, `_Inout_`,
+        # `_In_opt_`, `_In_reads_(n)`, ...) as an optional, repeatable prefix
+        # ahead of the real type, the same way `const`/`volatile` already are
+        # -- a real SAL-annotated signature (`f(_In_ int nCode, ...)`)
+        # otherwise failed the whole `search()` because `_In_` matched none
+        # of the type alternatives. `_[A-Z][A-Za-z0-9_]*_` (required trailing
+        # `_`, uppercase first letter) is narrow enough not to catch `_t`
+        # types or `__attribute__`/`__cdecl`; the `\([^()]{0,64}\)` tail
+        # covers the sized forms.
+        "args": re.compile(
+            r"\b(?!(?:if|for|while|switch|catch)\b)((?:[a-zA-Z_]\w*::)*(?:[a-zA-Z_]\w*|operator[ \t]*[^a-zA-Z_\s(]+|operator[ \t]+(?:new|delete)(?:\[\])?))(?:<(?:[^<>]|<[^<>]*>)*>)?\s*(\(\s*(?:(?:const|volatile|_[A-Z][A-Za-z0-9_]*_(?:\([^()]{0,64}\))?)\s+)*(?:int|char|void|float|double|bool|long|short|unsigned|signed|struct|class|auto|std::|[A-Z]\w*|[a-z_]\w*_t)\b[^)]*\))|\[[^\]]*\]\s*(\([^)]*\))"
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(namespace|using|class|struct|enum|union|template|typename|concept|requires|auto|return|void|inline|virtual|explicit|friend|module|export|import|typedef)\b"
+        ),
+        "func_start": re.compile(
+            # =====================================================================
+            # [ CONTEXT: C++ FUNCTION AST EXTRACTOR & REDOS SHIELD]
+            # PURPOSE: Anchors executable logic blocks (methods/functions) in C++.
+            # VULNERABILITY: C++ allows multi-line function signatures and complex
+            #   return types (e.g., `std::vector<int> \n myFunc()`). In files with
+            #   massive macro lists (like hardware register maps), the `[ \t\n]+`
+            #   allowances cause catastrophic backtracking (ReDoS).
+            # THE "IRON WALL" FIX: `(?![ \t]*#)` is a negative lookahead injected at
+            #   high-risk multi-line boundaries. It explicitly forbids the regex engine
+            #   from crossing into preprocessor directives, capping the permutation tree.
+            # =====================================================================
+            r"^[ \t]*"
+            # BUG FIX (false-positive correctness): the return-type loop
+            # (item 4) never excluded control-flow keywords from being
+            # consumed as a generic return-type word -- only the later
+            # identifier-capture shield (item 5) excluded them from
+            # being the FUNCTION NAME itself. This let a two-word
+            # control-flow form slip through: `if constexpr (x) {}`
+            # falsely matched with "constexpr" captured as the function
+            # name ("if" consumed by the loop, "constexpr" landing in
+            # the identifier position, which the shield doesn't reject).
+            # Rejects any line starting with one of these keywords
+            # outright, before the loop even starts.
+            r"(?!(?:if|for|while|switch|catch|else)\b)"
+            r"(?:template[ \t\n]*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>[ \t\n]*)?"
+            # 2. LINKAGE & STORAGE MODIFIERS (Now supports vertical formatting)
+            r"(?:(?:static|inline|extern|virtual|_Noreturn|constexpr|consteval|constinit|__inline__|__forceinline)[ \t\n]+){0,5}"
+            # 3. COMPILER ATTRIBUTES PRE-TYPE (Includes C23 [[...]])
+            # #2460: also a SAL / entry-point annotation macro -- a `__`- or
+            # `_Uppercase`-prefixed identifier optionally taking a bracketed
+            # argument (`__control_entrypoint(DllExport)`, `_Ret_maybenull_`,
+            # `_Check_return_`). Bounded to that naming shape so it can't eat
+            # an ordinary lowercase function call as a phantom prefix.
+            r"(?:(?:__attribute__[ \t]*\((?:[^)(]|\([^)]*\))*\)|\[\[[^\]]*\]\]|__declspec[ \t]*\([^)]*\)|(?:__[a-z]\w*|_[A-Z][A-Za-z0-9]*_)(?:[ \t]*\((?:[^)(]|\([^)]*\))*\))?)[ \t\n]*){0,5}"
+            # 4. THE RETURN TYPE (Pointers/references explicitly bound)
+            # [IRON WALL]: Prevents the engine from reading a `#define` on the next line as a return type.
+            # [POINTER AMBIGUITY FIX]: Strictly enforces sequential evaluation of pointers and spaces.
+            r"(?:(?:struct|union|enum)[ \t\n]+)?"
+            # BUG FIX (Rule 11): the return-type's flat `<[^>]*>` broke
+            # on any nested template argument (`std::vector<std::pair<
+            # int,int>>`, `std::map<K, std::vector<V>>`) -- extremely
+            # common in real C++ -- causing the whole rule to never
+            # match at all (no fallback path exists once the return
+            # type fails to consume correctly). Extended to a bounded
+            # 2-level nesting tolerance.
+            # BUG FIX (Rule 14): this loop's trailing `[ \t\n]+` and the
+            # parameter block's leading `[ \t\n]*` (item 7 below) are
+            # two effectively-adjacent unbounded whitespace quantifiers
+            # -- once a real function never follows (no `(` anywhere),
+            # the engine must retry every possible split of the same
+            # trailing whitespace run across both gaps, O(n^2).
+            # Confirmed ~4x/doubling, 2.8s at n=32000 on a bare
+            # `"int foo" + " "*n` payload. Bounded both to `{1,200}`.
+            # BUG FIX (#1263): `[*&]*[ \t\n]{1,200}` demanded the pointer/
+            # reference symbol sit glued to the type with MANDATORY
+            # trailing whitespace before the name -- matching only the
+            # `Type* name()` style. Real-world C++ (including large chunks
+            # of the language-crucible corpus, e.g. Godot's `Type
+            # *name()` / `Type * name()`) overwhelmingly puts the space
+            # BEFORE the star instead, with the star landing glued to the
+            # name (no trailing whitespace at all left to consume) --
+            # that shape couldn't complete this loop iteration, so the
+            # entire rule failed to match and the whole function
+            # definition was invisible, not just misclassified. Split
+            # into two bounded alternatives: one or more pointer/
+            # reference symbols (with optional bounded whitespace on
+            # EITHER side of the run, covering `Type*name`, `Type* name`,
+            # `Type *name`, and `Type * name` alike), or -- when no
+            # pointer/reference symbol is present at all -- the original
+            # mandatory whitespace run (still the only valid separator
+            # between two bare words like `void foo`). The two
+            # alternatives never both match the same span (one requires a
+            # literal `[*&]`, the other forbids consuming past the first
+            # non-whitespace char), so this doesn't reopen the Rule 14
+            # backtracking gap the surrounding bounds were built to close.
+            r"(?:(?![ \t]*#)(?!(?:[a-zA-Z_]\w*::)*operator\b)[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*"
+            r"(?:<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?"
+            r"(?:[ \t]{0,20}[*&]{1,5}[ \t\n]{0,200}|[ \t\n]{1,200})){0,5}"
+            # 5. THE "NOT A FUNCTION" SHIELD
+            # Prevents control flow (if, while) and primitive types from being captured as function names.
+            r"(?!(?:if|for|while|switch|return|catch|else|elif|sizeof|new|delete|ARGS\d+|NOARGS|int|float|double|char|void|long|short|unsigned|signed|bool|INTEGER|LOGICAL|real|__attribute__|__declspec|__asm__)\b)"
+            # 6. THE IDENTIFIER CAPTURE (FUNCTION IDENTIFIER - GROUP 1)
+            # [IRON WALL]: Ensures the actual function/operator name isn't hijacked by a macro definition.
+            # OUT-OF-LINE OPERATOR FIX (epic #813/#821): the operator alternatives had no
+            # allowance for a preceding class-qualifier (`TargetClass::operator=`, `TargetClass::
+            # operator==`), unlike the plain-identifier alternative which already supports
+            # `(?:[a-zA-Z_]\w*::)*`. Out-of-line operator overload definitions (defined in a
+            # .cpp file, declared in the header) are mainstream, common C++ -- completely
+            # invisible to func_start before this fix.
+            r"(?![ \t]*#)((?:[a-zA-Z_]\w*::)*operator[ \t]*\(\)|(?:[a-zA-Z_]\w*::)*operator[ \t]+(?:::)?[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*(?:<(?:[^<>]|<[^<>]*>)*>)?(?:[ \t]*[*&]+)?|(?:[a-zA-Z_]\w*::)*operator[ \t]*[^a-zA-Z_\s(]+|(?:[a-zA-Z_]\w*::)*operator[ \t]+(?:new|delete)(?:\[\])?|(?:[a-zA-Z_]\w*::)*[~a-zA-Z_]\w*)"
+            # 7. THE PARAMETER BLOCK (Supports vertical gap)
+            # [NESTED PARENTHESIS FIX]: Uses 1-Level Nesting Trick to swallow function pointers without ReDoS.
+            # [LAMBDA-ARGUMENT SHIELD] (#2013): a lambda passed as a constructor argument or
+            # member-initializer-list entry (`m_draggingState([this]() { ... }),`,
+            # `std::thread([...]() { ... }).detach();`) balances its own parens just fine, but
+            # nothing AFTER the closing `)` distinguishes "this was a real function's own
+            # parameter list" from "this was a call passing a lambda" -- the very next
+            # non-whitespace token legitimately IS `{` either way (a real function body, or,
+            # for the initializer-list case, the ENCLOSING constructor's own body), so stage 10
+            # can't tell them apart. The one reliable, local signal: a real C++ parameter list
+            # can never syntactically START with a bare `[` -- only a lambda's capture-list
+            # does that (`[this]`, `[=]`, `[&x]`, `[]`); the sole exception is a parameter-level
+            # `[[attribute]]`, which always has a literal DOUBLE bracket. Confirmed via direct
+            # testing: FancyZones.cpp's `m_draggingState`/`std::thread` false positives are both
+            # this exact shape, and every `[[attribute]] Type param` case in the existing
+            # extraction gauntlet still matches (the lookahead only excludes a single `[` NOT
+            # immediately followed by a second one).
+            r"[ \t\n]{0,200}(?:ARGS\d+\s*\([^)]*\)|\((?![ \t\n]{0,20}\[(?!\[))(?:[^)(]|\([^)]*\))*\)|NOARGS)"
+            # 8. POST-PARAMETER MODIFIERS & TRAILING RETURN TYPES
+            # [OVERLAP PREVENTION]: Removed ambiguous \s* inside attribute matcher.
+            r"(?:[ \t\n]+(?:const|volatile|noexcept|override|final|&{1,2}|__attribute__\((?:[^)(]|\([^)]*\))*\)|\[\[[^\]]*\]\])){0,10}"
+            r"(?:[ \t\n]*->[ \t]*[a-zA-Z_:\w*<>]+)?"
+            # 9. THE K&R C AND C++ CONSTRUCTOR GAP (ReDoS mitigated via Strict Bounding)
+            # Handles C++ initializer lists (e.g., `MyClass() : a(1) {`) and legacy K&R declarations.
+            # [IRON WALL - CATASTROPHIC BACKTRACKING FIX]:
+            # We enforce strict numeric bounds (`{0,500}` and `{0,100}`) instead of `+` or `*`.
+            # This caps the permutation tree instantly.
+            r"(?:[ \t\n]*(?![ \t]*#):[^{;]{0,2000}|(?:[ \t\n]+(?![ \t]*#)[a-zA-Z_][^(){};]{0,100};){1,20})?"
+            # 10. THE IGNITION (The opening brace confirming it is a definition, not a declaration)
+            r"[ \t\n]*\{",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # =====================================================================
+        # [ THE C++ ATTRIBUTE & TEMPLATE SHIELD ]
+        # C++ entity declarations can be preceded by massive, multi-line templates
+        # and C++20 `[[attributes]]` wedged directly before the class name.
+        # FIX 1 (Negative Test): Dropped standard C-style `enum` to avoid hallucinating
+        # minor constants; restricted to strongly-typed `enum class` / `enum struct`.
+        # FIX 2 (Pathological): Injected `(?:\[\[[^\]]*\]\][ \t\n]*){0,5}` to step
+        # over attributes, converted `\s*` to `[ \t\n]*` for the template wrapper,
+        # and added the exact capture group `([a-zA-Z_]\w*)`.
+        # =====================================================================
+        # BUG FIX (Rule 11): the template-skip's flat `<[^>]*>` broke on
+        # any nested default template argument (`template<typename T =
+        # std::vector<int>> class Foo`), truncating at the inner `>` and
+        # failing to match at all on the (very common) single-line form
+        # -- the multi-line form appeared to "work" only because the
+        # optional template group could be skipped entirely via
+        # backtracking, re-anchoring on a later line's bare `class Foo`.
+        # Extended to the same bounded 2-level nesting tolerance used in
+        # func_start's return type.
+        "class_start": re.compile(
+            r"^[ \t]*(?:export[ \t\n]+)?"
+            r"(?:template[ \t\n]*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>[ \t\n]*)?"
+            r"(?:class|struct|union|enum[ \t\n]+class|enum[ \t\n]+struct)[ \t\n]+(?:(?:\[\[[^\]]*\]\]|__attribute__[ \t]*\((?:[^)(]|\([^)]*\))*\))[ \t\n]*){0,5}([a-zA-Z_]\w*(?:<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|std::unique_ptr|std::shared_ptr|std::weak_ptr|override|final|noexcept|static_assert|assert|std::optional|std::expected|std::span|std::variant|std::lock_guard|std::atomic)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Swallowing errors or bypassing types. EXCLUDES standard casting (Phase 5).
+        # BUG FIX (Rule 9): `void\s*\*` ends in `*` (non-word) but shared
+        # a trailing `\b` with word-ending `std::any` -- the boundary
+        # could only fire if a word character immediately followed the
+        # `*` with zero whitespace (`void *p`), breaking on the equally
+        # common `void* p`/`void * p` forms and any non-identifier
+        # continuation (`(void*)src`). Pulled out with only a leading
+        # `\b`.
+        "safety_bypasses": re.compile(r"\bstd::any\b|\bvoid\s*\*|catch\s*\(\s*\.\.\.\s*\)"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and low-level blits. EXCLUDES prints (Phase 5).
+        "high_risk_execution": re.compile(r"\b(system|memcpy|memset|abort|exit|std::terminate|longjmp|setjmp)\b"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(std::fstream|std::ifstream|std::ofstream|std::filesystem|fopen|fclose|fread|fwrite|socket|recv|send|asio::|curl_easy_perform|std::cin)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Code exposed to the world. Explicit visibility and module exports.
+        # BUG FIX (Rule 9): `public:`, `__declspec(dllexport)`, and
+        # `__attribute__((visibility("default")))` all end in non-word
+        # characters (`:`/`)`) but shared a trailing `\b` with
+        # word-ending `export module`/`export import`/`export class` --
+        # the boundary could never fire for the realistic forms
+        # (whitespace/newline follows `public:`; nothing but whitespace
+        # follows the closing `)`). Pulled all three out with only a
+        # leading `\b`.
+        "api": re.compile(
+            r"\b(?:export\s+module|export\s+import|export\s+class)\b|"
+            r'\bpublic:|__declspec\(dllexport\)|__attribute__\(\(visibility\("default"\)\)\)|'
+            r"^[ \t]*export\b(?!\s*module)",
+            re.M,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. Includes moves and increments.
+        "state_mutation": re.compile(
+            r"\b(mutable|std::move|std::exchange|std::swap|std::atomic)\b|(?<![=!<>])=(?![=])|&(?!\s*const)|\+\+|--|(?:\+=|-=|\*=|/=|%=|<<=|>>=|&=|\|=|\^=)"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out execution logic indicating dead features. MUST enforce that the structural keyword immediately follows the comment token.
+        # BUG FIX (Rule 12): only checked `//` line comments, entirely
+        # missing `/* */` block comments despite cpp being a
+        # `standard_block` language where both styles are equally
+        # idiomatic (`/* if (x) foo(); */`).
+        "dead_code": re.compile(
+            r"(?://|/\*)[ \t]*(?:if|for|while|auto|class|struct|std::cout|std::print|printf|void|int|return)\b"
+        ),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(
+            r"///|/\*\*|@param|@return|@brief|@details|@tparam|\\param|\\return|\\brief|\\details|\\tparam"
+        ),
+        # 14. test (Testing & Assertions)
+        # Triggers indicating internal verification. Anchors explicit GTest/Catch2 macros and prevents prose collisions.
+        "test": re.compile(
+            r"\b(?:TEST|TEST_F|TEST_CASE|SECTION|REQUIRE|CHECK|EXPECT_[A-Z_]+|ASSERT_[A-Z_]+|Catch::|GTest)\b"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(std::thread|std::jthread|std::mutex|std::future|std::promise|std::async|std::latch|std::barrier|std::condition_variable|std::semaphore|co_await|std::coroutine_handle)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        # BUG FIX (Rule 9): `slots:`/`signals:` end in `:` (non-word) but
+        # shared a trailing `\b` with word-ending siblings -- broke on
+        # the realistic Qt form (`signals:` followed by a newline, never
+        # a word character). `ImGui::` also ends in non-word (`::`) but
+        # verified self-healing: real usage is always immediately
+        # followed by an identifier (`ImGui::Begin(...)`), so left as-is.
+        "ui_framework": re.compile(r"\b(?:Q_OBJECT|QWidget|wxFrame|ImGui::|Fl_Window)\b|\bslots:|\bsignals:"),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(
+            r"\[[^\]]*\]\s*(?:<[^>]*>\s*)?(?:\([^)]*\))?\s*(?:(?:mutable|constexpr|consteval|noexcept)\s+)*(?:mutable|constexpr|consteval|noexcept)?\s*(?:->\s*[\w:<>_]+)?[ \t]*\{"
+        ),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"\b(extern|static(?!\s*assert)|thread_local|inline\s+constexpr)\b|^[ \t]*(?:static|extern)\s+[\w:<>_]+\s+[a-zA-Z_]\w*[ \t]*=",
+            re.M,
+        ),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"\[\[\s*[a-zA-Z_:][^\]]*\]\]"),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"\btemplate\s*<[^>]*>|\b(?:concept|requires)\b"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Range pipelines acting as functional mappers.
+        "comprehensions": re.compile(
+            r"\b(std::ranges::|std::views::|views::|std::transform|std::accumulate|std::reduce|std::for_each|std::filter)\b|\|\s*std::views::"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(
+            r"\b(std::cmath|std::complex|std::linalg|std::mdspan|Eigen::|blaze::|std::simd|__m128|__m256|__m512|std::numbers::)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # SFINAE, compile-time reflection, and macros.
+        # BUG FIX (Rule 9): `sizeof...` ends in `.` (non-word) but shared
+        # a trailing `\b` with word-ending siblings -- the realistic
+        # form (`sizeof...(Args)`) is immediately followed by `(`, also
+        # non-word, so no boundary transition ever occurs and this
+        # alternative could never fire. Pulled out with only a leading
+        # `\b`.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:if\s+constexpr|if\s+consteval|std::enable_if|std::is_same|std::any_cast|std::bit_cast|decltype)\b|\bsizeof\.\.\.|#define\s+[a-zA-Z_]"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r'^[ \t]*(?:#include\s*[<"][^>"]+[>"]|import\s+[a-zA-Z_][\w.:]*\s*;|export\s+import\s+[a-zA-Z_][\w.:]*\s*;)',
+            re.M,
+        ),
+        "_dependency_capture": re.compile(
+            r'^[ \t]*(?:#\s*include\s*[<"]([^>"]+)[>"]|(?:export\s+)?import\s+([a-zA-Z_][\w.:]*)\s*;)',
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:@author|\\author|Author:|Created by:|Copyright)\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust,
+        # and c earlier in this epic (the 9th hit). Bounded both
+        # quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(r"\b(FCGI_Accept|render_template|Inja::|ctemplate::)\b"),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(emit|signal|slot|notify|publish|subscribe|boost::signals2)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(r"\b(boost\.di|fruit::|[I]nject|IServiceCollection)\b"),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"^[ \t]*#(?:define|undef|if|elif|else|endif|pragma|warning|error)\b",
+            re.M,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Raw memory addressing and pointer manipulation. CRITICAL: Uses lookbehinds `(?<=[=\s,(])` to strictly capture pointer dereferences `*ptr` and memory addresses `&var` without flagging standard multiplication `a * b` or logical AND `a & b`.
+        "pointers": re.compile(
+            r"->|\b(?:uintptr_t|intptr_t|ptrdiff_t|size_t)\b|(?<=[=\s,(])&\w+|(?<=[=\s,(])\*(?:\s*const\s*)?\w+"
+        ),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(r"\b(new|malloc|calloc|realloc|aligned_alloc|mmap|alloca)\b"),
+        # 37. inline_asm (The Bare Metal)
+        "inline_asm": re.compile(
+            r"\b(?:__asm__|asm|__asm)\b(?:\s+(?:volatile|__volatile__))?\s*\(|\b(?:__asm__|asm|__asm)\b[ \t]*\{"
+        ),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(r"\b(log|logger|LOGGER|spdlog|glog|syslog)\.(?:info|error|warn|debug|trace)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(
+            r"\b(std::cout|std::cerr|std::clog|printf|fprintf|vprintf|puts|putchar|std::print|std::println)\b"
+        ),
+        # # 40. explicit_casts (Explicit Type Casting)
+        # Forceful type coercion bypassing the safety engine. Captures modern explicitly named casts and strict C-style groupings.
+        # BUG FIX (false-positive correctness): the bare `<\s*[A-Za-z_]
+        # \w*\s*>` alternative had no requirement that this actually be
+        # used as a cast -- it fired on ANY single-identifier template
+        # instantiation (`std::vector<int>`, `std::unique_ptr<Foo>`,
+        # `Container<T>`), which is an ordinary declaration, not a cast.
+        # Since every modern C++ file is full of these, this alternative
+        # was a major over-broad false-positive source. Restricted to
+        # require a functional-cast-style identifier prefix and a call
+        # immediately after the closing `>` (`narrow_cast<int>(x)`,
+        # `gsl::narrow_cast<T>(x)`), which is structurally distinct from
+        # a plain declaration (identifier follows, not `(`).
+        # Also fixed: the C-style-cast alternative required a bare
+        # `(int)` with no asterisk, so it never matched C++'s equally
+        # valid, common C-style POINTER cast (`(int*)ptr`) -- the exact
+        # overlap the issue asked to check against C's `explicit_casts`/
+        # `pointers` ambiguity. Extended to allow pointer asterisks
+        # (O(1) alternation per the same fix already applied in C).
+        "explicit_casts": re.compile(
+            r"\b(?:static_cast|dynamic_cast|reinterpret_cast|const_cast|bit_cast)\b|"
+            r"\b[a-zA-Z_]\w*<\s*[A-Za-z_]\w*\s*>\s*\(|"
+            r"\(\s*(?:int|float|double|char|bool|long|short|unsigned|signed|void)[ \t\n]*(?:\*[ \t\n]*)*\)\s*[a-zA-Z_]"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|abort|exit|_Exit|quick_exit|std::terminate|longjmp)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        # Admission of race conditions or lazy polling.
+        "thread_sleeps": re.compile(r"\b(sleep|delay|usleep|nanosleep|std::this_thread::sleep_for)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        # Low-level byte manipulation. CRITICAL: Removed bare `<<` and `>>` to prevent catastrophic false positives on `std::cout` and `std::cin` streams. Explicit bitwise assignments (`<<=`, `&=`) are retained as they are unambiguous.
+        "bitwise_ops": re.compile(r"\^|(?<![=!])~|<<=|>>=|&=|\|=|\^="),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(
+            r"\b(mutex|lock|synchronized|Semaphore|std::lock_guard|std::scoped_lock|std::unique_lock|mtx_lock)\b",
+            re.I,
+        ),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|constexpr|consteval|constinit|final|readonly|Immutable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(delete|free|close|fclose|dispose|shutdown|std::destroy|reset)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # BUG FIX (Rule 9): all three alternatives end in `:` (non-word)
+        # and the group had NO word-ending sibling at all -- the
+        # trailing `\b` could never fire against the realistic form
+        # (`private:` always followed by whitespace/newline, never a
+        # word character), meaning this rule never matched anything.
+        # Removed the trailing `\b`; the literal `:` is already
+        # unambiguous.
+        "encapsulation": re.compile(r"\b(?:private|protected|internal):"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(on|addEventListener|subscribe|connect|handler|callback)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX (Rule 10): `mock\(`/`fake\(` end in a literal `(` but
+        # shared a trailing `\b` with word-ending siblings -- broke on
+        # the truly-empty-argument call form (`mock()`), same shape
+        # already found and fixed in C (#773).
+        "test_skip": re.compile(r"\b(?:GTEST_SKIP|test\.skip|it\.skip)\b|mock\(|fake\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (C++ Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(nlohmann::json|rapidjson|boost::archive|ParseFromString|SerializeToString)\b"
+        ),
+        "regex_execution": re.compile(r"\b(std::regex|std::regex_match|std::regex_search|std::regex_replace)\b"),
+        "time_date_logic": re.compile(
+            r"\b(std::chrono::(?:system_clock|steady_clock|duration)|std::time_t|std::localtime)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"\b(boost::interprocess|mmap|shm_open|pipe|fork|grpc::ServerBuilder)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/csharp.py b/gitgalaxy/standards/language_standards/languages/csharp.py
new file mode 100644
index 000000000..ea04c02c1
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/csharp.py
@@ -0,0 +1,483 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "C# 14 / .NET 10 / Modern ASP.NET Core & Blazor",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy ASP.NET, and build-tooling formats.
+    "extensions": [
+        ".cs",
+        ".csx",
+        ".razor",
+        ".cshtml",
+        ".cake",
+        ".linq",
+        ".ashx",
+        ".asmx",
+        ".ascx",
+        ".svc",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": ["build.cake"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
+    "discriminators": [
+        ".cs",
+        ".csproj",
+        ".sln",
+        "packages.config",
+        "nuget.config",
+        "global.json",
+        "App.config",
+        "Web.config",
+        "project.json",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["dotnet-script", "csi"],
+    # UPGRADED: Maps to Family 1 (Standard C)
+    # Rationale: Uses '//' for line-level literature; multi-line literature
+    # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES throw (bailout_hits).
+        # Includes pattern matching (and, or, not) and null-coalescing.
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|foreach|while|do|catch|finally|continue|break|goto|try|yield\s+return|yield\s+break|and|or|not)\b|\?\?|\?\.|(?<=\s)\?(?=\s)"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks for methods, primary constructors, and lambdas.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE GHOST ARGS SHIELD (C#) ]
+            # To prevent hallucinating standard function invocations, we demand structural proof.
+            # Branch 1: Standard Methods MUST have a return type (e.g., `Task<T> Foo(...)`).
+            # Branch 2: Constructors lack return types, so they MUST be anchored to `:` or `{`.
+            # Branch 3: Standard fat-arrow lambdas.
+            # Upgraded all spaces to `[ \t\n]+` to support Pathological vertical parameters.
+            # QUADRATIC BLOWUP FIX: Branch 3's bare-identifier lambda form
+            # (`[a-zA-Z_$][\w_$]*` with no \b anchor, unlike Branches 1/2
+            # which are `^`-anchored) got retried at every position in a
+            # long `=>`-less line, backtracking O(n) per position for
+            # O(n^2) total (same bug found and fixed in javascript's args).
+            # Bounded to {0,100}; real identifiers don't get that long.
+            # =====================================================================
+            # #1209: parameter-list span wrapped in its own capture group
+            # in all three branches (was only reachable via group(0), the
+            # whole match including the attribute/modifier/return-type/
+            # name prefix, or for lambdas nothing at all) so detector.py's
+            # counter isolates just the real parameter text -- the
+            # whole-match fallback overcounted every zero/one-arg
+            # signature by +1 the same way Python's did (#1199). Name
+            # groups added to branches 1/2 too, purely so existing
+            # extraction tests keep passing.
+            r"(?:"
+            # 1. Standard Methods
+            r"^[ \t]*(?:\[[^\]]*\][ \t\n]*){0,5}(?:(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|scoped|readonly)[ \t\n]+){0,5}(?:(?!(?:new|if|for|while|switch|return|yield|delegate|event)\b)(?:[\w<>\[\]?,.*]|\([^()]{0,100}\))+[ \t\n]{1,200}){1,10}(operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|(?!(?:new|if|for|while|switch|return|yield|delegate|event)\b)\w+)(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|"
+            # 2. Constructors
+            r"^[ \t]*(?:(?:public|private|protected|internal|static|unsafe)[ \t\n]+)?([A-Z]\w*)(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))[ \t\n]*(?::[ \t\n]*(?:base|this)|[{])|"
+            # 3. Lambdas
+            r"(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)|[a-zA-Z_$][\w_$]{0,100})[ \t\n]*=>"
+            r")",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const/readonly (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(var|return|class|interface|struct|record|enum|using|namespace|yield|await|delegate|event|init|required|field|implements|extends|declare)\b|=>"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks. EXCLUDES types/classes.
+        #
+        # =====================================================================
+        # [ CONTEXT: C# "IRON WALL" FUNCTION EXTRACTOR & REDOS SHIELD ]
+        # PURPOSE: Anchors executable logic blocks (methods) in C# up to C# 14.
+        # VULNERABILITY: C# allows massive return types (e.g., nested tuples),
+        #   generics, and explicit interface implementations. If spaces are allowed
+        #   freely inside unbounded quantifiers, massive Roslyn test strings cause
+        #   Catastrophic Backtracking, locking the Python GIL at the C-level.
+        # THE FIX: Strict character exclusion, numeric bounding, and mutual
+        #   exclusivity between word characters and spaces.
+        #
+        # [ THE VERTICAL IRON WALL UPDATE ] (Hard-learned from Pathological Fuzzer):
+        #   Developers often place attributes, modifiers, return types, and names
+        #   on completely separate lines. We replaced horizontal spaces `[ \t]+`
+        #   with strictly bounded multi-line spaces `[ \t\n]+`. We EXPLICITLY DO NOT
+        #   use `\s+` because unbounded wildcards with newlines trigger ReDoS.
+        # =====================================================================
+        "func_start": re.compile(
+            # 1. THE HORIZONTAL ANCHOR & ATTRIBUTE SHIELD
+            # Anchors to the line start. Steps over C# attributes [Obsolete], [Fact], etc.
+            # [REDOS ARMOR]: `[^\]]{0,250}` prevents a missing closing bracket from spiraling
+            # across the entire file. `{0,5}` caps the max number of stacked attributes.
+            # [VERTICAL FIX]: `[ \t\n]*` allows attributes to sit on lines above the function.
+            r"^[ \t]*(?:\[[^\]]{0,250}\][ \t\n]*){0,5}"
+            # =====================================================================
+            # [THE INSTANTIATION SHIELD]: AST-FREE HALLUCINATION PREVENTION
+            # If an object instantiation `new TargetFunc()` is poorly indented against
+            # the left margin, the engine will hallucinate it as a constructor definition
+            # (because constructors naturally lack return types).
+            # FIX: Forcefully abort matching if the sequence begins with the 'new' keyword
+            # followed immediately by an identifier and an opening parenthesis.
+            # =====================================================================
+            r"(?!new[ \t\n]+[@A-Za-z_$][\w_$.]*(?:<[^>]{0,100}>)?[ \t\n]*\()"
+            r"(?:"
+            # 2. MODIFIERS (Linkage, Storage, & Access)
+            # Matches `public async`, `protected internal static`, etc.
+            # [VERTICAL FIX]: `[ \t\n]+` allows modifiers to wrap across newlines.
+            r"(?:(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly)[ \t\n]+){1,5}"
+            # 3. THE "IRON WALL" RETURN TYPE
+            # Safely captures complex modern C# return types before the function name.
+            # Supports: standard types `int`, arrays `int[]`, generics `List<T>`,
+            # namespaces `System.Threading.Tasks.Task`, tuples `(int, string)`, and nullables `string?`.
+            # [REDOS ARMOR 1]: `(?![ \t]*#)` prevents the engine from crossing into a #region or #if block.
+            # [REDOS ARMOR 2]: The character class `[...]+` STRICTLY FORBIDS spaces/tabs. The `[ \t\n]+`
+            # follows it outside the group. This mutual exclusivity guarantees O(N) parsing.
+            # [REDOS ARMOR 3]: Explicitly prevents return types from eating modifiers during a backtrack,
+            # sealing the overlapping permutation leak that caused Catastrophic Backtracking.
+            # BUG FIX (Rule 14): this loop's trailing `[ \t\n]+` and the
+            # final `[ \t\n]*\(` before the opening paren (item 5 below)
+            # are two effectively-adjacent unbounded whitespace
+            # quantifiers -- once a real method never follows (no `(`
+            # anywhere), the engine must retry every possible split of
+            # the same trailing whitespace run across both gaps, O(n^2).
+            # Confirmed ~4x/doubling, 1.5s at n=32000 on a bare
+            # `"int foo" + " "*n` payload. Bounded both to `{1,200}`/
+            # `{0,200}`, same fix shape already applied in cpp.
+            # #1314: this per-token exclusion only banned MODIFIER keywords, so a statement
+            # header preceding a call expression -- `foreach (var x in someList.Method())`,
+            # `for (...)`, `using (...)` -- could get silently swallowed token-by-token as
+            # fake "return type" tokens, letting the walk land on the call's own receiver+
+            # method (e.g. `someList.Method`) as if it were a real function name (group 1's
+            # `[\w_$.]*` already permits dots, meant for explicit interface implementations
+            # like `IFoo.DoWork`, but that also legalizes `receiver.Method` as a shape).
+            # Added the same statement/control-flow keyword set item 4 already excludes at
+            # the FINAL identifier position, plus the contextual keywords item 4 also gained
+            # below (`var`/`in`/`when`/`or`/`and`/`not`/`is`) since those can equally start a
+            # parenthesized non-function construct (`var (a, b) = ...`, `... in expr(...)`)
+            # mid-walk, not just at position zero. Confirmed via language-crucible/data/
+            # csharp/roslyn/{CSharpCompilation,Workspace}.cs (real, mainstream Roslyn source).
+            # #2054: (1) a bare comma in this token class let the walk absorb comma-separated
+            # CALL ARGUMENTS (`ref mdName,`/`SpecialType.None,` inside a multi-line call) as if
+            # they were return-type tokens, landing on the call's own target identifier as a
+            # phantom function name. A real return type never has a bare top-level comma outside
+            # a tuple's own parens, a generic's own angle brackets, or an array's own brackets --
+            # moved comma-tolerance into explicit `<...>`/`[...]` single-token alternatives
+            # (tuple commas already had `\([^()]{0,80}\)`) instead of allowing it bare. Confirmed
+            # via a full corpus diff this also retroactively closes ~190 previously-unknown
+            # phantom occurrences of the identical shape (`this.EatToken`, `this.ParseXxx`,
+            # `_syntaxFactory.Xxx`, etc. -- every one confirmed to have zero real declaration
+            # anywhere in the file, only call sites) that were never in scope for #1314/#2035's
+            # own fixes but shared this exact root cause.
+            # (2) `(?!\?)` at each token's start rejects a token beginning with `?` -- closes a
+            # ternary operator (`\n ? expr`) being consumed as if it were a nullable-type marker
+            # (`string?`, where the `?` never STARTS a token, it ends the preceding one).
+            # The `<...>` alternative itself tolerates ONE level of nesting inside the outer
+            # angle brackets (mirrors the pre-existing groovy pattern at this file's Java/Groovy
+            # rule) -- needed for real multi-generic return types like `ImmutableSegmentedDictionary
+            # <ReadOnlyMemory<byte>, OneOrMany<SyntaxTree>>` (roslyn/CSharpCompilation.cs), which a
+            # flat `<[^>]{0,100}>` can't span since it stops at the FIRST inner `>`. Bounded to 5
+            # nested pairs per outer token -- 3+ levels of nesting (`List<Foo<Bar<Baz>>>`) is a
+            # real, accepted gap, not attempted, since it wasn't found in the corpus.
+            r"(?:(?![ \t]*#)(?!(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly|delegate|event|if|for|foreach|while|switch|catch|using|lock|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|var|in|when|or|and|not|is)\b)(?!\?)(?:[a-zA-Z0-9_<>\[\]?.*]|\([^()]{0,80}\)|<[^<>]{0,100}(?:<[^<>]{0,100}>[^<>]{0,100}){0,5}>|\[[^\]]{0,80}\])+[ \t\n]{1,200}){0,10}"
+            # 4. THE "NOT A FUNCTION" SHIELD
+            # Negative lookahead ensuring we don't accidentally capture control flow,
+            # primitive type keywords, or object instantiations as function names.
+            # #1314: also excludes the contextual keywords that can directly precede a `(` in
+            # non-function constructs -- `static (args) => ...` (a static lambda, C# 9+),
+            # `var (a, b) = Method(...)` (tuple deconstruction), `catch (Ex e) when (...)`
+            # (exception filter), and the pattern-combinator keywords `or`/`and`/`not`/`is`
+            # (`x is Foo or Bar`, C# 9+ pattern matching) -- each of which was previously
+            # captured whole as a phantom function literally named "static"/"var"/"when"/"or"
+            # etc. when no preceding modifier/type tokens were consumed. Confirmed via the
+            # same Roslyn corpus files as item 3's fix above.
+            r"(?!(?:if|for|foreach|while|switch|catch|using|lock|new|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|delegate|event|var|in|when|or|and|not|is|static)\b)"
+            # 5. THE IDENTIFIER CAPTURE (GROUP 1) & GENERIC STEPPER
+            # Captures the actual satellite name:
+            # - `[@A-Za-z_$]` supports C# verbatim identifiers (e.g., `@class`).
+            # - `[\w_$.]*` supports explicit interface implementations (e.g., `IMyInterface.DoWork`).
+            # - `(?:[ \t\n]*<[^>]{0,100}>)?` safely steps over method-level generic definitions
+            #   like `<T, U>` BEFORE hitting the opening parenthesis.
+            # [VERTICAL FIX]: Removed `\n` exclusion from the generic stepper to support multi-line generics.
+            r"((?:operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|[@A-Za-z_$][\w_$.]*))(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]{0,200}\("
+            r"|"
+            # Branch B: Has return type (no modifier)
+            r"(?:(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly)[ \t\n]+){0,5}"
+            # #2054: same fix as Branch A's identical token loop above -- see its comment for
+            # full rationale (bare comma let call-argument lists be absorbed as return-type
+            # tokens; `(?!\?)` closes a ternary `?` being consumed as a nullable-type marker).
+            r"(?:(?![ \t]*#)(?!(?:public|private|protected|internal|static|virtual|override|abstract|sealed|async|unsafe|partial|new|extern|file|ref|readonly|delegate|event|if|for|foreach|while|switch|catch|using|lock|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|var|in|when|or|and|not|is)\b)(?!\?)(?:[a-zA-Z0-9_<>\[\]?.*]|\([^()]{0,80}\)|<[^<>]{0,100}(?:<[^<>]{0,100}>[^<>]{0,100}){0,5}>|\[[^\]]{0,80}\])+[ \t\n]{1,200}){1,10}"
+            r"(?!(?:if|for|foreach|while|switch|catch|using|lock|new|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|delegate|event|var|in|when|or|and|not|is|static)\b)"
+            r"((?:operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|[@A-Za-z_$][\w_$.]*))(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]{0,200}\("
+            r"|"
+            # Branch C: Zero-prefix (No modifier, No return type)
+            # #1418: The zero-prefix branch matches ordinary multi-line bare call statements if their
+            # argument list spans multiple lines and ends in a bare ';' with no '{'. We apply an
+            # "Invocation Shield" (similar to dart #1221 / rust #1319 / csharp's own args shield) to
+            # only allow the bare-';' tolerance on branches that matched a modifier or return type
+            # (which a real abstract/interface method declaration has). For this zero-prefix path, we
+            # require the signature to actually open a block (`{` or `=>`).
+            r"(?!(?:if|for|foreach|while|switch|catch|using|lock|new|return|class|interface|struct|record|enum|yield|throw|await|sizeof|typeof|nameof|delegate|event|var|in|when|or|and|not|is|static)\b)"
+            r"((?:operator[ \t\n]+(?:[+\-*/%&|^~!=<>]+|true|false|[\w_$.]+)|[@A-Za-z_$][\w_$.]*))(?:[ \t\n]*<[^>]{0,100}>)?[ \t\n]{0,200}\("
+            r"(?=[ \t\n]*(?:[^)]|\([^)]*\))*[ \t\n]*\)[ \t\n]*(?:\{|=>))"
+            r")",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # RULE 11 FIX (epic #813/#820): there was no generic-parameter step-over between the
+        # class/interface/etc. name and the base-list `:` check, so ANY generic type with a base
+        # list (`class Foo<T> : Base<T> {`, extremely common) left the class's own `<...>`
+        # unconsumed right before `:`, silently losing the entire base-list capture (group 2)
+        # even though the name (group 1) still matched fine -- same failure shape as java's
+        # #816 class_start bug. Also added a primary-constructor parameter-list step-over
+        # (`record Foo<T>(T Value) : Base<T>`, C# 9+ records / C# 12 primary constructors on
+        # classes/structs, mainstream and common) for the same reason -- the `(...)` between the
+        # generics and the `:` was equally unconsumed.
+        # #1708: modifier alternation was missing `readonly`/`ref` -- C# 7.2+
+        # `readonly struct`, `ref struct`, and `readonly ref struct` declarations
+        # (mainstream in modern codebases, e.g. Roslyn's own parser) structurally failed to
+        # match, a pure class_recall gap. Verified via roslyn/CSharpCompilation.cs
+        # (`readonly struct ImportInfo`) and roslyn/LanguageParser.cs
+        # (`readonly ref struct ParserSyntaxContextResetter`): found_classes 22 -> 24,
+        # class recall 91.7% -> 100%, zero precision cost (extra_classes still 0).
+        "class_start": re.compile(
+            r"^[ \t]*(?:\[[^\]]*\][ \t]*){0,5}(?:(?:public|internal|private|protected|static|sealed|abstract|partial|file|unsafe|new|readonly|ref)[ \t]+){0,5}(?:class|interface|struct|record(?:[ \t]+(?:struct|class))?|enum)\s+([A-Za-z_$][\w_$]*)(?:\s*<(?:[^<>]|<[^<>]*>)*>)?(?:\s*\((?:[^()]|\([^()]*\))*\))?(?:\s*:\s*([A-Za-z_$][\w_$, \t<>\?]*))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|checked|is|as|nameof|required|ArgumentNullException|ThrowIfNull|ThrowIfNullOrWhiteSpace)\b|\[(?:Required|NotNull|Authorize)\]|\?\?|\?\."
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Null-forgiving operator, dynamic, and unsafe bypasses.
+        "safety_bypasses": re.compile(r"!\.|\bnull!|#pragma\s+warning\s+disable|\.Result\b|\.Wait\(\)|\b(dynamic)\b"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Extreme tech debt/vulnerabilities. EXCLUDES TODO (debt) and Console (print).
+        "high_risk_execution": re.compile(
+            r"\b(Thread\.Abort|Process\.Start|Environment\.FailFast|Environment\.Exit|goto)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(File|Directory|Stream|HttpClient|Path|SqlConnection|SqlCommand|DbContext|DbSet|HttpRequest|HttpResponse)\b\.|\[Table\("
+        ),
+        # 10. api (Public Surface Area)
+        # Public exposure surface. Explicit visibility + Controller mapping.
+        "api": re.compile(
+            r"\b(public|internal)\b|\[(?:HttpGet|HttpPost|HttpPut|HttpDelete|Route|ApiController|HubMethodName)\]|\bapp\.Map(?:Get|Post|Put|Delete|Group)\b"
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES const/readonly (freeze_hits).
+        # BUG FIX (Rule 13): `^[ \t]*(?:this\.)?\w+[ \t]*=` requires
+        # `re.M` for the `^` to anchor per-line -- without it, `^` only
+        # matches true string-start, so this alternative (the plain
+        # `field = value;` assignment form, arguably the most common
+        # state-mutation shape in any real C# file) could only ever
+        # fire if the assignment happened to be the first line of the
+        # entire scanned content.
+        "state_mutation": re.compile(
+            r"\b(set|field)\s*[{;]|volatile|ref\s|out\s|^[ \t]*(?:this\.)?\w+[ \t]*=|(?:\w+\.)?(?:Add|Remove|Clear|Insert|Push|Pop|Update)\s*\(",
+            re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # BUG FIX (Rule 12): only checked `//` line comments, entirely
+        # missing `/* */` block comments despite csharp being a
+        # `standard_block` language where both styles are equally
+        # idiomatic (`/* if (x) foo(); */`).
+        "dead_code": re.compile(
+            r"(?://|/\*)[ \t]*(?:public|private|protected|internal|class|void|if|for|foreach|while|return|using)\b"
+        ),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"///|///\s*<summary>|///\s*<param|///\s*<returns>|///\s*<remarks>"),
+        # 14. test (Testing & Assertions)
+        # BUG FIX: `Should\(\)` (FluentAssertions) ends on `)`
+        # (non-word), so the shared trailing \b could never fire --
+        # the fluent form is always immediately chained with another
+        # `.method(...)`, never followed by a word character. Never
+        # matched.
+        "test": re.compile(
+            r"\[(?:Test|Fact|Theory|TestMethod|TestClass|SetUp|TearDown)\]"
+            r"|\b(?:Assert\.|Mock\.|Substitute\.For)\b|Should\(\)"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|Task|ValueTask|Thread|Parallel|SemaphoreSlim|Mutex|Channel|IAsyncEnumerable|Interlocked)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r"\b(ControllerBase|IActionResult|Binding|ObservableCollection|DependencyProperty|ComponentBase|RenderFragment|MonoBehaviour)\b"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"=>|delegate[ \t]*\{"),
+        # 18. globals (Global / Shared State)
+        # BUG FIX (Rule 9): the `public static ... = ` alternative ends
+        # in `=` (non-word) but shared a trailing `\b` with word-ending
+        # siblings -- only fired when the assignment had zero
+        # whitespace around `=` (`X=5;`), breaking on the idiomatic
+        # spaced form (`MAX_VALUE = 100;`) that's the dominant real C#
+        # style.
+        "globals": re.compile(
+            r"\b(?:ConfigurationManager|AsyncLocal)\b|\bEnvironment\.|"
+            r"\bpublic\s+static\s+(?:readonly[ \t]+)?[\w<>]+\s+[A-Z_0-9]+[ \t]*=|\[ThreadStatic\]"
+        ),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"^[ \t]*\[[A-Za-z_][^\]]*\]", re.M),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"<\s*[A-Z][^>]*>|\bwhere\s+\w+\s*:"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(
+            r"\.(?:Select|Where|OrderBy|GroupBy|Aggregate|Any|All|ToList|ToArray|SelectMany)\(|^[ \t]*from\s+\w+\s+in\s+",
+            re.M,
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(Math\.|MathF\.|Vector[234]|Matrix4x4|Random|Complex|Tensor|TensorPrimitives)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Reflection and dynamic Emit.
+        "reflection_metaprogramming": re.compile(
+            r"\b(System\.Reflection|DllImport|LibraryImport|MethodInfo|Activator|Marshal\.|Emit|ILGenerator)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*(?:global[ \t]+)?using\s+(?:static[ \t]+)?[\w.]+;", re.M),
+        # ALIAS DIRECTIVE FIX (epic #813/#820): `using Alias = Target.Namespace;` (a using-alias
+        # directive, common for shortening long generic types or disambiguating identical type
+        # names from different namespaces) didn't match AT ALL -- there was no allowance for the
+        # `IDENT =` prefix before the actual target, so the whole statement produced zero
+        # dependency-graph edges. Added an optional alias-prefix skip-over so the capture lands
+        # on the real target (`Target.Namespace`), not the local alias name. Also added an
+        # optional generic-suffix step-over after the target capture: an alias directive's
+        # target is very commonly a CLOSED generic type (`using StringList =
+        # System.Collections.Generic.List<string>;` -- the primary real-world reason alias
+        # directives exist, to shorten long generics), and the required trailing `;` check
+        # failed on the unconsumed `<...>` without it.
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:global[ \t\n]+)?using[ \t\n]+(?:static[ \t\n]+)?(?:[\w]+[ \t\n]*=[ \t\n]*)?([\w.]+)(?:[ \t\n]*<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]*;",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:<author>|Author:|Created by)\s*(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust,
+        # c, and cpp earlier in this epic (the 10th hit). Bounded both
+        # quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (The Blazor/Razor Horizon)
+        "ssr_boundaries": re.compile(
+            r"@(?:page|rendermode|code|layout)|\[(?:Route|CascadingParameter)\]|\b(RenderFragment|ComponentBase|IViewComponentResult)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # BUG FIX: `+=`/`-=` (event subscribe/unsubscribe operators) used
+        # to be inside the \b(...)\b wrapper. \b requires a word/non-word
+        # transition; since neither `+`/`=` nor `-`/`=` is a word
+        # character, `\b+=\s*\b` could only match with no surrounding
+        # whitespace at either edge (e.g. "x+=y"), never idiomatic C#
+        # like "MyEvent += handler" (spaced on both sides). Split out
+        # unguarded, same fix shape as #621's dash/hash families.
+        "events": re.compile(
+            r"\b(event\s+[\w<>]+\s+\w+|EventHandler|Invoke|Raise|MediatR|INotification|IRequest|Publish)\b|\+=\s*|-=\s*"
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(
+            r"\b(IServiceCollection|AddTransient|AddScoped|AddSingleton|AddKeyed|\[Inject\]|FromServices|IServiceProvider)\b"
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"^[ \t]*#(?:define|undef|if|elif|else|endif|region|endregion|pragma|warning|error)\b",
+            re.M,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Native pointers and modern memory structures (Span/Memory).
+        "pointers": re.compile(r"\b(?:fixed|stackalloc|Unsafe\.AsPointer|IntPtr|UIntPtr|nint|nuint)\b|->"),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(
+            r"\b(Marshal\.AllocHGlobal|GC\.AllocateArray|MemoryPool|ArrayPool<[^>]*>\.Shared\.Rent|ref\s+struct|scoped\s+ref)\b"
+        ),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:ILogger|_logger|Log|TelemetryClient|ActivitySource)\.(?:LogInformation|LogError|LogWarning|LogDebug|StartActivity|TrackEvent)\b|\[LoggerMessage"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        "debug_prints": re.compile(r"\b(Console\.(?:Write|WriteLine|Error)|Debug\.(?:Write|WriteLine|Print))\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\bas\s+[A-Z]\w*|\(\s*(?:int|long|short|byte|char|float|double|decimal|bool|string|[A-Z][A-Za-z0-9_]*)\s*\)\s*[a-zA-Z_$]"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|abort|FailFast|Environment\.Exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        # BUG FIX: `Wait\(\)` ends on `)` (non-word), so the shared
+        # trailing \b could never fire (`task.Wait();` -- the next
+        # char is always `;`, a newline, or another `.method`, never a
+        # word character). Never matched.
+        "thread_sleeps": re.compile(r"\b(?:sleep|delay|Task\.Delay|Thread\.Sleep)\b|\bWait\(\)"),
+        # 43. bitwise_ops (Bitwise Operations)
+        # Low-level byte manipulation. Safely maps to C# bitwise operators without overlapping language-specific pipelines.
+        "bitwise_ops": re.compile(r"<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(
+            r"\b(mutex|lock|Monitor|Semaphore|Interlocked|SpinLock|ReaderWriterLockSlim)\b",
+            re.I,
+        ),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|readonly|init|Immutable[A-Z]\w*)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # BUG FIX (grammar mismatch): this was entirely case-sensitive
+        # and only matched lowercase `dispose(`/`close(`/etc -- but
+        # idiomatic C# always PascalCases public members
+        # (`.Dispose()`, `.Close()`), so the realistic form never
+        # matched at all; only a non-idiomatic lowercase call would.
+        "cleanup": re.compile(r"\b(dispose|close|free|delete|GC\.Collect|GC\.SuppressFinalize)\b\s*\(", re.I),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b(private|protected|internal|file)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        # BUG FIX (grammar mismatch): case-sensitive lowercase
+        # `subscribe`/`on` never matched idiomatic C# PascalCase
+        # (Rx.NET's `.Subscribe(...)`, SignalR's `.On<T>(...)`) --
+        # same shape as the `cleanup` fix above.
+        "listeners": re.compile(r"\b(on|addEventListener|subscribe|EventHandler)\b|\+=", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX (real coverage gap): missing xUnit's `[Fact(Skip =
+        # "...")]` / `[Theory(Skip = "...")]` form entirely -- the
+        # dominant real xUnit skip idiom (NUnit/MSTest use a standalone
+        # `[Ignore]` attribute instead, which was already covered).
+        "test_skip": re.compile(
+            r"\[(?:Ignore|Skipped)\]|\[(?:Fact|Theory)\([^)]*Skip\s*=|test\.skip\(|mock\(|stub\(|Substitute\.For"
+        ),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (C# Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(JsonSerializer\.Deserialize|JsonConvert\.DeserializeObject|XmlSerializer|BinaryFormatter)\b"
+        ),
+        "regex_execution": re.compile(r"\b(Regex\.Match(?:es)?|Regex\.Replace|Regex\.IsMatch|new\s+Regex)\b"),
+        "time_date_logic": re.compile(
+            r"\b(DateTime\.Now|DateTime\.UtcNow|DateTimeOffset|TimeSpan|Stopwatch\.StartNew)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"\b(Process\.Start|NamedPipeServerStream|ChannelFactory|GrpcChannel)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/css.py b/gitgalaxy/standards/language_standards/languages/css.py
new file mode 100644
index 000000000..c6fc700c9
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/css.py
@@ -0,0 +1,258 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Modern CSS (2025 Baseline) / Native Nesting / Container Queries",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard stylesheets, preprocessors (Sass/Less), and PostCSS files.
+    "extensions": [".css", ".scss", ".sass", ".less", ".styl", ".pcss"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: CSS rarely uses extensionless configurations.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: CSS linting, PostCSS, and utility framework configurations acting as disambiguation anchors.
+    "discriminators": [
+        ".css",
+        "postcss.config.js",
+        "tailwind.config.js",
+        ".stylelintrc",
+        ".stylelintignore",
+    ],
+    # EXECUTION SIGNATURES: CSS is a declarative stylesheet language; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: Uses '/*' and '*/' for blocks; preprocessors add '//' for lines.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical gating. Includes Container/Media queries and logic-gating pseudo-selectors.
+        # BUG FIX: all 4 at-rule alternatives start with `@` (non-word),
+        # so the shared leading \b could only fire when a word char
+        # immediately preceded the `@` -- never true for how at-rules
+        # are actually written (preceded by whitespace or a line
+        # start). None of these ever matched at all.
+        "branch": re.compile(
+            r"@media\b|@supports\b|@container\b|@starting-style\b|:(?:has|is|where|not)\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Signatures defining input coupling. Bounded to prevent ReDoS on massive calculations.
+        # BUG FIX (Rule 11): `[^)]*` is a flat negated class -- can't
+        # represent even one level of nesting. Modern CSS math functions
+        # nest constantly (`calc(var(--x) + 1px)`, `min(sin(45deg), .5)`)
+        # -- confirmed the old pattern truncated at the first inner `)`,
+        # matching only `calc(var(--x)` instead of the full call.
+        # Upgraded to the one-level-nesting bounded form (the two
+        # alternatives never match overlapping text, so it stays linear).
+        "args": re.compile(
+            r"\b(?:calc|clamp|min|max|var|env|url|rgba?|hsla?|lch|oklch|color-mix|light-dark)"
+            r"\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)",
+            re.I,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (none in CSS) and !important (freeze_hits).
+        # BUG FIX: all 8 at-rule alternatives are `@`-prefixed -- same
+        # leading-\b bug as branch above. None ever matched.
+        "structural_boundaries": re.compile(
+            r"@layer\b|@scope\b|@property\b|@font-face\b|@keyframes\b|@page\b|@charset\b|@namespace\b",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks (Selectors). EXCLUDES classes/IDs to avoid False Positives.
+        "func_start": re.compile(
+            r"^[ \t]*(@(?:media|supports|container|layer|keyframes|-webkit-keyframes)\b)(?=[^{]*\{)",
+            re.M | re.I,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Defines discrete visual entities via Class and ID selectors.
+        "class_start": re.compile(
+            r"(?<!\*[ \t\n])(?<!\*)(?<![\"'\\])(\.(?:[a-zA-Z_\-]|\\(?:[0-9a-fA-F]{1,6}\s?|[^0-9a-fA-F\n\r\t\f]))(?:[^\s{>+~:,. \"\'\[\]\(\)\;\\]|\\.)*|\#(?:[a-zA-Z_\-]|\\(?:[0-9a-fA-F]{1,6}\s?|[^0-9a-fA-F\n\r\t\f]))(?:[^\s{>+~:,. \"\'\[\]\(\)\;\\]|\\.)*)(?=[^{};]*\{)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Defensive fallbacks and mathematical clamps.
+        "safety": re.compile(
+            r"@supports\b|\bvar\([^,]+,\s*(?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)|\b(?:minmax|clamp)\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*\)|\bcontain\s*:\s*(?:strict|content|paint|layout)\b",
+            re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Universal selectors and high-specificity ID overrides.
+        "safety_bypasses": re.compile(r"^[ \t]*\*|^[ \t]*#[\w-]+\s*(?:[:.[>+~][^{;]*)?\{", re.M | re.I),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Extreme tech debt and legacy engine thrashing.
+        "high_risk_execution": re.compile(r"\b(?:expression|behavior|-ms-filter)\b"),
+        # 9. io (I/O & Network Boundaries)
+        # =====================================================================
+        # THE FIX: Prevent False I/O Latency Flags.
+        # HISTORICAL CONTEXT FOR FUTURE LLMS: CSS is a declarative language.
+        # Using `url()` or `@import` fetches a visual asset during browser paint;
+        # it does NOT block a computational thread to read from a database or
+        # write to a file system. If given a regex, the engine will hallucinate
+        # severe I/O bottlenecks on standard stylesheets. Must remain `None`.
+        # =====================================================================
+        "io": None,
+        # 10. api (Public Surface Area)
+        # Design Tokens and global properties exposed for script/component consumption.
+        "api": re.compile(r":root\b|@property\b|--[a-zA-Z0-9_-]+\s*:|::part\s*\([^)]*\)", re.I),
+        # 11. flux (State Mutation)
+        # =====================================================================
+        # THE FIX: Prevent 'Declarative Hallucination' of State Flux.
+        # HISTORICAL CONTEXT FOR FUTURE LLMS: Defining a CSS custom property
+        # (`--color: red;`) is a static declaration, not a sequential state
+        # mutation (like `x = x + 1` in Turing-complete languages). Treating it
+        # as flux causes stylesheets to mathematically outrank complex controllers
+        # in volatility. Must remain `None`.
+        # =====================================================================
+        "state_mutation": None,
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out structural rules.
+        "dead_code": re.compile(
+            r"/\*[ \t]*(?:@media|@container|@supports|@keyframes|\.[a-zA-Z][\w-]*|#[a-zA-Z][\w-]*)\b"
+            r"|/\*[ \t]*[a-zA-Z][\w-]*[ \t]*\{",
+            re.I,
+        ),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(
+            r"/\*\*\s*|/\*\s*@(?:param|return|author|example|prop|define|theme)",
+            re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(r"\[[ \t]*data-(?:testid|cy|test|test-id|qa)[ \t]*[=\]]", re.I),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # Logic executing concurrently on the GPU.
+        "concurrency": None,
+        # 16. ui_framework (UI / View Components)
+        # Density of layout primitives and Tailwind utilities.
+        "ui_framework": re.compile(
+            r"\b(?:display:\s*flex|display:\s*grid|justify-content|align-items|gap|grid-template-columns|absolute|relative)\b|@apply\b",
+            re.I,
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        # Native CSS Nesting (&).
+        "closures": re.compile(r"(?:^[ \t]*|\s+|,)&\s*(?:[:.\[>+~][^{;]*)?\{", re.M),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(r"^[ \t]*(?::root|html|body|\*)\s*(?:{[^}]*}|[,{])", re.M | re.I),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions
+        "comprehensions": None,
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(
+            r"\b(?:sin|cos|tan|asin|acos|atan|atan2|hypot|abs|sign|mod|rem|round|pow|sqrt|exp|log)"
+            r"\s*\((?:[^()]|\([^()]*\))*\)",
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Catastrophic specificity graphs and recursively nested logic.
+        "reflection_metaprogramming": re.compile(
+            r"&(?:\s*&)+|:(?:has|is|not)\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*:(?:has|is|not)\s*\(|calc\s*\((?:[^()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*calc\s*\(",
+            re.I,
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"@import\b", re.I),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*@import[ \t\n]+(?:url\(\s*['\"]?|['\"])([^'\"\)\s;]+)",
+            re.I | re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"/\*\s*(?:@author|Author:|Created by|Maintainer|Copyright):?\s+([^*]*)\*/",
+            re.I | re.S,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX: confirmed O(n^2) ReDoS -- the SPEC alternative's
+        # unbounded `\d+` sits directly adjacent to the also-unbounded
+        # `[^\]]*`, whose charset fully overlaps digits. Measured ~4x
+        # runtime per size doubling on "[SPEC-" + digits with no
+        # closing bracket. Bounded `\d+` to `\d{1,10}` (no realistic
+        # ticket ID needs more) and `[^\]]*` to `{0,300}`.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]|\bfigma\.com/file/", re.I),
+        # 31. ssr_boundaries
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Modern Scroll-Driven animation timelines.
+        "events": re.compile(
+            r"@(?:scroll-timeline|view-timeline)|animation-timeline:\s*(?:scroll|view)\([^)]*\)",
+            re.I,
+        ),
+        # 33. dependency_injection
+        "dependency_injection": None,
+        # 34. macros
+        "macros": None,
+        # 35. pointers
+        "pointers": None,
+        # 36. memory_alloc
+        "memory_alloc": None,
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry
+        "telemetry": None,
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        # =====================================================================
+        # THE FIX: Prevent String Literal Hallucinations.
+        # HISTORICAL CONTEXT FOR FUTURE LLMS: CSS does not possess a runtime
+        # console or a `console.log` function. If a regex here triggers, it is
+        # guaranteed to be a false positive hallucinating on a string literal
+        # (e.g., `content: "console.log";`). Must remain `None`.
+        # =====================================================================
+        "debug_prints": None,
+        # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": None,
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # Execution resets.
+        "panics_and_aborts": re.compile(r"\b(unset|initial|revert|revert-layer)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(?:transition-delay|animation-delay)\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": None,
+        # 44. sync_locks (Resource Management & Stability)
+        # Coordinating cascade layers and containment.
+        "sync_locks": None,
+        # 45. immutability_locks (Immutability Constraints)
+        # Explicit locks on data mutation.
+        "immutability_locks": re.compile(r"!important\b|\bconstant\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # =====================================================================
+        # THE FIX: Prevent False Memory Management Flags.
+        # HISTORICAL CONTEXT FOR FUTURE LLMS: In CSS, `clear: both;` is a
+        # layout formatting property used to push elements below floats. It
+        # does absolutely nothing to destroy variables, clear cache, or free up
+        # RAM. Giving this a regex tricks the physics engine into thinking the
+        # stylesheet is performing active memory management. Must remain `None`.
+        # =====================================================================
+        "cleanup": None,
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Scoping and part boundaries.
+        "encapsulation": re.compile(r"@scope\b|::part|::slotted", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        # Subscribing to external timelines.
+        "listeners": re.compile(r"animation-timeline|@scroll-timeline", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(?:data-skip|data-ignore)\b", re.I),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/csv.py b/gitgalaxy/standards/language_standards/languages/csv.py
new file mode 100644
index 000000000..f051599d2
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/csv.py
@@ -0,0 +1,28 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {"target_version": "Comma Separated Values", "status": "production"},
+    # COMPREHENSIVE SURFACE AREA: Comma, tab, and pipe-separated value formats.
+    "extensions": [".csv", ".tsv", ".psv"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Delimited data relies strictly on extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling datasets and data-science logic files acting as disambiguation anchors.
+    "discriminators": [".csv", ".tsv", ".py", ".ipynb", ".R", ".m"],
+    # EXECUTION SIGNATURES: CSV is purely static data; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: While strictly data, when CSVs *do* contain comments (supported by
+    # parsers like Pandas or DuckDB), they almost exclusively use the '#' symbol at the start of a line.
+    "lexical_family": "line_exclusive",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/dart.py b/gitgalaxy/standards/language_standards/languages/dart.py
new file mode 100644
index 000000000..d2e1d78cb
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/dart.py
@@ -0,0 +1,438 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Dart 3.11 (Records, Patterns, Class Modifiers, Macros, FFI)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Dart sources.
+    "extensions": [".dart"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Dart rarely uses extensionless configurations.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, pub package manifests, and analyzer configurations to anchor Flutter/Dart projects.
+    "discriminators": [
+        ".dart",
+        "pubspec.yaml",
+        "pubspec.lock",
+        "analysis_options.yaml",
+        ".metadata",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for standalone Dart scripting.
+    "shebangs": ["dart"],
+    # UPGRADED: Maps to Family 2 (Nested C)
+    # Rationale: (CORRECTION) Like Swift and Rust, Dart officially supports nested multi-line
+    # comments (/* /* */ */). Standard C parsing would prematurely terminate here causing geometry failure.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes modern pattern guards (when) and null-coalescing.
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|while|do|try|catch|finally|break|continue|when)\b|&&|\|\||\?|\?\?",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Captures parameters in function, method, and lambda signatures.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # both alternatives (was only reachable via group(0), the whole
+        # match including the name prefix) so detector.py's counter
+        # isolates just "(...)" -- the whole-match fallback overcounted
+        # every zero/one-arg signature by +1 the same way Python's did
+        # (#1199). Name group added to the first alternative too, purely
+        # so existing extraction tests keep passing.
+        # #2309 (investigated, NOT fixed via this regex -- see detector.py's
+        # dart branch instead): a bodyless (`;`-terminated) `this.`/`super.`-
+        # forwarding constructor (`_DeleteTextAction(this.state, ...);`,
+        # flutter/editable_text.dart:6353) reads 0 args because `func_start`
+        # accepts a bare `;` terminator for these but this SEPARATE
+        # `args`-counting regex never did. Adding `;` to the trailing
+        # lookahead here was tried and reverted: `test_dart_args_invalid`
+        # (`tests/extraction/languages/test_dart.py`) already asserts this
+        # regex must NEVER match a bare call statement (`foo(x);`) --
+        # `func_start`'s own Invocation Shield (#1221) doesn't apply here,
+        # since this regex is also `.search()`ed over the whole function
+        # `block` when dart supplies no `args_search_text` (true before
+        # #2309's own detector.py fix), so a `;`-accepting version matches
+        # the FIRST bare call statement inside a zero-paren declaration's own
+        # body (e.g. `Rect get bounds { ... box.getTransformTo(null); ...
+        # }`, wrongly borrowing 1 arg) just as readily as a real bodyless
+        # ctor. Fixed instead via `args_count_override` in detector.py,
+        # which counts the real parameter list directly for this one shape
+        # without loosening this shared regex's own contract.
+        "args": re.compile(
+            r"(?!(?:if|for|while|switch|catch|case|when|return|throw|new)\b)\b([A-Za-z_$][\w$]*)(?:[ \t\n]*<[^>]*>)?[ \t\n]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))(?=[ \t\n]*(?:\{|=>|:|async|sync))|(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))[ \t\n]*=>",
+            re.I | re.M,
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and const/final.
+        "structural_boundaries": re.compile(
+            r"\b(var|late|return|yield|await|class|mixin|extension|enum|typedef|import|export|part|library|base|sealed|interface|macro)\b|=>",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ReDoS clamped to {0,5}. Strict capture group and positive lookahead applied.
+        # #1221: the trailing lookahead's parenthesized alternative
+        # used to be a bare `\(` -- proof a `(` follows, nothing more
+        # -- so a bare call statement at true line start (`next();`)
+        # false-positive-matched as a method/function definition. Dart
+        # has both a genuinely prefixed stub case that ends in bare
+        # `;` with no `{`/`=>` anywhere (`external void
+        # externalFunc();`, has a modifier + return type) and a
+        # legitimate zero-prefix case (the bare constructor shape
+        # `MyClass() {}`, no modifier and no return type) that always
+        # reaches a real `{` anyway -- so, mirroring groovy's #1221
+        # fix, this is split into three alternatives instead of one:
+        # (A) has a modifier (static/external/abstract/covariant/
+        # late), (B) has no modifier but has a return-type-shaped
+        # prefix token -- both keep the original lenient lookahead
+        # (bare `;` still allowed, since a real call statement never
+        # carries a modifier or a return type), or (C) has neither --
+        # must fully close its (non-nested, same bound as `args`)
+        # parameter list and reach a real `=>`/`{`, never a bare `;`
+        # (a bare call and a zero-prefix stub are otherwise
+        # indistinguishable here, but dart's zero-prefix valid cases
+        # are all constructors that always have bodies anyway, so this
+        # loses no coverage).
+        # =====================================================================
+        # [ THE RETURN-TYPE BOUNDARY SHIELD (DART) ]
+        # Issue #1417: The previous return-type token class `[\w<>\[\],?(){}]`
+        # allowed `{`, `}`, `(`, `)` as valid literal characters. Combined with
+        # lazy repetition, this let the return-type guess wander across a real
+        # function's own parameter-list close and body-open `) {` and land on an
+        # unrelated identifier deep inside the body (e.g. `Navigator.of`),
+        # misreporting it as a phantom function definition.
+        # FIX: Tightened the character class to `(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))`
+        # to reject `{`/`}` entirely and only permit `(`/`)` if they are balanced.
+        # This prevents the regex from crossing structural boundaries like `) {`.
+        # =====================================================================
+        "func_start": re.compile(
+            r"^[ \t]*(?!(?:implements|with|extends)\b)(?:@[a-zA-Z_$][\w$]*\b(?:\([^)]*\))?[ \t\n]*){0,5}"
+            r"(?:"
+            r"(?:(?:static|external|abstract|covariant|late)[ \t\n]+){1,5}"
+            r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
+            r"(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,4}?(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+(?<!,)[ \t\n]+))?"
+            r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
+            r"(?:(?:(?P<getA>get)|set|factory|const)[ \t\n]+)?((?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*|operator[ \t\n]+[^\s\w]+)"
+            # #2462: one level of generic-argument nesting in the method's
+            # own type-parameter list (`foo<T extends State<StatefulWidget>>()`)
+            # -- a bare `<[^>]*>` stops at the inner `>` and the whole
+            # generic method is missed.
+            r"(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:\(|=>|\{|(?(getA);|(?!))))"
+            r"|"
+            r"(?:(?:static|external|abstract|covariant|late)[ \t\n]+){0,5}"
+            r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
+            r"(?:(?!\?[ \t\n]+(?:get|set|factory|[a-zA-Z_]))(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,4}?(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+(?<!,)[ \t\n]+)))"
+            r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
+            r"(?:(?:(?P<getB>get)|set|factory|const)[ \t\n]+)?((?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*|operator[ \t\n]+[^\s\w]+)"
+            r"(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:\(|=>|\{|(?(getB);|(?!))))"
+            r"|"
+            # #2308 item 1: `implements`/`with` added to every occurrence of this
+            # keyword-exclusion list (all 8, shared verbatim across all 4
+            # alternatives). The outermost `(?!(?:implements|with|extends)\b)`
+            # guard at this regex's very start only rejects a match that STARTS
+            # on one of these keywords -- it doesn't stop the return-type-prefix
+            # token loop below from swallowing one of them as an ordinary interior
+            # token when the match starts on an earlier line instead (e.g. a
+            # multi-line `class Foo extends Base\n    with\n        MixinA,\n
+            # MixinB\n    implements SomeInterface {` header, where a match
+            # starting on `MixinB`'s own line can consume `implements` as its
+            # final "return-type" token and land on `SomeInterface` as a phantom
+            # function name). Confirmed via flutter/editable_text.dart:2480's
+            # `EditableTextState ... implements AutofillClient {` header.
+            # Deliberately does NOT add `extends` here -- already confirmed unsafe
+            # in this same investigation (#2072 item 1): `extends` also appears
+            # inside a generic method's own type-parameter bound
+            # (`pushNamed<T extends Object?>(...)`), which this token loop cannot
+            # distinguish from a bare class-header continuation without real
+            # bracket-depth tracking. A class header that continues via a bare
+            # `extends` on its own line (rare -- `extends` is almost always
+            # attached to the same line as `class Foo`) can still slip through;
+            # left as a known, documented residual limitation rather than risk
+            # breaking the far more common generic-bound pattern.
+            # #2071: this zero-prefix branch's lookahead used to accept a bare
+            # `=>` unconditionally (no `get` required) and validated a preceding
+            # "parameter list" with a naive, non-balanced-paren `\([^)]*\)` --
+            # together these made Dart 3 switch-expression arms (`Pattern =>
+            # result,`, including bare `_ => result,`) and ordinary call
+            # statements with a lambda argument (`obj.method((x) => ...)`, whose
+            # nested `)` satisfied the naive paren check) false-positive-match as
+            # function/getter definitions. Dart's real grammar has no
+            # parameterless `=> expr` construct without an explicit `get`, so the
+            # bare-arrow alternative is now gated the same way the bare `;`
+            # alternative already is via `(?(getC)...)`. The paren alternative now
+            # reuses the SAME balanced-paren pattern the `args` rule and this
+            # regex's own return-type-prefix groups already use elsewhere, and
+            # rejects a parameter list that opens with `:` (only valid in Dart's
+            # object-destructuring patterns, e.g. `StatefulElement(:final T
+            # state) => state,` -- never a real parameter list).
+            r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
+            r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
+            r"(?:(?:(?P<getC>get)|set|factory|const)[ \t\n]+)?((?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*|operator[ \t\n]+[^\s\w]+)"
+            r"(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:\((?!\s*:)(?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)[ \t\n]*(?:async\*?|sync\*)?[ \t\n]*(?:=>|\{|:)|(?(getC)=>|(?!))|\{))"
+            r"|"
+            r"(?!(?:(?:(?:[\w<>\[\],.?]|\((?:[^()]|\([^()]*\))*\))+[ \t\n]+){0,5}?)(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\())\b)"
+            r"(?!(?:class|mixin|enum|extension(?![ \t\n]*[(<])|typedef|implements|with|in|on|if|for|while|switch|catch|try|finally|case|when|assert|return|throw|new|var|final|const(?![ \t\n]+(?:[a-zA-Z_]\w*\.)?[a-zA-Z_]\w*[ \t\n]*(?:<[^>]*>[ \t\n]*)?\()|Function)\b)"
+            r"(?:const[ \t\n]+)?(_?[A-Z]\w*(?:\.[a-zA-Z_]\w*)?)"
+            # #2308 item 2 / #2462: this alternative originally required
+            # `this.`/`super.` inside the parens. A bodyless DEFAULT/named
+            # constructor with an EMPTY parameter list (`ClassName();`,
+            # `ClassName.foo();` -- e.g. flutter/semantics.dart's
+            # `ChildSemanticsConfigurationsResultBuilder();`) has neither and
+            # never matched. The lookahead now also accepts whitespace-only
+            # parens -- but that form is shape-identical to a bare zero-arg
+            # call statement (`FlutterTimeline.finishSync();`,
+            # `SystemNavigator.selectSingleEntryHistory();`), so detector.py's
+            # dart branch gates the empty-paren case on real brace-depth
+            # tracking: it's kept only when the name's leading segment is the
+            # nearest brace-enclosing class/mixin/enum -- true for a real
+            # constructor, never for a call statement. The `this.`/`super.`
+            # form stays regex-only (unambiguous on its own).
+            r"(?=[ \t\n]*(?:<[^>]*>[ \t\n]*)?\((?:[ \t\n]*|[^)]*(?:this\.|super\.)[^)]*)\)[ \t\n]*;)"
+            r")",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # =====================================================================
+        # [ THE VERTICAL MODIFIER & INHERITANCE SHIELD (DART) ]
+        # Dart allows modifiers to stack (e.g., `abstract base mixin class`)
+        # and extends/implements declarations that broke the rigid trailing lookahead.
+        # FIX: Grouped the class modifiers into a bounded set `(?:(?:abstract|sealed|base|interface|final|macro)[ \t\n]+){0,5}`.
+        # Upgraded all internal spaces to `[ \t\n]+` to jump vertical gaps, and
+        # swapped the rigid lookahead for an optional non-capturing inheritance
+        # group `(?:[ \t\n]+(?:extends|implements|with).*?)?` to handle inheritance paths.
+        # =====================================================================
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+\b(?:\([^)]*\))?[ \t\n]*){0,5}"
+            r"(?:(?:abstract|sealed|base|interface|final|macro|mixin)[ \t\n]+){0,5}"
+            r"(?:class|mixin|enum|extension(?:[ \t\n]+type(?:[ \t\n]+const)?)?|extension)[ \t\n]+(?:/\*.*?\*/[ \t\n]*)?([A-Z_]\w*)(?:[ \t\n]+(?:extends|implements|with)[ \t\n]+[A-Za-z_$][\w_<>, \t\n]*)?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Null safety boundaries, type assertions, and required parameters.
+        # BUG FIX: `@immutable` and `@mustCallSuper` both start with `@`
+        # (non-word), so the shared leading \b could only fire when a
+        # word char immediately preceded the `@` -- never true for how
+        # annotations are actually written (always preceded by
+        # whitespace or a line start). Both never matched at all.
+        # (`!is` is a separate, harmless case: it still "matches" via
+        # the bare `is` alternative catching its own tail as a
+        # substring, so it isn't a functional miss -- left as-is.)
+        "safety": re.compile(
+            r"\b(?:try|catch|finally|on\s+[A-Z]\w*|assert|required|late|is|!is|SafeArea)\b"
+            r"|@immutable|@mustCallSuper|\?\?|\?.",
+            re.I,
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing sound null safety or static analysis.
+        "safety_bypasses": re.compile(r"!\s*[;,\n)\.\]]|\bdynamic\b|//\s*ignore(?:_for_file)?:\s*\w+"),
+        # 8. danger: High-Risk Execution. Process killers and catastrophic exit commands.
+        "high_risk_execution": re.compile(r"\b(exit|exitCode|Process\.killPid)\b", re.I),
+        # 9. io: I/O & Network Boundaries. Disk, Network, WebSockets, and Uri parsing (Includes legacy CERN triggers).
+        "io": re.compile(
+            r"\b(File|Directory|HttpClient|HttpServer|ServerSocket|WebSocket|Uri\.parse|HtmlDocument|HttpRequest|HttpResponse|HTRequest|Nexus|ENQUIRE)\b",
+            re.I,
+        ),
+        # 10. api: Public Surface Area. Exposed visibility (Lack of _ prefix) and routing decorators.
+        "api": re.compile(
+            r"\b(export|part\s+of)\b|@(Route|Get|Post|Mapping|visibleForTesting|pragma)\b|^[ \t]*(?:class|mixin|enum|extension|typedef)\s+(?![_])[A-Za-z]\w*",
+            re.I | re.M,
+        ),
+        # 11. flux: State Mutation. State mutation (setState and reactive collection mutators).
+        "state_mutation": re.compile(
+            r"\b(setState|notifyListeners|markNeedsBuild|StreamController\.add)\b|[^!=<>\+\-\*\/%&\|\s]=\s*[^=]|(?:\+\+|--)|\.(?:add|addAll|remove|insert|clear|update)\s*\(",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code or dead widgets.
+        "dead_code": re.compile(
+            r"//[ \t]*(?:class|mixin|void|if|for|while|print|Widget|return)\b|/\*[ \t]*(?:class|mixin|void|Widget|if|for)"
+        ),
+        # 13. doc: Structured Documentation. dartdoc annotations and structured comments.
+        "doc": re.compile(r"///|/\*\*|@param|@return"),
+        # 14. test: Testing & Assertions. Flutter test frameworks and standard expect/verify markers.
+        "test": re.compile(
+            r"\b(?:test|testWidgets|group|setUp|tearDown|pumpWidget|pumpAndSettle|find\.(?:byType|text|byKey))\b|\b(?:expect|verify|when)\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Event Loop primitives (Future, Stream, Isolate).
+        # BUG FIX: `sync\*` ended on `*` (non-word) inside the shared
+        # trailing \b group -- the generator-function modifier
+        # `sync* { ... }` never matched (no bare "sync" alternative
+        # exists to mask it, unlike `async*`, which happened to still
+        # match via the bare "async" alternative catching it as a
+        # substring). Pulled both `\*`-suffixed forms out for
+        # consistency.
+        "concurrency": re.compile(
+            r"\b(?:async|await|Future|Stream|Isolate|ReceivePort|SendPort|Completer|Timer|StreamSubscription)\b"
+            r"|\basync\*|\bsync\*",
+            re.I,
+        ),
+        # 16. ui_framework: UI / View Components. Flutter Component trees and DOM nodes (Includes TBL triggers).
+        "ui_framework": re.compile(
+            r"\b(Widget|BuildContext|StatefulWidget|Scaffold|Container|Text|HtmlElementView|RichText|Hyperlink|SGML|HyperText|Browser)\b",
+            re.I,
+        ),
+        # 17. closures: Closures / Anonymous Functions. Fat-arrows and anonymous function blocks.
+        # BUG FIX (ReDoS): `[^)]*` was unbounded. Confirmed quadratic
+        # scaling (0.011s/0.045s/0.179s/0.713s/2.85s for n=5k/10k/20k/
+        # 40k/80k -- ~4x per doubling) against an adversarial run of
+        # unclosed `(` characters: at each of the ~n candidate `(`
+        # start positions, the unbounded class scans to the end of the
+        # string looking for a `)` that never appears, backtracking
+        # across the whole remaining length -- O(n) work at each of
+        # O(n) positions. Bounded to `{0,300}`, the same fix shape used
+        # elsewhere in this sweep.
+        "closures": re.compile(r"=>|\(\s*[^)]{0,300}\)\s*(?:async\*?|sync\*?)?[ \t]*\{"),
+        # 18. globals: Global / Shared State. Static class fields and environmental bindings.
+        "globals": re.compile(
+            r"\b(static\s+final|static\s+const|Platform\.environment|window\.|Zone\.current)\b|^[ \t]*(?:final|const|var)\s+[A-Za-z_$][\w$]*[ \t]*=",
+            re.I | re.M,
+        ),
+        # 19. decorators: Decorators / Annotations. Annotations applied to methods/classes.
+        "decorators": re.compile(r"@[A-Za-z_$][\w$]*(?:\([^)]*\))?"),
+        # 20. generics: Generics / Type Parameters. Parameterized collections and generic classes.
+        "generics": re.compile(r"<\s*[A-Z][^>]*>"),
+        # 21. comprehensions: Iterators / Comprehensions. Collection for/if and functional pipelines.
+        "comprehensions": re.compile(
+            r"\[\s*(?:for|if)\s*\([^)]*\)|\{\s*(?:for|if)\s*\([^)]*\)|\.(?:map|where|reduce|fold|expand|every|any)\s*\("
+        ),
+        # 22. scientific: Numerical / Compute Libraries. math.pi, typed binary arrays, and Matrix4 vectors.
+        "scientific": re.compile(
+            r"\b(math\.sin|math\.cos|math\.sqrt|math\.pi|dart:math|Float64List|Float32List|Int32List|Uint8List|Vector2|Vector3|Matrix4)\b",
+            re.I,
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Reflection, Native Bridges, and code generation markers.
+        "reflection_metaprogramming": re.compile(
+            r'\b(MethodChannel|EventChannel|dart:mirrors|reflect|reflectClass|noSuchMethod|dart:js_interop)\b|part\s+[\'"][^\'"]+\.(?:g|freezed)\.dart[\'"]',
+            re.I,
+        ),
+        # 24. import: Dependency Inclusions. Dependency resolution and library partitions.
+        "import": re.compile(r'^[ \t]*(?:import|export|part|part\s+of)\b\s*[\'"][^\'"]+[\'"]', re.M),
+        "_dependency_capture": re.compile(
+            r"(?:^|[ \t;{}])(?:import|export|part(?:[ \t\n]+of)?)\b[ \t\n]*(?:['\"]([^'\"]+)['\"]|([a-zA-Z_$][\w$]*)[ \t\n]*;)",
+            re.M,
+        ),
+        # 25. ownership: Authorship indicators.
+        "ownership": re.compile(r"//\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags and architecture specs.
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(
+            r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|RFC|W3C|CERN|TBL|ENQUIRE)[^\]]{0,300}\]|\b(?:Tim\s+Berners-Lee|WorldWideWeb|HyperText\s+Proposal)\b",
+            re.I,
+        ),
+        # 31. ssr_boundaries: View Horizon. shelf/Serverpod response handlers.
+        # BUG FIX: `Router\(\)` ends on `)` -- shared trailing \b never
+        # fired. Never matched.
+        "ssr_boundaries": re.compile(
+            r"\b(?:shelf|dart_frog|Serverpod|Response\.(?:ok|internalServerError)|RequestContext|Handler|Serve|renderHtml)\b"
+            r"|Router\(\)",
+            re.I,
+        ),
+        # 32. events: Pub/Sub Network. Stream subscriptions and broadcast observables.
+        "events": re.compile(
+            r"\b(StreamController|EventBus|Subject|BehaviorSubject|PublishSubject|EventEmitter|BlocProvider|notifyListeners)\b|\.listen\s*\(",
+            re.I,
+        ),
+        # 33. dependency_injection: Inversion of Control. GetIt, Provider, and Injectable markers.
+        # BUG FIX: `@injectable` starts with `@` (non-word), so the
+        # shared leading \b could only fire when a word char
+        # immediately preceded the `@` -- never true for how
+        # annotations are actually written. Never matched at all.
+        "dependency_injection": re.compile(
+            r"\b(?:GetIt\.I|GetIt\.instance|Provider\.of|ConsumerWidget|ref\.watch|ref\.read|Injector)\b|@injectable",
+            re.I,
+        ),
+        # 34. macros: Preprocessor Hooks. Modern macros and JsonSerializable generators.
+        "macros": re.compile(
+            r"\bmacro\s+class\b|@(?!(?:override|deprecated|required|protected|visibleForTesting|pragma|immutable))[A-Z]\w*Macro\(\)|@JsonSerializable|@freezed",
+            re.I,
+        ),
+        # 35. pointers: Memory Map. dart:ffi bridging to native memory space.
+        "pointers": re.compile(
+            r"\b(dart:ffi|Pointer<|NativeFunction<|Opaque|ffi\.cast|IntPtr|ffi\.Pointer)\b",
+            re.I,
+        ),
+        # 36. memory_alloc: Manual Memory Management. Allocators bypassing the GC.
+        "memory_alloc": re.compile(
+            r"\b(ffi\.Allocator|malloc\.allocate|calloc\.allocate|malloc\.free|Arena|using\s*\(\s*\(Arena)\b",
+            re.I,
+        ),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics (Structured logs).
+        "telemetry": re.compile(
+            r"\b(developer\.log|Logger|log|FirebaseCrashlytics|Sentry)\.(?:info|error|warn|severe|debug|trace|recordError)\b|\bdart:developer\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(print|debugPrint)\s*\(", re.I),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit casting.
+        "explicit_casts": re.compile(r"\bas\s+[A-Z]\w*|\(\s*[A-Z]\w*\s*\)\s*[a-zA-Z_$]"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting context.
+        "panics_and_aborts": re.compile(r"\b(throw|rethrow|exit|exitCode|Process\.killPid)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits/delays).
+        "thread_sleeps": re.compile(r"\b(sleep|delay|setTimeout|setInterval)\s*\(", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~(?!=|/)"),
+        # 44. sync_locks (Resource Management & Stability) Coordinated threading.
+        "sync_locks": re.compile(r"\b(Mutex|Lock|synchronized|Semaphore|Completer)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints) Immutability.
+        # BUG FIX: `@immutable` starts with `@` (non-word), so the
+        # shared leading \b could only fire when a word char
+        # immediately preceded it -- never true for how annotations are
+        # actually written. Never matched at all.
+        "immutability_locks": re.compile(r"\b(?:const|final|readonly)\b|@immutable", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown) Resource release.
+        "cleanup": re.compile(r"\b(dispose|close|cleanup|cancel|drop|free)\s*\(", re.I),
+        # 47. encapsulation Scope hiding (Underscore prefix).
+        "encapsulation": re.compile(r"\b(_[a-zA-Z0-9_$]+)\b|@protected|@private"),
+        # 48. listeners (Event Listeners / Observers) Waiting for state broadcasts.
+        # BUG FIX: `on\(` ends on `(` (non-word), so the shared trailing
+        # \b could only fire when a word char immediately followed --
+        # never true for the common real call shape `on('event', ...)`,
+        # where a quote follows the paren.
+        "listeners": re.compile(r"\bon\(|\b(?:addEventListener|subscribe|watch|useEffect|listen)\b", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX: `@Ignore` starts with `@` (non-word), so the shared
+        # leading \b could only fire when a word char immediately
+        # preceded it -- never true for how annotations are actually
+        # written. Never matched at all.
+        "test_skip": re.compile(r"@Ignore|\b(?:test\.skip|t\.Skip|xit|mock)\b", re.I),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Dart Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(jsonDecode|jsonEncode|json\.decode|json\.encode|Utf8Decoder|Utf8Encoder)\b"
+        ),
+        "regex_execution": re.compile(r"\b(RegExp\s*\()|\.(hasMatch|allMatches|stringMatch)\b"),
+        # BUG FIX: `Duration\s*\(` ends on `(` (non-word), so the shared
+        # trailing \b only fired when a word char immediately followed
+        # -- true for the common named-argument form (`Duration(seconds:
+        # 5)`) but not for the zero-argument form (`Duration()`), where
+        # `)` (non-word) follows and the boundary fails.
+        "time_date_logic": re.compile(r"\b(?:DateTime\.now|Timer\.run|Timer\.periodic|Stopwatch)\b|\bDuration\s*\("),
+        "ipc_rpc_bridges": re.compile(
+            r"\b(Isolate\.spawn|ReceivePort|SendPort|Process\.run|Process\.start|HttpClient)\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/dockerfile.py b/gitgalaxy/standards/language_standards/languages/dockerfile.py
new file mode 100644
index 000000000..733174052
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/dockerfile.py
@@ -0,0 +1,309 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Dockerfile (BuildKit)",
+        "last_updated": "2026-02-27",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard extensions for container definitions across Docker and Podman ecosystems.
+    "extensions": [".dockerfile", ".containerfile"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: The universally recognized, extensionless architectural anchors of containerized environments.
+    "exact_matches": [
+        "Dockerfile",
+        "Containerfile",
+        "Dockerfile.prod",
+        "Dockerfile.dev",
+        "Dockerfile.build",
+        "Dockerfile.test",
+        "Dockerfile.local",
+    ],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Compose files and ignore manifests acting as contextual baselines.
+    "discriminators": [
+        "docker-compose.yml",
+        "docker-compose.yaml",
+        ".dockerignore",
+        "compose.yaml",
+    ],
+    # EXECUTION SIGNATURES: Docker natively uses BuildKit syntax directives instead of traditional shebangs.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Docker natively uses '#' exclusively for line-level comments and parser directives.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Control flow executing inside RUN shell blocks. High density indicates complex embedded shell scripts.
+        "branch": re.compile(
+            r"\b(?:if|elif|else|fi|case|esac|for|while|do|done|until)\b|&&|\|\|",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Build arguments (`ARG`) passed into the container acting as input parameters to the satellite.
+        "args": re.compile(r"^[ \t]*ARG(?:[ \t]|\\[ \t]*\r?\n)+[a-zA-Z0-9_-]+", re.M | re.I),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries defining straight-line execution and environment contexts.
+        # CRITICAL GUARDRAIL: EXCLUDES `FROM` and `RUN`/`CMD` to maintain geometric stability.
+        "structural_boundaries": re.compile(r"^[ \t]*(?:WORKDIR|USER|VOLUME|STOPSIGNAL|SHELL|LABEL)\b", re.M | re.I),
+        # 4. func_start (Executable Logic Anchors)
+        # CRITICAL GUARDRAIL: Anchors logic blocks. ONLY executable logic blocks.
+        # In Docker, `RUN`, `CMD`, and `ENTRYPOINT` execute logic, generating discrete intermediate image layers.
+        "func_start": re.compile(
+            r"^[ \t]*(RUN|CMD|ENTRYPOINT|HEALTHCHECK)(?=[ \t\[]|\\[ \t]*(?:\r?\n|$))", re.M | re.I
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Defines object-oriented and structural boundaries. Drives API Surface Area math.
+        # `FROM` instantiates a discrete build stage/image boundary, acting as a class wrapper.
+        # Real Dockerfile syntax: `FROM <image>[:<tag>|@<digest>] [AS <stage-name>]`
+        # Extending the regex to capture the stage alias (group 1) if `AS` is present, or fallback
+        # to the base image reference (group 2) for bare forms (`FROM x`).
+        # Flags like `--platform=$VAR` are skipped over (between FROM and image reference).
+        # CRITICAL GUARDRAIL: Restricts character lengths for tokens using char-count bounds
+        # like `[^\s\\]{1,300}` (Rule 5) to prevent catastrophic backtracking on long inputs without delimiters.
+        "class_start": re.compile(
+            r"^[ \t]*FROM(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+--[^\s\\]{1,100}){0,5}(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+)(?:[^\s\\]{1,300}(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+)AS(?:(?:[ \t]|\\[ \t]*(?:\r?\n))+)([a-zA-Z0-9_-]{1,100})|([^\s\\]{1,300}))(?=[ \t]*(?:#|\\[ \t]*(?:\r?\n|$)|\r?\n|$))",
+            re.M | re.I,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming)
+        # Hardening the container. Dropping root privileges (`USER nonroot`), explicit `HEALTHCHECK`,
+        # setting explicit shell crash flags (`set -e`), and safe file ownership (`--chown`).
+        "safety": re.compile(
+            r"^[ \t]*HEALTHCHECK\b|--chown=|^[ \t]*USER[ \t]+(?!root\b|0\b)[a-zA-Z0-9_-]+|\bset[ \t]+-[exuo]\b",
+            re.M | re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses)
+        # Actively bypassing isolation or safety logic.
+        # Using `:latest`, running as root, setting permissions to 777, or blindly curling directly into bash.
+        # CRITICAL GUARDRAIL: Safely bounds the curl/wget pipe `[^|\n]{1,200}` to prevent ReDoS on massive RUN chains.
+        "safety_bypasses": re.compile(
+            r":latest\b|^[ \t]*USER[ \t]+(?:root|0)\b|chmod[ \t]+777|--privileged|--allow-unauthenticated|\b(?:curl|wget)[ \t]+[^|\n]{1,200}\|[ \t]*(?:bash|sh|zsh)\b",
+            re.M | re.I,
+        ),
+        # 8. danger (High-Risk Execution)
+        # Extreme space debris. Destructive recursive removes targeting root, and dangerous dynamic eval.
+        # CRITICAL GUARDRAIL: Raw terminal prints (`echo`) strictly routed to print_hits.
+        # CRITICAL GUARDRAIL (Rule 9): the `rm -rf /` alternative ends on the symbolic
+        # `/` character. A shared trailing `\b` wrapped around the whole group can only
+        # fire when a word char follows -- but the realistic real-world form is `rm -rf /`
+        # followed by nothing (end of instruction), whitespace, or `&&`, none of which are
+        # word chars, so the old pattern could never match the single most catastrophic
+        # command a Dockerfile could contain. Pulled out of the shared group, same as the
+        # Rule 9 playbook's canonical fix.
+        "high_risk_execution": re.compile(r"\brm[ \t]+-rf[ \t]+/(?![A-Za-z])|\beval\b|\bexec\b", re.M | re.I),
+        # 9. io (I/O & Network Boundaries)
+        # Interaction with external networks, copying files from host, or executing package managers.
+        "io": re.compile(
+            r"^[ \t]*(?:COPY|ADD)[ \t]+|\b(?:wget|curl|apt-get|apk|yum|dnf|git[ \t]+clone|tar[ \t]+-[cx]f|unzip|pip[ \t]+install|npm[ \t]+install)\b",
+            re.M | re.I,
+        ),
+        # 10. api (Public Surface Area)
+        # Code exposed to the outside world. Ports explicitly exposed to the host network (`EXPOSE`).
+        "api": re.compile(r"^[ \t]*EXPOSE[ \t]+[0-9]+", re.M | re.I),
+        # 11. flux (State Mutation)
+        # Mutation of state. Setting Environment variables that permanently alter the image layer state.
+        "state_mutation": re.compile(
+            r"^[ \t]*ENV[ \t]+[a-zA-Z0-9_]+|export[ \t]+[a-zA-Z0-9_]+[ \t]*=",
+            re.M | re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out logic, commented-out structural Dockerfile commands.
+        "dead_code": re.compile(
+            r"^[ \t]*#[ \t]*(?:RUN|COPY|ADD|ENV|EXPOSE|FROM|CMD|ENTRYPOINT|WORKDIR)\b",
+            re.M | re.I,
+        ),
+        # 13. doc (Structured Documentation)
+        # Intent documentation meant for developers or image registries.
+        "doc": re.compile(
+            r"^[ \t]*LABEL[ \t]+(?:maintainer|org\.opencontainers|version|description)=|^[ \t]*#[ \t]*(?:Description|Usage|Author|Maintainer):",
+            re.M | re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        # Explicit test runner executions inside the build layer (often used in CI multi-stage pipelines).
+        "test": re.compile(
+            r"\b(?:npm[ \t]+test|yarn[ \t]+test|pytest|go[ \t]+test|cargo[ \t]+test|make[ \t]+test)\b",
+            re.M | re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # Parallelism executed inside the build shell (e.g. compiling with all cores).
+        # CRITICAL GUARDRAIL (Rule 9/10 variant): `make -j`/`xargs -P` end on a word char
+        # (`j`/`P`) that is very commonly followed directly by a digit in real usage
+        # (`make -j4`, `xargs -P4`) -- a shared trailing `\b` around the whole group can't
+        # fire between two adjacent word chars, so the old pattern missed the compact
+        # numeric-suffix form entirely (only the spaced-out `make -j 4` form worked).
+        # Pulled these two out of the shared trailing-`\b` group; `nohup`/`parallel` keep
+        # it since they legitimately end on whitespace/EOL in real usage.
+        "concurrency": re.compile(r"&[ \t]*$|\b(?:nohup|parallel)\b|make[ \t]+-j|xargs[ \t]+-P", re.M),
+        # 16. ui_framework (UI / View Components)
+        # Containerizing GUI applications (X11, Wayland, GTK).
+        # CRITICAL GUARDRAIL: real Debian/Ubuntu package names for these libraries are
+        # almost always `lib`-prefixed (`libgtk-3-dev`, `libx11-6`, `libwayland-client0`)
+        # -- both "lib" and the tag itself are word characters, so the old pattern's
+        # leading `\b` could never fire inside the "lib...gtk"/"lib...x11" substring,
+        # meaning it silently missed the dominant real-world package-name form entirely.
+        "ui_framework": re.compile(r"\b(?:lib)?(?:xvfb|x11|wayland|gtk2?|qt5?)\b|libgl1-mesa", re.I),
+        # 17. closures (Closures / Anonymous Functions)
+        # Dockerfiles are purely declarative structurally; closures do not exist.
+        "closures": None,
+        # 18. globals (Global / Shared State)
+        # Global environment variables mapping structurally.
+        "globals": re.compile(r"^[ \t]*ENV[ \t]+[a-zA-Z0-9_]+", re.M | re.I),
+        # 19. decorators (Decorators / Annotations)
+        # Not natively applicable to Dockerfile architecture.
+        "decorators": None,
+        # 20. generics (Generics / Type Parameters)
+        "generics": None,
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": None,
+        # 22. scientific (Numerical / Compute Libraries)
+        # Installing data science, ML base dependencies, or GPU drivers natively into the image.
+        "scientific": re.compile(
+            r"\b(?:nvidia/cuda|pytorch/pytorch|tensorflow/tensorflow|jupyter/)\b",
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # High Cognitive Load: Advanced BuildKit logic. Mounting caches, secrets, cross-platform builds, or `ONBUILD` (which defers execution to downstream images).
+        "reflection_metaprogramming": re.compile(
+            r"^[ \t]*ONBUILD\b|--mount=type=(?:cache|secret|bind|ssh)|--platform=|<<EOF",
+            re.M | re.I,
+        ),
+        # 24. import (Dependency Inclusions)
+        # Base images or dependencies pulled from other build stages (`COPY --from=`).
+        "import": re.compile(
+            r"^[ \t]*(?:FROM(?:\s+(?:\\\s+)*)(?:--[\w-]+=[^\s]+(?:\s+(?:\\\s+)*))*[a-zA-Z0-9_./:-]+|COPY(?:\s+(?:\\\s+)*)(?:--[\w-]+(?:=[^\s]+)?(?:\s+(?:\\\s+)*))*--from=[a-zA-Z0-9_./:-]+)",
+            re.M | re.I,
+        ),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:FROM(?:\s+(?:\\\s+)*)(?:--[\w-]+=[^\s]+(?:\s+(?:\\\s+)*))*([a-zA-Z0-9_./:-]+)|COPY(?:\s+(?:\\\s+)*)(?:--[\w-]+(?:=[^\s]+)?(?:\s+(?:\\\s+)*))*--from=([a-zA-Z0-9_./:-]+))",
+            re.M | re.I,
+        ),
+        # 25. ownership (Authorship Metadata)
+        # Standard metadata tracing image ownership (legacy MAINTAINER or modern LABEL).
+        "ownership": re.compile(
+            r"^[ \t]*(?:MAINTAINER|LABEL[ \t]+maintainer=|LABEL[ \t]+org\.opencontainers\.image\.authors=)[ \t]*(.*)",
+            re.M | re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(
+            r"\[(?:[ \t]*SPEC[ \t]*-[ \t]*\d{1,10}|spec|audit|CVE-\d{4}-\d+)[^\]]{0,300}\]",
+            re.I,
+        ),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Container lifecycle events explicitly bound to the host OS.
+        "events": re.compile(r"^[ \t]*STOPSIGNAL[ \t]+", re.M | re.I),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # BuildKit secret and SSH mounts injecting external state at compile time securely.
+        "dependency_injection": re.compile(r"--mount=type=(?:secret|ssh)", re.I),
+        # 34. macros (Preprocessor Directives / Macros)
+        # Docker BuildKit `# syntax=` directives which change the parser dynamically at compile-time (just like C-macros).
+        "macros": re.compile(r"^[ \t]*#[ \t]*(?:syntax|escape)[ \t]*=", re.M | re.I),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": None,
+        # 36. memory_alloc (Manual Memory Management)
+        # Explicit memory limits defined in ENV vars that configure Java/Node runtime heaps natively.
+        "memory_alloc": re.compile(
+            r"\b(?:--memory=|JAVA_OPTS|JAVA_TOOL_OPTIONS|NODE_OPTIONS|--max-old-space-size|-Xmx|-Xms)\b",
+            re.I,
+        ),
+        # 37. inline_asm (The Bare Metal)
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        # Forcing specific logging outputs at the container level or symlinking to stdout for daemon parsing.
+        "telemetry": re.compile(
+            r"\b(?:LOG_LEVEL|--log-level[ \t]+(?:debug|info|warn|error)|ln[ \t]+-sf[ \t]+/dev/stdout)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        # Shell echos used for ad-hoc debugging in the build output log.
+        "debug_prints": re.compile(r"\b(?:echo|printf)\b", re.I),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": None,
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # Hard execution aborts forcing the build to fail dynamically.
+        "panics_and_aborts": re.compile(r"\b(?:exit[ \t]+[1-9]|kill[ \t]+-[0-9]+)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        # Forcing the build thread to sleep (often a hack to wait for a daemon/network).
+        "thread_sleeps": re.compile(r"\bsleep[ \t]+[0-9]+\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": None,
+        # 44. sync_locks (Resource Management & Stability)
+        # Utilizing file locking to prevent parallel build collisions.
+        "sync_locks": re.compile(r"\bflock\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        # Pinning dependencies to immutable SHAs rather than mutable tags. .
+        # CRITICAL GUARDRAIL: real Docker/OCI digest references are ALWAYS written as
+        # `@sha256:<64 hex chars>` -- the algorithm prefix is mandatory syntax, never a
+        # bare `@<64 hex chars>`. The old pattern required the bare (invalid) form and
+        # so could never match a real pinned image reference at all.
+        "immutability_locks": re.compile(r"@sha256:[a-f0-9]{64}\b|--read-only|:ro\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # Explicitly purging apt/apk caches to reduce final container bloat. .
+        "cleanup": re.compile(
+            r"\b(?:apt-get[ \t]+clean|rm[ \t]+-rf[ \t]+/var/lib/apt/lists|apk[ \t]+(?:cache[ \t]+)?clean|yum[ \t]+clean[ \t]+all|npm[ \t]+cache[ \t]+clean)\b",
+            re.I,
+        ),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Explicitly encapsulating logic in multi-stage builds (`AS builder`). Hides intermediate build layers.
+        "encapsulation": re.compile(r"^[ \t]*FROM[ \t]+[^\n]+[ \t]+AS[ \t]+[a-zA-Z0-9_-]+", re.M | re.I),
+        # 48. listeners (Event Listeners / Observers)
+        # Exposing ports for network consumption. .
+        "listeners": re.compile(r"^[ \t]*EXPOSE[ \t]+[0-9]+", re.M | re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # Bypassing package manager tests/audits or using logical OR to ignore failures (`|| true`).
+        "test_skip": re.compile(
+            r"\|\|[ \t]*true\b|\b(?:--passWithNoTests|skipTests|Dmaven\.test\.skip=true|--no-audit)\b",
+            re.I,
+        ),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Dockerfile Specifics) ---
+        # CRITICAL GUARDRAIL: all four sensors below MUST carry re.M -- `(?i)` alone
+        # anchors `^` to the true start of the whole code_stream string (Python re
+        # default), not the start of each line, which silently broke every one of
+        # these on any real Dockerfile (FROM is always the literal first line, so
+        # e.g. ipc_rpc_bridges could never fire at all). The body-scanning sensors
+        # (serialization_parsing/regex_execution/time_date_logic) also now step over
+        # a bounded `\`-line-continuation run ({0,50} continued lines, each itself
+        # unboundedly-but-safely scanned via `[^\n]*`) so a classic multi-line
+        # `RUN a && \` / `    b && \` / `    grep ...` chain is still seen -- the
+        # plain `.*` version only ever looked at the first physical line.
+        "serialization_parsing": re.compile(
+            r"(?im)^(?:ADD|COPY)\s+[^\n]*(?:\\\r?\n[^\n]*){0,50}\.(?:tar\.gz|zip|tgz|tar)\b"
+        ),  # ADD auto-extracts archives
+        "regex_execution": re.compile(
+            r"(?im)^RUN\s+[^\n]*(?:\\\r?\n[^\n]*){0,50}(?:grep|sed|awk)\b"
+        ),  # Catches shell-delegated regex
+        "time_date_logic": re.compile(
+            r"(?im)^(?:HEALTHCHECK[^\n]*(?:\\\r?\n[^\n]*){0,50}(?:--interval|--timeout)"
+            r"|RUN\s+[^\n]*(?:\\\r?\n[^\n]*){0,50}sleep)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"(?im)^(?:EXPOSE|VOLUME|ENTRYPOINT|CMD|STOPSIGNAL)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/embedded_python.py b/gitgalaxy/standards/language_standards/languages/embedded_python.py
new file mode 100644
index 000000000..a3dcd0289
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/embedded_python.py
@@ -0,0 +1,270 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Embedded Python (MicroPython / CircuitPython / Bare-Metal)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Python suffixes and pre-compiled MicroPython bytecode (.mpy).
+    "extensions": [".py", ".mpy"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: The strict execution entry points for microcontroller boot sequences.
+    "exact_matches": ["boot.py"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, boot sequence files, and the MicroPython package installer (mip) configs.
+    "discriminators": ["boot.py", "mip.json", "upip"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for embedded discovery and cross-compilation.
+    "shebangs": ["micropython", "mpy-cross"],
+    # Instantly claims any .py file utilizing embedded electronics networking or GPIO libraries
+    "internal_discriminator": re.compile(
+        r"^[ \t]*(?:import|from)\s+(?:machine|board|microcontroller|busio|digitalio|analogio|usb_hid|neopixel|rp2|esp32|pyb|wifi|socketpool)\b",
+        re.M,
+    ),
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Uses '#' for line-level literature; multi-line literature
+    # (docstrings) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES raise (bailout_hits).
+        "branch": re.compile(r"\b(if|elif|else|for|while|with|try|finally|match|case|and|or)\b"),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks of functions/lambdas. Bounded negation to prevent ReDoS.
+        # #1199: the parameter list is now captured in its own group
+        # (group 1 for def/lambda-with-parens, group 2 for bare
+        # lambda params) instead of only ever being reachable via
+        # group(0), which used to include the "def name"/"lambda"
+        # keyword prefix -- that prefix supplied a spurious extra
+        # whitespace-split token that overcounted every zero/one-arg
+        # signature by +1 downstream in detector.py's args-counter.
+        # Group 1's body also steps over one level of nested parens
+        # (the same bounded one-level-nesting idiom RULE 11 already
+        # uses for square brackets above) so a default value that's
+        # itself a call, e.g. `def f(x=foo(1, 2), y=3):`, doesn't
+        # truncate the capture at the default's own closing paren and
+        # silently drop every parameter after it.
+        "args": re.compile(
+            r"(?:async[ \t]+)?def[ \t]+(\w+)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|\blambda\b[ \t]*([^:]*):",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: _private (encapsulation) and Final (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(def|class|return|import|from|as|pass|continue|break|yield|await|assert|del|global|nonlocal|type)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks. EXCLUDES classes. Steps safely over hardware decorators.
+        "func_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}(?:async[ \t]+)?def[ \t]+(\w+)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*\(",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}class[ \t]+([a-zA-Z_]\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?(?:[ \t]*\(([^)]*)\))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Hardware watchdogs and standard Python safety checks.
+        "safety": re.compile(
+            r"\b(try|except|finally|assert|machine\.WDT|isinstance|issubclass|hasattr|getattr|alloc_emergency_exception_buf)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Bare excepts and blocking the event loop (detrimental in embedded async).
+        "safety_bypasses": re.compile(
+            r"\bpass\b[ \t]*$|except\s*[:\n]|except\s+(?:Base)?Exception|from\s+[\w.]+\s+import\s+\*|\btime\.sleep(?:_ms|_us)?\b",
+            re.M,
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Hardware resets and raw memory pokes. EXCLUDES TODO (debt) and print (print_hits).
+        "high_risk_execution": re.compile(
+            r"\b(machine\.reset|machine\.deepsleep|machine\.bootloader|machine\.disable_irq|eval|exec|sys\.exit)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        # Hardware Peripherals (I2C, SPI, UART, Pin) and Networking.
+        "io": re.compile(
+            r"\b(open|Pin|I2C|SPI|UART|ADC|PWM|RTC|SDCard|I2S|WLAN|LAN|socket|usocket|uos\.mount|aiohttp)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Implicit public defaults (undercased root defs) + explicit exports.
+        "api": re.compile(
+            r"^[ \t]*(?:async[ \t]+)?def\s+[^_]\w+|^[ \t]*class\s+[^_]\w+|^__all__[ \t]*=",
+            re.M,
+        ),
+        # 11. flux (State Mutation)
+        # State mutation including hardware value toggling.
+        "state_mutation": re.compile(
+            r"\bglobal\b|\bnonlocal\b|\b(?:self|cls)\.\w+[ \t]*=|:=|(?:\.\w+)?\.(?:append|extend|update|pop|remove|insert|clear)\s*\(|\.(?:value|on|off|high|low|toggle)\s*\("
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"#[ \t]*(?:def|class|import|if|for|while|try|print|machine\.Pin)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r'"""|\'\'\'|:param|:return|:raises|:type|#\s*Pin[ \t]*=|#\s*GPIO'),
+        # 14. test (Testing & Assertions)
+        # BUG FIX: `test_` was wrapped inside the shared `\b(...)\b` group.
+        # `_` is a word character, so the trailing `\b` after `test_` demands
+        # a NON-word character immediately follow -- never true for the
+        # standard pytest convention (`test_login`, `test_parse_url`), where
+        # more word characters always continue the name. Only a bare,
+        # standalone trailing "test_" (unrealistic) ever matched. Anchored
+        # as `def[ \t]+test_` instead (matches python's own fix for the
+        # identical trap), dropping the trailing `\b` so it fires on the
+        # realistic `def test_<name>` shape.
+        "test": re.compile(r"\b(unittest|pytest|assert|setUp|tearDown|Mock)\b|def[ \t]+test_"),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|uasyncio|asyncio|Timer\.init|_thread|start_new_thread|allocate_lock|gather|create_task|Event|Lock)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        # Framebuffers and embedded OLED/TFT drivers.
+        "ui_framework": re.compile(
+            r"\b(framebuf|ssd1306|st7789|ili9341|epaper|lvgl|display|text|fill|pixel|show|scroll)\b"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"\blambda\b"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(r"\bglobal\b|\bglobals\(\)|\blocals\(\)|\b(sys\.path|sys\.modules|os\.environ)\b"),
+        # 19. decorators (Decorators / Annotations)
+        # Generic decorators. (Specific ASM/Viper optimizations moved to heat_triggers/inline_asm).
+        "decorators": re.compile(
+            r"^[ \t]*@(?!(?:micropython\.viper|micropython\.asm|micropython\.native))[\w.]+",
+            re.M,
+        ),
+        # 20. generics (Generics / Type Parameters)
+        # QUADRATIC BLOWUP FIX: `[^\]]*` was unbounded. On a run of
+        # repeated unclosed openers (e.g. "List[List[List[..."), each
+        # "List[" occurrence is a fresh search start; at every one the
+        # engine greedily consumes to end-of-string then backtracks
+        # character-by-character looking for a "]" that never appears,
+        # O(n) work per start position across O(n) start positions, for
+        # O(n^2) total. Confirmed empirically (~4x runtime per size
+        # doubling at n=2000/4000/8000/16000 on a "List[" * n payload).
+        # Bounded to {0,300}; real generic parameter lists don't get
+        # remotely that long. Post-fix scaling is linear (~2x/doubling).
+        "generics": re.compile(
+            r"\b(?:List|Dict|Set|Tuple|Optional|Union|Any|Callable|Sequence|Iterable)\[[^\]]{0,300}\]|->"
+        ),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # QUADRATIC BLOWUP FIX: the 3 negated-class quantifiers were
+        # unbounded -- on a long run of unclosed brackets/braces/parens
+        # (e.g. "((((((..."), each opening char is tried as a match
+        # start, and each attempt scans to the end of the string looking
+        # for "for" + closer, for O(n^2) total. Bounded to {0,500}; real
+        # comprehensions don't get remotely that long.
+        "comprehensions": re.compile(
+            r"\[[^\]]{0,500}\bfor\b[^\]]{0,500}\]|\{[^}]{0,500}\bfor\b[^}]{0,500}\}|\([^)]{0,500}\bfor\b[^)]{0,500}\)"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        # Math, complex arrays, and ulab (MicroPython's NumPy).
+        "scientific": re.compile(
+            r"\b(math|cmath|ulab|numpy|ndarray|struct\.pack|struct\.unpack|bin|hex|oct|abs|sin|cos|tan)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # High Cognitive Load: Dunder methods and Viper/Native emitters.
+        "reflection_metaprogramming": re.compile(
+            r"__(?:getattr|setattr|new|call|dict|dir|import)__|@(?:staticmethod|classmethod|property)|@micropython\.(?:viper|native)\b|\b(?:getattr|setattr|hasattr)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*(?:import|from)\b\s+[\w.]+", re.M),
+        "_dependency_capture": re.compile(r"^[ \t]*(?:import|from)\b\s+([\w.]+)", re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:__author__[ \t]*=|Author:|Created by:)\s*(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # QUADRATIC BLOWUP FIX: the SPEC alternative's `\d+` was
+        # unbounded and directly precedes `[^\]]*`, an ALSO-unbounded
+        # class whose character set overlaps it (digits satisfy both).
+        # On a long run of digits with no closing "]" (e.g.
+        # "[SPEC-" + "1" * n), `\d+` greedily consumes them all, then
+        # backtracks one digit at a time while `[^\]]*` re-consumes the
+        # released digit and re-fails to find "]" -- classic adjacent
+        # overlapping-quantifier O(n^2). Confirmed empirically (~4x
+        # runtime per size doubling at n=2000/4000/8000/16000). Bounded
+        # `\d+` to `\d{1,10}` (no realistic ticket ID needs more digits)
+        # and `[^\]]*` to `{0,300}`; post-fix scaling is immeasurably
+        # fast even at n=32000.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        # Lightweight web servers (Microdot, Picoweb).
+        # BUG FIX: `@app\.get`/`@app\.post` are `@`-prefixed -- the
+        # shared leading \b could only fire when a word char
+        # immediately preceded the `@`, never true for how route
+        # decorators are actually written. Never matched at all.
+        "ssr_boundaries": re.compile(
+            r"\b(?:microdot|picoweb|MicroWebSrv|tinyweb|render_template|Response)\b|@app\.get|@app\.post"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # Hardware interrupts and async event flags.
+        "events": re.compile(
+            r"\b(irq|Pin\.irq|Timer\.irq|machine\.enable_irq|trigger|set_callback|Event\.set|schedule)\b"
+        ),
+        # 33. dependency_injection
+        "dependency_injection": None,  # MicroPython strictly follows imperative wiring due to RAM limits.
+        # 34. macros
+        # MicroPython's const() acts as a compile-time macro.
+        "macros": re.compile(r"\bconst\s*\([^)]+\)"),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Pointer manipulation enabled by Viper/uctypes.
+        "pointers": re.compile(
+            r"\b(uctypes\.addressof|uctypes\.bytearray_at|ptr8|ptr16|ptr32|machine\.mem8|machine\.mem16|machine\.mem32)\b"
+        ),
+        # 36. memory_alloc
+        "memory_alloc": re.compile(r"\b(bytearray|memoryview|alloc_emergency_exception_buf)\b"),
+        # 37. inline_asm (The Bare Metal)
+        "inline_asm": re.compile(r"@(?:micropython\.asm_thumb|micropython\.asm_xtensa|rp2\.asm_pio)\b"),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(logging|logger|ulogging|syslog)\.(?:info|error|warn|warning|debug|trace|critical|exception)\b"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(print|input)\s*\("),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\b(int|str|float|list|dict|set|tuple|bool|bytes|cast)\b\s*\("),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(raise|quit|exit|sys\.exit|abort)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(time\.sleep|asyncio\.sleep|Thread\.join)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(Lock|RLock|Semaphore|Event|Condition|allocate_lock)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(Final|frozenset|mappingproxy|immutable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(close|__exit__|del|gc\.collect|cleanup)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b_[a-zA-Z_]\w*\b"),
+        # 48. listeners (Event Listeners / Observers)
+        # Waiting for state broadcast via hardware IRQs or event listeners.
+        "listeners": re.compile(r"\.irq\(|handler=|callback="),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(pytest\.mark\.skip|unittest\.skip|mock\.|MagicMock)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Embedded Python Specifics) ---
+        "serialization_parsing": re.compile(r"\b(ujson\.loads?|ujson\.dumps?|ustruct\.pack|ustruct\.unpack)\b"),
+        "regex_execution": re.compile(r"\b(ure\.compile|ure\.search|ure\.match|ure\.sub)\b"),
+        "time_date_logic": re.compile(r"\b(utime\.sleep_ms|utime\.ticks_ms|utime\.ticks_diff|machine\.RTC)\b"),
+        "ipc_rpc_bridges": re.compile(
+            r"\b(machine\.Pin|machine\.I2C|machine\.UART|network\.WLAN|usocket\.socket|busio\.I2C)\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/fortran.py b/gitgalaxy/standards/language_standards/languages/fortran.py
new file mode 100644
index 000000000..4f6fbadbd
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/fortran.py
@@ -0,0 +1,426 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Fortran 2018 (Backwards compatible with Legacy Fortran 77)",
+        "last_updated": "2026-03-01",
+        "blueprint_version": "v7.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard fixed-format, free-format, legacy dialects, and preprocessor files.
+    "extensions": [
+        ".f",
+        ".f90",
+        ".f77",
+        ".for",
+        ".fpp",
+        ".f95",
+        ".f03",
+        ".f08",
+        ".f18",
+        ".ftn",
+        ".inc",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Fortran rarely uses extensionless configurations.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests (fpm), and build files to resolve ambiguous files like .inc.
+    "discriminators": [
+        ".f90",
+        ".f77",
+        ".f",
+        "fpm.toml",
+        "CMakeLists.txt",
+        "Makefile",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for modern Fortran "scripting" wrappers.
+    "shebangs": ["fortran", "f90", "f77", "gfortran"],
+    # UPGRADED: Maps to Family 7 (The Positional Ancients)
+    # Rationale: Fixed-format requires Column 1 monitoring ('C' or '*'); Free-format uses '!'.
+    "lexical_family": "positional_anchored",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Control flow that forces the CPU to make a decision or jump. High density creates jagged shapes.
+        # Includes standard conditional blocks, legacy computed GO TO, and modern SELECT TYPE / SELECT RANK.
+        "branch": re.compile(
+            r"\b(IF|ELSEIF|ELSE|DO|WHILE|SELECT\s+CASE|CASE|DEFAULT|WHERE|ELSEWHERE|GO\s*TO|GOTO|SELECT\s+TYPE|SELECT\s+RANK|EXIT|CYCLE)\b|\.AND\.|\.OR\.",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Signatures defining input parameters. Drives the physical size/mass of the function.
+        # Upgraded to capture both the declaration block and explicit INTENT binding markers
+        # that act as the true coupling mass in legacy Fortran, as well as VALUE and OPTIONAL.
+        # #1209: name and parameter-list span split into their own
+        # capture groups (was only reachable via group(0), the whole
+        # match including the "SUBROUTINE"/"FUNCTION"/"ENTRY" prefix and
+        # name) so detector.py's counter isolates just "(...)" instead of
+        # whitespace-splitting the prefix text -- the same overcount
+        # shape #1199 fixed elsewhere. The args group's trailing empty
+        # alternative (`|`) makes it participate even when the parens are
+        # genuinely absent (a bare `SUBROUTINE Foo` with zero arguments
+        # is valid Fortran with no "()" at all) -- without it, a
+        # zero-arg bare subroutine's ONLY participating group would be
+        # the name itself, which the existing whitespace-split fallback
+        # would then miscount as 1 argument instead of 0. The bare
+        # INTENT/VALUE/OPTIONAL alternative is left alone -- it's a
+        # signal for keyword usage inside a parameter declaration line,
+        # not a per-function signature match, and (per func_start's own
+        # anchoring at the declaration line) is never actually the FIRST
+        # match within a sliced function block in practice.
+        "args": re.compile(
+            r"\b(?:SUBROUTINE|FUNCTION|ENTRY)\s+([A-Za-z_]\w*)\s*(\([^)]*\)|)|\b(?:INTENT\s*\(\s*(?:IN|OUT|INOUT)\s*\)|VALUE\b|OPTIONAL\b)",
+            re.I,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries defining straight-line execution and data types.
+        # CRITICAL GUARDRAIL: Access modifiers (PUBLIC, PRIVATE, PROTECTED) do not belong here. Explicitly omitted to prevent the Structural Complexity Inflation Bug
+        "structural_boundaries": re.compile(
+            r"\b(PROGRAM|MODULE|SUBMODULE|BLOCK\s+DATA|CONTAINS|END\s+(?:PROGRAM|MODULE|SUBROUTINE|FUNCTION|BLOCK|TYPE|ASSOCIATE)|RETURN|IMPLICIT|USE|ASSOCIATE|BLOCK|INTEGER|REAL|COMPLEX|LOGICAL|CHARACTER|DOUBLE\s+PRECISION|CLASS)\b",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # =====================================================================
+        # [ CONTEXT: FORTRAN FUNCTION AST EXTRACTOR & REDOS SHIELD]
+        # PURPOSE: Anchors executable logic blocks (Program, Subroutine, Function, Entry)
+        #   across 60+ years of Fortran dialects (F77 through F2018).
+        # VULNERABILITY: Fortran allows extreme signature variability: prefix stacking
+        #   (PURE RECURSIVE), legacy memory sizing (REAL*8), modern kinds (INTEGER(KIND=4)),
+        #   derived types (TYPE(MyStruct)), object-oriented classes (CLASS(Obj)), and
+        #   trailing attributes (RESULT, BIND(C)). Using unbounded `\s+` across these
+        #   permutations causes Catastrophic Backtracking (ReDoS) on large legacy files.
+        # THE "IRON WALL" FIX:
+        #   1. Strict `[ \t\n]` bounds prevent horizontal/vertical bleeding.
+        #   2. Negative lookahead `(?!\bEND\b)` prevents ghosting `END SUBROUTINE FOO`.
+        #   3. Clamped quantifiers `{0,5}` on prefixes stop runaway recursion.
+        #   4. Added `CLASS` to the base types to support modern Object-Oriented Fortran.
+        #   5. Positive lookaheads on the tail `(?=...)` safely handle line continuations (`&`)
+        #      and F90 comments (`!`) without consuming them into the capture group.
+        # =====================================================================
+        "func_start": re.compile(
+            # 1. THE HORIZONTAL ANCHOR & END SHIELD
+            # Stops O(N^2) vertical spirals. Explicitly blocks "END SUBROUTINE FOO" from triggering.
+            r"^[ \t]*(?!\bEND\b)"
+            # =====================================================================
+            # [ THE VERTICAL LEGACY SHIELD ] (Hard-learned from Pathological Fuzzer):
+            # Fortran allows extreme prefix stacking (e.g., `PURE RECURSIVE REAL*8`).
+            # We previously restricted this to `[ \t]+` to avoid newline spirals.
+            # FIX: Fortran developers frequently use line continuations (`&`) or split types.
+            # We carefully upgraded `[ \t]` to `[ \t\n]` inside the rigidly bounded
+            # `{0,5}` modifier limits so the engine can safely leap over vertical lines
+            # without resorting to unbounded `\s+` which triggers ReDoS.
+            # =====================================================================
+            # 2. THE PREFIX STACK
+            # F95/F2008 allows stacking prefixes. Capped at {0,5} to prevent ReDoS.
+            r"(?:(?:PURE|ELEMENTAL|RECURSIVE|IMPURE|MODULE)[ \t\n]+){0,5}"
+            # 3. THE RETURN TYPE
+            # Optional for Subroutines/Programs, mandatory for explicit Functions.
+            r"(?:"
+            # 3a. Base Types (Primitives + Derived + Classes + Legacy + Complex)
+            r"(?:INTEGER|REAL|COMPLEX|LOGICAL|CHARACTER|TYPE|CLASS|DOUBLE[ \t\n]+PRECISION|DOUBLE[ \t\n]+COMPLEX)"
+            # 3b. Legacy Sizing (*8) or Modern Kinds/Lengths ((KIND=4, LEN=*)) and Attributes.
+            # #1531: this lazy class includes letters/newlines with no length cap, so on a
+            # body-less type declaration line immediately preceding an unrelated later
+            # SUBROUTINE/FUNCTION (e.g. `CHARACTER(len=*), INTENT(IN) :: message` followed a
+            # few lines later by `END SUBROUTINE wrf_message`), backtracking let it swallow
+            # the ENTIRE intervening subroutine body -- including its own trailing
+            # `END SUBROUTINE <name>` -- and match keyword+identifier there instead,
+            # producing a phantom duplicate whose start_line/args belonged to a type
+            # declaration, not any real definition. `{0,40}` caps the class at comfortably
+            # more than any real single/continued attribute list needs (confirmed against
+            # language-crucible's fortran corpus) while landing well short of the ~95+ chars
+            # needed to reach a phantom match. A per-character `(?!\bEND\b)` exclusion was
+            # tried first and is more semantically precise, but disables the `re` module's
+            # fast path for a plain bounded character class -- confirmed via direct timing
+            # (0.01s here vs. ~13s with the lookahead) on a payload of thousands of repeated
+            # type-declaration lines with one distant END, a real ReDoS regression on a
+            # non-pathological, plausible shape. A numeric bound has none of that risk.
+            r"(?:[A-Za-z0-9_ \t&*,()=:]|&\s*\n){0,40}?"
+            r")?"
+            # 4. THE EXECUTION BLOCK KEYWORD
+            # Supports multi-line continuation `&` inside the spaces
+            r"(?:FUNCTION|SUBROUTINE|PROGRAM|ENTRY)[ \t\n&+]+"
+            # 5. THE IDENTIFIER CAPTURE (FUNCTION IDENTIFIER - GROUP 1)
+            # Extracts the actual block name.
+            r"([A-Za-z_]\w*)"
+            # 6. THE TRAILING ANCHOR (Lookahead)
+            # Confirms the boundary without consuming it. Handles opening parens `(`, comments `!`,
+            # line continuations `&`, EOF `$`, or explicit F2003+ modifiers (RESULT, BIND).
+            r"(?=[ \t\n]*(?:[\(!&]|$|\bRESULT\b|\bBIND\b))",
+            re.I | re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Defines object-oriented and structural boundaries. Drives API Surface Area math.
+        # Maps to Fortran MODULEs, SUBMODULEs, INTERFACEs, and structural TYPE definitions (Fortran's struct/class equivalent).
+        # Upgraded to handle SUBMODULE (parent) child syntax and trailing comments.
+        # #1264: `(?!PROCEDURE\b)` excludes `MODULE PROCEDURE name1, name2` --
+        # a separate-module-procedure implementation stub, not a `MODULE
+        # <name>` declaration -- from being misread as a module named
+        # "PROCEDURE". Invisible until #1264 wired class_start into the
+        # named-entity extractor; previously class_start only fed a
+        # numeric signal count that never surfaced the bad name.
+        "class_start": re.compile(
+            r"^[ \t]*(?!\bEND\b)(?:(?:MODULE|BLOCK\s+DATA|INTERFACE)\s+|SUBMODULE\s*(?:\([^)]*\))?\s+)(?!PROCEDURE\b)([A-Za-z_]\w*)|"
+            r"^[ \t]*(?!\bEND\b)TYPE(?:[ \t]*::\s*|,[^:]*::\s*|\s+)([A-Za-z_]\w*)(?=[ \t]*(?:!|\n|$))",
+            re.I | re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming)
+        # Fortification markers establishing strict boundaries: explicit typing (`IMPLICIT NONE`),
+        # explicit intent (`INTENT(IN)`), bounds safety (`ALLOCATABLE`), and fatal assertions (`ERROR STOP`).
+        # BUG FIX: the shared trailing `\b` broke the INTENT(...) alternative,
+        # which ends in a literal `)` (non-word) -- `\b` right after can only
+        # fire if the very next char is a word character, never true for the
+        # realistic form ("INTENT(IN) :: x", followed by whitespace). INTENT(...)
+        # never actually matched in practice. Split it out of the shared group.
+        "safety": re.compile(
+            r"\bIMPLICIT\s+NONE\b|\bINTENT\s*\(\s*(?:IN|OUT|INOUT)\s*\)|"
+            r"\b(?:ALLOCATABLE|SAVE|PARAMETER|VALUE|ERROR\s+STOP|ASYNCHRONOUS|ASSOCIATED|ALLOCATED|PRESENT)\b",
+            re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses)
+        # Actively bypasses memory safety and compiler predictability.
+        # Legacy memory sharing (`COMMON`, `EQUIVALENCE`), dangerous implicit typing rules, and unprotected legacy array `DIMENSION` bounds.
+        "safety_bypasses": re.compile(
+            r"\b(COMMON|EQUIVALENCE|IMPLICIT\s+(?:REAL|INTEGER|CHARACTER|COMPLEX|LOGICAL|DOUBLE))\b",
+            re.I,
+        ),
+        # 8. danger (High-Risk Execution)
+        # Extreme tech debt, unconstrained legacy jumps (`GO TO`, `ASSIGN`), and raw terminal output.
+        # CRITICAL GUARDRAIL: Terminal prints (`PRINT`, `WRITE(*,...)`) strictly routed here, away from `io` and `telemetry`.
+        "high_risk_execution": re.compile(r"\b(GO\s*TO|GOTO|ASSIGN|RETURN\s+\d+)\b", re.I),
+        # 9. io (I/O & Network Boundaries)
+        # File operations, hardware inquiries, and disk boundaries.
+        # Negatively asserts `*` or `6` to ensure raw standard-out terminal prints do not trigger IO.
+        # BUG FIX: the shared trailing `\b` broke the WRITE alternative, which
+        # ends in a literal comma (non-word) -- `\b` right after can only fire
+        # if the very next char is a word character, never true for the
+        # overwhelmingly common realistic forms ("WRITE(10,*)", "WRITE(10,
+        # '(I5)')", "WRITE(10, x)" -- all followed by `*`, `'`, or whitespace).
+        # This made the file-unit-WRITE detection almost never fire in
+        # practice. Split WRITE out of the shared-boundary group; it's already
+        # unambiguously delimited by its own literal `(` and trailing `,`.
+        "io": re.compile(
+            r"\b(?:OPEN|CLOSE|READ|INQUIRE|REWIND|BACKSPACE|ENDFILE|FLUSH|FORMAT)\b|"
+            r"\bWRITE\s*\(\s*(?!\*|6\b)[^,]+,",
+            re.I,
+        ),
+        # 10. api (Public Surface Area)
+        # Code exposed to the outside world. Visibility exports (`PUBLIC`) and FFI bridges (`BIND(C)`).
+        "api": re.compile(
+            r"\b(PUBLIC|BIND\s*\(\s*C\s*\))\b|"
+            r"^[ \t]*(?:(?:PURE|ELEMENTAL|RECURSIVE)[ \t]+){0,5}(?:TYPE\s*\([^)]*\)[ \t]+)?(?:SUBROUTINE|FUNCTION)\s+[A-Za-z_]\w*",
+            re.M | re.I,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. Variable assignments and standard memory manipulations.
+        # Captures standard `=` (avoiding `==`, `<=`, etc.)
+        # TWO FIXES:
+        # 1. QUADRATIC BLOWUP: the unbounded `[A-Za-z0-9_%()]+` (no \b
+        #    anchor) got retried at every position in a long `=`-less
+        #    line, backtracking O(n) per position for O(n^2) total.
+        #    Bounded to {0,199}; real Fortran variable/array-element
+        #    expressions (even with subscripts) don't get remotely
+        #    that long.
+        # 2. KIND=/LEN=/etc EXCLUSION WAS LEAKY: the negative lookahead
+        #    only blocks a match starting exactly at "KIND", not one
+        #    starting mid-word (e.g. "KIND = 5" still matched "IND = "
+        #    starting at position 1, since \bKIND doesn't apply there).
+        #    Added a real `\b` + explicit `[A-Za-z_]` first-char
+        #    requirement so the match can only start at a genuine word
+        #    boundary, where the exclusion lookahead actually applies.
+        "state_mutation": re.compile(
+            r"(?!\b(?:KIND|LEN|UNIT|FMT|FILE|STATUS|ACTION)\s*=)\b[A-Za-z_][A-Za-z0-9_%\(\)]{0,199}[ \t]*=[^=>]",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out logic, commented-out structural code. Supports both Fortran 90+ (`!`) and legacy F77 (`C`/`*` in column 1).
+        "dead_code": re.compile(r"(?i)(?:!|^[cC*])[ \t]*(?:if|do|where|call|function|subroutine|allocate)\b"),
+        # 13. doc (Structured Documentation)
+        # Documentation meant to be parsed by generators (Doxygen style `!>`, `!<`, or `! @`).
+        "doc": re.compile(
+            r"^[Cc*!dD][ \t]*[@><\\]|^[ \t]*![ \t]*(?:Author|Description|Param|Return):",
+            re.I | re.M,
+        ),
+        # 14. test (Testing & Assertions)
+        # Test frameworks like pFUnit, generic assertions, and verification routines.
+        # BUG FIX: all 5 pFUnit alternatives are `@`-prefixed -- the
+        # leading \b could only fire when a word char immediately
+        # preceded the `@`, never true for how these annotations are
+        # actually written. None ever matched at all.
+        "test": re.compile(
+            r"@test\b|@assertEqual\b|@assertTrue\b|@assertFalse\b|@assertException\b|call[ \t]+assert_[a-z_]+",
+            re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # Fortran 2008/2018 Coarrays (distributed shared memory programming natively in the language) and OpenMP pragmas.
+        "concurrency": re.compile(
+            r"\b(COARRAY|SYNC\s+ALL|SYNC\s+IMAGES|SYNC\s+MEMORY|CRITICAL|LOCK|UNLOCK|FAIL\s+IMAGE|FORM\s+TEAM|MPI_[A-Za-z_]+)\b|!\$(?:OMP|ACC)\b",
+            re.I,
+        ),
+        # 16. ui_framework (UI / View Components)
+        # Fortran handles math and background computing. No native UI frameworks exist.
+        "ui_framework": None,
+        # 17. closures (Closures / Anonymous Functions)
+        # Fortran does not natively support closures, lambdas, or anonymous functions.
+        "closures": None,
+        # 18. globals (Global / Shared State)
+        # Persistent application state across scopes. F77 `COMMON` blocks, `SAVE` variables, and `EXTERNAL` procedures.
+        "globals": re.compile(r"\b(COMMON|SAVE|EXTERNAL)\b", re.I),
+        # 19. decorators (Decorators / Annotations)
+        # Fortran does not have Python-style decorators, but compiler directives heavily modify block execution behaviors.
+        # BUG FIX: the shared trailing `\b` after the `$`-ending alternatives
+        # (!DIR$/cDEC$) is a no-op in the realistic form -- real directives are
+        # always written with a space after the `$` ("!DIR$ SIMD"), and `\b`
+        # can never fire between two non-word characters. Only the OMP/ACC
+        # alternatives (which end in a word character) legitimately need it.
+        "decorators": re.compile(r"^[ \t]*(?:!DIR\$|cDEC\$|!\$OMP\b|!\$ACC\b)", re.I | re.M),
+        # 20. generics (Generics / Type Parameters)
+        # Fortran Generic Interfaces overriding operators/assignments, and Parameterized Derived Types (PDTs).
+        # CRITICAL GUARDRAIL: Safely bounds `<[^>]*>` and parentheses `\([^)]*\)` to avoid ReDoS.
+        # BUG FIX: the shared trailing `\b` applied to every alternative broke
+        # 3 of 5 -- GENERIC::, TYPE name(...), and EXTENDS(...) all end in a
+        # non-word character (`:` or `)`), so a `\b` immediately after can only
+        # fire if the very next character is a word character, never true for
+        # realistic code ("GENERIC :: foo", "TYPE point(k, n)", "EXTENDS(base)"
+        # followed by whitespace/newline/EOF). Moved the boundary onto only the
+        # two alternatives that actually end in a word character.
+        "generics": re.compile(
+            r"\b(?:INTERFACE\s+ASSIGNMENT\b|INTERFACE\s+OPERATOR\b|GENERIC\s*::|"
+            r"TYPE\s+[A-Za-z_]\w*\s*\([^)]*\)|EXTENDS\s*\([^)]*\))",
+            re.I,
+        ),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Modern Fortran implicit loops, array constructors (`[...]`, `(/.../)`), and parallel execution syntax (`DO CONCURRENT`, `FORALL`).
+        "comprehensions": re.compile(r"\b(?:FORALL|DO\s+CONCURRENT)\b|\[[^\]]+\]|\(\/[^/]+\/\)", re.I),
+        # 22. scientific (Numerical / Compute Libraries)
+        # Native Fortran superpower: Vectorized matrix operations, tensor reductions, and strict scientific primitive typing.
+        "scientific": re.compile(
+            r"\b(MATMUL|DOT_PRODUCT|TRANSPOSE|SUM|PRODUCT|MAXVAL|MINVAL|MAXLOC|MINLOC|RESHAPE|SQRT|EXP|LOG|LOG10|SIN|COS|TAN|ASIN|ACOS|ATAN|ATAN2|SINH|COSH|TANH|KIND=|CEILING|FLOOR|MOD|MODULO)\b",
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # High Cognitive Load: Memory aliasing (`EQUIVALENCE`), multiple entry points (`ENTRY`), Object-Oriented runtime dispatch (`CLASS DEFAULT`, `%`), and unstructured `NAMELIST` loading.
+        "reflection_metaprogramming": re.compile(
+            r"\b(EQUIVALENCE|ENTRY|SELECT\s+TYPE|CLASS\s+DEFAULT|NAMELIST|VOLATILE)\b",
+            re.I,
+        ),
+        # 24. import (Dependency Inclusions)
+        # Dependency linkage across Fortran modules and files.
+        "import": re.compile(r"\b(USE|INCLUDE|IMPORT)\b", re.I),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:USE(?:\s+|\s*(?:,[^:]*)?::\s*)([a-zA-Z0-9_]+)|INCLUDE[ \t\n]*['\"]([^'\"]+)['\"]|SUBMODULE\s*\(\s*([^):]+)[^)]*\))",
+            re.IGNORECASE | re.MULTILINE,
+        ),
+        # 25. ownership (Authorship Metadata)
+        # Identifying the developer, maintainer, or copyright holder natively.
+        "ownership": re.compile(
+            r"^[cCdD*!][ \t]*(?:Author|Created by|Maintainer|Developer):\s+(.*)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # Audit tags establishing traceability of intent back to physics papers or architectural specifications.
+        # CRITICAL: Removed (?i) to enforce strict uppercase [SPEC-XYZ] tags and prevent prose collisions.
+        "spec_exposure": re.compile(r"\[\s*(?:SPEC\s*-\s*\d+|AUDIT-[A-Z0-9_-]+)\s*\]"),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        # Fortran does not perform Server-Side Rendering.
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Fortran 2018 natively introduced Event-Driven programming primitives for Coarray synchronization.
+        "events": re.compile(r"\b(EVENT\s+POST|EVENT\s+WAIT|EVENT_QUERY)\b", re.I),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # Fortran handles linkages procedurally or via modules. No native DI containers or decorators exist.
+        "dependency_injection": None,
+        # Low-level systems language concepts mapped to Fortran paradigms.
+        # 34. macros (Preprocessor Directives / Macros)
+        # Fortran utilizes the standard C Preprocessor (cpp) allowing for structural `#define`, `#ifdef` pathing (e.g., `#ifdef MPI`).
+        "macros": re.compile(
+            r"^[ \t]*#(?:define|undef|if|ifdef|ifndef|elif|else|endif|include|pragma)\b",
+            re.M | re.I,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Explicit memory mapping. Includes native Fortran `POINTER` logic, assignments `=>`, and C-FFI pointer bridges (`C_PTR`).
+        "pointers": re.compile(r"(?i)\bpointer\b|[ \t]*=>[ \t]*"),
+        # 36. memory_alloc (Manual Memory Management)
+        # Dynamic memory allocation managed explicitly by the developer on the heap.
+        "memory_alloc": re.compile(r"\b(ALLOCATE|DEALLOCATE|MOVE_ALLOC|MALLOC|FREE)\b", re.I),
+        # 37. inline_asm (The Bare Metal)
+        # Fortran delegates assembly to standard C linkage. Inline ASM is explicitly not supported natively in Fortran code.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (The Structured Observers)
+        # CRITICAL GUARDRAIL: Isolates structured diagnostic output (custom Fortran loggers) away from raw terminal prints.
+        "telemetry": re.compile(
+            r"\b(?:call[ \t]+)?(?:log_info|log_error|log_warn|log_debug|logger%info|logger%error|logger%warn|logger%debug|flog)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        # Raw terminal output natively dumping to stdout.
+        "debug_prints": re.compile(r"\b(?:PRINT\b|WRITE\s*\(\s*(?:\*|6)\s*[,)])", re.I),
+        # # 40. explicit_casts (Explicit Type Casting)
+        # Forceful type coercion bypassing the safety engine. Strictly defining known Fortran intrinsic type conversion functions.
+        "explicit_casts": re.compile(r"(?i)\b(?:int|real|cmplx|dble|achar|char|iachar|ichar)[ \t]*\([^)]*\)"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # Hard execution destruction and unrecoverable exceptions.
+        "panics_and_aborts": re.compile(r"(?i)\b(?:stop|error[ \t]+stop|return)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        # Forcing threads to sleep.
+        "thread_sleeps": re.compile(r"(?i)\bcall[ \t]+(?:sleep|usleep)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        # Low-level byte manipulation utilizing Fortran's explicit intrinsic bitwise functions.
+        "bitwise_ops": re.compile(r"(?i)\b(?:iand|ior|ieor|not|ishft|ishftc|btest|ibset|ibclr|ibits)\b"),
+        # 44. sync_locks (Resource Management & Stability)
+        # Explicit coordination to prevent race conditions .
+        "sync_locks": re.compile(r"(?i)\b(?:lock|unlock|critical|sync[ \t]+all|sync[ \t]+images|sync[ \t]+memory)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        # Explicit locking of data to prevent mutation .
+        # BUG FIX: the shared trailing `\b` broke the intent(...) alternative,
+        # which ends in a literal `)` (non-word) -- same defect class as the
+        # `safety` rule's INTENT(...) alternative above. Dropped the trailing
+        # boundary for it; `)` is already unambiguous.
+        "immutability_locks": re.compile(r"(?i)\bparameter\b|\bintent[ \t]*\([ \t]*in[ \t]*\)"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # Explicit destruction of state or closing of streams .
+        "cleanup": re.compile(r"(?i)\b(?:close|deallocate|nullify)\b"),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Logic hidden from view via visibility modifiers .
+        "encapsulation": re.compile(r"(?i)\bprivate\b"),
+        # 48. listeners (Event Listeners / Observers)
+        # Waiting to receive state from an external broadcast .
+        "listeners": None,
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # Framework code that explicitly bypasses verification.
+        "test_skip": None,
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Fortran Specifics) ---
+        "serialization_parsing": re.compile(r"(?i)\b(NAMELIST|READ\s*\(|WRITE\s*\(|FORMAT|OPEN\s*\()\b"),
+        "regex_execution": re.compile(
+            r"(?i)\b(SCAN|INDEX|VERIFY|ADJUSTL|ADJUSTR)\b"
+        ),  # Relies on intrinsic string processing
+        "time_date_logic": re.compile(r"(?i)\b(DATE_AND_TIME|SYSTEM_CLOCK|CPU_TIME)\b"),
+        # BUG FIX: the shared trailing `\b` made the `OMP_` prefix alternative
+        # unreachable -- `OMP_` ends in `_` (a word char), and real OpenMP
+        # runtime calls always continue with more word characters right after
+        # (`OMP_GET_THREAD_NUM`), so the boundary could never fire (both sides
+        # word chars). `OMP_` was clearly meant as a prefix match, not an
+        # exact-token match -- dropped the trailing boundary for it.
+        "ipc_rpc_bridges": re.compile(r"(?i)\b(?:MPI_Init|MPI_Send|MPI_Recv|MPI_Bcast|EXECUTE_COMMAND_LINE)\b|\bOMP_"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/glsl.py b/gitgalaxy/standards/language_standards/languages/glsl.py
new file mode 100644
index 000000000..499f3b03a
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/glsl.py
@@ -0,0 +1,21 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {"target_version": "OpenGL Shading Language", "status": "production"},
+    "extensions": [".glsl", ".vert", ".frag", ".geom", ".comp"],
+    "exact_matches": [],
+    "discriminators": [".glsl", ".vert", ".frag"],
+    "shebangs": [],
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/go.py b/gitgalaxy/standards/language_standards/languages/go.py
new file mode 100644
index 000000000..d67840067
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/go.py
@@ -0,0 +1,343 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Go 1.22+ (Generics, Slog, Workspace paradigms)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    "extensions": [".go"],
+    "exact_matches": [],
+    "discriminators": [
+        ".go",
+        "go.mod",
+        "go.sum",
+        "go.work",
+        "Gopkg.toml",
+        "Gopkg.lock",
+        "glide.yaml",
+        "vendor/modules.txt",
+    ],
+    "shebangs": ["go", "gorun", "yaegi"],
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Includes select/case and range-based loops. EXCLUDES panic (bailout_hits).
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|range|select|goto|break|continue|fallthrough)\b|&&|\|\|"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks for functions and methods. Bounded generics [^\]]* and params [^)]*.
+        # #1209: parameter-list span wrapped in its own capture group (was
+        # only reachable via group(0), the whole match including the
+        # "func"/receiver/name prefix) so detector.py's counter isolates
+        # just "(...)" -- the whole-match fallback overcounted every
+        # zero/one-arg signature by +1 the same way Python's did (#1199).
+        # Name group added too, purely so existing extraction tests (which
+        # check the captured name) keep passing.
+        "args": re.compile(
+            r"func[ \t\n]+(?:\([^)]*\)[ \t\n]+)?(\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t\n]*(\((?:[^()]|\([^()]*\))*\))",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: const/var (freeze_hits) and Capitalization (encapsulation).
+        "structural_boundaries": re.compile(r"\b(package|import|return|type|go|defer|chan|map|interface|struct)\b"),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks.
+        # Bypasses the 'func' keyword, skips optional method receivers (e.g. (s *Server)),
+        # and strictly captures the actual identifier name. Ignores anonymous functions.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL RECEIVER SHIELD ]
+            # Go developers occasionally format complex struct receivers across multiple lines.
+            # FIX: Replaced horizontal spaces `[ \t]+` with `[ \t\n]+` around the `func`
+            # keyword, receiver block, and function name to safely leap across vertical gaps.
+            # GENERIC FUNCTION FIX (epic #813/#817): a top-level generic function's own
+            # type-parameter list (`func Foo[T constraints.Ordered](a, b T) T {`, Go 1.18+,
+            # mainstream since 2022) went straight from the captured name to `[ \t\n]*\(` with
+            # no allowance for a `[...]` list in between, so the whole function was invisible
+            # to the engine. (Generic *methods* with a receiver already matched by accident --
+            # the receiver's own `[^)]+` char class doesn't care about brackets -- and
+            # class_start/args already had this exact step-over; func_start was the outlier.)
+            # Added the same bounded, already-proven-safe `(?:[ \t\n]*\[[^\]]*\])?` step-over.
+            # =====================================================================
+            r"^[ \t]*func(?:[ \t\n]+\([^)]+\))?[ \t\n]+([A-Za-z_$][\w_$]*)(?:[ \t\n]*\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t\n]*\(",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # =====================================================================
+        # [ THE VERTICAL GENERICS SHIELD (GO) ]
+        # Go 1.18+ introduces generic type parameters `[T any]` which can be
+        # vertically formatted before the `struct` or `interface` keyword.
+        # FIX: Injected a capture group `([a-zA-Z_]\w*)` for exact entity name
+        # extraction. Upgraded the `\s+` to explicitly bounded `[ \t\n]+` and
+        # decoupled the generic stepper `(?:[ \t\n]*\[[^\]]*\])?` to safely
+        # leap across vertical boundaries.
+        # =====================================================================
+        "class_start": re.compile(
+            r"^[ \t]*type[ \t\n]+([a-zA-Z_]\w*)(?:[ \t\n]*\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t\n]+(?:struct|interface)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # BUG FIX: `recover\(\)` ends on `)` (non-word), so the shared
+        # trailing \b could never fire -- the classic
+        # `defer func() { recover() }()` idiom never matched.
+        "safety": re.compile(
+            r"err\s*!=\s*nil|\b(?:errors\.(?:Is|As|New|Join)|sync\.(?:Once|WaitGroup)|context\.Context)\b|\brecover\(\)"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Explicitly ignoring errors via blank identifier.
+        "safety_bypasses": re.compile(r'_\s*,\s*err[ \t]*=|_[ \t]*=\s*\w+|\bimport\s+(?:\.[ \t]+)?"'),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process-killing commands and direct syscalls. EXCLUDES TODO (debt) and fmt.Print (print_hits).
+        "high_risk_execution": re.compile(r"\b(os\.Exit|syscall\.Kill|syscall\.RawSyscall|log\.Fatal(?:f|ln)?)\b"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(os\.(?:Open|Create|ReadFile)|io\.(?:Reader|Writer|Copy)|net/http|database/sql|bufio\.|grpc\.|sqlx\.|pgx\.)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Implicit Public Reality: Capitalized top-level identifiers in Go are public.
+        # BUG FIX: `^[ \t]*` allowed arbitrary leading whitespace, so
+        # the original (no-prefix) form matched ANY indented line
+        # starting with a capitalized word -- including a bare call to
+        # an exported function inside a function body
+        # (`    DoSomething()`), which is not a declaration at all.
+        # Column-0-only anchoring alone overcorrects: Go's grouped
+        # `var (...)`/`const (...)` blocks legitimately indent their
+        # member declarations (e.g. `const (\n\tBurstReplicas = 500\n)`
+        # in real k8s source), and those ARE top-level/exported. So:
+        # explicit `func`/`type`/`var`/`const` keyword forms stay
+        # anchored to column 0 (gofmt never indents these), while the
+        # no-prefix fallback (for grouped members) keeps indentation
+        # tolerance but requires it (a bare col-0 identifier isn't
+        # valid Go outside a group) and excludes anything immediately
+        # followed by `(` -- a grouped member is `Name = value` or
+        # `Name Type`, never `Name(`, which is what a real function
+        # CALL statement looks like. The trailing `\b` before the
+        # lookahead is required: without it, greedy `\w+` can
+        # backtrack one character short of the real identifier end
+        # purely to dodge the `(?!\()` check (matching `DoSomethin`
+        # instead of `DoSomething` to sidestep the `(` in
+        # `DoSomething(`) -- `\b` forces the lookahead to apply at the
+        # true word boundary, where backtracking can't produce a
+        # second valid stopping point.
+        "api": re.compile(
+            r"^func\s+(?:\([^)]*\)[ \t]+)?[A-Z]\w+|^(?:type|var|const)\s+[A-Z]\w+|^[ \t]+\b[A-Z]\w+\b(?!\()",
+            re.M,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. Reassignment and channel sends.
+        "state_mutation": re.compile(r":=|(?<![=!<>])=(?![=])|<-|\bappend\(|\batomic\.(?:Add|Store|Swap)"),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"//[ \t]*(?:func|type|var|const|import|if|for|switch|select|return)\b"),
+        # 13. doc (Structured Documentation)
+        # GoDoc standard: comments immediately preceding a declaration.
+        "doc": re.compile(r"^[ \t]*//\s+[A-Z][a-zA-Z0-9_]+\s+.*|^[ \t]*//\s*Package\s+", re.M),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(r"\b(?:Test|Benchmark|Fuzz)[A-Z]\w*\b|t\.Run\b|\b(?:assert|require|mock)\.\w+\("),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # BUG FIX: `select[ \t]*\{` ends on `{` (non-word), so the
+        # shared trailing \b only fired when a word char immediately
+        # followed the brace -- never true in real Go, where a `select`
+        # block's body always starts on the next line (or at least
+        # with whitespace) after the opening brace. This core
+        # concurrency primitive never matched at all, spaced or not.
+        "concurrency": re.compile(
+            r"\b(?:go\s+func|go\s+\w+|chan\s+|context\.(?:WithTimeout|WithCancel)|errgroup\.Group)\b"
+            r"|select[ \t]*\{"
+        ),
+        # 16. ui_framework (UI / View Components)
+        # Go is primarily backend; targets templates and web handlers.
+        "ui_framework": re.compile(
+            r"\b(html/template|text/template|http\.HandleFunc|ServeHTTP|gin\.|echo\.|fiber\.)\b"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        # BUG FIX (ReDoS): confirmed genuine O(n^2) scaling (0.32s/
+        # 1.27s/5.12s/20.6s for n=2k/4k/8k/16k, ~4x per doubling; 68.6s
+        # observed at n=30k) against an adversarial payload with two
+        # large whitespace runs (`func` + huge ws + `(recv)` + huge ws
+        # + unclosed name) that ultimately fails to complete a match --
+        # the three unbounded `\s*` occurrences plus the two unbounded
+        # `[^)]*`/`[^\]]*` classes force exhaustive backtracking across
+        # every combination of how much each could consume. Bounded
+        # every quantifier, and replaced the two narrowly-specific
+        # optional groups (generics brackets, multi-return parens) with
+        # one bounded `[^{]{0,80}` gap -- this also fixes a real,
+        # separate gap: a bare (non-parenthesized) single return type
+        # (`func(x int) int {`) never matched either shape.
+        "closures": re.compile(r"func[ \t\n]{0,80}\([^)]{0,300}\)[^{]{0,80}\{"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"^[ \t]*var\s+[a-zA-Z_]\w*\s*(?:[a-zA-Z_]\w*\s*)?=|os\.Getenv|os\.Environ",
+            re.M,
+        ),
+        # 19. decorators (Decorators / Annotations)
+        # Go lacks @decorators; uses Struct Tags and Build Tags.
+        "decorators": re.compile(r'`[^`]*?(?:json|xml|yaml|gorm|db|bson):"[^"]*"[^`]*?`|//go:build|//\s*\+build'),
+        # 20. generics (Generics / Type Parameters)
+        # BUG FIX: `~[a-zA-Z_]\w*` (the Go 1.18+ approximation-element
+        # constraint, e.g. `~int`) starts with `~` (non-word), so the
+        # shared leading \b could only fire when a word char
+        # immediately preceded the `~` -- never true for how this
+        # constraint is actually written (always preceded by a space
+        # or `|` inside the type-parameter brackets). Never matched.
+        "generics": re.compile(
+            r"\[(?:[^\[\]]|\[[^\[\]]*\])*(?:\b(?:any|comparable)\b|~[a-zA-Z_]\w*\b)(?:[^\[\]]|\[[^\[\]]*\])*\]|\bany\b"
+        ),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Functional iteration helpers from the slices/maps packages.
+        "comprehensions": re.compile(r"\b(slices\.(?:Delete|Filter|Sort|Compact)|maps\.(?:Keys|Values))\b"),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(math\.|math/cmplx\.|math/rand\.|crypto/rand\.|gonum\.)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Reflection, CGO, and Unsafe triggers.
+        "reflection_metaprogramming": re.compile(r'import\s+"C"|\b(reflect\.|unsafe\.|cgo|go:linkname)\b'),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r'^[ \t]*import\s*(?:\(|"[^"]+")', re.M),
+        # ---> THE FIX: Strictly bounded to valid Go import path characters <---
+        # Prevents raw HTTP string literals in test files from being hallucinated as packages.
+        "_dependency_capture": re.compile(
+            r'^[ \t]*(?:import\s+)?(?:\(\s*)?(?:[a-zA-Z0-9_.]+\s+)?["`]([a-zA-Z0-9_.\-/]+)["`]',
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"(?://|#|/\*)\s*(?:Author|Maintainer|Created by|Owner):?\s+([a-zA-Z0-9_ -]+)",
+            re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(r"\b(html/template|ExecuteTemplate|http\.ResponseWriter|Render|gin\.Context)\b"),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(EventBus|Publish|Subscribe|kafka\.|rabbitmq\.|Emit|OnEvent)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(
+            r"\b(wire\.Build|wire\.NewSet|fx\.New|fx\.Provide|fx\.Invoke|dig\.Provide|do\.Provide)\b"
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        # Go lacks a preprocessor; //go: directives act as compile-time hooks.
+        "macros": re.compile(r"^//go:(?:generate|build|noinline|nosplit|noescape|linkname)\b", re.M),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Explicit pointer addressing and dereferencing.
+        "pointers": re.compile(
+            r"\b(?:uintptr|unsafe\.Pointer)\b|&\w+|\*(?:[A-Z]\w*|int\d*|uint\d*|float\d*|byte|rune|string|bool)\b"
+        ),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(r"\b(make|new)\s*\(|sync\.Pool\b"),
+        # 37. inline_asm
+        "inline_asm": None,  # Go handles ASM in separate .s files.
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(slog|logrus|zap|zerolog|log)\.(?:Info|Warn|Error|Debug|Trace)(?:f|ln)?\b|\btrace\.Span\b"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(fmt\.Print|fmt\.Println|fmt\.Printf|println|print)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        # Type assertions and conversions.
+        "explicit_casts": re.compile(
+            r"\.\([a-zA-Z_]\w*\)|\b(?:int|int8|int16|int32|int64|uint|uint8|uint16|uint32|uint64|float32|float64|byte|rune|uintptr|string)\s*\("
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(panic|os\.Exit|log\.Fatal)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(time\.Sleep|time\.After|runtime\.Gosched)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|\^|&\^"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(Mutex|RWMutex|Lock|Unlock|RLock|RUnlock|atomic\.|sync\.Map|sync\.Pool)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\bconst\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(defer|Close|Unlock|RUnlock|Stop|Cleanup)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Unexported identifiers (lowercase) in Go are private/internal.
+        # BUG FIX (two layered issues):
+        # 1. `^[ \t]*` allowed arbitrary leading whitespace, so this
+        #    matched ANY indented line starting with a lowercase word
+        #    -- effectively every statement in Go (`if`, `for`,
+        #    `return`, a bare function call, ...), since almost all
+        #    keywords and local identifiers are lowercase. gofmt never
+        #    indents real package-level declarations (always column
+        #    0), so anchored to `^` with no whitespace tolerance,
+        #    matching the same fix applied to `api` above.
+        # 2. Even after that fix, the `func` prefix in alt 1 was
+        #    OPTIONAL, so on a line like `func Foo() {` the engine
+        #    could skip matching "func" as the prefix and instead
+        #    fall through to matching the literal word "func" itself
+        #    via the bare `[a-z]\w+` fallback (since "func" is itself
+        #    lowercase) -- misclassifying an exported, PUBLIC function
+        #    as private. `type`/`var`/`const` don't have this problem
+        #    in alt 2 since consuming the keyword is mandatory there.
+        #    Made the `func` prefix mandatory in alt 1 too (Go has no
+        #    top-level declaration form other than these 4 keywords,
+        #    so there's no real case an optional prefix was needed for).
+        # 3. Column-0-only anchoring alone overcorrects: Go's grouped
+        #    `var (...)`/`const (...)` blocks legitimately indent their
+        #    member declarations, and an unexported member of one of
+        #    those groups IS still a private top-level identifier. The
+        #    no-prefix fallback keeps indentation tolerance for this
+        #    case, but requires it (bare col-0 identifiers aren't valid
+        #    Go outside a group) and explicitly excludes Go's
+        #    lowercase reserved keywords (which is what let `if`/`for`/
+        #    `return`/etc. through in the first place) and anything
+        #    immediately followed by `(` (a real function CALL
+        #    statement, not a `Name = value`/`Name Type` group member).
+        #    The trailing `\b` before the lookahead is required for
+        #    the same reason as in `api` above: without it, greedy
+        #    `\w+` can backtrack one character short of the real
+        #    identifier end purely to dodge the `(?!\()` check.
+        "encapsulation": re.compile(
+            r"^func\s+(?:\([^)]*\)[ \t]+)?[a-z]\w+|^(?:type|var|const)\s+[a-z]\w+"
+            r"|^[ \t]+(?!(?:if|else|for|switch|case|default|break|continue|goto|fallthrough"
+            r"|return|go|defer|select|range|func|type|var|const|package|import|struct"
+            r"|interface|map|chan|make|new|nil|true|false|iota)\b)\b[a-z]\w+\b(?!\()",
+            re.M,
+        ),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"<-chan\b|\.On\(|\.Subscribe\("),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\bt\.Skip(?:f|Now)?\(|mock\.|gomock\."),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Go Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(json\.Unmarshal|json\.Marshal|xml\.Unmarshal|xml\.Marshal|gob\.NewEncoder)\b"
+        ),
+        "regex_execution": re.compile(r"\b(regexp\.Compile|regexp\.MustCompile|\.MatchString)\b"),
+        # BUG FIX: `time\.Now\(\)` ends on `)` (non-word), so the
+        # shared trailing \b could never fire (whatever follows a
+        # function call -- `;`, a newline, another `.method()`, or end
+        # of string -- is never a word character). Go's single most
+        # common time-related call never matched in any real usage.
+        "time_date_logic": re.compile(r"\b(?:time\.Parse|time\.Duration|time\.Sleep|time\.Since)\b|time\.Now\(\)"),
+        "ipc_rpc_bridges": re.compile(r"\b(net/rpc|grpc\.Dial|grpc\.NewServer|exec\.Command|syscall)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/groovy.py b/gitgalaxy/standards/language_standards/languages/groovy.py
new file mode 100644
index 000000000..bc759c350
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/groovy.py
@@ -0,0 +1,335 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Groovy 4.0 / Gradle 8+",
+        "last_updated": "2026-03-12",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA
+    "extensions": [".groovy", ".gradle", ".gvy", ".gy", ".gsh"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES
+    "exact_matches": ["Jenkinsfile"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION
+    "discriminators": [
+        "build.gradle",
+        "settings.gradle",
+        "gradle.properties",
+        "pom.xml",
+        ".java",
+    ],
+    # EXECUTION SIGNATURES
+    "shebangs": ["groovy"],
+    # LEXICAL FAMILY
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        "branch": re.compile(r"\b(if|else|switch|case|default|for|while|in|try|catch|finally)\b|\?"),
+        # 2. args (Parameters / Coupling)
+        # Captures standard method arguments and Groovy closures (x, y ->)
+        # CRITICAL FIX: Anchored the parenthesis capture to method signatures so it
+        # doesn't hallucinate every standard method call or if-statement in the file.
+        # QUADRATIC BLOWUP FIX: the closure form's bare-identifier branch
+        # (`[a-zA-Z_$][\w_$]*` with no \b anchor) got retried at every
+        # position in a long `->`-less line -- O(n^2) (same bug found and
+        # fixed in javascript's args). Bounded to {0,100}.
+        # BUG FIX: the return-type stepper required an uppercase first
+        # char, so lowercase primitive/void return types (`void foo()`,
+        # `int add()`) never matched at all. It also excluded `,`, so
+        # multi-param generic return types (`Map<String, Integer> foo()`)
+        # broke after the first type param. Added a primitive-keyword
+        # alternative and `,` to the class (same technique already used
+        # by C#'s func_start for this exact bug class).
+        # NESTED-DELIMITER FIX: the flat `[^)]*` param-list matcher broke
+        # on one-level-nested calls in default values (`int y =
+        # Math.max(3, 4)`), truncating at the inner `)`. Swapped for a
+        # bounded one-level-nesting form.
+        # BUG FIX (ambiguity sweep): despite the "CRITICAL FIX" comment's
+        # claim, this had no exclusion for control-flow keywords at all,
+        # so `if (x) {`, `while (x) {`, `switch (x) {`, `for (i in ...) {`,
+        # `catch (Exception e) {`, and `synchronized(lock) {` were all
+        # hallucinated as method parameter blocks (the condition
+        # misread as an argument list). Added the same style of negative
+        # lookahead func_start already uses.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # both branches (was only reachable via group(0), the whole match
+        # including the modifier/return-type/name prefix, or for
+        # closures the leading "{") so detector.py's counter isolates
+        # just the real parameter text -- the whole-match fallback
+        # overcounted every zero/one-arg signature by +1 the same way
+        # Python's did (#1199). Name group added to branch 1 too, purely
+        # so existing extraction tests keep passing.
+        "args": re.compile(
+            r"^[ \t]*(?:(?:public|private|protected|static|final|def|abstract|@[A-Za-z0-9_.]+(?:\([^)]*\))?)[ \t\n]+){0,10}"
+            r"(?:(?:(?:void|int|long|short|byte|char|float|double|boolean)(?:\[\])?|[a-zA-Z_][a-zA-Z0-9_<>\[\]?,\.]*)[ \t]+){0,3}"
+            r"(?!(?:if|for|while|switch|catch|synchronized)\b)"
+            r"([A-Za-z_$][\w_$]*|\"[^\"]*\"|'[^']*')[ \t\n]*(\((?:[^()]|\([^()]*\))*\))"
+            r"|(?:\{[ \t\n]*)?(\((?:[^()]|\([^()]*\))*\)|[a-zA-Z_$][\w_$]{0,100}|)[ \t\n]*->",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        "structural_boundaries": re.compile(
+            r"\b(def|class|interface|trait|enum|record|import|package|extends|implements|return|yield|sealed|permits|non-sealed)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # HIGHLY TUNED: Uses Negative Lookahead to explicitly ignore Gradle DSL keywords (implementation, api, task)
+        # Uses Positive Lookahead (?=[ \t]*\() to stop exactly at the function name without consuming punctuation.
+        # BUG FIX: same return-type stepper bug as `args` above -- lowercase
+        # primitive/void return types and multi-param generic return types
+        # (`Map<String, Integer> foo()`) never matched. See `args` comment.
+        # BUG FIX (ambiguity sweep): `synchronized` was missing from the
+        # exclusion list, so a synchronized block (`synchronized(lock) {
+        # ... }`) had the identical `identifier(...) {` shape as a real
+        # method and was misclassified as a method declaration named
+        # "synchronized". Confirmed pre-existing (not introduced by the
+        # return-type fix above); added to the exclusion list alongside
+        # the other control-flow-shaped keywords.
+        # #1221: func_start used to have one unified branch whose
+        # annotation/modifier prefix, generic bound, and return-type
+        # were all independently optional -- so a bare call statement
+        # (`next();`, zero prefix tokens) satisfied the exact same
+        # shape as a real signature, since (like csharp/apex before
+        # their own #789/#1221 fixes) this branch never verified a
+        # trailing `{`/`;` terminator either, deferring entirely to
+        # the pipeline's post-hoc brace search. Unlike apex (whose
+        # func_start has NO legitimate zero-prefix case, so a simple
+        # prefix-presence gate sufficed) groovy also has to keep
+        # matching a genuinely bare constructor shape with no
+        # modifier/return-type at all (`MyClass(String arg) {`,
+        # covered by test_groovy.py) *and* a fully-prefixed signature
+        # with no terminator at all (`abstract Map<String, Integer>
+        # calculateTotals(List<Item> items)`, covered by
+        # test_groovy_strict.py's deep-signature sweep) -- so neither
+        # "always require closure" (javascript's/java's fix shape) nor
+        # "always require a prefix" (apex's) works alone here. Split
+        # instead: branch 1 requires >=1 prefix token (merging
+        # modifier/annotation/generic-bound/return-type into one
+        # alternation so "at least one of any kind" is expressible as
+        # a single `{1,18}` repeat) and keeps the original lenient,
+        # no-terminator-required lookahead; branch 2 requires
+        # PRECISELY ZERO prefix tokens and, in exchange, must close
+        # its (non-nested, same bound as `args`) parameter list and
+        # reach a real `{` -- `next();` has neither a prefix nor a
+        # closing `{`, so it satisfies neither branch.
+        "func_start": re.compile(
+            r"^[ \t]*(?:"
+            r"(?:(?:public|private|protected|static|final|def|abstract|@[A-Za-z0-9_.]+(?:\([^)]*\))?|<[^>]{0,100}(?:<[^>]{0,100}>[^>]{0,100}){0,5}>|(?:void|int|long|short|byte|char|float|double|boolean)(?:\[\])?|[a-zA-Z_][a-zA-Z0-9_<>\[\]?,\.]*)[ \t\n]+){1,18}"
+            r"(?!(?:if|for|while|switch|catch|synchronized|new|return|class|interface|enum|trait|implementation|testImplementation|api|compileOnly|runtimeOnly|classpath|dependency|from|file|mavenCentral|plugins|dependencies|repositories|task|project|allprojects|subprojects|ext)\b)"
+            r"([A-Za-z_$][\w_$]*|\"[^\"]*\"|'[^']*')(?=[ \t\n]*\()"
+            r"|"
+            r"(?!(?:if|for|while|switch|catch|synchronized|new|return|class|interface|enum|trait|implementation|testImplementation|api|compileOnly|runtimeOnly|classpath|dependency|from|file|mavenCentral|plugins|dependencies|repositories|task|project|allprojects|subprojects|ext)\b)"
+            r"([A-Za-z_$][\w_$]*|\"[^\"]*\"|'[^']*')(?=[ \t\n]*\([^)]*\)[ \t\n]*(?:throws[ \t\n]+[\w.,<> \t\n]+)?[ \t\n]*\{)"
+            r")",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        "class_start": re.compile(
+            r"^[ \t]*(?:(?:public|private|protected|static|final|abstract|sealed|non-sealed|@[A-Za-z0-9_.]+(?:\([^)]*\))?)[ \t\n]+){0,10}"
+            r"(?:class|interface|trait|enum|record)\s+[A-Za-z_$][\w_$]*",
+            re.M,
+        ),
+        # --- PHASE 2: RISK ENGINE (Structural Integrity) ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|assert|instanceof|Optional)\b|@(?:Valid|Validated|NotNull|NonNull|Immutable)"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        "safety_bypasses": re.compile(
+            r"\b(null)\b|return\s+null|catch\s*\(\s*(?:Exception|Throwable)\b|@SuppressWarnings|@SneakyThrows|\.get\(\)"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        "high_risk_execution": re.compile(r"\b(System\.exit|Runtime\.getRuntime\(\)\.exec|execute)\b"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(File|Files|Paths|FileReader|FileWriter|file|copy|sync|uri|url|Socket|Connection|ResultSet)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Groovy classes/methods are implicitly public by default, making the whole file highly exposed.
+        "api": re.compile(
+            r"\b(public)\b|@(RestController|Controller|Service|Component|Bean|RequestMapping|GetMapping|PostMapping|PutMapping|DeleteMapping|PatchMapping)\b"
+        ),
+        # 11. flux (State Mutation)
+        # BUG FIX: the trailing bare `=` matched the first `=` of `==`,
+        # miscounting every equality comparison (`result == expected`) as
+        # an assignment. Added a negative lookahead to exclude `==`.
+        "state_mutation": re.compile(r"^[ \t]*\w+(?:\.\w+)*[ \t]*=(?!=)|@(?:Setter|Data)\b", re.M),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Tuned to catch dead Gradle definitions and Groovy logic.
+        # BUG FIX (Rule 12): groovy is `standard_block` (both `//` and
+        # `/* */`), but this only ever fired on `//` -- every block-
+        # commented-out construct (`/* class Foo {} */`) silently never
+        # matched.
+        "dead_code": re.compile(
+            r"(?://|/\*)[ \t]*(?:def|class|void|if|for|while|import|implementation|compile|api|testImplementation)\b"
+        ),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"/\*\*|@param|@return|@throws|@deprecated|@see"),
+        # 14. test (Testing & Assertions)
+        # Integrates Spock Framework keywords (given:, when:, then:, expect:) alongside JUnit.
+        # BUG FIX (Rule 5): `^\s*` matches newlines in re.M mode, so the
+        # Spock-label anchor could stretch across blank lines. Bounded to
+        # `[ \t]*` (same-line whitespace only).
+        "test": re.compile(
+            r"@(?:Test|Before|After|BeforeEach|AfterEach|Mock)|assert\w*\s*\(|^[ \t]*(?:given|when|then|expect|setup|cleanup|where):",
+            re.M,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(synchronized|Thread|Runnable|Future|ExecutorService|Promise|Atomic\w+|task)\b|@(?:Async|Scheduled)"
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(r"\b(SwingBuilder|JFrame|JPanel|ModelAndView|ModelMap|Model|UIComponent)\b"),
+        # 17. closures (Closures / Anonymous Functions)
+        # REDOS FIX: `[\w\s,]+` followed by a separate trailing `\s*`
+        # let both consume the same whitespace run -- an unclosed `{`
+        # followed by thousands of spaces caused catastrophic
+        # backtracking (confirmed hang at n=2000). Collapsed into one
+        # bounded, non-overlapping class before the required `->`
+        # (same technique as kotlin's closures fix).
+        # BUG FIX: idiomatic paren-less trailing closures (`list.each {
+        # it }`, `.collect { it * 2 }`) have no `->` at all and never
+        # matched either alternative, missing Groovy's single most
+        # common closure shape. Added a dot-method-call-into-brace form.
+        "closures": re.compile(r"\.\w+[ \t]*\{|\{[ \t\n]*[a-zA-Z_][a-zA-Z0-9_ \t\n,]{0,150}?->|->"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(r"\b(System\.getProperty|System\.getenv|project\.ext)\b|@Value"),
+        # 19. decorators (Decorators / Annotations)
+        # NESTED-DELIMITER FIX (Rule 11): the flat `[^)]*` broke on one-
+        # level-nested annotation args (`@Grab(..., version=resolve())`),
+        # truncating at the inner `)`. Swapped for a bounded
+        # one-level-nesting form.
+        "decorators": re.compile(r"^[ \t]*@[\w.]+(?:\((?:[^()]|\([^()]*\))*\))?", re.M),
+        # 20. generics (Generics / Type Parameters)
+        # NESTED-DELIMITER FIX (Rule 11): the flat `[^>]*` broke on one-
+        # level-nested generics (`Map<String, List<Id>>`), truncating at
+        # the first `>` and leaving the real closing `>` unconsumed.
+        # Swapped for a bounded one-level-nesting form.
+        "generics": re.compile(r"<\s*[A-Z?][^<>]{0,100}(?:<[^<>]{0,100}>[^<>]{0,100})*>"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # BUG FIX: required a literal `(` right after the method name,
+        # but Groovy's idiomatic call form for these is a paren-less
+        # trailing closure (`list.each { it }`, `.collect { it * 2 }`)
+        # -- the far more common shape never matched at all.
+        "comprehensions": re.compile(
+            r"\.(?:collect|find|findAll|grep|inject|each|eachWithIndex|map|filter|reduce)[ \t]*[({]"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(Math\.|BigDecimal|BigInteger|Random|SecureRandom)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Groovy's highly dynamic Meta-Object Protocol (MOP).
+        "reflection_metaprogramming": re.compile(
+            r"\b(invokeMethod|getProperty|setProperty|methodMissing|propertyMissing|ExpandoMetaClass|metaClass)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*import\s+(?:static[ \t]+)?[\w.]+;?", re.M),
+        # BUG FIX: this key was entirely absent (not `None`), so Groovy
+        # imports never fed the dependency graph at all -- unlike every
+        # other JVM-family language here (e.g. java), which pairs
+        # `import` with a `_dependency_capture` group. Groovy imports
+        # follow the identical syntax, so this was a coverage gap, not
+        # an intentional Strict-Feature-Parity `None`.
+        "_dependency_capture": re.compile(
+            r"^[ \t]*import[ \t\n\\]+(?:static[ \t\n\\]+)?([\w*]+(?:[ \t\n]*\.[ \t\n]*[\w*]+)*)[ \t]*;?", re.M
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"@author\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # QUADRATIC BLOWUP FIX: `\d+` and the trailing `[^\]]*` both
+        # greedily match digits with no closing `]` ever present, so an
+        # unclosed `[SPEC-11111...` tag backtracks by re-scanning an
+        # ever-shrinking suffix -- O(n^2) (confirmed ~4x slowdown per
+        # input-size doubling; same bug class already fixed for shell
+        # and sqlite's spec_exposure elsewhere in this file). Bounded to
+        # {0,300}; real spec/audit tags don't get remotely that long.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        # BUG FIX: `@ResponseBody` is `@`-prefixed -- the shared leading
+        # \b could only fire when a word char immediately preceded the
+        # `@`, never true for how annotations are actually written.
+        # Never matched at all.
+        "ssr_boundaries": re.compile(
+            r"\b(?:MarkupBuilder|StreamingMarkupBuilder|TemplateEngine|HttpServletRequest|HttpServletResponse)\b"
+            r"|@ResponseBody"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # BUG FIX: `@EventListener` is `@`-prefixed -- same bug.
+        "events": re.compile(r"\b(?:ApplicationEvent|ApplicationListener|publishEvent)\b|@EventListener"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # Heavily captures Gradle plugin and dependency architecture.
+        # BUG FIX: 7 of the 10 alternatives are `@`-prefixed Spring
+        # annotations -- same bug, at scale.
+        # BUG FIX (Rule 9): `plugins\s*\{` and `dependencies\s*\{` both
+        # end on `{`, a non-word char, so the shared trailing `\b` could
+        # never fire (no word/non-word transition between `{` and
+        # whatever follows it) -- `plugins {` / `dependencies {` never
+        # matched at all, the two most common Gradle DSL entry points.
+        "dependency_injection": re.compile(
+            r"\bapply\s+plugin\b|\bplugins\s*\{|\bdependencies\s*\{"
+            r"|@Autowired|@Inject|@Component|@Service|@Repository|@Bean|@Configuration"
+        ),
+        # 34. macros
+        "macros": None,
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": None,
+        # 36. memory_alloc
+        "memory_alloc": None,
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(log|logger|LOGGER|LoggerFactory)\.(?:info|error|warn|warning|debug|trace)\b|@Slf4j|@Log4j2|@Log"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        # BUG FIX: `\.printStackTrace\(\)` ends on `)` (non-word), so
+        # the shared trailing \b could never fire. Never matched.
+        "debug_prints": re.compile(
+            r"\b(?:println|print|printf|System\.out\.print|System\.err\.print)\b|\.printStackTrace\(\)"
+        ),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\bas\s+[A-Z]\w*|\(\s*(?:int|long|short|byte|char|float|double|boolean|[A-Z][A-Za-z0-9_]*)\s*\)\s*[a-zA-Z_$]"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|System\.exit|GradleException)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(Thread\.sleep|sleep)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        # EXCLUDES `<<` and `>>` because Groovy heavily overloads `<<` for list/stream appending.
+        "bitwise_ops": re.compile(r"\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(synchronized|ReentrantLock|ReadWriteLock|Semaphore|Lock|Mutex)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        # BUG FIX: `@Immutable` is `@`-prefixed -- same leading-\b bug.
+        "immutability_locks": re.compile(r"\bfinal\b|@Immutable"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(close|dispose|shutdown)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b(private|protected)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(addListener|on[A-Z]\w*|subscribe)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"@(?:Ignore|Disabled|PendingFeature)\b|mock\s*\(|spy\s*\("),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/haskell.py b/gitgalaxy/standards/language_standards/languages/haskell.py
new file mode 100644
index 000000000..ed41ae0c6
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/haskell.py
@@ -0,0 +1,363 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "GHC 9.14.1+ (Linear Types, cases, Type Abstractions, RecordDotSyntax)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard source, literate Haskell, and C-preprocessor Haskell.
+    "extensions": [".hs", ".lhs", ".hsc", ".ghci"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Cabal custom setup scripts that evaluate as pure Haskell.
+    "exact_matches": ["Setup.hs", "Setup.lhs"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, Stack configs, and Cabal manifests to anchor the ecosystem.
+    "discriminators": [".hs", ".lhs", "stack.yaml", "cabal.project", ".cabal"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for script-based Haskell execution.
+    "shebangs": ["runhaskell", "runghc", "stack", "ghci"],
+    # UPGRADED: Maps to Family 5 (Hybrid Dash) -- #621: this comment
+    # named the wrong family; "Hybrid Dash"/multi_style_dash doesn't
+    # nest, and this rationale explicitly says Haskell's blocks DO nest.
+    # "recursive_block_haskell" reuses the same iterative nested-peel
+    # algorithm as recursive_block (Rust/Swift/Dart/Scala) with
+    # Haskell's own -- / {- / -} tokens instead of C-style ones. Was
+    # "standard_block" until now, meaning zero comment stripping at all
+    # (standard_block never used the `--`/`{-`/`-}` tokens).
+    # Rationale: Uses '--' for lines and '{- -}' for blocks, which strictly supports recursive nesting.
+    "lexical_family": "recursive_block_haskell",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # branch: decisions that split flow. Includes guards (|) and modern \cases.
+        "branch": re.compile(r"\b(if|then|else|case|of|MultiWayIf)\b|\\cases?|^[ \t]*\|", re.M),
+        # args: Parameters / Coupling. Captures type signatures, lambda bindings, and explicit @type apps.
+        # #1209: the type-signature and lambda-parameter spans wrapped in
+        # their own capture groups (was only reachable via group(0), the
+        # whole match including the leading "::"/"\") so detector.py's
+        # counter isolates just the real type/parameter text. Group 1
+        # (the `::` type signature) is named in `_args_arrow_count_groups`
+        # below, which routes it to detector.py's
+        # `_count_haskell_type_arrows` -- curried arity from top-level
+        # arrow count -- since neither the comma-list nor whitespace-
+        # token fallback used by every other language maps onto
+        # Haskell's syntax (and unlike every other branch here, a real
+        # signature can have ZERO arrows, e.g. `noop :: IO ()`, so this
+        # can't be inferred from content shape the way the other
+        # branches are). Group 2 (lambda params, space-separated like
+        # Scheme) already gets a correct count from the existing
+        # whitespace-split fallback, no special-casing needed.
+        # #1505 (follow-up): Group 3 is a signature-less function EQUATION's
+        # own LHS pattern list (`name pat1 pat2 = ...`) -- the exact shape
+        # func_start's own equation-form alternative anchors on (see that
+        # rule's comment below), needed because typeclass instance methods
+        # and where/let-local helpers routinely have no restated `::`
+        # signature at all, so group 1 never fires for their block and args
+        # silently measured 0 regardless of true arity. Anchored to the
+        # ABSOLUTE start of the block (`^` with no re.M) so it only ever
+        # reads the function's OWN first line, not some unrelated
+        # `name ... =` deeper in the body. Named in
+        # `_args_pattern_list_groups` below, which routes it to
+        # detector.py's `_count_haskell_pattern_list` -- a naive
+        # whitespace-split (the generic fallback every other language
+        # uses) wrongly splits a single parenthesized compound pattern
+        # like `(MetaList xs)` into two tokens, so this needs the same
+        # kind of dedicated counter as group 1's arrow-counting. A guard
+        # (`| cond = ...`) between the pattern list and the real `=`
+        # isn't a shape this alternative understands and simply fails to
+        # match (falls back to the pre-existing 0), not a regression.
+        # #1616 (follow-up): extended this same group-3 alternative to also
+        # accept a guard-only naming line (no `=` on the same line, just
+        # immediately followed by `\n[ \t]+\|`), keeping it in sync with
+        # func_start's own #1616 fix below.
+        #
+        # #1505 (follow-up, separate bug in the SAME rule): group 1's own
+        # character classes never included "." -- real-world Haskell
+        # overwhelmingly writes qualified/imported type names with a dot
+        # (`T.Text`, `IO.Newline`, `M.Map`), and the moment the scan hit
+        # that dot it fell out of the repetition entirely, truncating the
+        # whole captured signature to whatever came before it (confirmed:
+        # `inquotes :: T.Text -> T.Text` captured only `T` -- zero arrows
+        # counted from a real 1-arrow signature, i.e. every arrow after
+        # the first dotted type silently vanished). Added "." to both the
+        # first-char and continuation classes; safe for `_count_haskell_
+        # type_arrows` either way since it only scans for top-level "->"
+        # substrings and doesn't care what other characters ride along
+        # (e.g. a `forall a. a -> a` full-stop getting swept into the
+        # capture is harmless noise, not a new miscount).
+        #
+        # #1564 (follow-up, same rule): group 3's own equation-anchored
+        # alternative had the identical "let"-blocks-the-whole-line gap
+        # func_start had (see that rule's own #1564 comment below) --
+        # a same-line `let name args = expr` local binding never got its
+        # args counted, since the reserved-word exclusion sat right after
+        # `^[ \t]*` with no way to look past a leading "let ". Same fix:
+        # an optional `(?:let[ \t]+)?` skipped before the exclusion.
+        #
+        # #1615 (follow-up, same rule): extended the same optional skip
+        # to `where`, mirroring func_start's #1615 fix -- a same-line
+        # `where name args = expr` binding is now found by func_start,
+        # so args needs the identical `where`-skip or those newly-found
+        # functions get a wrong (0) arg count instead of simply being
+        # absent as before.
+        "args": re.compile(
+            r"::(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*((?:[a-zA-Z0-9_\'.,()\[\]]|=>|->|⊸)(?:[a-zA-Z0-9_\'.\s,()\[\]]|=>|->|⊸)*)"
+            r"|\\([a-zA-Z0-9_\'\s,()\[\]{} -]+)->"
+            r"|@[A-Z][a-zA-Z0-9_\']*"
+            r"|^[ \t]*(?:(?:let|where)[ \t]+)?(?!(?:let|in|where|do|mdo|if|then|else|case|of|module|import"
+            r"|class|instance|data|type|newtype|deriving|foreign|default"
+            r"|infixl|infixr|infix)\b)[a-zA-Z_][a-zA-Z0-9_']*[ \t]+"
+            r"((?:\"[^\"\n]*\"|\([^()\n]*\)|\[[^\[\]\n]*\]|[a-zA-Z0-9_'!]+)"
+            r"(?:[ \t]+(?:\"[^\"\n]*\"|\([^()\n]*\)|\[[^\[\]\n]*\]|[a-zA-Z0-9_'!]+))*)"
+            r"[ \t]*(?:=(?!=)(?!>)|\n[ \t]+\|)"
+        ),
+        # Which `args` capture-group index represents a `::` type
+        # signature (routes to arrow-based counting in detector.py) --
+        # see the comment on `args` above. Leading underscore excludes
+        # this from the structural-signal scan loop (coding_analysis
+        # skips any rule key starting with "_", same convention
+        # `_dependency_capture` uses).
+        "_args_arrow_count_groups": {1},
+        # Which `args` capture-group index represents a signature-less
+        # equation's own LHS pattern list -- routes to detector.py's
+        # `_count_haskell_pattern_list` (#1505 follow-up). See the `args`
+        # comment above for why this can't reuse the generic
+        # comma/whitespace fallback.
+        "_args_pattern_list_groups": {3},
+        # linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope and data definitions.
+        "structural_boundaries": re.compile(
+            r"\b(module|data|type|newtype|class|instance|let|in|where|do|mdo|deriving|family|pattern)\b|%1\s*->|⊸"
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic (Type Signatures).
+        # EXCLUDES data/type/class declarations to fix False Positives.
+        # #1442: a plain `::` type signature is the ONLY thing the first
+        # alternative below can anchor on -- but two extremely common
+        # real-world patterns never have one: typeclass instance method
+        # equations (the signature lives on the class declaration, not
+        # restated per-instance, e.g. `toJSON PlainMath = String "plain"`)
+        # and `where`-clause local helpers (Haskell allows -- and real
+        # code commonly omits -- a signature on these). Both are instead
+        # defined purely by a pattern-matched EQUATION: `name pattern...
+        # = expr`, indented under an enclosing `instance ... where` or
+        # `where` block. The second alternative anchors on that shape
+        # directly: an indented (`[ \t]+`, deliberately excluding
+        # column-0 -- unsigned top-level equations are a materially
+        # different, still-open problem, see the issue) lowercase-led
+        # identifier (real Haskell function/variable names can never
+        # start uppercase, which is what lets this cleanly reject
+        # constructor-headed patterns like `Just v = ...`), a reserved-
+        # word exclusion (so `where`/`do`/`case`/etc. themselves can
+        # never be mistaken for the bound name), then a lookahead
+        # requiring at least one non-whitespace pattern token before an
+        # unambiguous `=` (bounded to the current line via the `[^\n=]`
+        # exclusion, so this can never cross into a later line's `=` --
+        # each `=`-free line, e.g. every line of a `do` block that uses
+        # `<-` instead, fails closed). The `(?<![!<>/])`/`(?![=>])`
+        # guards keep `==`, `=>`, `<=`, `>=`, and `/=` from ever being
+        # mistaken for the defining `=`; requiring a real pattern token
+        # (not just more whitespace) before it is what excludes a bare
+        # `name = expr` value binding (mirrors #1312's point-free
+        # reasoning for the signature-anchored form -- zero args between
+        # name and `=` means "value", not "function").  A given
+        # function's 2nd+ pattern-matched clause (e.g. `toJSON`'s other
+        # 5 equations in the example above) independently satisfies this
+        # same alternative too; detector.py's `_slice_by_indentation`
+        # dedups those against the block the first clause already
+        # absorbed via the existing same-name-same-indent continuation
+        # walk, rather than emitting one node per clause.
+        # #1564: the reserved-word exclusion above (needed so `where`/
+        # `do`/`case`/etc. can never be mistaken for the bound name)
+        # sits immediately after `^[ \t]+`, so it also blocked the whole
+        # line whenever it happened to START with the keyword `let` --
+        # e.g. `let outputFile = fromMaybe "-" (optOutputFile opts)`,
+        # a same-line `let name args = expr` local binding declared
+        # inline in a `do` block. That shape's real name is never "let"
+        # itself, just the token right after it, but the old lookahead
+        # never got a chance to look past "let " to find it -- there's
+        # no other position on the line where `^` can anchor a retry.
+        # The new optional `(?:let[ \t]+)?` skips past a leading "let "
+        # (if present) before applying the same exclusion+capture on
+        # whatever follows, so `let name args = expr` now anchors on
+        # `name` exactly like the pre-existing non-`let` equation form
+        # -- while a bare multi-binding-block opener (`let` alone on its
+        # own line, nothing before the next line's `=`) still can't
+        # match, since the trailing `[ \t]+...=` lookahead has nothing
+        # on that same line to satisfy either way.
+        # #1615: extended the same optional-skip treatment to `where`
+        # for same-line where-clause bindings, e.g.
+        # `where matchTags tags = flip elem tags . T.toLower`.
+        # #1616: the trailing `[ \t]+...=` lookahead above required an `=`
+        # on the exact same line as the name and pattern list. This missed
+        # guard-only equations (e.g. `isAllowedPunct c \n | cond = ...`)
+        # where the `=` only appears on the indented guard lines below.
+        # Extended the lookahead to accept either an unambiguous `=` on the
+        # same line OR the line ending without an `=`/newline and immediately
+        # followed by an indented guard `\n\3[ \t]+\|` (where `\3` is the
+        # captured leading indent). Bounded and conservative:
+        # this explicitly doesn't parse the indentation stack to prove the `|`
+        # belongs to this binding vs. a sibling, but its limitation is
+        # documented and ReDoS safe since the same-line prefix scan `[^\n=]*`
+        # still fails closed if it hits a real `=` or crosses a newline.
+        "func_start": re.compile(
+            r"^[ \t]*(?:foreign\s+(?:import|export)\s+[a-zA-Z0-9_]+\s+(?:(?:unsafe|safe|interruptible)\s+)?(?:\"[^\"]*\"\s+)?)?(?!(?:data|type|newtype|class|instance|let|in|where|do|deriving)\b)(?:([a-zA-Z_][a-zA-Z0-9_\']*)|(\([^)]+\)))(?=(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*::)"
+            r"|^([ \t]+)(?:(?:let|where)[ \t]+)?(?!(?:case|class|data|default|deriving|do|else|foreign|if|import|in|infix|infixl|infixr|instance|let|mdo|module|newtype|of|then|type|where)\b)([a-z_][a-zA-Z0-9_\']*)(?=[ \t]+[^\s=][^\n=]*(?:(?<![!<>/])=(?![=>])|\n\3[ \t]+\|))",
+            re.M,
+        ),
+        # class_start: Object / Entity Declarations. Defines structural entities and typeclass boundaries.
+        "class_start": re.compile(
+            r"^[ \t]*(?:data(?:\s+family)?|newtype|class|type(?:\s+family)?)(?:(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*(?:\([^)]+\)(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*=>|[A-Z][a-zA-Z0-9_\']*(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*[a-z][a-zA-Z0-9_\']*(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*=>))?(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*([A-Z][a-zA-Z0-9_\']*)(?=(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*(?:[a-z][a-zA-Z0-9_\']*(?:[ \t\n]|--[^\n]*\n|\{-(?:[^-]|-(?!\}))*-\})*)*(?:=|\||where|deriving|::|\n|$))",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # safety: Defensive Programming. Functional safety (Maybe/Either) and exception brackets.
+        "safety": re.compile(
+            r"\b(Maybe|Either|Just|Nothing|Right|Left|try|catch|bracket|finally|onException|SafeT|mask|pure|return)\b"
+        ),
+        # safety_neg: Safety Bypasses. Bypassing purity (unsafePerformIO) and partial functions.
+        "safety_bypasses": re.compile(
+            r"\b(unsafePerformIO|unsafeCoerce|error|undefined|fromJust|head|tail|init|last|throw|unsafeFixIO)\b"
+        ),
+        # danger: High-Risk Execution. Forceful aborts and Debug-trace leaks in production.
+        "high_risk_execution": re.compile(
+            r"\b(die|exitWith|exitFailure|Debug\.Trace|trace|traceShow|traceIO|traceM)\b"
+        ),
+        # io: I/O & Network Boundaries. IO Monad and hardware interactions.
+        "io": re.compile(
+            r"\b(IO|readFile|writeFile|appendFile|hGetContents|hPutStr|openFile|withFile|getLine|getChar|Socket|Connection|runDB)\b"
+        ),
+        # api: Public Surface Area. Captured via module headers. Captures both explicit lists and implicit "all" exports.
+        "api": re.compile(
+            r"^[ \t]*module\s+[A-Z][a-zA-Z0-9_.]*(?:\s*\([^)]*\))?\s*where|\bforeign\s+export\b",
+            re.M,
+        ),
+        # flux: State Mutation. State mutation (IORef/MVar) and monadic binds (<-).
+        "state_mutation": re.compile(
+            r"\b(IORef|STRef|TVar|MVar|TMVar|modifyIORef\'?|writeIORef|putMVar|modify|put|StateT)\b|<-"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(
+            r"--\s*(?:data|type|newtype|class|instance|let|where|import|putStrLn)\b",
+            re.M,
+        ),
+        # doc: Structured Documentation. Haddock documentation markers.
+        "doc": re.compile(r"--\s*\||--\s*\^|\{-\||--\s*@(?:param|return|author)"),
+        # test: Testing & Assertions. Verification framework keywords (QuickCheck/Hspec).
+        "test": re.compile(
+            r'\b(?:hspec|QuickCheck|prop_[a-zA-Z0-9_\']+|assertEqual|shouldBe|testGroup|testCase)\b|\b(?:describe|it|property)\s+"'
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # concurrency: Temporal Static. STM, async, and thread forking.
+        "concurrency": re.compile(r"\b(forkIO|forkOS|async|wait|cancel|MVar|TVar|STM|atomically|threadDelay)\b"),
+        # ui_framework: UI / View Components. Functional reactive GUI and web components.
+        "ui_framework": re.compile(r"\b(Threepenny|Brick|Reflex|Miso|Gtk|widget|vBox|hBox|Lucid|Blaze|Monomer)\b"),
+        # closures: Closures / Anonymous Functions. Anonymous lambda depth.
+        "closures": re.compile(r"\\[a-zA-Z0-9_\'\s(),\[\]]+\s*->|\\cases?"),
+        # globals: Global / Shared State. Top-level state hacks (typically MVars using unsafePerformIO).
+        # BUG FIX: `[^=]*` blocked crossing the `=` that MUST appear
+        # before `unsafePerformIO` in any real usage (the binding's own
+        # implementation line: `counter = unsafePerformIO ...`) -- this
+        # signature could never match a single real occurrence of the
+        # idiom it's meant to detect. Replaced with a bounded
+        # lazy-any-character span ({0,200}?, ReDoS-safe) so it can cross
+        # both `=` and intervening lines (e.g. a `{-# NOINLINE #-}`
+        # pragma between the signature and the binding).
+        "globals": re.compile(
+            r"^[ \t]*[a-z_][a-zA-Z0-9_\']*\s*::\s*(?:IORef|TVar|MVar)[\s\S]{0,200}?unsafePerformIO",
+            re.M,
+        ),
+        # decorators: Decorators / Annotations. GHC pragmas (INLINE, LANGUAGE).
+        "decorators": re.compile(r"\{-#\s*(?:INLINE|NOINLINE|LANGUAGE|OPTIONS_GHC|RULES|MINIMAL)\s+[^#]*#-\}"),
+        # generics: Generics / Type Parameters. forall quantification and constraints.
+        "generics": re.compile(
+            r"\bforall\s+[^.]+\.|\b(?:[A-Z][a-zA-Z0-9_\']*\s+[a-z][a-zA-Z0-9_\']*[ \t]*=>)|\([^)]+\)[ \t]*=>"
+        ),
+        # comprehensions: Iterators / Comprehensions. List comprehensions and dense monad applicatives.
+        "comprehensions": re.compile(r"\[\s*[^|\]]+\s*\|[^\]]+\]|<\$>|<\*>|>>="),
+        # scientific: Numerical / Compute Libraries. Advanced Math and Linear Algebra.
+        "scientific": re.compile(
+            r"\b(Complex|RealFloat|Floating|Numeric\.LinearAlgebra|Matrix|Vector|ad|grad|jacobian|sin|cos|tan|exp|log|pi)\b"
+        ),
+        # heat_triggers: Metaprogramming & Reflection. QuasiQuotes and Template Haskell.
+        "reflection_metaprogramming": re.compile(
+            r"\b(TemplateHaskell|QuasiQuotes|TypeFamilies|GHC\.Generics|Generic)\b|\[[a-z_]+\||\$\([a-zA-Z0-9_\']+\)"
+        ),
+        # import: Dependency Inclusions. Module resolution.
+        "import": re.compile(r"^[ \t]*import\s+(?:qualified[ \t]+)?[A-Z][a-zA-Z0-9_.]*", re.M),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*import\b[\s\S]{0,100}?(?:qualified\b[\s\S]{0,100}?)?([A-Z][a-zA-Z0-9_.]*)", re.M
+        ),
+        # ownership: Authorship indicators in comments.
+        "ownership": re.compile(r"--\s*\|?\s*(?:Author|Maintainer|Copyright|License):\s+([^\n]+)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        "spec_exposure": re.compile(r"\[(?:spec-[0-9]+|audit|rfc)\]", re.I),
+        "ssr_boundaries": re.compile(
+            r"\b(Yesod|Servant|ScottyM|ActionM|lucid|blaze-html|ToJSON|FromJSON|Handler|respond)\b"
+        ),
+        "events": re.compile(
+            r"\b(Event|Behavior|Dynamic|reactive-banana|reflex|frp|stepper|accumE|conduit|Pipes|Stream)\b"
+        ),
+        "dependency_injection": re.compile(r"\b(ReaderT|MonadReader|Has[A-Z][a-zA-Z0-9_\']+|ask|asks|local)\b"),
+        "macros": re.compile(
+            r"\{-#\s*LANGUAGE\s+[^#]*#-\}|\$[(a-z_A-Z0-9\']|^[ \t]*#(?:define|undef|if|ifdef|ifndef|elif|else|endif|include)\b",
+            re.M,
+        ),
+        "pointers": re.compile(r"\b(Ptr|ForeignPtr|FunPtr|StablePtr|peek|poke|castPtr|plusPtr|nullPtr|Storable)\b"),
+        "memory_alloc": re.compile(r"\b(malloc|mallocBytes|alloca|allocaBytes|free|Foreign\.Marshal)\b"),
+        "inline_asm": re.compile(r"\bforeign\s+import\s+(?:ccall|cplusplus|prim|capi)\b"),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # telemetry: Professional structured logging.
+        "telemetry": re.compile(r"\b(?:logDebug|logInfo|logWarn|logError|logOther|katip|MonadLogger|LoggerT)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        "debug_prints": re.compile(r"\b(putStr|putStrLn|print|putChar)\b"),
+        # # # 40. explicit_casts (Explicit Type Casting) "Trust Me" Tax.
+        "explicit_casts": re.compile(r"\b(unsafeCoerce|coerce|fromIntegral|realToFrac|floor|ceiling|truncate|round)\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|throwIO|panic|error)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(threadDelay)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(
+            r"\b(?:shift[LR]?|rotate[LR]?|xor|complement|testBit|setBit|clearBit|complementBit)\b|\.&&\.|\|\.\|\|\."
+        ),
+        # sync_locks: Barricades preventing races.
+        "sync_locks": re.compile(r"\b(takeMVar|putMVar|readMVar|swapMVar|atomically|STM|Mutex|lock|unlock)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(pure|return|frozen|immutable|const)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(hClose|close|free|bracket|finally|onException)\b"),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"^[ \t]*module\s+[A-Z][a-zA-Z0-9_.]*\s*\([^)]*\)\s*where", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(subscribe|onEvent|addEventListener|watch)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs) Safety Theater.
+        "test_skip": re.compile(r"\b(ignore|pending|skip|xit|xdescribe)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Haskell Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(Data\.Aeson|decode|decodeStrict|fromJSON|Data\.Binary|Data\.Serialize)\b"
+        ),
+        # `=~` was inside the shared \b...\b wrapper, but \b requires a
+        # word/non-word transition -- since neither `=` nor `~` is a word
+        # character, `\b=~\b` can only match when the operator has no
+        # surrounding whitespace (e.g. "x=~y"), never idiomatic Haskell
+        # like "text =~ pattern" (space on both sides means no boundary
+        # exists at either edge). Split out unguarded.
+        "regex_execution": re.compile(r"\b(Text\.Regex|makeRegex|matchRegex)\b|=~"),
+        "time_date_logic": re.compile(r"\b(getCurrentTime|diffUTCTime|addUTCTime|System\.Time|threadDelay)\b"),
+        "ipc_rpc_bridges": re.compile(
+            r"\b(System\.Process|createProcess|callProcess|callCommand|forkIO|Control\.Concurrent)\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/hlo.py b/gitgalaxy/standards/language_standards/languages/hlo.py
new file mode 100644
index 000000000..23fce9497
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/hlo.py
@@ -0,0 +1,32 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "XLA High-Level Optimizer IR",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "1.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard XLA HLO intermediate representation text formats.
+    "extensions": [".hlo"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: IR text files strictly rely on their extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: JAX, TensorFlow, and MLIR toolchain markers acting as disambiguation anchors for ML compilers.
+    "discriminators": [".hlo", ".mlir", ".pbtxt", ".py", "BUILD.bazel", "BUILD"],
+    # EXECUTION SIGNATURES: HLO is compiler intermediate representation; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: HLO text format exclusively utilizes '//' for line-level comments, maintaining C++ ecosystem alignment.
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/html.py b/gitgalaxy/standards/language_standards/languages/html.py
new file mode 100644
index 000000000..6bbe6be7a
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/html.py
@@ -0,0 +1,339 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import (
+    _HTML_NONEXECUTABLE_SCRIPT_TYPES,
+    GLOBAL_FRAGILE_DEBT,
+    GLOBAL_PLANNED_DEBT,
+)
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Modern HTML Living Standard (2025) & Web Components",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard markup, XML-based HTML, and modern JS/server-side UI component frameworks.
+    "extensions": [
+        ".html",
+        ".htm",
+        ".xhtml",
+        ".cshtml",
+        ".vue",
+        ".svelte",
+        ".astro",
+        ".ejs",
+        ".hbs",
+        ".twig",
+        ".erb",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Standardized routing and entry points.
+    "exact_matches": ["index.html", "404.html"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and frontend build tools to prove context.
+    "discriminators": [
+        ".html",
+        "package.json",
+        "vite.config.js",
+        "webpack.config.js",
+        "nuxt.config.js",
+    ],
+    # EXECUTION SIGNATURES: HTML is a declarative markup language; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: Uses SGML-style block delimiters () exclusively; no single-line anchor.
+    "lexical_family": "block_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # User-driven branching and declarative framework conditionals.
+        # BUG FIX: `*ngIf` was inside the shared `\b(...)"[^"]*"` group.
+        # `*` is a non-word char always preceded by whitespace in real
+        # markup (`<div *ngIf="cond">`) -- a `\b` between two non-word
+        # characters can never fire, so Angular's structural directive
+        # never matched. Pulled out with no leading `\b` (self-delimiting).
+        # BUG FIX (#735): every `"[^"]*"`-shaped attribute-value pattern
+        # in this rules dict assumed double-quoted HTML attributes only
+        # -- `<div v-if='cond'>` (single-quoted, equally valid HTML)
+        # never matched. Swapped the literal `"` delimiters for a
+        # `["\']` quote-character class and widened the wildcard
+        # content class to `[^"\']` (excludes either quote char) --
+        # the same idiom this file's own `_dependency_capture` already
+        # uses. No ReDoS risk added: still exactly one unbounded
+        # quantifier per gap, just a wider character class.
+        "branch": re.compile(
+            r"<(?:details|summary|noscript)(?=[ \t\n\r\f/>])|\b(?:v-if|ng-if|x-if|hx-swap)=(?:\"[^\"]*\"|'[^']*')|\*ngIf=(?:\"[^\"]*\"|'[^']*')|\{%\s*(?:if|elif|else|endif)\s*[^%]*%\}|\{\{#if\s+[^}]+\}\}",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Attribute signatures defining input coupling. Bounded to prevent ReDoS on massive data attrs.
+        "args": re.compile(
+            r"\b(data-[a-zA-Z0-9_-]+|aria-[a-z]+|name|value|placeholder|for|alt|step|min|max)(?:[ \t\n\r\f]*=[ \t\n\r\f]*(?:\"[^\"]*\"|'[^']*'|[^ \t\n\r\f>\"']+))?",
+            re.IGNORECASE,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural document flow tags. Includes 1990 CERN tags (<nextid>, <address>) alongside modern semantic ones.
+        "structural_boundaries": re.compile(
+            r"<(?:html|head|body|main|section|article|header|footer|div|span|p|h[1-6]|ul|ol|li|dl|dt|dd|nav|aside|figure|figcaption|search|address|nextid|hp[1-2]|dir|menu)(?=[ \t\n\r\f/>])",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable behavior blocks. The negative lookahead (Rule 15)
+        # excludes a `<script>` whose `type` is a non-executable value -- a
+        # browser treats any `type` outside the JS-MIME / `module` set as an
+        # inert data block and never runs it (#2492). This lookahead gates the
+        # raw structural-signal count (matched against un-shielded source);
+        # detector.py's Mode B slicer re-applies HTML_NONEXECUTABLE_SCRIPT_TAG
+        # against raw source for the named-function list, because the shared
+        # brace-safe stream has blanked the `type` value by the time this
+        # regex runs there.
+        "func_start": re.compile(
+            r"<(script|style)"
+            r"(?![^>]*\btype[ \t\n\r\f]*=[ \t\n\r\f]*[\"']?(?:" + _HTML_NONEXECUTABLE_SCRIPT_TYPES + r"))"
+            r"(?=[ \t\n\r\f/>])",
+            re.IGNORECASE,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Defines structural entities, Web Components, and template boundaries.
+        "class_start": re.compile(
+            r"<(form|table|svg|canvas|picture|video|audio|dialog|template|fieldset|legend|[a-z][a-z0-9]*-[a-z0-9-]+)(?=[ \t\n\r\f/>])",
+            re.IGNORECASE,
+        ),
+        # --- PHASE 2: RISK ENGINE (Structural Integrity & Debt) ---
+        # 6. safety (Defensive Programming / Validation)
+        # Browser security and validation constraints.
+        # BUG FIX: `pattern="..."`/`sandbox="..."`/`rel="noopener..."`/
+        # `integrity="..."` were inside the shared `\b(...)\b` group.
+        # Each ends on a literal `"`, and the char immediately after a
+        # closing attribute quote (a space or `>`) is also non-word --
+        # `\b` between two non-word characters can never fire, so all
+        # four never matched. Pulled out with no trailing `\b`
+        # (self-delimiting on the closing quote).
+        "safety": re.compile(
+            r"\b(?:required|readonly|disabled)\b|pattern=(?:\"[^\"]*\"|'[^']*')|sandbox=(?:\"[^\"]*\"|'[^']*')|rel=(?:\"noopener(?: noreferrer)?\"|'noopener(?: noreferrer)?')"
+            r"|integrity=(?:\"[^\"]*\"|'[^']*')|<meta\s+http-equiv=(?:\"Content-Security-Policy\"|'Content-Security-Policy')",
+            re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Actively bypasses standard browser safety (e.g. target="_blank" without noopener).
+        "safety_bypasses": re.compile(
+            r"target=(?:\"_blank\"|'_blank')(?!\s+rel=(?:\"noopener\"|'noopener'))|href=(?:\"javascript:[^\"]*\"|'javascript:[^']*')|on[a-z]+=(?:\"[^\"]*(?:eval\(|document\.write\()|'[^']*(?:eval\(|document\.write\()')",
+            re.I,
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # HTML is declarative markup. Execution dangers (eval, setTimeout) belong in JS.
+        "high_risk_execution": None,
+        # 9. io (I/O & Network Boundaries)
+        # Hyperlink navigation and resource fetching. (The core of the Web).
+        "io": re.compile(
+            r"\b(?:src|href|action|poster|data)=(?:\"[^\"]*\"|'[^']*')|<(?:a|form|iframe|audio|video|object|embed|source|track|img)(?=[ \t\n\r\f/>])",
+            re.I,
+        ),
+        # 10. api (Public Surface Area)
+        # Exposed identifiers and metadata consumption surface.
+        "api": re.compile(
+            r"\b(?:id|name|role|exportparts|part|itemprop|itemscope|itemtype)=(?:\"[^\"]*\"|'[^']*')|<slot(?=[ \t\n\r\f/>])|<meta\s+(?:property=(?:\"og:|'og:)|name=(?:\"twitter:|'twitter:))",
+            re.I,
+        ),
+        # 11. flux (State Mutation)
+        # HTML is declarative markup. State mutation (DOM manipulation) belongs in JS.
+        "state_mutation": None,
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out structural logic.
+        "dead_code": re.compile(
+            r"<!--[ \t]*<(?:div|script|style|form|table|a|p|section|span|img|ul|li|nav|header|footer|main)(?=[ \t\n\r\f/>])",
+            re.I,
+        ),
+        # 13. doc (Structured Documentation)
+        # Structured intent for crawlers and accessibility.
+        "doc": re.compile(
+            r"<title>[^<]*</title>|<meta\s+name=(?:\"(?:description|keywords|author)\"|'(?:description|keywords|author)')\s+content=(?:\"[^\"]*\"|'[^']*')|\baria-(?:description|label|labelledby|describedby|details)=(?:\"[^\"]*\"|'[^']*')",
+            re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(r"\bdata-(?:testid|cy|test|test-id|qa)[ \t]*=", re.I),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # Prioritization and asynchronous fetching logic.
+        # BUG FIX: same trailing-`\b`-after-quote trap as `safety` above --
+        # `loading="lazy"`/`fetchpriority="..."`/`decoding="async"` all end
+        # on `"`, and the shared trailing `\b` can't fire against the
+        # non-word char that follows a closing attribute quote. Pulled out.
+        "concurrency": re.compile(
+            r"\b(?:async|defer)\b|loading=(?:\"lazy\"|'lazy')|fetchpriority=(?:\"(?:high|low)\"|'(?:high|low)')|decoding=(?:\"async\"|'async')"
+            r"|<link\s+rel=(?:\"(?:preload|prefetch|preconnect|modulepreload|prerender)\"|'(?:preload|prefetch|preconnect|modulepreload|prerender)')",
+            re.I,
+        ),
+        # 16. ui_framework (UI / View Components)
+        # Formatting tags and Tailwind/Bootstrap utility density.
+        "ui_framework": re.compile(
+            r"<(?:b|i|u|strong|em|mark|small|del|ins|sub|sup)(?=[ \t\n\r\f/>])|\bclass=(?:\"[^\"]*(?:flex|grid|absolute|relative|block|inline-block|container|row|col-[0-9]+|justify-center|items-center|w-full|h-full)[^\"]*\"|'[^']*(?:flex|grid|absolute|relative|block|inline-block|container|row|col-[0-9]+|justify-center|items-center|w-full|h-full)[^']*')",
+            re.I,
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        # DOM encapsulation via Shadow DOM.
+        "closures": re.compile(
+            r"<template\s+shadowrootmode=(?:\"[^\"]*\"|'[^']*')>|<template\s+shadowroot=(?:\"[^\"]*\"|'[^']*')>",
+            re.I,
+        ),
+        # 18. globals (Global / Shared State)
+        # HTML is declarative markup. Browser globals (window, document) belong in JS.
+        "globals": None,
+        # 19. decorators (Decorators / Annotations)
+        # Directive-based logic mutation (HTMX, Vue, Alpine).
+        # BUG FIX: `hidden`/`inert` are true HTML boolean attributes,
+        # almost always written bare (`<div hidden>`) with no `=` at
+        # all -- the old pattern required `[ \t]*=` unconditionally
+        # after every alternative, so the dominant real-world form of
+        # these two never matched. Made the `=...` suffix optional only
+        # for hidden/inert; the rest (class/style/tabindex/etc.) always
+        # require an explicit value in real markup, so they keep the
+        # mandatory `=`.
+        "decorators": re.compile(
+            r"\b(?:hidden|inert)\b(?:[ \t]*=)?"
+            r"|\b(?:class|style|tabindex|draggable|spellcheck|dir|lang|translate)[ \t]*="
+            r"|hx-[a-z-]+=(?:\"[^\"]*\"|'[^']*')|x-[a-z-]+=(?:\"[^\"]*\"|'[^']*')|v-[a-z-]+=(?:\"[^\"]*\"|'[^']*')",
+            re.I,
+        ),
+        "generics": re.compile(r"<slot(?=[ \t\n\r\f/>])[^>]*>", re.I),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Declarative array iteration in markup.
+        # BUG FIX: same leading-`\b`-before-`*` trap as `branch` above --
+        # `*ngFor` is always preceded by whitespace in real markup, so
+        # the shared leading `\b` (boundary between two non-word chars)
+        # never fired. Pulled out with no leading `\b`.
+        "comprehensions": re.compile(
+            r"\b(?:v-for|ng-repeat|x-for)=(?:\"[^\"]*\"|'[^']*')|\*ngFor=(?:\"[^\"]*\"|'[^']*')|\{%\s*for\b[^%]*%\}|\{\{#each\b[^}]*\}\}",
+            re.I,
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        # MathML and SVG path math.
+        "scientific": re.compile(
+            r'<(?:math|mfrac|mi|mo|svg|canvas|path|circle|rect|polygon|polyline)(?=[ \t\n\r\f/>])|\bd=(?:"[MmLlHhVvCcSsQqTtAaZz0-9\s,.-]+"|\'[MmLlHhVvCcSsQqTtAaZz0-9\s,.-]+\')',
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Extreme logic heat: heavy inline styles and JS pollution.
+        # BUG FIX: `style="[^"]*;"` required a literal trailing `;`
+        # immediately before the closing quote. CSS allows omitting the
+        # last declaration's semicolon, and most real inline styles
+        # (hand-written or minified) don't carry one -- confirmed
+        # `style="color:red"` and `style="color:red;font-size:12px"`
+        # (multi-declaration, no trailing `;`) never matched under the
+        # old pattern. Dropped the semicolon requirement; presence of
+        # any inline style attribute is the actual intent here.
+        "reflection_metaprogramming": re.compile(
+            r"style=(?:\"[^\"]*\"|'[^']*')|\bon[a-z]+=(?:\"[^\"]*\"|'[^']*')", re.I
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r"<script\s+type=(?:\"(?:importmap|module)\"|'(?:importmap|module)')|<link\s+(?:rel=(?:\"stylesheet\"|'stylesheet')|rev=(?:\"[^\"]*\"|'[^']*'))",
+            re.I,
+        ),
+        "_dependency_capture": re.compile(
+            r'<(?:script(?=[ \t\n\r\f/>])[^>]*?\bsrc|link(?=[ \t\n\r\f/>])[^>]*?\bhref)[ \t\n\r\f]*=[ \t\n\r\f]*(?:"([^"]*)"|\'([^\']*)\'|([^ \t\n\r\f>"\']+))',
+            re.IGNORECASE,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"<meta\s+name=(?:\"(?:author|creator|publisher)\"|'(?:author|creator|publisher)')\s+content=(?:\"([^\"]+)\"|'([^']+)')|<link\s+rev=(?:\"made\"|'made')\s+href=(?:\"mailto:[^\"]+\"|'mailto:[^']+')",
+            re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|RFC|W3C|CERN|TBL)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        # Back-end template engine hydration.
+        "ssr_boundaries": re.compile(
+            r"<\?php|<%|<%=|\{\{\s*[^}]+\s*\}\}|\{%\s*[^%]+\s*%\}|\b(?:data-reactroot|data-server-rendered|ng-version|nuxt-ssr)=[\"'][^\"']*[\"']",
+            re.I,
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # Declarative event dispatchers.
+        "events": re.compile(
+            r"\bhx-trigger=[\"'][^\"']*[\"']|@[a-z]+=[\"'][^\"']*[\"']|v-on:[a-z]+=[\"'][^\"']*[\"']|\([a-z]+\)=[\"'][^\"']*[\"']",
+            re.I,
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # BUG FIX: trailing `\b` right after the closing `"` -- same
+        # shared-boundary trap as safety/concurrency above (the char
+        # after a closing attribute quote is never a word char), so
+        # this never matched at all. Self-delimiting on the quote.
+        "dependency_injection": re.compile(r"<script\s+type=[\"']importmap[\"']", re.I),
+        # 34. macros (Preprocessor Directives / Macros)
+        # Server Side Includes (SSI).
+        "macros": re.compile(r"<!--#\s*(?:include|exec|echo|config|if|else|endif)\b", re.I),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Fragment identifiers and original name pointers.
+        "pointers": None,
+        # 36. memory_alloc
+        "memory_alloc": None,
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        # Professional analytics trackers.
+        "telemetry": re.compile(
+            r"<script[^>]*src=[\"'][^\"']*(?:analytics|gtag|gtm|segment|plausible|mixpanel)[^\"']*[\"']|\bdata-layer\b|\bnavigator\.sendBeacon\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        # Ad-hoc debug statements in scripts.
+        "debug_prints": re.compile(
+            r"\b(?:document\.write|alert|confirm|prompt|console\.(?:log|error|warn|dir|trace|info))\s*\(",
+            re.I,
+        ),
+        # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": None,
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(?:process\.exit|history\.back|window\.close)\s*\(", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(?:setTimeout|setInterval)\s*\(", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": None,
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": None,
+        # 45. immutability_locks (Immutability Constraints)
+        # BUG FIX: `aria-disabled="true"` ended on `"`, inside the same
+        # shared trailing-`\b` trap as safety/concurrency above. It
+        # happened to still match in practice only because "disabled" is
+        # a substring of "aria-disabled" and self-heals via the bare
+        # `disabled` alternative (matching regardless of the actual
+        # true/false value, which was never the intent) -- pulled out so
+        # the match is for the right reason.
+        "immutability_locks": re.compile(r"\b(?:readonly|disabled|inert)\b|aria-disabled=[\"']true[\"']", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(
+            r'\b(?:removeEventListener|clearInterval|clearTimeout|remove|innerHTML\s*=\s*[\'"][\'"])\s*\(',
+            re.I,
+        ),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Declarative and Shadow DOM boundaries.
+        "encapsulation": re.compile(r"<(?:template|shadowrootmode|slot)\b", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        # Event sinks waiting for state broadcast.
+        "listeners": re.compile(r"\bhx-trigger|v-on:|@[a-z]+=|addEventListener|on[a-z]+=", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(?:data-skip|data-ignore|mock-data|test-skip)\b", re.I),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/java.py b/gitgalaxy/standards/language_standards/languages/java.py
new file mode 100644
index 000000000..0318c64bb
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/java.py
@@ -0,0 +1,375 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Java 25 (Project Loom, Panama, Amber) / Spring Boot 3.4+",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, server-side templates, and embedded scripting formats.
+    "extensions": [".java", ".jav", ".jsp", ".jspf", ".jspx", ".jws", ".bsh"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
+    "discriminators": [
+        ".java",
+        "pom.xml",
+        "build.gradle",
+        "build.gradle.kts",
+        "settings.gradle",
+        "build.xml",
+        "mvnw",
+        "gradlew",
+        ".classpath",
+        ".project",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["java", "jshell"],
+    # UPGRADED: Maps to Family 1 (Standard C)
+    # Rationale: Uses '//' for line-level literature; multi-line literature
+    # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Includes modern switch expressions (yield) and pattern guards (when).
+        # EXCLUDES: Exceptions (throw) - moved to bailout_hits.
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|while|do|catch|finally|continue|break|yield|try|when)\b|\?|:"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Captures method/constructor params and lambdas. Bounded to prevent ReDoS.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE GHOST ARGS SHIELD (JAVA) ]
+            # Same architectural fix as C#. Demands structural proof to separate
+            # definitions from invocations.
+            # Branch 1: Standard Methods MUST have a return type.
+            # Branch 2: Constructors MUST be anchored to `{` or `throws`.
+            # Branch 3: Standard lambdas and method references `::`.
+            # QUADRATIC BLOWUP FIX: Branch 3's bare-identifier lambda form
+            # (`[a-zA-Z_$][\w_$]*` with no \b anchor, unlike Branches 1/2
+            # which are `^`-anchored) got retried at every position in a
+            # long `->`-less line, backtracking O(n) per position for
+            # O(n^2) total (same bug found and fixed in javascript's args).
+            # Bounded to {0,100}; real identifiers don't get that long.
+            # RULE 11 FIX (epic #813/#816): Branch 1's generic-bound modifier
+            # alternative was a flat `<[^>]*>`, truncating at the first `>` and
+            # breaking any single-line one-level-nested generic bound (e.g.
+            # `public static <T, U extends Comparable<U>> T Foo(T a, U b) {` --
+            # the same Rule 11 shape already fixed elsewhere; see
+            # how_to_add_a_language.md). Widened to the established
+            # one-level-nesting idiom `<(?:[^<>]|<[^<>]*>)*>`.
+            # =====================================================================
+            # #1209: parameter-list span wrapped in its own capture group
+            # in branches 1/2/3 (was only reachable via group(0), the
+            # whole match including the annotation/modifier/return-type/
+            # name prefix, or for lambdas nothing at all) so detector.py's
+            # counter isolates just the real parameter text -- the
+            # whole-match fallback overcounted every zero/one-arg
+            # signature by +1 the same way Python's did (#1199). Name
+            # groups added to branches 1/2 too, purely so existing
+            # extraction tests keep passing. The bare `::` method-
+            # reference alternative is left alone -- it has no name or
+            # parameter list to capture at all.
+            r"(?:"
+            # 1. Standard Methods
+            # #2091 (sibling gap to #1486/#1489): the modifier-repeat group
+            # only allowed annotations at the very start (before any
+            # modifier), not interleaved between a generic type parameter
+            # and the return type -- but JSpecify/Checker Framework
+            # return-type annotations (`private <T> @Nullable T foo(...)`,
+            # common in modern Spring code) sit exactly there. func_start's
+            # own equivalent modifier group already got this exact fix in
+            # #1486/#1489 (`@[\w.]+(?:\(...\))?` as one of its repeated
+            # alternatives); args' Branch 1 never got the matching fix, so
+            # a signature
+            # with an interleaved annotation failed this whole branch and
+            # fell through to Branch 3, incidentally matching an unrelated
+            # lambda inside the function's own BODY and misattributing its
+            # tiny arg count as the function's real parameter count
+            # (confirmed: `Binder.java`'s `handleBindResult`, 6 real params,
+            # measured 1 -- borrowed from a `(dataObjectBinder) ->` lambda
+            # three lines into the body).
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,5}(?!(?:new|return|throw|if|else|while|for|switch|catch)\b)(?:(?:public|protected|private|static|final|abstract|synchronized|native|default|strictfp|<(?:[^<>]|<[^<>]*>)*>|@[\w.]+(?:\([^)]*\))?)[ \t\n]+){0,5}(?:[\w<>\[\]?.,]+[ \t\n]+)(\w+)[ \t\n]*(\([^)]*\))|"
+            # 2. Constructors
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,5}(?!(?:new|return|throw|if|else|while|for|switch|catch)\b)(?:(?:public|protected|private|static)[ \t\n]+)?([A-Z]\w*)[ \t\n]*(\([^)]*\))[ \t\n]*(?:throws[ \t\n]+[\w., \t\n]+)?[{]|"
+            # 3. Lambdas & Method Refs
+            r"(\([^)]*\)|[a-zA-Z_$][\w_$]{0,100})[ \t\n]*->|::"
+            r")",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and final (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(void|return|import|package|class|interface|enum|record|extends|implements|var|sealed|non-sealed|permits|new|throws|module|requires|exports|opens|provides|uses)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks. EXCLUDES classes/interfaces. Steps over annotations.
+        "func_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,10}"
+            # =====================================================================
+            # [THE EXECUTION SHIELD]: AST-FREE HALLUCINATION PREVENTION
+            # Previously, the "Instantiation Shield" only stopped `new`. However,
+            # execution verbs like `return TargetFunc();` or `throw TargetFunc();`
+            # were being blindly swallowed by the return-type matcher, treating
+            # 'return' as the data type and 'TargetFunc' as the function name!
+            # FIX: Expanded the shield to explicitly abort on ALL control flow and
+            # execution keywords at the start of the sequence.
+            # =====================================================================
+            r"(?!(?:new|return|throw|if|else|while|for|switch|catch)\b)"
+            # RULE 11 FIX (epic #813/#816): the generic-bound modifier
+            # alternative was a flat `<[^>]*>`, truncating at the first `>` and
+            # breaking any single-line one-level-nested generic bound (e.g.
+            # `public static <T, U extends Comparable<U>> T Foo(T a, U b) {`).
+            # Widened to the established one-level-nesting idiom.
+            r"(?:(?:public|protected|private|static|final|abstract|synchronized|native|default|<(?:[^<>]|<[^<>]*>)*>|@[\w.]+(?:\([^)]*\))?)[ \t\n]+){0,5}"
+            # #1221: the return-type group used to be `{0,5}` (zero
+            # allowed) with the trailing lookahead accepting EITHER `{`
+            # OR `;` (the latter for abstract/interface method stubs,
+            # `abstract Foo bar();`) -- but a bare call statement
+            # (`next();`) has zero modifiers AND zero return-type
+            # tokens too, and satisfies that same `;`-terminated shape,
+            # so it false-positive-matched as a method. A real Java
+            # method always has an explicit return type (even `void`)
+            # UNLESS it's the constructor-shape branch this same regex
+            # also intentionally matches (`public TargetFunc(int x) {`,
+            # no return type but ends in `{`, never `;` -- constructors
+            # can't be abstract/have no body). Split into two mutually
+            # exclusive alternatives instead of making the return-type
+            # group conditional on itself (a `(?(name)...)` conditional
+            # would need to capture it, which shifts every downstream
+            # group's number and breaks callers/tests indexing the
+            # identifier capture positionally): return-type present
+            # allows `;` (stub) or `{` (body); return-type absent (bare
+            # call OR constructor shape) requires `{` only, since only
+            # a constructor legitimately reaches this branch with no
+            # return type, and constructors always have a body.
+            r"(?:"
+            r"(?:[a-zA-Z_$][\w<>$\[\]?.,]*[ \t\n]+){1,5}"
+            r"(?!(?:if|for|while|switch|catch|new|return|class|interface|enum|record)\b)([A-Za-z_$][\w_$]*)\s*\((?=[^)]*\)[ \t\n]*(?:throws[ \t\n]+[\w., \t\n]+)?[{;])"
+            r"|"
+            r"(?!(?:if|for|while|switch|catch|new|return|class|interface|enum|record)\b)([A-Za-z_$][\w_$]*)\s*\((?=[^)]*\)[ \t\n]*\{)"
+            r")",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # RULE 11 FIX (epic #813/#816): there was no generic-parameter
+        # step-over between the class name and the extends/implements
+        # check at all, so ANY generic class declaration (e.g.
+        # `class Foo<T> extends Base<T> {`, `class Foo<T extends
+        # Comparable<T>> implements Serializable {`) left the class's own
+        # `<...>` unconsumed right before `extends`/`implements`, silently
+        # losing the entire inheritance capture (group 2) even though the
+        # class name (group 1) still matched fine.
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]*){0,5}(?:(?:public|protected|private|static|final|sealed|non-sealed|abstract|strictfp)[ \t]+){0,5}(?:class|interface|enum|record)\s+([A-Za-z_$][\w_$]*)(?:\s*<(?:[^<>]|<[^<>]*>)*>)?(?:\s+(?:extends|implements)\s+([A-Za-z_$][\w_$, \t<>\?]*))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|assert|Optional|Objects\.requireNonNull|instanceof)\b|@(Valid|Validated|NotNull|NonNull|NotBlank|Immutable|Transactional)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        "safety_bypasses": re.compile(
+            r"\b(null)\b|return\s+null|\([A-Z]\w+\)\s*(?!->)[a-zA-Z_$]|catch\s*\(\s*(?:Exception|Throwable)\b|@SuppressWarnings|@SneakyThrows|\.get\(\)"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and raw memory/execution risks. EXCLUDES prints (Phase 5).
+        "high_risk_execution": re.compile(
+            r"\b(Runtime\.getRuntime\(\)\.exec|ProcessBuilder|System\.exit|Thread\.stop|Unsafe)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(File|InputStream|OutputStream|Reader|Writer|Scanner|Files\.|Path|Socket|RestTemplate|WebClient|RestClient|HttpClient|Connection|ResultSet|Statement|EntityManager|DataSource|Repository)\b"
+        ),
+        # 10. api (Public Surface Area)
+        "api": re.compile(
+            r"\b(public|protected)\b|@(RestController|Controller|Service|Component|Bean|Produces|Consumes|RequestMapping|GetMapping|PostMapping|PutMapping|DeleteMapping|PatchMapping|Endpoint|WebFilter)\b"
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES final (freeze_hits).
+        # BUG FIX (ReDoS): confirmed genuine O(n^2) scaling (0.045s/
+        # 0.18s/0.71s/2.85s/11.2s for n=5k/10k/20k/40k/80k, ~4x per
+        # doubling) against a long run of plain word characters with
+        # no `.`/`(` anywhere: the unanchored `(?:\w+\.)?` before the
+        # method-name keywords greedily consumes the whole remaining
+        # run, fails to find the `.`, and backtracks one character at
+        # a time -- O(n) work at each of the O(n) positions re.search
+        # retries this unanchored alternative at. Bounded to
+        # `\w{0,100}`, matching the fix shape used throughout this
+        # sweep.
+        "state_mutation": re.compile(
+            r"\b(volatile|Atomic\w+)\b|^[ \t]*(?:this\.)?\w+[ \t]*=|@(?:Setter|Data)\b"
+            r"|(?:\w{0,100}\.)?(?:set[A-Z]\w+|add|put|remove|clear|addAll|replace|computeIfAbsent)\s*\("
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"//[ \t]*(?:public|private|protected|class|void|if|for|while|return|import)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(
+            r"/\*\*|@param|@return|@throws|@deprecated|@see|@since|@apiNote|@implSpec|@Operation|@Schema"
+        ),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r"@(?:Test|ParameterizedTest|Before|After|BeforeEach|AfterEach|Mock|InjectMocks)|assert[A-Za-z0-9_]*\s*\(|\b(?:verify|expect|given|when)\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(synchronized|Thread|Runnable|Future|CompletableFuture|ExecutorService|Semaphore|Atomic\w+|VirtualThread|StructuredTaskScope|ScopedValue|Mono|Flux|Publisher)\b|@(?:Async|Scheduled)"
+        ),
+        # 16. ui_framework (UI / View Components)
+        # BUG FIX: `@ModelAttribute` starts with `@` (non-word), so the
+        # shared leading \b could only fire when a word char
+        # immediately preceded it -- never true for how annotations are
+        # actually written (preceded by whitespace or a line start).
+        # Never matched at all.
+        "ui_framework": re.compile(
+            r"\b(?:SwingUtilities|JFrame|JPanel|javafx\.|ModelAndView|ModelMap|Model|VaadinSession|FacesContext|UIComponent)\b"
+            r"|@ModelAttribute"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"->|::"),
+        # 18. globals (Global / Shared State)
+        # BUG FIX: the `public static final ... =` alternative ends on
+        # `=` (non-word), so the shared trailing \b could never fire --
+        # whatever follows the `=` in a real declaration (a space, then
+        # the value) is never a word character. This extremely common
+        # Java constant-declaration idiom never matched at all.
+        "globals": re.compile(
+            r"\b(?:System\.getProperty|System\.getenv|ThreadLocal|ScopedValue)\b"
+            r"|public\s+static\s+(?:final[ \t]+)?\w+\s+[A-Z_0-9]+[ \t]*="
+            r"|@(?:Value|ConfigurationProperties)"
+        ),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"^[ \t]*@[\w.]+(?:\([^)]*\))?", re.M),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"<\s*[A-Z?][^>]*>"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(
+            r"\.(?:stream|parallelStream|map|filter|reduce|collect|flatMap|forEach|anyMatch|noneMatch|gather)\("
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(
+            r"\b(Math\.|BigDecimal|BigInteger|Random|SecureRandom|StrictMath|VectorSpecies|FloatVector|IntVector)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Reflection and dynamic proxies.
+        "reflection_metaprogramming": re.compile(
+            r"\b(reflect\.|native|Class\.forName|Method\.invoke|Field\.setAccessible|Proxy\.newProxyInstance|ClassLoader|MethodHandles|VarHandle|Linker\.nativeLinker)\b|@SneakyThrows"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*import\s+(?:static[ \t]+)?[\w.]+;", re.M),
+        "_dependency_capture": re.compile(r"^[ \t]*import[ \t\n]+(?:static[ \t\n]+)?([\w.*]+)[ \t\n]*;", re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"@author\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        # BUG FIX: `@ResponseBody`/`@ResponseStatus` both start with `@`
+        # (non-word) -- same leading-\b bug as ui_framework above.
+        "ssr_boundaries": re.compile(
+            r"\b(?:ModelAndView|FacesServlet|HttpServletRequest|HttpServletResponse|JspWriter|ThymeleafViewResolver)\b"
+            r"|@ResponseBody|@ResponseStatus"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # BUG FIX: `@EventListener`/`@KafkaListener`/`@RabbitListener`/
+        # `@JmsListener` all start with `@` -- same bug.
+        "events": re.compile(
+            r"\b(?:ApplicationEvent|ApplicationEventPublisher|ApplicationListener|EventObject|publishEvent)\b"
+            r"|@EventListener|@KafkaListener|@RabbitListener|@JmsListener"
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # BUG FIX: 10 of the 12 alternatives are `@`-prefixed Spring/
+        # Guice annotations -- same bug, at scale.
+        "dependency_injection": re.compile(
+            r"\b(?:ApplicationContext|BeanFactory)\b"
+            r"|@Autowired|@Inject|@Qualifier|@Primary|@Component|@Service|@Repository|@Bean|@Configuration|@Provides"
+        ),
+        # 34. macros
+        "macros": None,  # Java lacks preprocessor macros.
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Project Panama (Java 22+) bridging to native memory.
+        "pointers": re.compile(r"\b(MemorySegment|MemoryLayout|ValueLayout|AddressLayout|SymbolLookup)\b"),
+        # 36. memory_alloc
+        "memory_alloc": re.compile(
+            r"\b(Arena\.ofConfined|Arena\.ofShared|Arena\.ofAuto|Arena\.global|SegmentAllocator|allocateFrom|ByteBuffer\.allocateDirect)\b"
+        ),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(log|logger|LOGGER|LoggerFactory|LogManager|MDC|Tracer|Span)\.(?:info|error|warn|warning|debug|trace|log)\b|@Slf4j|@Log4j2"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        # BUG FIX: `\.printStackTrace\(\)` ends on `)` (non-word), so
+        # the shared trailing \b could never fire. Never matched.
+        "debug_prints": re.compile(
+            r"\b(?:System\.out\.(?:print|println|printf)|System\.err\.(?:print|println|printf))\b"
+            r"|\.printStackTrace\(\)"
+        ),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\(\s*(?:int|long|short|byte|char|float|double|boolean|[A-Z][A-Za-z0-9_]*)\s*\)\s*[a-zA-Z_$]"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|abort|System\.exit|halt)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(Thread\.sleep|TimeUnit\.[A-Z_]+\.sleep|delay|CountDownLatch\.await)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>>?|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(
+            r"\b(mutex|lock|synchronized|Semaphore|ReentrantLock|ReadWriteLock|Condition)\b",
+            re.I,
+        ),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(final|immutable|unmodifiable[A-Z]\w*|Object\.freeze)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(close|dispose|shutdown|free|release|cleaner\.register)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b(private|protected|internal)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        # BUG FIX: `@KafkaListener`/`@RabbitListener` start with `@` --
+        # same leading-\b bug as dependency_injection above.
+        "listeners": re.compile(r"\b(?:on[A-Z]\w*|addEventListener|subscribe)\b|@KafkaListener|@RabbitListener"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"@(?:Ignore|Disabled)|test\.skip\(|mock\(|spy\(|verifyZeroInteractions"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Java Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(ObjectMapper|readValue|readTree|fromJson|ObjectInputStream|DocumentBuilder|SAXParser)\b"
+        ),
+        "regex_execution": re.compile(r"\b(Pattern\.compile|Matcher\.find|\.matches\()\b"),
+        "time_date_logic": re.compile(
+            r"\b(LocalDate(?:Time)?|ZonedDateTime|Instant|Duration|System\.currentTimeMillis|Calendar\.getInstance)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"\b(ProcessBuilder|KafkaTemplate|RabbitTemplate|JmsTemplate|java\.rmi)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/javascript.py b/gitgalaxy/standards/language_standards/languages/javascript.py
new file mode 100644
index 000000000..a180bffea
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/javascript.py
@@ -0,0 +1,376 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import (
+    GLOBAL_DL_FRAMEWORKS,
+    GLOBAL_FRAGILE_DEBT,
+    GLOBAL_LLM_API,
+    GLOBAL_LLM_ORCHESTRATOR,
+    GLOBAL_LLM_VECTOR_STORE,
+    GLOBAL_ML_TRADITIONAL,
+    GLOBAL_PLANNED_DEBT,
+)
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "ES2025 / React 19 / Node 22+",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy server-side formats, UI extensions, and embedded scripts.
+    "extensions": [
+        ".js",
+        ".mjs",
+        ".cjs",
+        ".jsx",
+        ".es6",
+        ".es",
+        ".pac",
+        ".sjs",
+        ".ssjs",
+        ".xsjs",
+        ".xsjslib",
+        ".jsm",
+        "._js",
+        ".bones",
+        ".gs",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": ["Jakefile"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
+    "discriminators": [
+        ".js",
+        "package.json",
+        "package-lock.json",
+        "yarn.lock",
+        "pnpm-lock.yaml",
+        "bower.json",
+        ".eslintrc",
+        ".prettierrc",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["node", "nodejs", "deno", "bun", "zx", "phantomjs", "casperjs"],
+    # UPGRADED: Maps to Family 1 (Standard C)
+    # Rationale: Uses '//' for line-level literature; multi-line literature
+    # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES throw (bailout_hits).
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|while|do|catch|finally|continue|break|try)\b|&&|\|\||\?|\?\?"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks. Bounded to prevent ReDoS on massive positional/destructured sets.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE GHOST ARGS SHIELD (JAVASCRIPT) ]
+            # JS class methods (e.g., `TargetFunc(config) {`) lack the `function` keyword.
+            # Without an anchor, the engine hallucinated standard invocations as definitions.
+            # FIX 1 (Invocation Shield): Injected `(?=[ \t\n]*\{)` at the end of the class
+            # method branch, demanding structural proof that the signature opens a logic block.
+            # FIX 2 (Control Flow Shield): `while (i < 10) {` structurally mimics a method.
+            # Injected `(?!(?:if|for|while|switch|catch|return)\b)` to prevent reserve words
+            # from being mapped as method names.
+            # FIX 3 (Quadratic Blowup Shield): The arrow-function branch's identifier
+            # match used an unbounded `[\w$]*`. On a long line with no `=>` at all
+            # (e.g. a single massive minified/obfuscated line), the engine retried the
+            # greedy-then-backtrack identifier match at every starting position,
+            # producing O(n^2) time (empirically: ~3.5s at 20,000 chars, scaling
+            # quadratically from there). Bounded to {0,100} -- real identifiers don't
+            # get remotely that long -- per this doc's own "strict numeric clamps"
+            # rule; possessive quantifiers (`*+`) would be cleaner but aren't
+            # available until Python 3.11, and this package supports 3.9+.
+            # =====================================================================
+            # GENERATOR METHOD FIX (epic #813/#814): the class-method branch had no
+            # allowance for the leading `*` ES6 generator method shorthand uses
+            # (`*foo(a, b) {}`, `async *foo(a, b) {}`) -- same gap already fixed in
+            # func_start for this language. Deliberately NO whitespace tolerance
+            # between `*` and the name (unlike the other modifier gaps): a real
+            # generator method always hugs the star to the name with zero space
+            # (Prettier/every real formatter), and allowing whitespace there let a
+            # JSDoc comment continuation line (`* A (storage) buffer...` -- the `*`
+            # is the comment marker, "A" is prose) false-positive-match as a
+            # generator method named "A" -- caught empirically via crucible_check.py
+            # against real corpus code (threejs), not by any test case alone.
+            # #1209: parameter-list span wrapped in its own capture group
+            # in all three branches (was only reachable via group(0), the
+            # whole match including the "function"/"static"/name prefix)
+            # so detector.py's counter isolates just the real parameter
+            # text -- the whole-match fallback overcounted every zero/
+            # one-arg signature by +1 the same way Python's did (#1199).
+            # Name groups added to branches 1/3 too, purely so existing
+            # extraction tests keep passing.
+            r"(?:"
+            r"\b(?:async[ \t\n]+)?function[ \t\n]*\*?[ \t\n]*(\w*)[ \t\n]*(\([^)]*\))|"
+            r"(\([^)]*\)|[a-zA-Z_$][\w$]{0,100})[ \t\n]*=>|"
+            r"^[ \t]*(?:static[ \t\n]+)?(?:async[ \t\n]+)?(?:get[ \t\n]+|set[ \t\n]+)?\*?(?!(?:if|for|while|switch|catch|return)\b)(#?[a-zA-Z_$][\w$]*)[ \t\n]*(\([^)]*\))(?=[ \t\n]*\{)"
+            r")",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural declaration boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(let|var|import|export|return|class|extends|super|await|delete|yield)\b|=>"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Uses positive lookaheads (?=) to stop the match exactly at the identifier name.
+        # Captures standard functions, namespace assignments (foo.bar = function),
+        # object literal methods (foo: function), and ES6 methods.
+        "func_start": re.compile(
+            r"(?:"
+            r"\b(?:async\s+)?function\s*\*?\s+[a-zA-Z_$][\w$]*(?=\s*\()|"
+            # =====================================================================
+            # [ THE VERTICAL ASSIGNMENT SHIELD ] (Hard-learned lesson from Pathological Fuzzer)
+            # PURPOSE: JavaScript developers frequently format complex asynchronous
+            # fat-arrow functions across multiple lines (e.g., `export const \n foo \n = \n async () =>`).
+            # THE FIX: We replaced horizontal-only spaces `[ \t]*` with `[ \t\n]*`
+            # around the `=` and `:` assignment operators, as well as the `=>` arrow.
+            # This allows the lookahead to safely cross vertical line breaks without
+            # resorting to an unbounded `\s*` which causes ReDoS.
+            # =====================================================================
+            r"(?:^|(?<=[^<>(,\s]))[ \t\n]*(?<!\.\.\.)\b[a-zA-Z_$][\w$]*(?:\[[^\]\n]+\])?(?=[ \t\n]*=[ \t\n]*(?:async\s*)?(?:function(?:\s*\*)?\b|\([^)]*\)[ \t\n]*(?::[^=;]+)?[ \t\n]*=>|[a-zA-Z_$][\w$]*[ \t\n]*=>))|"
+            r"^[ \t]*(?:\[[^\]\n]+\]|[a-zA-Z_$][\w$]*)(?=[ \t\n]*:[ \t\n]*(?:async\s*)?(?:function(?:\s*\*)?\b|\([^)]*\)[ \t\n]*(?::[^=;]+)?[ \t\n]*=>|[a-zA-Z_$][\w$]*[ \t\n]*=>))|"
+            # GENERATOR METHOD FIX (epic #813/#814): class/object-literal generator
+            # methods (`*foo() {}`, `async *foo() {}`, `static *foo() {}`) were
+            # completely invisible -- this branch had no allowance for the leading
+            # `*` that ES6 generator method shorthand uses (unlike the plain
+            # `function*` declaration branch above, which already had `\*?`).
+            # Deliberately NO whitespace tolerance between `*` and the name: a real
+            # generator method always hugs the star to the name with zero space
+            # (every real formatter), and allowing whitespace there let a JSDoc
+            # comment continuation line (`* A (storage) buffer...` -- the `*` is the
+            # comment marker, "A" is prose) false-positive-match as a generator
+            # method named "A" -- caught empirically via crucible_check.py against
+            # real corpus code (threejs), not by any test case alone.
+            # #1221: the trailing lookahead used to be just `(?=\s*\()`
+            # -- proof a `(` follows, nothing more -- so any bare call
+            # statement starting a line (`next();`) false-positive-
+            # matched as a method definition, the exact defect class
+            # this file's own `args` regex already named and fixed for
+            # this identical branch shape ("Invocation Shield",
+            # `(?=[ \t\n]*\{)`). Mirrored here: now requires the
+            # (non-nested, same bound as `args`) parameter list to
+            # actually close and be followed by a real body opener.
+            # `(?:=>[ \t\n]*)?` before the `{` is NOT real JS method
+            # syntax (methods never have `=>` between params and body)
+            # -- it exists solely to keep matching the ALREADY-
+            # documented, deliberately-NOT-fixed harder ambiguity
+            # (`describe('x', () => {`-shaped call-with-inline-callback
+            # statements, see the known_limitation test right below)
+            # working the same as before; only a bare statement with
+            # neither `{` nor `=>` anywhere (e.g. `next();`) is newly
+            # rejected.
+            r"^[ \t]*(?:static[ \t\n]+)?(?:async[ \t\n]+)?(?:get\s+|set\s+)?\*?(?!(?:if|for|while|switch|catch|return|throw|new|typeof|jQuery|function)\b|\$)#?[a-zA-Z_$][\w$]*(?=[ \t\n]*\([^)(]*\)[ \t\n]*(?::[^{=;]+)?[ \t\n]*(?:=>[ \t\n]*)?\{)"
+            r")",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]+){0,5}(?:export[ \t]+)?(?:default[ \t]+)?class\s+([a-zA-Z_$][\w$]*)(?:\s+extends\s+([a-zA-Z_$][\w$.]*))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|typeof|instanceof|Array\.isArray|Number\.(?:isFinite|isNaN)|Object\.hasOwn)\b|===|!==|\?\?|\?\."
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Loose equality and bypasses. (?<![=!]) on the == branch: without
+        # it, `===`/`!==` (strict equality/inequality -- explicitly SAFE
+        # per this language's own `safety` rule) both still matched via
+        # their trailing `==` substring at a shifted offset.
+        "safety_bypasses": re.compile(r"(?<![=!])==(?!=)|!=(?!=)|\b(with|void)\b|eslint-disable|@ts-nocheck"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Catastrophic vulnerabilities. EXCLUDES console.log (print_hits) and TODO (debt).
+        "high_risk_execution": re.compile(
+            r"\b(eval|document\.write|innerHTML|outerHTML|dangerouslySetInnerHTML|debugger|alert|process\.exit)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(fetch|axios|http|https|fs|path|database|sql|localStorage|sessionStorage|indexedDB|document\.cookie|XMLHttpRequest|child_process)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Exposure surface. Explicit exports + implicit architectural defaults.
+        "api": re.compile(r"\b(export|module\.exports|exports\.)\b|@(Controller|Resolver|Get|Post|Put|Delete)\b"),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES const (freeze_hits).
+        "state_mutation": re.compile(
+            r"\b(let|var|this\.|setState|mut|push|pop|shift|unshift|splice|sort|reverse|\.current[ \t]*=|\.set\(|\.delete\(|\.add\()\b"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"//[ \t]*(?:if|for|while|function|class|return|var|const|let|import)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"/\*\*|@param|@return|@throws|@deprecated|@typedef|@type|@template"),
+        # 14. test (Testing & Assertions)
+        # (?<!\.) on the it|test alternation: TypeScript's near-identical rule
+        # already carries this guard so `myRegex.test('x')` (a regex method
+        # call) isn't miscounted as a test-framework call -- JavaScript's own
+        # rule never got the same fix despite the identical ambiguity.
+        "test": re.compile(
+            r"\b(describe|expect|assert|beforeEach|afterEach|jest|mocha|vitest|cy\.)\b|(?<!\.)\b(?:it|test)\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|Promise|requestAnimationFrame|setImmediate|setTimeout|setInterval|queueMicrotask|Worker|postMessage)\b|\.then\(|\.catch\("
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r'<[A-Z]\w+|className=|use(?:State|Effect|Context|Reducer|Ref|Memo|Callback|Transition)|props\.|this\.state|document\.(?:getElementById|querySelector|addEventListener)|["\']use\s+(?:client|server)["\']'
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"=>[ \t]*\{|\(\)[ \t]*=>|function\s*\([^)]*\)[ \t]*\{"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(r"\b(window\.|global\.|process\.env|document\.|navigator\.|self\.|globalThis\.)\b"),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"@\w+"),
+        # 20. generics (Generics / Type Parameters)
+        # Simulated/JSDoc generics in JS.
+        "generics": re.compile(r"@template\s+\w+|/\*\*\s*@type\s*(?:\{|<\w+)"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(r"\.(?:map|filter|reduce|flatMap|some|every|find|forEach|groupBy)\s*\("),
+        "scientific": re.compile(r"\b(?:import|require|from)\b.*?(?:numpy|pandas|scipy|matplotlib|opencv|cv2)\b"),
+        "hardware_bridge": re.compile(
+            r"\b(?:import|require|from)\b.*?(?:serialport|usb|bluetooth|socket\.io|websocket|printer|webgl)\b"
+        ),
+        "cryptography": re.compile(
+            r"\b(?:import|require|from)\b.*?(?:crypto|bcrypt|x509|tls|ssl|jsonwebtoken|argon2)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        "reflection_metaprogramming": re.compile(
+            r"\b(arguments\.|prototype|__proto__|Object\.assign|Reflect|Proxy|Object\.defineProperty|\.bind\(|\.call\(|\.apply\()\b"
+        ),
+        # --- AI & LLM SDK SENSORS (GLOBAL_, see #322) ---
+        "llm_api": GLOBAL_LLM_API,
+        "llm_orchestrator": GLOBAL_LLM_ORCHESTRATOR,
+        "llm_vector_store": GLOBAL_LLM_VECTOR_STORE,
+        "ml_traditional": GLOBAL_ML_TRADITIONAL,
+        "dl_frameworks": GLOBAL_DL_FRAMEWORKS,
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r"\b(?:import|export)\b[^;]*?\bfrom\b|\brequire\s*\(|\bimport\s*\(",
+            re.M,
+        ),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (JAVASCRIPT) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
+            #
+            # HISTORICAL BUG: Originally, the `import` regex was anchored to the start of the
+            # line `^[ \t]*`. While this perfectly prevented the engine from hallucinating
+            # commented-out imports, it completely blinded the firewall to dynamic/inline execution.
+            # If an attacker tucked an import inside a function (e.g., `const payload = require('malware')`
+            # or `await import('trojan')`), it bypassed the sensors entirely.
+            #
+            # THE FIX: The `^` anchor has been stripped across both the counter and the capture regex.
+            # We now rely on the `\b` word boundary to find the keywords anywhere in the file.
+            # (Note: The engine's optical comment-stripper runs BEFORE this regex, naturally preventing
+            # the commented-out hallucination issue without needing strict line anchors).
+            #
+            # [ THE VERTICAL DESTRUCTURING SHIELD ]
+            # We enforce `[ \t\n]*` near the `from` and inside the `require()` parentheses to safely
+            # leap across vertical multi-line destructured imports (e.g., `import \n { \n Component \n } \n from`).
+            # =====================================================================
+            r"(?:import|export)\b[^;]*?\bfrom\s*['\"]([^'\"]+)['\"]|\b(?:require|import)\s*\(\s*['\"]([^'\"]+)['\"]",
+            re.M,
+        ),
+        "_named_token_capture": re.compile(r"(?:import|export)\s+\{([^}]+)\}", re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:@author|Created by)\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(getServerSideProps|getStaticProps|getInitialProps|renderToString|hydrateRoot)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(emit|on|once|off|dispatchEvent|EventEmitter|EventTarget)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(r"\b(Inject|Injectable|Container|resolve|register|inversify)\b"),
+        # 34. macros
+        "macros": None,
+        # 35. pointers
+        "pointers": None,
+        # 36. memory_alloc
+        "memory_alloc": re.compile(r"\bnew\s+[A-Z]\w*"),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(logger|winston|pino|morgan|datadog|prometheus|newrelic|sentry)\.(?:info|error|warn|debug|trace|log)\b"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\bconsole\.(?:log|warn|error|dir|trace|info|table|time)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\b(Number|String|Boolean|BigInt|Symbol|Array\.from)\b\s*\("),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|abort|process\.exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(sleep|delay|setTimeout|setInterval|Atomics\.wait)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>>?|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(
+            r"\b(mutex|lock|synchronized|Semaphore|Atomics\.lock|Atomics\.wait)\b",
+            re.I,
+        ),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|readonly|final|Object\.freeze|Object\.seal)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(dispose|close|destroy|clearTimeout|clearInterval|removeEventListener|delete)\b"),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # JS private fields and keywords. `#` needed its own un-bounded
+        # branch: \b#\b can only match when `#` is directly sandwiched
+        # between two word characters with no separator (e.g. "x#y"),
+        # which never happens in real private-field syntax (`#foo` is
+        # always preceded by `{`, whitespace, or `.` -- never a bare word
+        # char) -- so the `#` alternative was completely unreachable.
+        "encapsulation": re.compile(r"\b(private|protected|internal)\b|#[a-zA-Z_$]"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(on|addEventListener|subscribe|watch|effect)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(test\.skip|it\.skip|describe\.skip|xit|xdescribe|mock|stub)\b"),
+        # --- NEW: ADVANCED ALGORITHMIC SENSORS ---
+        "lazy_evaluation": re.compile(r"\b(yield|yield\s*\*|function\s*\*)\b"),
+        "vectorized_math": re.compile(r"\b(matmul|dot|cross|multiply)\s*\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (JS/TS Specifics) ---
+        "serialization_parsing": re.compile(r"\b(JSON\.parse|JSON\.stringify)\b"),
+        "regex_execution": re.compile(r"\bnew\s+RegExp\b|\.(match|replace|search|split)\s*\("),
+        "time_date_logic": re.compile(
+            r"\b(Date\.now|new\s+Date|setTimeout|setInterval|clearTimeout|clearInterval|performance\.now)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"\b(postMessage|Worker|MessageChannel|child_process|worker_threads|cluster)\b"),
+        # --- PHASE 4: APPSEC & AI SENSORS (Zero-Trust Pipelines) ---
+        "rce_funnel": re.compile(r"child_process\.(?:spawn|exec|execSync)\s*\(\s*['\"](?:python|bash|sh|bun|node)\b"),
+        "exfiltration_camouflage": re.compile(
+            r"\b(fetch|axios\.post|https\.request)\s*\([^)]*(?:checkmarx|telemetry|metrics|audit|log)\b",
+            re.I,
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/jcl.py b/gitgalaxy/standards/language_standards/languages/jcl.py
new file mode 100644
index 000000000..355ad7376
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/jcl.py
@@ -0,0 +1,124 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "IBM z/OS JCL",
+        "status": "production",
+    },
+    "extensions": [".jcl", ".prc", ".bms"],
+    "exact_matches": [],
+    "discriminators": [".cbl", ".cob", ".cpy"],
+    "shebangs": [],
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # Control flow in JCL (IF/THEN/ELSE/ENDIF)
+        "branch": re.compile(r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+(?:IF|ELSE|ENDIF)\b", re.M | re.I),
+        # Extract arguments from EXEC PARM= strings or PROC symbolics definitions.
+        # #2482: PARM= routinely sits on a JCL continuation line, not the EXEC
+        # line itself -- a trailing comma on a `//` statement line means "this
+        # statement keeps going on the next `//` line," and real corpus JCL
+        # chains this more than once before PARM= appears (cics-genapp's
+        # CICSTS56.jcl: EXEC line ends in a comma, then a COND=(...) continuation
+        # line ALSO ends in a comma, and only the third line carries PARM=).
+        # `(?:\n//[ \t]*(?:[^\n]*,[ \t]*\n//[ \t]*){0,7})?` models this: the whole
+        # thing is optional (same-line PARM=, the common case, is untouched), but
+        # once triggered it crosses at least one continuation boundary
+        # (`\n//[ \t]*`) and then allows up to 7 more hops, each of which must
+        # itself end in a real trailing comma (`[^\n]*,` -- greedy, so it lands on
+        # the LAST comma on that line, the actual continuation indicator, not an
+        # incidental earlier one) before crossing again. Every repeated unit is
+        # bounded to a single physical line (`[^\n]*` cannot cross a newline), so
+        # this cannot backtrack catastrophically even on adversarial input -- see
+        # test_jcl_args_parm_continuation_line_regression's ReDoS case. The value
+        # capture itself (`\([^)]*\)` / `'...'`) already spanned newlines before
+        # this fix (`[^)]*`/`[^']*` don't exclude `\n`), so a PARM=(...) that
+        # keeps going across further continuation lines (cics-genapp's
+        # defdrep.jcl, 5 more lines after the opening paren) is captured whole --
+        # EXCEPT when the value itself contains a nested, unquoted `(...)` (e.g.
+        # `'AMODE(31)'` inside a larger PARM=(...) list), where the capture still
+        # stops at that inner `)` -- a separate, pre-existing limitation this
+        # issue doesn't attempt to fix (nested-paren balancing isn't expressible
+        # in a single bounded regex pass the way this engine requires).
+        "args": re.compile(
+            r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+"
+            r"(?:EXEC(?:[ \t].*?)?,[ \t]*(?:\n//[ \t]*(?:[^\n]*,[ \t]*\n//[ \t]*){0,7})?"
+            r"PARM=('(?:[^']|'')*'|\([^)]*\)|[^ \t\n,]+)"
+            r"|PROC[ \t]+(\S.*))",
+            re.M | re.I,
+        ),
+        # Structural boundaries (Any line starting with // and a command)
+        # BUG FIX (2 issues): (1) the name segment was required (`+`), missing
+        # the very common unnamed continuation-DD form (`//         DD DSN=...`,
+        # concatenating a dataset onto the preceding DD with no ddname of its
+        # own) -- a real, everyday JCL idiom, not an edge case. Name is now
+        # optional (`*`). (2) the gap before the keyword was `\s+`, which
+        # includes `\n` under re.M -- confirmed this lets a name on one line
+        # falsely bind to a keyword starting a *different* line with no `//`
+        # prefix of its own (e.g. "//STEP01\nEXEC PGM=FOO" incorrectly reads as
+        # a real EXEC step). JCL statements don't span a physical line via bare
+        # whitespace, so bounded to `[ \t]+` instead.
+        "structural_boundaries": re.compile(
+            r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+(?:DD|INCLUDE|SET|PROC|PEND)\b", re.M | re.I
+        ),
+        # Functions (EXEC steps). Same `\s+` -> `[ \t]+` cross-line fix as above.
+        # BUG FIX: stepname is optional (`*` not `+`), unnamed EXEC steps are valid.
+        "func_start": re.compile(r"^[ \t]*//([A-Za-z0-9_#$@]*)[ \t]+EXEC\b", re.M | re.I),
+        # Classes/Entities (JOB cards). Same `\s+` -> `[ \t]+` cross-line fix as above.
+        "class_start": re.compile(r"^[ \t]*//([A-Za-z0-9_#$@]+)[ \t]+JOB\b", re.M | re.I),
+        # Danger (Execution of arbitrary programs)
+        "high_risk_execution": re.compile(r"\bPGM=[A-Za-z0-9_#$@]+\b", re.I),
+        # I/O (Data Set Names and Sysouts)
+        "io": re.compile(r"\b(DSN|DSNAME|SYSOUT|SYSPRINT|DISP=)\b", re.I),
+        # JCL doesn't have traditional code equivalents for these, keep them null to prevent crashes
+        "safety": None,
+        "api": None,
+        # BUG FIX: unanchored -- `\bSET\s+NAME=` matched "SET" anywhere in the
+        # file, including inline SYSIN card data (`//SYSIN DD *` ... `/*`) that
+        # isn't a JCL statement at all (e.g. an embedded SQL/shell/config
+        # payload that happens to contain "SET X=1"). Anchored to a real JCL
+        # statement line, mirroring structural_boundaries' own SET handling;
+        # both `\s+` gaps bounded to `[ \t]+` for the same cross-line reason.
+        "state_mutation": re.compile(r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+SET[ \t]+[A-Za-z0-9_#$@]+=", re.M | re.I),
+        "concurrency": None,
+        "ui_framework": None,
+        "closures": None,
+        "globals": None,
+        "decorators": None,
+        "generics": None,
+        "comprehensions": None,
+        "scientific": None,
+        "reflection_metaprogramming": None,
+        # BUG FIX: name segment was required (`+`); INCLUDE statements, like DD,
+        # are commonly written unnamed (`//         INCLUDE MEMBER=...`). Name
+        # now optional (`*`); `\s+` -> `[ \t]+` for the same cross-line reason as
+        # structural_boundaries/func_start/class_start above.
+        "import": re.compile(r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+INCLUDE\b", re.M | re.I),
+        # _dependency_capture was missing entirely for jcl (unlike nearly every
+        # other language with a non-None `import`), so the dependency graph never
+        # captured which member a JCL job/proc pulls in via INCLUDE. Captures the
+        # MEMBER= name for the network/blast-radius graph. Also captures dataset
+        # names in DD statements and JCLLIB orders, ignoring temporary/internal ptrs (&&, *).
+        "_dependency_capture": re.compile(
+            r"^[ \t]*//[A-Za-z0-9_#$@]*[ \t]+(?:INCLUDE[ \t]+MEMBER=([A-Za-z0-9_#$@]+)|JCLLIB[ \t]+ORDER=\(?([A-Za-z0-9_#$@.]+)\)?|DD[ \t]+(?:.*?[ \t,])?DSN(?:AME)?=(?!(?:&&|\*))([A-Za-z0-9_#$@.&()]+))",
+            re.M | re.I,
+        ),
+        # BUG FIX: `\s+` before the capture group could cross a newline (re.M),
+        # so an Author line with the value wrapped to the next physical line
+        # captured garbage from that *different* line (including its own "//*"
+        # prefix) instead of correctly failing to match. Bounded to `[ \t]+`.
+        "ownership": re.compile(r"^//\*[ \t]*(?:Author|Created by|Maintainer):[ \t]+(.*)", re.I | re.M),
+        "telemetry": None,
+        "debug_prints": None,
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/json.py b/gitgalaxy/standards/language_standards/languages/json.py
new file mode 100644
index 000000000..dbbb3c171
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/json.py
@@ -0,0 +1,46 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Modern JSON & Configuration Ecosystem",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard, commented, line-delimited, and geospatial JSON.
+    "extensions": [
+        ".json",
+        ".arb",
+        ".jsonc",
+        ".json5",
+        ".jsonl",
+        ".ndjson",
+        ".geojson",
+        ".topojson",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extended modern web/node tooling.
+    "exact_matches": [
+        ".prettierrc",
+        ".eslintrc",
+        ".babelrc",
+        ".stylelintrc",
+        ".bowerrc",
+        ".hintrc",
+        ".nycrc",
+        ".lintstagedrc",
+        ".swcrc",
+    ],
+    "discriminators": [".json", ".jsonc", ".json5", ".arb"],
+    "shebangs": [],
+    # THE FIX: JSON with comments relies on C-style comment structures, not Python/Ruby hashes.
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/kotlin.py b/gitgalaxy/standards/language_standards/languages/kotlin.py
new file mode 100644
index 000000000..1f4a42b5d
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/kotlin.py
@@ -0,0 +1,309 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Kotlin 2.3.10 (K2 Compiler / Wasm / Java 25 Support)",
+        "last_updated": "2026-03-12",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources, Kotlin script files (heavily used in modern Gradle), and module declarations.
+    "extensions": [".kt", ".kts", ".ktm"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Kotlin rarely uses extensionless execution scripts.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and Kotlin-DSL Gradle build files to lock in context.
+    "discriminators": [
+        ".kt",
+        "build.gradle.kts",
+        "settings.gradle.kts",
+        "gradle.properties",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for Kotlin scripting.
+    "shebangs": ["kotlin", "kotlinc", "kscript"],
+    # UPGRADED: Maps to Family 2 (Nested C)
+    # Rationale: (CORRECTION) While Kotlin uses // and /* */, it officially allows nested
+    # block comments (/* /* */ */). Using standard C parsing would cause early termination here.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. Includes modern 'when' and Elvis operator.
+        # EXCLUDES throw (bailout_hits).
+        "branch": re.compile(r"\b(if|else|when|for|while|do|try|catch|finally|break|continue|return)\b|\?:|&&|\|\|"),
+        # 2. args (Parameters / Coupling)
+        # OPTIMIZED: Removed overlapping whitespace quantifiers to fix Regex Sludge.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE LAMBDA PARAMETER SHIELD (KOTLIN) ]
+            # Kotlin default arguments `emptyList()` and lambda parameters `(Result<T>) -> Unit`
+            # contain parentheses that shatter standard `[^)]*` boundaries.
+            # FIX: Implemented the 1-Level Nesting Trick `(?:[^)(]+|\([^)]*\))*` to
+            # absorb the inner parentheses. Upgraded spaces to `[ \t\n]*` for vertical layouts.
+            # =====================================================================
+            # RULE 11 FIX (epic #813/#823): the generic-parameter step-over was the flat
+            # `<[^>]{0,100}>`, truncating at the FIRST `>` and breaking any nested generic
+            # bound (`fun <T, U : Comparable<U>> foo(x: T, y: U): T {`, a realistic bounded
+            # generic function). Widened to the established one-level-nesting idiom.
+            # IDENTIFIER-GRAMMAR FIX (epic #813/#899): the name step-over required a plain
+            # `[a-zA-Z_]\w*`, so backtick-quoted arbitrary identifiers never matched. Added
+            # as an alternative, not a widened class.
+            # MULTI-DOT RECEIVER FIX: Upgraded the receiver capture to `[\w.]+` to support
+            # fully qualified extension receivers (e.g., `com.example.Foo.ext()`).
+            # ANONYMOUS FUNCTION FIX: Made the name capture optional to support `fun(x: Int)`.
+            # #1209: parameter-list span wrapped in its own capture group
+            # in both alternatives (was only reachable via group(0), the
+            # whole match including the "fun"/receiver/name prefix, or for
+            # trailing-lambda syntax the leading "{") so detector.py's
+            # counter isolates just the real parameter text -- the
+            # whole-match fallback overcounted every zero/one-arg
+            # signature by +1 the same way Python's did (#1199), including
+            # a bare trailing lambda (`list.forEach { item -> ... }`).
+            # Name group added to the first alternative too, purely so
+            # existing extraction tests keep passing.
+            r"\b(?:fun|constructor)\b(?:[ \t\n]*<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]*((?:(?:`[^`\n]{1,200}`|[\w.]+)\.)?(?:`[^`\n]{1,200}`|[a-zA-Z_]\w*))?[ \t\n]*(\((?:[^)(]|\([^)]*\))*\))|\{[ \t\n]*([a-zA-Z_][a-zA-Z0-9_ \t\n:<>,.?]{0,150}?)->",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries defining file architecture and control returns.
+        "structural_boundaries": re.compile(r"\b(package|import|return|class|interface|object|fun|typealias)\b"),
+        # 4. func_start (Executable Logic Anchors)
+        # OPTIMIZED: Bound annotation parenthesis scanning to prevent multi-line bleeding.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL MODIFIER & GENERIC SHIELD (KOTLIN) ]
+            # Kotlin allows annotations, modifiers, the 'fun' keyword, generics,
+            # and the function name to be split across multiple lines.
+            # FIX: Upgraded `[ \t]+` to `[ \t\n]+` across the decorator and modifier
+            # stacks. Modified the generic stepper to `(?:<[^>]{0,100}>[ \t\n]*)?`
+            # (removing the `\n` restriction) and updated the trailing lookahead
+            # to `[ \t\n]*[\(\{]` so it can safely jump vertical gaps to the parameters.
+            # =====================================================================
+            # RULE 11 FIX (epic #813/#823): same generic-parameter nesting gap as args above
+            # -- widened to the established one-level-nesting idiom.
+            # IDENTIFIER-GRAMMAR FIX (epic #813/#899): same backtick-identifier gap as `args`
+            # above (doc's Rule 16) -- added as an alternative capture group.
+            # MULTI-DOT RECEIVER FIX: Upgraded receiver to `[\w.]+` (e.g. `com.example.Foo.ext`).
+            r"^[ \t]*(?:@[\w.]+(?:\([^)\{]{0,300}\))?[ \t\n]*){0,10}"
+            r"(?:(?:public|private|protected|internal|open|override|abstract|final|suspend|inline|tailrec|infix|operator|external|expect|actual)[ \t\n]+){0,5}"
+            r"(?:context\s*\([^)]*\)\s*)?"
+            r"(?:(?:\bfun\b)[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?(?:(?:(?:`[^`\n]{1,200}`|[\w.]+)\.)?(?:`([^`\n]{1,200})`|([a-zA-Z_]\w*)))?|(init)|(constructor))(?=[ \t\n]*[\(\{])",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # OPTIMIZED: Applied the same 300-char bounds to class annotations.
+        # COMPANION OBJECT FIX (epic #813/#823): `companion object { ... }` (almost always
+        # anonymous -- a name is rare and optional) never matched at all: "companion" wasn't in
+        # the modifier list, and even if it were, the class/interface/object/enum-class branch's
+        # name was mandatory. Added a dedicated alternative for it with an OPTIONAL name, kept
+        # narrowly scoped to the literal `companion object` shape rather than making the name
+        # optional for the general branch -- doing that broadly would have opened a new false
+        # positive on object EXPRESSIONS (`object : Base() {`, an anonymous object literal used
+        # inline, a different construct from an object DECLARATION).
+        # #1295: both name alternatives wrapped in capture groups (group 1
+        # for the main class/interface/object/enum-class branch, group 2
+        # for companion object's own optional name) so the named-entity
+        # extractor (detector.py's _CLASS_START_NAMED_EXTRACTION_LANGS)
+        # can recover real names instead of flooding class_data with one
+        # "Anonymous_Class" phantom per match -- same alternation shape
+        # `_resolve_class_start_match` already handles for Fortran/Lua.
+        # #1295: `fun` added to the modifier set for `fun interface Foo {`
+        # (SAM/functional-interface declarations, mainstream since Kotlin
+        # 1.4) -- previously unrecognized, a real recall gap confirmed
+        # against okhttp's `fun interface Factory`.
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)\{]{0,300}\))?[ \t]*){0,10}(?:(?:public|private|protected|internal|open|abstract|final|sealed|data|value|annotation|expect|actual|inner|fun)[ \t]+){0,5}(?:(?:class|interface|object|enum\s+class)\s+(`[^`\n]{1,200}`|[a-zA-Z_]\w*)|companion[ \t\n]+object(?:\s+(`[^`\n]{1,200}`|[a-zA-Z_]\w*))?)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\?\.(?!.)|as\?|\b(require|requireNotNull|check|checkNotNull|error|sealed|is|!is|Result|onSuccess|onFailure|fold|runCatching)\b|\?:"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Force unwrapping, unsafe casts, and suppression.
+        "safety_bypasses": re.compile(r"!!|as(?!\?)\b|\blateinit\s+var\b|@Suppress\b"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and raw system triggers. EXCLUDES println (Phase 5).
+        "high_risk_execution": re.compile(r"\b(System\.exit|exitProcess|Runtime\.getRuntime|Thread\.stop)\b"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(File|InputStream|OutputStream|Retrofit|OkHttpClient|Ktor|HttpClient|RoomDatabase|Dao|SharedPreferences|DataStore|java\.nio)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Exposed surface. Implicit public/internal defaults + Ktor/Spring routes.
+        "api": re.compile(
+            r"\b(public|internal)\b|@(RestController|Controller|Service|Component|RequestMapping|GetMapping|PostMapping|Route)\b"
+        ),
+        # 11. flux (State Mutation)
+        # CRITICAL FIX: Added re.M so it scans every line, not just the first line of the file!
+        "state_mutation": re.compile(
+            r"\b(var|MutableList|MutableMap|MutableSet|MutableState|MutableStateFlow|Atomic[A-Za-z0-9]+)\b|^[ \t]*(?:this\.)?[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*\s*[-+*/%]?=|\.(?:add|addAll|remove|put|set|update)\(",
+            re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"//[ \t]*(?:val|var|fun|class|interface|object|if|when|for|return|import)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"/\*\*|@param|@return|@property|@receiver|@constructor|@throws|@see|@since"),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r"@(?:Test|ParameterizedTest|BeforeTest|AfterTest)|\b(?:assert[A-Za-z0-9_]*|mockk|spyk|test)\s*\(|\b(?:shouldBe|shouldNotBe)\b|\b(?:every|verify)\s*\{"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(suspend|launch|async|CoroutineScope|GlobalScope|Dispatchers|Flow|StateFlow|SharedFlow|Channel|yield|runBlocking|withContext|Mutex)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r"@Composable|Modifier|\b(Column|Row|Box|Text|Image|Button|Scaffold|LazyColumn|LazyRow|Surface|remember|mutableStateOf|findViewById|View|Activity|Fragment)\b"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        # OPTIMIZED: Removed overlapping whitespace quantifiers to fix ReDoS.
+        "closures": re.compile(r"\{[ \t\n]*[a-zA-Z_][a-zA-Z0-9_ \t\n:<>,.?]{0,150}?->"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"\b(object|companion\s+object)\b|^[ \t]*(?:const[ \t]+)?val\s+[A-Z_0-9]+[ \t]*=",
+            re.M,
+        ),
+        # 19. decorators (Decorators / Annotations)
+        # OPTIMIZED: Bounded arguments.
+        "decorators": re.compile(r"@[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*(?:\([^)\{]{0,300}\))?"),
+        # 20. generics (Generics / Type Parameters)
+        # Prevented catastrophic backtracking across newlines.
+        "generics": re.compile(r"<\s*(?:in|out)?\s*[A-Z][^>\n]{0,100}>|\breified\b|\bwhere\b"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Functional collection transformations.
+        "comprehensions": re.compile(
+            r"\.(?:map|mapNotNull|filter|filterNot|reduce|fold|flatMap|zip|associate|groupBy|forEach|any|all|none|find)\b"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(
+            r"\b(kotlin\.math\.|java\.lang\.Math\.|StrictMath\.|Random\.|sin|cos|tan|sqrt|exp|log|abs|BigDecimal|BigInteger)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Reflection and optimization hooks.
+        "reflection_metaprogramming": re.compile(
+            r"::class|javaClass|@JvmOverloads|@JvmStatic|@JvmField|@JvmName|\b(inline|crossinline|noinline|invoke|context|tailrec)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*import\s+(?:static[ \t]+)?[\w.]+;?", re.M),
+        "_dependency_capture": re.compile(r"^[ \t]*import[ \t\n]+(?:static[ \t\n]+)?([\w.*]+)", re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"@(?:author|since)\s+(.*)|//\s*(?:Created by|Maintainer|Copyright):\s+(.*)",
+            re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(ApplicationCall|call\.respond|call\.respondText|call\.respondHtml|ServerResponse|ModelAndView)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # BUG FIX: required a literal `(`, but Kotlin's idiomatic
+        # SAM-conversion trailing-lambda form (`flow.collect { value ->
+        # ... }`, omitting the parens entirely) is the dominant
+        # real-world style for Flow collectors -- more common than the
+        # parenthesized form. Widened to accept either `(` or `{`.
+        "events": re.compile(
+            r"\.(?:collect|collectLatest|observe|subscribe|onNext)\s*[\(\{]|\b(LiveData|Observer|Observable|FlowCollector)\b"
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(
+            r"@(?:Inject|Module|Provides|Binds|HiltViewModel|AndroidEntryPoint|Component|Autowired)|(?:koin|get|inject)\(\)"
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(r"@(?:OptIn|RequiresOptIn|Suppress|SuppressWarnings)\b"),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Kotlin/Native FFI boundaries.
+        "pointers": re.compile(r"\b(?:CPointer|COpaquePointer|CFunction|CValue|CPointed)\b"),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(r"\b(?:memScoped|alloc|allocArray|nativeHeap\.alloc|nativeHeap\.free)\b"),
+        # 37. inline_asm
+        "inline_asm": None,  # Usually bridged via C-headers in Native.
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:Timber|Log|Logger|LoggerFactory)\.(?:i|e|w|d|v|info|error|warn|warning|debug|trace|verbose)\b|@Slf4j"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(println|print)\b\s*\("),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\bas\??\s+[A-Z]\w*|\.to(?:Int|Long|Short|Byte|Double|Float|String|Boolean|UInt|ULong|UShort|UByte)\(\)"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|raise|exitProcess|return|panic)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(delay|Thread\.sleep|yield)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"\.(?:shl|shr|ushr|and|or|xor|inv)\(|\b(?:shl|shr|ushr|xor)\b"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(mutex|lock|synchronized|Semaphore|Atomic[A-Z]\w*)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(val|const|immutable|readonly)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(close|dispose|shutdown|use|cleanup)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b(private|protected|internal)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        # BUG FIX: required a literal `(`, but the idiomatic Kotlin
+        # SAM-conversion trailing-lambda form (`button.setOnClickListener
+        # { ... }`, omitting the parens entirely) is the dominant
+        # real-world style for Android/Compose listeners. Widened to
+        # accept either `(` or `{`.
+        "listeners": re.compile(r"\.(?:collect|observe|subscribe|on[A-Z]\w*|set[A-Z]\w*Listener)\s*[\(\{]"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"@(?:Ignore|Disabled)|test\.skip\(|mockk|spyK|fake\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Kotlin Specifics) ---
+        # BUG FIX: `Gson\(\)` ends on `)` -- shared trailing \b never
+        # fired. Never matched.
+        "serialization_parsing": re.compile(
+            r"\b(?:Json\.decodeFromString|Json\.encodeToString|Moshi|ObjectMapper)\b|\bGson\(\)"
+        ),
+        # BUG FIX: `Regex\(\)` required LITERALLY EMPTY parens, but
+        # Kotlin's `Regex` class has no zero-arg constructor -- real
+        # usage is always `Regex(pattern)`, which never matched even
+        # before the `\)` trailing-\b bug is considered. Widened to
+        # `Regex\(` (matching the constructor call regardless of its
+        # argument). `\.toRegex\(\)` (the real zero-arg extension
+        # function on String) keeps its literal empty parens but still
+        # needed the same trailing-\b fix as the rest of this sweep.
+        "regex_execution": re.compile(r"\bRegex\(|\.toRegex\(\)|\.matches\(|\.find\("),
+        "time_date_logic": re.compile(
+            r"\b(Clock\.System\.now|Instant\.now|System\.currentTimeMillis|Duration\.minutes|LocalDate)\b"
+        ),
+        # BUG FIX: `Intent\(`/`HttpClient\(` both end on `(` (non-word),
+        # so the shared trailing \b only fired when a word char
+        # immediately followed the paren -- true for the common
+        # `Intent(this, Foo::class.java)` form, but never for the
+        # zero-argument form (`HttpClient()`), where `)` follows.
+        "ipc_rpc_bridges": re.compile(
+            r"\b(?:BroadcastReceiver|ProcessBuilder|bindService)\b|\bIntent\(|\bHttpClient\("
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/livecode.py b/gitgalaxy/standards/language_standards/languages/livecode.py
new file mode 100644
index 000000000..da6f67623
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/livecode.py
@@ -0,0 +1,388 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "LiveCode 9.6 / 10.0 (Current Stable/DP)",
+        "last_updated": "2026-02-19",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Includes modern server scripts, builder files, binary stacks, and legacy Revolution stacks.
+    "extensions": [".lc", ".livecodescript", ".lcb", ".livecode", ".stack", ".rev"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: LiveCode environments rarely use extensionless execution scripts.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions to anchor the LiveCode server/builder environment.
+    "discriminators": [".lc", ".livecode", ".lcb", ".livecodescript"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for LiveCode Server environments.
+    "shebangs": ["livecode-server"],
+    # UPGRADED: Maps to Family 1d (multi_style_live)
+    # Rationale: Accepts '--', '//', '#', and '/* */' to support both its legacy HyperTalk roots and modern C-style syntax.
+    "lexical_family": "multi_style_live",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes English-like loops and try-catch.
+        "branch": re.compile(
+            r"\b(if|then|else|switch|case|default|repeat|while|until|times|try|catch|finally|throw|next\s+repeat|and|or|not)\b",
+            re.I,
+        ),
+        # 2. args: Parameters / Coupling. Captures parameters in handlers (on, command, function).
+        # BUG FIX (livecode tri-comparison manual verification, 2026-08-28): this
+        # `^`-anchored per-line pattern was compiled `re.I` only -- missing the
+        # `re.M` its structurally-identical `func_start` sibling below has -- so
+        # `^` only ever matched the very start of the file. Result: at most one
+        # args match per file (only when line 1 is a handler header), and ZERO
+        # across the entire language-crucible/data/livecode corpus (99 files, 781
+        # real handlers). Same one-flag omission class as any `^`-anchored
+        # signal rule; the pattern itself was already correct on a single line.
+        #
+        # #2409: second alternative for LiveCode Builder `.lcb` handlers, whose
+        # param list IS parenthesized and typed (`handler Foo(in x as String,
+        # out y as Integer)`) -- captures the parenthesized body; the generic
+        # per-function derivation then counts the comma-separated `in`/`out`/
+        # `inout` clauses. Single-physical-line only (a `\`-continued multi-line
+        # header still counts group 1 as whatever fit before the break) --
+        # matches how LiveCode Script's own branch already behaves for a
+        # continued line, and good enough for a proxy metric.
+        "args": re.compile(
+            r"^[ \t]*(?:"
+            r"(?:private[ \t]+|public[ \t]+)?(?:on|command|function|getprop|setprop)[ \t]+[a-zA-Z0-9_-]+[ \t]+((?:(?!--|//|#|/\*)[^ \t\r\n])(?:(?!--|//|#|/\*)[^\r\n])*?)(?=[ \t]*(?:--|//|#|/\*|\r|\n|$))"
+            r"|"
+            r"(?:public[ \t]+|private[ \t]+)?handler[ \t]+(?!type[ \t])[a-zA-Z_][a-zA-Z0-9_]*[ \t]*\(([^)\r\n]+)\)"
+            r")",
+            re.I | re.M,
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries and state transformation verbs.
+        # BUG FIX (#593): "constant" used to be listed here too, duplicating
+        # immutability_locks and violating this key's own documented EXCLUDES
+        # rule (immutability keywords belong in immutability_locks, not here).
+        "structural_boundaries": re.compile(
+            r"\b(put|get|set|go|send|dispatch|pass|return|add|subtract|multiply|divide|visual\s+effect|play|sort|find|replace)\b",
+            re.I,
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic blocks (handlers).
+        # Two dialects, one rule (#2409):
+        #   * LiveCode Script (`.livecodescript`/`.lc`) -- `[public|private]
+        #     on|command|function|getprop|setprop <name>` with an
+        #     *unparenthesized* arg list, so the name is followed by
+        #     whitespace/EOL/comment, never `(` (the `("function TargetFunc()",
+        #     None)` invalid case in test_livecode.py stays invalid). Name in group 1.
+        #   * LiveCode Builder (`.lcb`) -- `[public|private] handler <name>(...)`
+        #     with a *parenthesized*, typed param list, or a `\` line
+        #     continuation before the params. Name in group 2. The optional
+        #     `(?:public|private)` prefix followed directly by `handler` (never
+        #     `foreign`) means every `foreign handler` / `public foreign handler`
+        #     FFI *binding declaration* -- C-prototype shaped, `binds to
+        #     "<builtin>"`, no `... end handler` body -- is excluded by
+        #     construction (parallel to a C header prototype not being a
+        #     definition; decided in #2409). detector.py's Mode D naming goes
+        #     through `_extract_semantic_name`, not these groups, so the
+        #     two-group shape only affects the raw `struct_func_start` count.
+        "func_start": re.compile(
+            r"^[ \t]*(?:"
+            r"(?:private[ \t]+|public[ \t]+)?(?:on|command|function|getprop|setprop)[ \t]+([a-zA-Z0-9_-]+)(?=[ \t\r\n]|--|//|#|/\*|$)"
+            r"|"
+            r"(?:public[ \t]+|private[ \t]+)?handler[ \t]+(?!type[ \t])([a-zA-Z_][a-zA-Z0-9_]*)[ \t]*(?=\(|\\[ \t]*(?:\r?\n|$))"
+            r")",
+            re.I | re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines structural entities (Stacks, Behaviors, Widgets).
+        # BUG FIX (#593, Rule 11 nested-delimiter/coverage class): the name
+        # class `["\'a-zA-Z_]\w*` stopped at the first non-word char, so it
+        # could never consume dotted reverse-DNS module names -- LiveCode
+        # Builder's real, dominant declaration form (`module
+        # com.livecode.string`, confirmed against the language-crucible
+        # corpus). The lookahead then required whitespace/EOL immediately
+        # after that partial match, which a `.` never satisfies, so the
+        # whole match failed outright. Widened to allow up to 10 dotted
+        # segments (numerically bounded per Rule 5) and dropped the
+        # never-functional leading quote-char option (a quote immediately
+        # after would break the same lookahead, so it never actually
+        # matched anything either).
+        #
+        # BUG FIX (livecode tri-comparison manual verification, 2026-08-28):
+        # added a real quoted-name alternative as its OWN capture branch
+        # (`"([^"\r\n]{1,200})"`), distinct from the broken char-class option
+        # removed above. A LiveCode Script stack/behavior script exported to a
+        # `.livecodescript` file opens with `script "Name"` (quoted, one per
+        # file) -- the dominant declaration form for the Script half of the
+        # corpus, ~63 files -- and the bareword-only capture matched NONE of
+        # them (struct_class_start was 33, all from `.lcb` `module com.x.y`
+        # bareword decls, 0 from `.livecodescript`). Two capture groups now;
+        # `_resolve_class_start_match` in detector.py already handles the
+        # group-1-or-group-2 alternation shape (same as fortran/lua/abap).
+        "class_start": re.compile(
+            r"^[ \t]*(?:script|behavior|widget|module|library)[ \t]+"
+            r"(?:\"([^\"\r\n]{1,200})\"|([a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*){0,10}))"
+            r"(?=[ \t]*(?:--|//|#|/\*|\r?$))",
+            re.I | re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Defensive programming and screen/message locking.
+        "safety": re.compile(
+            r"\b(try|catch|finally|throw|lock\s+screen|lock\s+messages|lock\s+errordialogs|assert|strict\s+compilation|is\s+a|is\s+strictly)\b",
+            re.I,
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing safety (disabling messages, raw do).
+        # BUG FIX (#593, Rule 9/10-class trailing-boundary bug): the "do"
+        # alternative's own negative lookahead exists specifically to
+        # target "do" followed by a NON-identifier (a raw string/
+        # expression -- the actual dynamic-eval bypass), yet the shared
+        # trailing `\b` on the outer group required a WORD character
+        # right after the consumed whitespace. Since the realistic target
+        # of this alternative is almost always a quote or paren (both
+        # non-word), that trailing boundary could essentially never be
+        # satisfied for the alternative's own intended match --
+        # `do "put 1 into x"` and `do (tExpr)` both silently never
+        # matched. Pulled "do\s+(?!...)" out of the group (the lookahead
+        # already fully delimits it; no trailing \b needed).
+        "safety_bypasses": re.compile(
+            r"\b(disable\s+messages|unlock\s+(?:screen|messages)|global\s+)\b|\bdo\s+(?![a-zA-Z_]\w*\b)",
+            re.I,
+        ),
+        # 8. danger: High-Risk Execution. Process killers and blocking UI alerts in execution flow.
+        "high_risk_execution": re.compile(
+            r"\b(answer|ask|do(?!\s+(?:AppleScript|VBScript))|delete\s+(?:file|folder|url)|quit|exit\s+to\s+top)\b",
+            re.I,
+        ),
+        # 9. io: I/O & Network Boundaries. Disk, Network, and URL fetching.
+        # BUG FIX (#593): "post" used `[^ \t\n]+?` to span the payload
+        # expression before "to url", which excludes spaces -- so any
+        # realistic multi-word payload (`post "action=" & tAction to url
+        # tURL`, string concatenation, function calls with args) never
+        # matched; only a single bare token did. Widened to `[^\n]{1,300}?`
+        # (bounded per Rule 5, still linear) so it spans the whole
+        # single-line expression instead of stopping at the first space.
+        "io": re.compile(
+            r"\b(open\s+(?:file|socket|process)|read\s+from|write\s+to|close\s+(?:file|socket|process)|post\s+[^\n]{1,300}?\s+to\s+url|get\s+url|put\s+url|load\s+url)\b",
+            re.I,
+        ),
+        # 10. api: Public Surface Area. Exposed surface area (Any non-private handler).
+        "api": re.compile(
+            r"^[ \t]*(?:public[ \t]+)?(?!(?:private)[ \t]+)(?:on|command|function|getprop|setprop)[ \t]+[a-zA-Z0-9_-]+",
+            re.I | re.M,
+        ),
+        # 11. flux: State Mutation. State mutation (The 'put into' core of xTalk).
+        # BUG FIX (#593): the put/add/subtract source-expression matchers
+        # used `[^ \t\n]+?`, which excludes spaces -- so the dominant real
+        # form (`put the effective filename of this stack into tPath`,
+        # `add the number of lines of tList to tTotal`, any multi-word
+        # expression before the keyword) never matched; only a single bare
+        # token before "into"/"to"/"from" did. Widened to `[^\n]{1,300}?`
+        # (bounded per Rule 5, still linear) so it spans the whole
+        # single-line expression.
+        "state_mutation": re.compile(
+            r"\b(?:put\s+[^\n]{1,300}?\s+(?:into|after|before)|set\s+(?:the[ \t]+)?[a-zA-Z0-9_.]+\s+to|add\s+[^\n]{1,300}?\s+to|subtract\s+[^\n]{1,300}?\s+from)\b",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code.
+        "dead_code": re.compile(
+            r"^[ \t]*(?:--|#|//)[ \t]*(?:on|command|function|put|get|set|if|repeat|try|end)\b",
+            re.I | re.M,
+        ),
+        # 13. doc: Structured Documentation. Structured documentation (/** or --@ tags).
+        # BUG FIX (#593, Rule 9/10-class trailing-boundary bug): the
+        # `Description|Purpose|Author|Summary` alternation had a trailing
+        # `\b` placed immediately after the literal `:` it requires. `:`
+        # is a non-word character, so that `\b` only fires if the very
+        # next character is a word character -- but the near-universal
+        # real form is "Author: John Doe" (colon then a space), which is
+        # non-word on both sides of that position, so the boundary never
+        # fired and the tag never matched. `:` is already self-delimiting
+        # (same principle as Rule 10), so the trailing `\b` is dropped.
+        "doc": re.compile(
+            r"^[ \t]*(?:--\||--@|/\*\*|//!).*(?:@param|@return|@author)|\b(?:Description|Purpose|Author|Summary):",
+            re.I | re.M,
+        ),
+        # 14. test: Testing & Assertions. Unit testing framework markers.
+        "test": re.compile(
+            r"\b(command\s+test[a-zA-Z0-9_]*|pass\s+test|fail\s+test|Levure|LcU|runTests)\b",
+            re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Message scheduling and non-blocking waits.
+        # BUG FIX (#593): the "send X in Y seconds" target-message matcher
+        # used `[^ \t\n]+?`, which excludes spaces -- so the dominant real
+        # form (`send "myHandler" to me in 2 seconds`, any multi-word
+        # message/target expression) never matched; only a single bare
+        # token did. Widened to `[^\n]{1,300}?` (bounded per Rule 5, still
+        # linear).
+        "concurrency": re.compile(
+            r"\b(send\s+[^\n]{1,300}?\s+in\s+[^\n]{1,300}?\s+(?:seconds|milliseconds|ticks)|wait\s+(?:for[ \t]+)?\d+\s+[^ \t\n]+?\s+with\s+messages|dispatch|pendingMessages|cancel)\b",
+            re.I,
+        ),
+        # 16. ui_framework: UI / View Components. HyperCard-descendant object hierarchy.
+        "ui_framework": re.compile(
+            r"\b(card|stack|background|bg|button|btn|field|fld|group|grp|graphic|grc|image|img|scrollbar|browser|data\s+grid|widget)\b",
+            re.I,
+        ),
+        # 17. closures: Closures / Anonymous Functions. (LiveCode Script lacks native lambdas).
+        "closures": None,
+        # 18. globals: Global / Shared State. Global state and environmental bindings.
+        # BUG FIX (#593, Rule 9): `$ENV` started with the symbolic `$`,
+        # which can never satisfy the shared leading `\b` -- real usage is
+        # always preceded by whitespace/line-start (non-word on both
+        # sides of that position), so it never matched. Pulled out of the
+        # group with only a trailing `\b` (the `$` is self-delimiting).
+        "globals": re.compile(
+            r"\b(global\s+|the\s+global|the\s+environment|the\s+platform|it)\b|\$ENV\b",
+            re.I,
+        ),
+        # 19. decorators: Decorators / Annotations. LCB attributes.
+        "decorators": re.compile(r"^[ \t]*@(?:metadata|property|type|name|title)\b", re.M),
+        # 20. generics: Generics / Type Parameters. (LCS is dynamically typed).
+        "generics": None,
+        # 21. comprehensions: Iterators / Comprehensions. Implicit list processing.
+        # BUG FIX (#593): the `filter` target matcher used `[^ \t\n]+?`,
+        # which excludes spaces -- so the common multi-word target form
+        # (`filter lines of tData with "*.txt"`) never matched; only a
+        # single bare token did. Widened to `[^\n]{1,300}?` (bounded per
+        # Rule 5, still linear).
+        "comprehensions": re.compile(
+            r"\brepeat\s+for\s+each\s+(?:item|line|word|char|key|element)\b|\bfilter\s+[^\n]{1,300}?\s+(?:with|without)\b",
+            re.I,
+        ),
+        # 22. scientific: Numerical / Compute Libraries. Native math commands.
+        "scientific": re.compile(
+            r"\b(sqrt|exp|ln|log2|log10|sin|cos|tan|asin|acos|atan|atan2|abs|round|trunc|random|any|average|max|min)\b",
+            re.I,
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Dynamic execution and path hijacking.
+        # BUG FIX (#593, Rule 10): `value(` and `evaluate(` end on the
+        # self-delimiting `(`, but the shared trailing `\b` required a
+        # word character immediately after it -- so the dominant real
+        # call shape (a quoted expression, e.g. `value("1+1")`) never
+        # matched; only an unquoted bare-identifier argument
+        # (`value(tExpr)`) did. Pulled both out of the group with the
+        # trailing `\b` dropped. Same defect hit `do\s+`: the dominant
+        # real form of dynamic script execution is `do "some script"`
+        # (a quoted string), but the shared trailing `\b` required a
+        # word character right after the consumed whitespace, which a
+        # quote never satisfies -- only `do <bareIdentifier>` matched.
+        # Pulled "do\s+" out too (already self-delimited by \s+).
+        "reflection_metaprogramming": re.compile(
+            r"\b(the\s+params|the\s+paramcount|frontscripts|backscripts|insert\s+script)\b|\bdo\s+|value\(|evaluate\(",
+            re.I,
+        ),
+        # 24. import: Dependency Inclusions. Library and stack loading.
+        "import": re.compile(r"\b(start\s+using\s+(?:stack|behavior)|require|include|module)\b", re.I),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:start[ \t]+using[ \t]+(?:stack[ \t]+|behavior[ \t]+)?|require[ \t]+|include[ \t]+|module[ \t]+)(?:['\"]([^'\"]+)['\"]|([^'\"\s]+))",
+            re.I | re.M,
+        ),
+        # 25. ownership: Authorship metadata in comments.
+        "ownership": re.compile(
+            r"^[ \t]*(?:--|//|#)\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
+        # 31. ssr_boundaries: View Horizon. Server-side rendering.
+        # BUG FIX: the whole alternation used to be wrapped in \b(...)\b.
+        # \b requires a word/non-word transition; `<?lc`, `?>`, and every
+        # `$_POST`-style superglobal START with a non-word character
+        # (`<` or `$`), so the leading \b could never match once that
+        # symbol was preceded by anything else non-word (e.g. a space or
+        # line start) -- meaning none of those 6 alternatives (everything
+        # except the plain-word "put header") ever actually matched.
+        # Each alternative now carries only the boundary that makes
+        # sense for its own shape.
+        "ssr_boundaries": re.compile(
+            r"<\?lc|\?>|\$_POST|\$_GET|\$_SERVER|\$_COOKIE|\$_SESSION|\bput\s+header\b",
+            re.I,
+        ),
+        # 32. events: Pub/Sub Network. Signal handlers and event brokers.
+        "events": re.compile(
+            r"^[ \t]*on\s+(?:mouseUp|mouseDown|openCard|closeCard|preOpenCard|openStack|closeStack|resizeStack|rawKeyDown|textChanged)\b",
+            re.I | re.M,
+        ),
+        # 33. dependency_injection: Inversion of Control. Service locator patterns.
+        "dependency_injection": re.compile(
+            r"\b(?:set\s+the\s+behavior\s+of|start\s+using\s+(?:stack|behavior)|insert\s+script\s+into\s+(?:front|back))\b",
+            re.I,
+        ),
+        # 34. macros: Preprocessor Hooks.
+        "macros": None,
+        # 35. pointers: Memory Map. Pass by reference in params.
+        # BUG FIX (#593, Rule 9): the leading `\b` sat directly in front
+        # of the symbolic `@` sigil. Real pass-by-reference params are
+        # always preceded by whitespace/comma/paren (non-word on both
+        # sides of that position), so the leading boundary never fired --
+        # `@pList` never matched at all except in the contrived case of a
+        # word character glued directly onto the `@`. Dropped the leading
+        # `\b` (the `@` is self-delimiting); kept the trailing `\b`.
+        "pointers": re.compile(r"@[a-zA-Z_]\w*\b", re.I),
+        # 36. memory_alloc: Manual Memory Management.
+        "memory_alloc": None,
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics.
+        "telemetry": re.compile(
+            r"\b(revLog|syslog|logError|logInfo|logWarn|logDebug|mergLog|rreLog|lcLog)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Raw terminal output (puts to message box without target).
+        "debug_prints": re.compile(r'^[ \t]*put\s+(?:"[^"]*"|[a-zA-Z0-9_]+)[ \t]*$', re.I | re.M),
+        # 40. explicit_casts (Explicit Type Casting): English-style type checking.
+        "explicit_casts": re.compile(r"\bis\s+(?:not\s+)?a\b|\bis\s+strictly\b", re.I),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts): Hard detonations.
+        "panics_and_aborts": re.compile(r"\b(exit\s+to\s+top|quit|throw|abort)\b", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses): Temporal Duct Tape (Blocking wait).
+        "thread_sleeps": re.compile(r"\bwait\s+(?:for[ \t]+)?\d+\s+[^ \t\n]+?(?!\s+with\s+messages)\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"\b(bitAnd|bitOr|bitXor|bitNot|bitShiftLeft|bitShiftRight)\b", re.I),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(lock\s+screen|lock\s+messages|lock\s+errordialogs)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(constant\s+)\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(
+            r"\b(delete\s+variable|close\s+file|stop\s+using|remove\s+script)\b",
+            re.I,
+        ),
+        # 47. encapsulation
+        "encapsulation": re.compile(r"\b(private\s+)\b", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"^[ \t]*on\s+[a-zA-Z0-9_-]+", re.I | re.M),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(skip\s+test)\b", re.I),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (LiveCode Specifics) ---
+        "serialization_parsing": re.compile(
+            r"(?i)\b(jsonImport|jsonExport|arrayEncode|arrayDecode|revXMLCreateTree)\b"
+        ),
+        "regex_execution": re.compile(r"(?i)\b(matchText|matchChunk|replaceText|filter\s+.*\s+with\s+regex)\b"),
+        "time_date_logic": re.compile(
+            r"(?i)\b(the\s+(?:seconds|ticks|time|date|internet date)|wait\s+(?:for|until))\b"
+        ),
+        # BUG FIX (#593, Rule 10): `shell\s*\(` ends on the self-delimiting
+        # `(`, but the shared trailing `\b` required a word character
+        # immediately after it -- so the dominant real call shape (a
+        # quoted command string, e.g. `shell("ls -la")`) never matched;
+        # only an unquoted bare-identifier argument (`shell(tCmd)`) did.
+        # Pulled out of the group with the trailing `\b` dropped. Also
+        # bounded the unbounded `.*` in `post\s+.*to` per Rule 5 (was
+        # already empirically linear here, but bounding it removes the
+        # theoretical risk while this line was already being touched).
+        "ipc_rpc_bridges": re.compile(
+            r"(?i)\b(open\s+socket|read\s+from\s+socket|post\s+[^\n]{0,300}to|get\s+url|open\s+process)\b|shell\s*\("
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/lua.py b/gitgalaxy/standards/language_standards/languages/lua.py
new file mode 100644
index 000000000..75872c871
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/lua.py
@@ -0,0 +1,236 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Lua 5.5 / Luau / LuaLS Annotations / LuaJIT",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard scripts, Luau (Roblox), Nmap Scripting Engine (.nse), and LuaRocks package specs (.rockspec).
+    "extensions": [".lua", ".luau", ".nse", ".pd_lua", ".wlua", ".rockspec"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Tooling and documentation configurations that are secretly pure Lua code.
+    "exact_matches": ["config.ld"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and linting configs to resolve ambiguous files.
+    "discriminators": [".lua", ".luacheckrc", "stylua.toml", ".rockspec"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for CLI, Game-Engine, and embedded scripts.
+    "shebangs": ["lua", "luajit", "luau", "texlua"],
+    # Maps to Family 5 (Hybrid Dash) -- #621: this comment always said
+    # "Family 5 (Hybrid Dash)" but the value below was "standard_block"
+    # until now, so lua shared a regex with C-style languages and got
+    # zero comment stripping (standard_block never used the `--` token).
+    # "multi_style_dash" is the real family for this shape.
+    # Rationale: Uses '--' for lines and '--[[ ... ]]' for blocks.
+    "lexical_family": "multi_style_dash",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes standard loops and Lua 5.2+ goto.
+        "branch": re.compile(r"\b(if|then|elseif|else|for|in|while|do|repeat|until|break|continue|goto|and|or|not)\b"),
+        # 2. args: Parameters / Coupling. Captures parameters in named and anonymous function signatures.
+        # #1209: parameter-list span wrapped in its own capture group (was
+        # only reachable via group(0), the whole match including the
+        # "function"/name prefix) so detector.py's counter isolates just
+        # "(...)" -- the whole-match fallback overcounted every zero/
+        # one-arg signature by +1 the same way Python's did (#1199). Name
+        # group added too, purely so existing extraction tests keep
+        # passing.
+        "args": re.compile(
+            r"\bfunction\s*([a-zA-Z_][\w.:]*\s*)?(?:<(?:[^<>]|<[^<>]*>)*>\s*)?(\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\))"
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope and data definitions.
+        "structural_boundaries": re.compile(
+            r"\b(local|end|require|module|return|export\s+type|type)\b|<\s*(?:const|close|toclose)\s*>"
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic blocks (named functions).
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL FUNCTION SHIELD (LUA) ]
+            # Lua developers frequently split the `local`, `function`, and identifier
+            # across newlines.
+            # FIX: Upgraded horizontal `[ \t]+` bounds to `[ \t\n]+` across the
+            # modifier stack, and securely allowed `[ \t\n]*` in the positive
+            # lookahead for the parenthesis. Includes support for Luau generic types.
+            # =====================================================================
+            # #2461: also anchor after a `;` -- a `local function` / `function`
+            # declaration is not always the first statement on its line
+            # (`local a; local function f(x) ... end`, common in the Lua test
+            # suite). `;` is a bare statement separator once strings/comments
+            # are shielded, so a `function` keyword immediately after one is a
+            # real declaration head, not text.
+            r"(?:^[ \t]*|;[ \t]*)(?:local[ \t\n]+)?(?:export[ \t\n]+)?function[ \t\n]+([a-zA-Z_][\w.:]*)(?=[ \t\n]*(?:<(?:[^<>]|<[^<>]*>)*>[ \t\n]*)?\()",
+            re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Captures proto-tables or EmmyLua class definitions.
+        "class_start": re.compile(
+            r"^[ \t]*---@class\s+([a-zA-Z_]\w*)|^[ \t]*(?:local[ \t\n]+)?(?:export[ \t\n]+)?(?:type[ \t\n]+)?([A-Z][a-zA-Z0-9_]*)(?=[ \t\n]*=[ \t\n]*\{)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Protected calls, assertions, and type checks.
+        "safety": re.compile(
+            r"\b(pcall|xpcall|assert|error|type|getmetatable|rawequal|ipairs|pairs|next)\b|<\s*(?:const|close|toclose)\s*>"
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing safety (environment manipulation/raw access).
+        "safety_bypasses": re.compile(
+            r"\b(rawget|rawset|rawlen|debug\.[a-zA-Z0-9_]+|collectgarbage|_G|_ENV|getfenv|setfenv)\b"
+        ),
+        # 8. danger: High-Risk Execution. Dynamic evaluation and OS-level execution hooks.
+        "high_risk_execution": re.compile(r"\b(os\.execute|os\.exit|os\.remove|os\.rename|load|loadstring|loadfile)\b"),
+        # 9. io: I/O & Network Boundaries. Standard IO library and environment inquiries.
+        "io": re.compile(r"\b(io\.open|io\.read|io\.lines|io\.close|io\.input|io\.output|io\.popen|os\.getenv)\b"),
+        # 10. api: Public Surface Area. Functions NOT marked local or explicit module returns.
+        "api": re.compile(
+            r"^[ \t]*function\s+[^_][\w.:]*|^[ \t]*return\s+[a-zA-Z_]\w*[ \t]*$|---@public|\bexport\b",
+            re.M,
+        ),
+        # 11. flux: State Mutation. State mutation (assignments and table mutators).
+        "state_mutation": re.compile(
+            r"\b[a-zA-Z_]\w*(?:\[[^\]]+\]|\.[a-zA-Z_]\w*)?\s*(?<![=<>~])=(?![=])|\btable\.(?:insert|remove|move|sort|concat)\b"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code trails.
+        "dead_code": re.compile(
+            r"(?:--|--\[=*\[)[ \t]*(?:if|local|function|for|while|print|return)\b",
+            re.M,
+        ),
+        # 13. doc: Structured Documentation. LDoc/EmmyLua style documentation.
+        "doc": re.compile(
+            r"---@(?:param|return|field|see|alias|private|protected|diagnostic)|---\s*[A-Z]",
+            re.M,
+        ),
+        # 14. test: Testing & Assertions. Busted, LuaUnit, and custom verification markers.
+        "test": re.compile(
+            r'\b(?:setup|teardown|busted|luassert|assert|mock|stub|spy|luaunit|Test[A-Z]\w*)\b|\b(?:describe|it)\s*[\'"(]'
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Lua coroutines and task schedulers.
+        "concurrency": re.compile(
+            r"\b(coroutine\.(?:create|resume|yield|wrap|status|isyieldable|close)|task\.(?:spawn|wait|defer|delay)|uv\.[a-zA-Z0-9_]+)\b"
+        ),
+        # 16. ui_framework: UI / View Components. Game engine hooks (LÖVE, Solar2D, Defold, Roblox).
+        "ui_framework": re.compile(
+            r"\b(love\.[a-zA-Z0-9_]+|display\.new[a-zA-Z0-9_]+|gui\.[a-zA-Z0-9_]+|Roact\.[a-zA-Z0-9_]+|Instance\.new)\b"
+        ),
+        # 17. closures: Closures / Anonymous Functions. Anonymous function depth.
+        "closures": re.compile(r"(?:^|[(=,\s])function\s*\([^)]*\)", re.M),
+        # 18. globals: Global / Shared State. Access to global registries.
+        "globals": re.compile(r"\b(_G|_ENV|_VERSION|arg)\b|^[ \t]*[A-Z][A-Z0-9_]*[ \t]*=(?![=])", re.M),
+        # 19. decorators: Decorators / Annotations. EmmyLua annotations.
+        "decorators": re.compile(r"^[ \t]*---@[a-zA-Z_]\w*", re.M),
+        # 20. generics: Generics / Type Parameters. EmmyLua generic type annotations.
+        "generics": re.compile(r"---@(?:generic|type)\s+[a-zA-Z_]\w*(?:<[^>]*>)?"),
+        # 21. comprehensions: Iterators / Comprehensions. Functional iterator patterns.
+        "comprehensions": re.compile(
+            r"\b(?:pairs|ipairs|next|string\.gmatch)\b|\b(?:lume|moses|_\.)(?:map|filter|reduce|each|find|any|all)\b"
+        ),
+        # 22. scientific: Numerical / Compute Libraries. Standard math library.
+        "scientific": re.compile(r"\b(math\.[a-zA-Z0-9_]+|bit32\.[a-zA-Z0-9_]+)\b|<<|>>|//"),
+        # 23. heat_triggers: Metaprogramming & Reflection. Metatable overrides and Dunder methods.
+        "reflection_metaprogramming": re.compile(
+            r"\b(__index|__newindex|__call|__add|__sub|__mul|__div|__mod|__pow|__unm|__idiv|__band|__bor|__bxor|__bnot|__shl|__shr|__concat|__len|__eq|__lt|__le|__gc|__close|__mode)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"\b(?:require|dofile)\b[ \t\n]*\(?[ \t\n]*['\"]", re.M),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (LUA) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Firewall.
+            #
+            # HISTORICAL BUG: Anchored to `^[ \t]*`. In Lua, modules are simply tables
+            # returned by the `require` function. They are frequently lazy-loaded
+            # inside local functions or conditionally assigned. Furthermore, because
+            # the regex demanded the assignment (`local x = require...`) to touch the
+            # left margin, it missed indented conditionals and inline evaluations entirely.
+            #
+            # THE FIX: Stripped the `^` anchor and completely deleted the bloated
+            # variable-assignment capture group. We now scan directly for the `require`
+            # or `dofile` boundary.
+            #
+            # [ THE PARENTHESIS SHIELD ]
+            # Lua allows calling functions with a single string argument without
+            # parentheses: `require "math"` vs `require("math")`. The `\(?` safely
+            # bridges both syntaxes.
+            # =====================================================================
+            r"\b(?:require|dofile)[ \t\n]*\(?[ \t\n]*['\"]([^'\"]+)['\"]",
+            re.M,
+        ),
+        # 25. ownership: Authorship metadata in comments.
+        "ownership": re.compile(
+            r"--\s*(?:Author|Copyright|License|Maintainer):\s+([^\n]+)|---\s*@author\s+([^\n]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
+        # 31. ssr_boundaries: View Horizon. Server-side rendering (Lapis/OpenResty).
+        "ssr_boundaries": re.compile(r"\b(ngx\.say|ngx\.print|ngx\.exit|ngx\.req|lapis\.Serve|lapis\.Application)\b"),
+        # 32. events: Pub/Sub Network. Signal handlers and event brokers.
+        "events": re.compile(
+            r"\b(addEventListener|removeEventListener|dispatchEvent|on|emit|EventEmitter|Connect|FireServer|FireClient)\b"
+        ),
+        # 33. dependency_injection: Inversion of Control. Service locator patterns.
+        "dependency_injection": re.compile(r"\b(inject|container:get|container:resolve|Locator)\b"),
+        # 34. macros: Preprocessor Hooks. (Lua lacks a native preprocessor).
+        "macros": None,
+        # 35. pointers: Memory Map. FFI raw memory interactions.
+        "pointers": re.compile(
+            r"\b(ffi\.cast|ffi\.new|ffi\.cdef|ffi\.typeof|ffi\.sizeof|ffi\.alignof|ffi\.offsetof|ffi\.string|ffi\.copy|ffi\.fill)\b"
+        ),
+        # 36. memory_alloc: Manual Memory Management. Garbage collection triggers and FFI malloc.
+        "memory_alloc": re.compile(r"\b(ffi\.C\.malloc|ffi\.C\.free|ffi\.C\.calloc|ffi\.C\.realloc|collectgarbage)\b"),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics.
+        "telemetry": re.compile(r"\b(?:log\.(?:info|warn|error|debug|trace)|ngx\.log|ngx\.ERR|ngx\.INFO)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(print|warn|io\.write)\b"),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax.
+        "explicit_casts": re.compile(r"\b(ffi\.cast|tonumber|tostring)\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(error|assert|os\.exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r'\b(task\.wait|os\.execute\s*\(?[\'"]sleep)\b'),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|&|\||\^|~(?!=)"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(mutex|lock|semaphore|critical_section|uv\.mutex)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"<\s*const\s*>"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(ffi\.C\.free|collectgarbage|io\.close|:[ \t]*close)\b|<\s*(?:close|toclose)\s*>"),
+        # 47. encapsulation
+        "encapsulation": re.compile(r"\b(local|_ENV)\b|---@private", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        # BUG FIX: `on\s*\(` ends on `(` (non-word), so the shared
+        # trailing \b could only fire when a word char immediately
+        # followed the paren -- never true for the common real call
+        # shape `emitter:on('event', cb)`, where a quote follows.
+        "listeners": re.compile(r"\bon\s*\(|\b(?:subscribe|Connect|addEventListener)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(xdescribe|xit|skip)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Lua Specifics) ---
+        "serialization_parsing": re.compile(r"\b(string\.dump|loadstring|load|cjson\.decode|cjson\.encode)\b"),
+        "regex_execution": re.compile(r"\b(string\.match|string\.gmatch|string\.find|string\.gsub)\b"),
+        "time_date_logic": re.compile(r"\b(os\.time|os\.clock|os\.date|os\.difftime)\b"),
+        "ipc_rpc_bridges": re.compile(
+            r"\b(os\.execute|io\.popen|coroutine\.create|coroutine\.resume|coroutine\.yield)\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/m4.py b/gitgalaxy/standards/language_standards/languages/m4.py
new file mode 100644
index 000000000..45e3b5fb2
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/m4.py
@@ -0,0 +1,205 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "GNU M4 1.4+ / Autoconf 2.71+",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "v5.1",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard macros, Autotest suites (.at), Autoconf logic (.ac), and template stubs (.in).
+    "extensions": [".m4", ".at", ".ac", ".in"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: The undeniable structural anchors of the GNU build system.
+    "exact_matches": ["configure.ac", "configure.in"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Automake configurations and standard Makefiles acting as contextual baselines for ambiguous .in templates.
+    "discriminators": [
+        ".m4",
+        "Makefile.am",
+        "Makefile.in",
+        "aclocal.m4",
+        "config.h.in",
+    ],
+    # EXECUTION SIGNATURES: M4 is a macro processor; no traditional shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: M4 uniquely uses the `dnl` (Delete to NewLine) macro to act as its
+    # line-level Commented / Non-Executable Text.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # M4 branching logic and Autoconf shell-generation branches.
+        "branch": re.compile(r"\b(?:ifelse|ifdef|AS_IF|AS_CASE|m4_if|m4_case|m4_cond|m4_ifval|m4_ifblank)\b"),
+        # 2. args (Parameters / Coupling)
+        # M4 positional arguments.
+        "args": re.compile(r"\$[0-9]+|\$[@*#]"),
+        # 3. linear (Sequential Boundaries)
+        # Execution flow diversion and dependency signaling.
+        "structural_boundaries": re.compile(r"\b(?:divert|undivert|m4_divert|m4_undivert|m4_require|AC_REQUIRE)\b"),
+        # 4. func_start (Executable Logic Anchors)
+        # Defining a macro establishes an executable logic block in M4.
+        # BUG FIX (2026-08-20, tri-comparison ledger sweep): the old pattern captured
+        # the DEFUN KEYWORD itself as group 1 (e.g. "AC_DEFUN"), not the macro actually
+        # being defined -- structurally identical to matching "def" as a function's name
+        # instead of what follows it. Now captures the real first-argument macro name,
+        # tolerating all three real m4 quoting conventions seen in production autoconf
+        # code: classic backtick/apostrophe (`name'), bracket (`[name]`, or the more
+        # defensive double-bracket `[[name]]`), and unquoted.
+        "func_start": re.compile(
+            r"^[ \t]*(?:m4_define|define|AC_DEFUN|AC_DEFUN_ONCE|AU_DEFUN|m4_defun)\s*\("
+            r"\s*(?:`([A-Za-z_][A-Za-z0-9_]*)'|\[{1,2}([A-Za-z_][A-Za-z0-9_]*)\]{0,2}|([A-Za-z_][A-Za-z0-9_]*))",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        "class_start": None,  # M4 is a macro processor, lacking objects.
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Autoconf environment checks and M4 assertions.
+        "safety": re.compile(
+            r"\b(?:m4_assert|AS_VERSION_COMPARE|AC_CHECK_PROGS?|AC_CHECK_LIB|AC_CHECK_HEADERS?|AC_CHECK_FUNCS?|m4_warn)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Dynamically altering the quote characters or comment strings breaks the parser context completely.
+        "safety_bypasses": re.compile(r"\b(?:changequote|changecom|m4_changequote|m4_changecom|m4_ignore)\b"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Executing raw shell commands during macro expansion (not generation).
+        "high_risk_execution": re.compile(r"\b(?:syscmd|esyscmd|m4_syscmd|m4_esyscmd)\b"),
+        # 9. io (I/O & Network Boundaries)
+        # Reading system values, creating temp files, or emitting generated configurations.
+        "io": re.compile(r"\b(?:sysval|mkstemp|maketemp|m4_mkstemp|m4_maketemp|AC_CONFIG_FILES|AC_OUTPUT)\b"),
+        # 10. api (Public Surface Area)
+        # M4 macros are inherently public, but these explicitly export state into the generated Makefile/C headers.
+        "api": re.compile(r"\b(?:AC_SUBST|AC_DEFINE|AC_PROVIDE|m4_provide)\b"),
+        # 11. flux (State Mutation)
+        # Stack-based macro overriding and list appending.
+        "state_mutation": re.compile(
+            r"\b(?:pushdef|popdef|m4_pushdef|m4_popdef|m4_append|m4_append_uniq|m4_combine)\b"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out macro definitions.
+        # COMMENT-STYLE COMPLETENESS (Engine Rule 12): GNU M4's actual default
+        # lexer-level comment delimiter is `#`-to-newline (confirmed in the shared
+        # line_exclusive family table in gitgalaxy_config.py, which prism.py uses
+        # to segment the comment stream for every line_exclusive language) --
+        # `dnl` is a separate, macro-level discard-to-newline mechanism. Real
+        # Autoconf/m4 corpus files use `#` comments as heavily as (often more
+        # heavily than) `dnl`. Wired to both prefixes; only checking `dnl` missed
+        # the dominant style.
+        "dead_code": re.compile(r"^[ \t]*(?:dnl[ \t]+|#[ \t]*)(?:m4_define|define|AC_DEFUN|ifelse|AS_IF)\b", re.M),
+        # 13. doc (Structured Documentation)
+        # Documentation blocks or explicit copyright insertions into the output script.
+        # Same comment-style completeness fix as dead_code above.
+        "doc": re.compile(r"^[ \t]*(?:dnl[ \t]+|#[ \t]*)@(?:param|return|brief)|AC_COPYRIGHT\b", re.M),
+        # 14. test (Testing & Assertions)
+        # The GNU Autotest framework.
+        "test": re.compile(r"\b(?:AT_SETUP|AT_CHECK|AT_CLEANUP|AT_INIT|AT_DATA)\b"),
+        # --- 🔬 PHASE 3: SPECIALIZED SENSORS (Architecture & Complexity) ---
+        # 15. concurrency
+        "concurrency": None,
+        # 16. ui_framework
+        "ui_framework": None,
+        # 17. closures
+        "closures": None,
+        # 18. globals (Global / Shared State)
+        # Environment variables mapped into the configure script.
+        "globals": re.compile(r"\b(?:AC_ARG_VAR|AC_ENV_VAR|m4_divert_text)\b"),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions (Iterators / Comprehensions)
+        # M4 map and foreach iterative constructs.
+        "comprehensions": re.compile(r"\b(?:m4_foreach|m4_foreach_w|m4_map|m4_map_sep)\b"),
+        # 22. scientific (Numerical / Compute Libraries)
+        # M4's native integer arithmetic evaluator.
+        "scientific": re.compile(r"\b(?:eval|m4_eval)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Advanced string metaprogramming and regex substitutions.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:translit|patsubst|regexp|m4_translit|m4_bpatsubst|m4_bregexp|m4_pattern_allow)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        # File inclusions.
+        "import": re.compile(r"^[ \t]*(?:include|sinclude|m4_include|m4_sinclude)\b", re.M),
+        # 25. ownership (Authorship Metadata)
+        # Same comment-style completeness fix as dead_code above (Engine Rule 12).
+        "ownership": re.compile(
+            r"^[ \t]*(?:dnl[ \t]+|#[ \t]*)(?:Author|Maintainer|Copyright|License):|AC_COPYRIGHT",
+            re.I | re.M,
+        ),
+        # --- 🌌 PHASE 4: EXTENDED DIMENSIONS (Specialized Sub-Equations) ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[[ \t]*(?:SPEC[ \t]*-[ \t]*\d{1,10}|\b(?:spec|audit)\b)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries
+        "ssr_boundaries": None,
+        # 32. events
+        "events": None,
+        # 33. dependency_injection
+        # M4 dependency chaining to ensure macros execute in the correct order.
+        "dependency_injection": re.compile(r"\b(?:AC_REQUIRE|m4_require)\b"),
+        # 34. macros (Preprocessor Directives / Macros)
+        # M4 is the macro engine, but this tracks configuring C-level preprocessor hooks.
+        "macros": re.compile(r"\b(?:AC_DEFINE|AC_DEFINE_UNQUOTED|AH_TEMPLATE)\b"),
+        # 35. pointers
+        "pointers": None,
+        # 36. memory_alloc
+        "memory_alloc": None,
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        # Logging configure progress securely to stdout and config.log.
+        "telemetry": re.compile(r"\b(?:AC_MSG_CHECKING|AC_MSG_RESULT|AC_MSG_WARN|AC_MSG_NOTICE)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        # Raw M4 error printing.
+        "debug_prints": re.compile(r"\b(?:errprint|m4_errprint)\b"),
+        # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": None,
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # Hard aborts.
+        "panics_and_aborts": re.compile(r"\b(?:m4_fatal|AC_MSG_ERROR|AC_MSG_FAILURE|AS_EXIT)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        # Raw sleeps in generated scripts.
+        "thread_sleeps": re.compile(r"\b(?:sleep)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": None,
+        # 44. sync_locks
+        "sync_locks": None,
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": None,  # M4 macros are mutable by design.
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # Macro unloading and Autotest tear-downs.
+        "cleanup": re.compile(r"\b(?:m4_popdef|popdef|AT_CLEANUP)\b"),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Forbidding specific patterns from reaching the output script.
+        "encapsulation": re.compile(r"\b(?:m4_pattern_forbid)\b"),
+        # 48. listeners
+        "listeners": None,
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # Skipping tests in the Autotest framework.
+        "test_skip": re.compile(r"\b(?:AT_SKIP_IF)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/makefile.py b/gitgalaxy/standards/language_standards/languages/makefile.py
new file mode 100644
index 000000000..1028367d0
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/makefile.py
@@ -0,0 +1,273 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "GNU Make 4.4+",
+        "last_updated": "2026-02-28",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard make extensions, definitions, and includes.
+    "extensions": [".mk", ".mak", ".make", ".def"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: The universally recognized, extensionless build configurations that are executed as pure code.
+    "exact_matches": [
+        "Makefile",
+        "makefile",
+        "GNUmakefile",
+        "Kbuild",
+        "Makeconf",
+        "Makevars",
+    ],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling configurations acting as disambiguation anchors to resolve ambiguous .mk includes.
+    "discriminators": ["Makefile", "makefile", "configure.ac", "CMakeLists.txt"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for executable make scripts.
+    "shebangs": ["make", "gmake"],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Make natively uses '#' exclusively for line-level comments.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --------------------------------------------------------------------------
+        # 1. GEOMETRY & SHAPE (Geometry & Shape)
+        # --------------------------------------------------------------------------
+        # Captures Make conditionals and typical inline shell conditional branches.
+        "branch": re.compile(
+            r"^[ \t]*(?:ifeq|ifneq|ifdef|ifndef|else|endif)\b(?![ \t]*:)|(?:^[ \t]*(?:@|-|\+)*[ \t]*|[;|&(][ \t]*)\b(?:if|elif|for|while|case)\b|&&|\|\|",
+            re.M,
+        ),
+        # Make dynamically accesses arguments within $(call macro, args...) or positional $1, $2 inside recipes.
+        # BUG FIX (epic #813/#844): had no awareness of Make's own `$$`
+        # escaping convention (a doubled `$` means "a literal `$`,
+        # unescaped, for whatever consumes this text next"). Recipe lines
+        # commonly write `$$1`/`$$(1)` specifically to pass a literal
+        # `$1` through to the SHELL (the shell's own first positional
+        # parameter, or any other shell variable) -- unrelated to Make's
+        # own macro-call mechanism entirely, since Make's own `$`
+        # expansion already happened one layer up. The old pattern had no
+        # way to tell these apart from a real Make-level reference. Fixed
+        # with a negative lookbehind so a `$` immediately preceded by
+        # another `$` can never start a match.
+        "args": re.compile(r"(?<!\$)\$(?:\([0-9]+\)|\{[0-9]+\}|[0-9]\b|[({]call[ \t]+[a-zA-Z0-9_.-]+)"),
+        # Smooth structural boundaries: variable assignments (:=, =, ?=) and native structural controls like vpath.
+        # Explicitly excludes the append operator `+=` which belongs in flux.
+        "structural_boundaries": re.compile(
+            r"^[ \t]*(?:[a-zA-Z0-9_.-]|\+(?!=))+[ \t]*(?::|\?|::)?=(?![ \t]*=)|^[ \t]*(?:vpath|undefine)\b",
+            re.M,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Strict capture group and positive lookahead applied for both Obj-C methods and C-functions.
+        # BUG FIX (epic #813/#844), two findings:
+        # 1. The trailing lookahead only checked for a bare `:`/`::`, with
+        #    no exclusion for an immediately-following `=` -- so
+        #    `MY_VAR := value` and `MY_VAR ::= value` (GNU Make's two
+        #    immediate-expansion assignment operators, arguably THE most
+        #    common modern Make idiom) were both misidentified as real
+        #    target declarations. Fixed with a negative lookahead so
+        #    neither colon form can be immediately followed by `=`.
+        # 2. A multi-target rule (`a b c: deps`, a real and common Make
+        #    idiom for sharing one recipe across several targets) wasn't
+        #    detected AT ALL -- the identifier class stopped at the first
+        #    space, then the colon lookahead failed against the next
+        #    target name instead of a colon, and there's no second `^`
+        #    anchor point later on the same line to retry from. Fixed by
+        #    allowing additional space-separated co-target tokens (same
+        #    char class) between the captured first name and the colon
+        #    lookahead -- but this alone reopened a NEW false-positive
+        #    vector: a recipe line with multiple words where a later word
+        #    contains a colon not followed by `=` (a URL's `://`, a bare
+        #    time value `10:30`) would misparse as "co-target tokens then
+        #    a real target-defining colon". Recipe lines are ALWAYS
+        #    tab-indented in Make's own lexical rules (a leading tab means
+        #    "recipe", unconditionally, absent a custom .RECIPEPREFIX) --
+        #    so the leading-whitespace class was narrowed from `[ \t]*` to
+        #    `[ ]*` (spaces only), which structurally excludes every
+        #    recipe line from ever reaching the target-declaration path at
+        #    all, closing the new vector without limiting the multi-target
+        #    fix itself.
+        #
+        # Considered and DELIBERATELY NOT fixed: a variable-referenced
+        # target name (`$(TARGET): $(OBJECTS)`, also common) is still
+        # invisible -- `$`/`(`/`)` are still outside the char class. This
+        # is intentional, not an oversight: tests/extraction/languages/test_makefile_strict
+        # .py's test_makefile_func_start_and_macros_no_false_collision
+        # deliberately locks in that `$(1): $(2)` (a `define...endef`
+        # template's macro-positional-parameter placeholder) must NOT
+        # satisfy func_start, and this rule has no block/context tracking
+        # (line_exclusive lexical family) to distinguish that shape from a
+        # real `$(TARGET):` reference at the regex level. Safely
+        # separating the two would need a structured token (real
+        # variable names vs. bare positional-parameter digits), not a
+        # flat character-class widening -- judged out of scope for this
+        # issue; documented as a known limitation instead.
+        "func_start": re.compile(
+            r"^[ ]*(?!\.(?:PHONY|POSIX|SECONDARY|PRECIOUS|DELETE_ON_ERROR|KEEP_STATE|NOTPARALLEL|WAIT|SILENT|EXPORT_ALL_VARIABLES|IGNORE|SUFFIXES|DEFAULT|INTERMEDIATE|NOTINTERMEDIATE|LOW_RESOLUTION_TIME|ONESHELL|SECONDEXPANSION)\b)"
+            r"([a-zA-Z0-9_./%+-]+)(?:[ \t]+[a-zA-Z0-9_./%+-]+)*(?=[ \t]*(?:::(?!=)|:(?!:?=)))",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Defines OO boundaries. Strict capture group and positive lookahead applied.
+        "class_start": None,
+        # --------------------------------------------------------------------------
+        # 2. STRUCTURAL INTEGRITY & TECH DEBT (Structural Integrity & Tech Debt)
+        # --------------------------------------------------------------------------
+        # Defensive programming: Executing internal logic checks, asserting tool paths, or using safety system states.
+        "safety": re.compile(
+            r"^[ \t]*\.(?:POSIX|SECONDARY|PRECIOUS|DELETE_ON_ERROR|KEEP_STATE)\b|\bcommand[ \t]+-v\b|\$\((?:if|or|and)[ \t]+",
+            re.M,
+        ),
+        # Bypassing safety: Prefixing recipes with `-` to swallow errors, or forcefully exiting true via shell logic.
+        # NOTE: real recipes commonly separate the `-` modifier from the command with
+        # whitespace (e.g. "\t- rm -f build/"); GNU Make strips the modifier and any
+        # following whitespace before invoking the shell, so both "-rm" and "- rm" are
+        # valid, equally common ignore-errors forms.
+        "safety_bypasses": re.compile(r"^\t[ \t]*-[ \t]*[a-zA-Z0-9_./$]|\|\|[ \t]*(?:true|exit[ \t]+0)\b", re.M),
+        # Heavily destructive sequence patterns or overriding permissions. (Eval is categorized under heat_triggers).
+        "high_risk_execution": re.compile(r"\bsudo[ \t]+|\brm[ \t]+-[rR]?[fF][ \t]+(?:/|\$[{(])|\bkill[ \t]+-9\b"),
+        # Interacting directly with outputs, networks, or the disk filesystem.
+        "io": re.compile(
+            r"\$\((?:file|wildcard)[ \t]+|\b(?:curl|wget|scp|rsync|tar|unzip|mkdir|cp|mv)\b|>>?[ \t]*[^ \t\n/]+"
+        ),
+        # Exposed architecture limits (Exporting variables globally or explicit lifecycle public endpoints).
+        "api": re.compile(
+            r"^[ \t]*(?:\.PHONY|export\b|(?:all|install|build|clean|test|run)[ \t]*::?)",
+            re.M,
+        ),
+        # Mutating variable state by appending (+=) or shell assignment (!=). .
+        "state_mutation": re.compile(r"^[ \t]*(?:[a-zA-Z0-9_.-]|\+(?!=))+[ \t]*(?:\+|!)=", re.M),
+        # Commented-out targets, commented out shell logic, or commented conditional Make directives.
+        "dead_code": re.compile(
+            r"^[ \t]*#[ \t]*(?:[a-zA-Z0-9_./%+-]+[ \t]*::?|(?:[a-zA-Z0-9_.-]|\+(?!=))+[ \t]*(?::|\?|::)?=|\b(?:ifeq|ifneq|ifdef|ifndef|include)\b)",
+            re.M,
+        ),
+        # Structured self-documenting makefile comments typically utilizing a double hash block.
+        "doc": re.compile(r"^[ \t]*##[ \t]+[^ \t\n]+", re.M),
+        # Testing endpoints natively executing verifications or launching language-specific test suites.
+        "test": re.compile(
+            r"\b(?:npm[ \t]+test|yarn[ \t]+test|pytest|go[ \t]+test|cargo[ \t]+test|make[ \t]+test)\b",
+            re.M | re.I,
+        ),
+        # --------------------------------------------------------------------------
+        # 3. DOMAIN & ARCHITECTURE (Architectural Style and Abstractions)
+        # --------------------------------------------------------------------------
+        # Setting explicitly threaded job pipelines, detaching processes to background, or asserting waits.
+        "concurrency": re.compile(
+            r"\b(?:make[ \t]+-j|xargs[ \t]+-P|wait)\b|&[ \t]*$|\$\(MAKE\)[ \t]+-j",
+            re.M,
+        ),
+        "ui_framework": None,
+        "closures": None,
+        # Core global state built-in environments spanning the build system.
+        "globals": re.compile(r"\$\((?:MAKE|MAKEFLAGS|MAKECMDGOALS|CURDIR|SHELL|PATH|USER|HOME|PWD|\.VARIABLES)\)"),
+        "decorators": None,
+        "generics": None,
+        # High-density text manipulating algorithms native to GNU Make iterating through variable spaces.
+        "comprehensions": re.compile(
+            r"\$\((?:foreach|filter|filter-out|patsubst|subst|addprefix|addsuffix|words|firstword|lastword|sort|findstring|join)[ \t]+"
+        ),
+        # Launching explicit calculation boundaries outside the Make environment natively.
+        "scientific": re.compile(r"\b(?:bc|expr|awk)\b|\$\(shell[ \t]+expr[ \t]+"),
+        # Extremely dense meta-programming manipulations drastically raising cognitive load during debugging.
+        "reflection_metaprogramming": re.compile(
+            r"\$\((?:eval|call|value|origin|flavor|shell)[ \t]+|\.SECONDEXPANSION:"
+        ),
+        # Linking isolated segments of the graph execution via modular file resolution.
+        "import": re.compile(r"^[ \t]*-?(?:include|sinclude)[ \t]+[^ \t\n]+", re.M),
+        # BUG FIX (epic #813/#844): the leading `[ \t]*` allowed a TAB, but
+        # a tab-initial line is ALWAYS a recipe command in Make's own
+        # lexical rules (never a directive, absent a custom
+        # .RECIPEPREFIX) -- same root cause and fix as func_start's fix
+        # above. A recipe line whose command happens to be literally
+        # named "include"/"sinclude" (e.g. `\tinclude /etc/motd`) was
+        # misidentified as a real include directive. Narrowed to `[ ]*`
+        # (spaces only), matching func_start's fix. `import` (a sibling,
+        # non-gauntlet-scoped rule with the same pattern) deliberately
+        # left unfixed, out of the four-gauntlet scope for this issue --
+        # same precedent as #843's identical call for yaml.
+        "_dependency_capture": re.compile(r"^[ ]*-?(?:include|sinclude)[ \t\n]+([^\s#]+)", re.M),
+        # Metadata anchoring authorship and structural domain owners.
+        "ownership": re.compile(
+            r"^[ \t]*#[ \t]*(?:@author\b|author:|maintainer:|created by:)",
+            re.I | re.M,
+        ),
+        # --------------------------------------------------------------------------
+        # 4. SPECIALIZED EXTRACTIONS (Sub-Equations and Low-Level/System)
+        # --------------------------------------------------------------------------
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        "spec_exposure": re.compile(r"\[(?:spec-[0-9]+|audit|spec)\]", re.I),
+        "ssr_boundaries": None,
+        "events": None,
+        "dependency_injection": None,
+        # Expanding structural blocks dynamically into recipes prior to runtime evaluation.
+        "macros": re.compile(r"^[ \t]*define[ \t]+[a-zA-Z0-9_.-]+", re.M),
+        "pointers": None,
+        "memory_alloc": None,
+        "inline_asm": None,
+        # --------------------------------------------------------------------------
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # --------------------------------------------------------------------------
+        # Emitting pure, safe structural observability that does not risk halting or crashing the graph execution.
+        # NOTE: bounded to one level of nested $(...) (e.g. "$(info Building $(call name))")
+        # instead of a flat [^)\n]* class, which truncated at the first inner ")" and
+        # under-captured the real $(info ...) span on realistic nested-call messages.
+        "telemetry": re.compile(r"\$\(info[ \t]+(?:[^()\n]|\([^()\n]*\))*\)"),
+        # Standard output commands echoing transient debris to the shell execution log.
+        # NOTE: also matches echo/printf immediately after a `;` (the common one-liner
+        # recipe form "target: deps; echo hi"), not just at true line start -- recipes are
+        # frequently written on the same physical line as the target when short.
+        "debug_prints": re.compile(
+            r"^[ \t]*@?(?:echo|printf)[ \t]+|;[ \t]*@?(?:echo|printf)[ \t]+|\$\(warning[ \t]+(?:[^()\n]|\([^()\n]*\))*\)",
+            re.M,
+        ),
+        "explicit_casts": None,
+        # System detonators specifically intended to abort the build flow if preconditions are failed natively or via shell.
+        "panics_and_aborts": re.compile(
+            r"\$\(error[ \t]+(?:[^()\n]|\([^()\n]*\))*\)|\bexit[ \t]+[1-9][0-9]*\b|\bfalse\b"
+        ),
+        # Temporal duct tape strictly applying forced pausing.
+        "thread_sleeps": re.compile(r"\bsleep[ \t]+[0-9]+"),
+        "bitwise_ops": None,  # Kept null as Bash pipe IPC limits logic math precision.
+        # Explicit locks halting temporal thread races. .
+        "sync_locks": re.compile(r"^[ \t]*\.(?:NOTPARALLEL|WAIT)[ \t]*::?|\bflock[ \t]+", re.M),
+        # Enforcing strict immutability bounds on state configuration. .
+        "immutability_locks": re.compile(r"^[ \t]*override[ \t]+[a-zA-Z0-9_.-]+", re.M),
+        # Janitor routines ripping apart build artifacts and cleanly tearing down output paths. .
+        "cleanup": re.compile(r"^[ \t]*(?:dist)?clean[ \t]*::?|\brm[ \t]+-[a-zA-Z]*f[a-zA-Z]*\b", re.M),
+        # The Vault explicitly hiding scope logic away from external API leakage boundaries. .
+        "encapsulation": re.compile(
+            r"^[ \t]*(?:unexport[ \t]+[a-zA-Z0-9_.-]+|[a-zA-Z0-9_.-]+[ \t]*:[ \t]*private[ \t]+|\.SILENT[ \t]*:)",
+            re.M,
+        ),
+        # Subscribing the file system to continuous native observation hooks.
+        "listeners": re.compile(r"\b(?:inotifywait|watch)[ \t]+"),
+        # Safety theater actively bypassing execution verifications during a test endpoint invocation.
+        "test_skip": re.compile(
+            r"\b(?:SKIP(?:_TESTS?)?|XFAIL)[ \t]*=[ \t]*[1TtYy]|\bpytest[ \t]+-k[ \t]+not\b|--skip",
+            re.I,
+        ),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Makefile Specifics) ---
+        # NOTE: `^\s*` (matching `\n` under re.M) is a confirmed real O(n^2) ReDoS on a
+        # long run of blank lines with no closing keyword -- each blank-line `^` position
+        # re-scans forward through the rest of the run before failing. Swapped for the
+        # engine's mandated `^[ \t]*` form (Rule 5), which cannot cross a newline and is
+        # therefore bounded to the current line.
+        "serialization_parsing": re.compile(r"(?m)^[ \t]*(?:@|-)?(?:tar|unzip|gunzip|jq|sed|awk)\b"),
+        "regex_execution": re.compile(r"(?m)\$\((?:filter|filter-out|patsubst)\b|^[ \t]*(?:@|-)?(?:grep|egrep|sed)\b"),
+        "time_date_logic": re.compile(r"(?m)\$\(shell[ \t]+date\b|^[ \t]*(?:@|-)?(?:sleep|date)\b"),
+        "ipc_rpc_bridges": re.compile(r"(?m)\$\(shell\b|^[ \t]*(?:@|-)?(?:curl|wget|ssh|scp|docker|kubectl)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/markdown.py b/gitgalaxy/standards/language_standards/languages/markdown.py
new file mode 100644
index 000000000..5e08f2da7
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/markdown.py
@@ -0,0 +1,51 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "CommonMark / GitHub Flavored / AsciiDoc",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy extensions, MDX, and AsciiDoc formats.
+    "extensions": [
+        ".md",
+        ".markdown",
+        ".mdown",
+        ".mkd",
+        ".mdx",
+        ".adoc",
+        ".asciidoc",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: The universally recognized, extensionless repository documentation anchors.
+    "exact_matches": ["README", "LICENSE", "CHANGELOG", "CONTRIBUTING", "SECURITY"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Static site generators and documentation build configs acting as disambiguation anchors.
+    "discriminators": [
+        ".md",
+        ".mdx",
+        "mkdocs.yml",
+        "_config.yml",
+        "docusaurus.config.js",
+    ],
+    # EXECUTION SIGNATURES: Markdown is declarative text; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: (CORRECTION) Markdown relies entirely on HTML's SGML-style block comments ().
+    # Mapping this to 'hybrid_dash' would cause the engine to miss hidden documentation mass.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        "lit_code_blocks": re.compile(r"^[ \t]{0,3}```+[^`\r\n]*$", re.M),
+        "lit_diagrams": re.compile(r"^[ \t]{0,3}```+(?:mermaid|plantuml)\b", re.I | re.M),
+        "lit_headers": re.compile(r"^[ \t]{0,3}#{1,6}[ \t]+", re.M),
+        "lit_links": re.compile(r"\[(?:[^\[\]]|\[[^\[\]]*\])+\]\((?:[^()]|\([^()]*\))+\)"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/matlab.py b/gitgalaxy/standards/language_standards/languages/matlab.py
new file mode 100644
index 000000000..98f50259f
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/matlab.py
@@ -0,0 +1,266 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "MATLAB R2024b",
+        "last_updated": "2026-02-27",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard scripts, functions, and modern Live Scripts (.mlx).
+    "extensions": [".m", ".mlx"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: MATLAB and Octave rely strictly on extensions for execution.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Critical for resolving the massive .m collision with Objective-C. Binary workspace and figure files act as absolute anchors.
+    "discriminators": [".m", ".mat", ".fig", ".mlx", "project.prj"],
+    # #377: this is exactly the "massive .m collision with Objective-C" the
+    # comment above already calls out -- heavy presence of Objective-C's OWN
+    # ecosystem anchors (its own "discriminators", below) elsewhere in the
+    # repo is direct evidence AGAINST an ambiguous .m file being MATLAB.
+    "disqualifiers": [".mm", "project.pbxproj", ".storyboard", ".xib", ".xcworkspace", "Podfile", "Cartfile"],
+    # Instantly claims any .m file that uses MATLAB's unique comment character (%)
+    # or the MATLAB function declaration syntax. Defeats Objective-C gravity theft.
+    # Instantly claims any .m file via a definitive MATLAB section break (%%)
+    # or properly formatted comment. (Removed 'function' to prevent stealing extensionless shell scripts).
+    "internal_discriminator": re.compile(r"^[ \t]*(?:%[ \t]+|%%)", re.M),
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for GNU Octave or headless MATLAB CLI scripts.
+    "shebangs": ["octave", "matlab"],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: (CORRECTION) Uses '%' for lines and '%{ %}' for blocks. Mapping this to
+    # hybrid_dash would cause the engine to look for '--', missing the math entirely.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # branch: MATLAB control flow. EXCLUDES 'error' and 'rethrow' (bailout_hits).
+        "branch": re.compile(r"\b(?:if|elseif|else|switch|case|otherwise|for|while|try|catch)\b|&&|\|\||~="),
+        # args: Captures standard function inputs and return signatures `function [out1, out2] = myFun(in1, in2)`.
+        # CRITICAL GUARDRAIL: Safely bounds `\([^)]*\)` and `\[[^\]]*\]`.
+        # #1209: the trailing input-parameter parens wrapped in its own
+        # capture group (was only reachable via group(0), the whole
+        # match including the "function [outputs] = name" prefix) so
+        # detector.py's counter isolates just the real INPUT arg list --
+        # the whole-match fallback both overcounted zero/one-arg
+        # signatures by +1 like every other language (#1199) AND, worse,
+        # mixed the output-list `[out1, out2]` in as if it were part of
+        # the input signature. Name group added too, purely so existing
+        # extraction tests keep passing.
+        "args": re.compile(
+            r"\bfunction(?:[ \t\n]|\.\.\.[^\n]*\n)+(?:\[[^\]]*\](?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*|[a-zA-Z_]\w*(?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*)?([a-zA-Z_]\w*)(?:[ \t\n]|\.\.\.[^\n]*\n)*(\([^)]*\))|@(?:[ \t\n]|\.\.\.[^\n]*\n)*(\([^)]*\))"
+        ),
+        # linear: Structural boundaries defining straight-line execution.
+        # CRITICAL GUARDRAIL: Access modifiers (private, protected) explicitly omitted.
+        "structural_boundaries": re.compile(
+            r"\b(?:classdef|properties|methods|events|enumeration|return|global|persistent|continue|break|end)\b"
+        ),
+        # func_start: Anchors logic blocks. Exactly anchors executable blocks.
+        # Negative lookahead explicitly prevents control flow or OOP structures from generating false positive logic anchors.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL OUTPUT ARRAY SHIELD (MATLAB) ]
+            # MATLAB functions define their return types *before* the function name
+            # (e.g., `function [out1, out2] = myFunc()`). Developers will frequently
+            # wrap these output arrays across multiple vertical lines.
+            # FIX: Exchanged horizontal `[ \t]*` constraints with `[ \t\n]*` inside
+            # the optional `(?:\[[^\]]*\]...)?` output array matcher, allowing the
+            # regex to crawl down to the assignment operator `=` and map the name.
+            # =====================================================================
+            r"^[ \t]*(?!(?:if|for|while|switch|catch|classdef)\b)function(?:[ \t\n]|\.\.\.[^\n]*\n)+(?:\[[^\]]*\](?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*|[a-zA-Z_]\w*(?:[ \t\n]|\.\.\.[^\n]*\n)*=(?:[ \t\n]|\.\.\.[^\n]*\n)*)?([a-zA-Z_]\w*)(?=(?:[ \t\n]|\.\.\.[^\n]*\n)*(?:\(|%|;|$))",
+            re.M,
+        ),
+        # class_start: Defines an object-oriented boundary.
+        # Safely steps over optional class attributes like `classdef (ConstructOnLoad) MyClass`
+        "class_start": re.compile(
+            r"^[ \t]*classdef(?:(?:[ \t\n]|\.\.\.[^\n]*\n)*\([^)]*\))?(?:[ \t\n]|\.\.\.[^\n]*\n)+([a-zA-Z_]\w*)(?=(?:[ \t\n]|\.\.\.[^\n]*\n)*(?:<|%|;|$))",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # safety: Defensive programming, modern argument validation (`arguments` block), and type/shape checks.
+        "safety": re.compile(
+            r"\b(?:try|catch|narginchk|nargoutchk|validateattributes|validatestring|mustBe[A-Za-z_]\w*|assert|isa|isempty|isnumeric|ischar|isstruct|isfield|iscell|islogical|arguments)\b"
+        ),
+        # safety_neg: Actively bypasses safety via dynamic strings or manipulating the caller workspace.
+        "safety_bypasses": re.compile(r'\b(?:eval|evalin|assignin|evalc)\b|\bwarning[ \t]*\([ \t]*[\'"]off[\'"]'),
+        # danger: Destructive workspace actions and OS bypasses.
+        # CRITICAL GUARDRAIL: Raw terminal prints (`disp`) strictly routed to print_hits.
+        "high_risk_execution": re.compile(
+            r"\b(?:clear[ \t]+all|clc|system|dos|unix|exit|quit|keyboard)\b|^[ \t]*![ \t]*[a-zA-Z_]",
+            re.M | re.I,
+        ),
+        # io: Interactions with disk, hardware, or web.
+        "io": re.compile(
+            r"\b(?:load|save|fopen|fclose|fread|fwrite|fscanf|webread|webwrite|urlread|urlwrite|readtable|writetable|readmatrix|writematrix|serialport|imread|imwrite|audioread)\b"
+        ),
+        # api: Public APIs. We track explicit Methods blocks that don't declare private access.
+        # BUG FIX 1: the bare `methods` literal had no trailing boundary at all
+        # (not even `\b`), so it matched as a false-positive prefix of any
+        # identifier merely starting with "methods" (e.g. `methodsList = ...`).
+        # Added `\b` right after the literal -- "methods" is all word chars, so
+        # a plain `\b` is correct here (not the Rule 9 shared-group trap).
+        # BUG FIX 2 (Rule 1, Semantic Intent): the Access=public check was an
+        # optional *positive* group instead of a *negative* exclusion, so it
+        # never actually gated anything -- `methods (Access = private)` and
+        # `methods (Access = protected)` both still matched via the bare
+        # `methods\b` alone, directly contradicting this rule's own documented
+        # purpose ("don't declare private access"). Replaced with a negative
+        # lookahead that excludes an explicit private/protected declaration
+        # anywhere in a (possibly multi-attribute) attribute list, while still
+        # matching bare `methods` (implicitly public by MATLAB default) and
+        # explicit `Access = public`. Bounded to 200 chars per Rule 5.
+        "api": re.compile(
+            r"^[ \t]*methods\b(?![ \t]*\([^)]{0,200}\bAccess[ \t]*=[ \t]*(?:private|protected)\b)",
+            re.M | re.I,
+        ),
+        # flux: Mutation of state via assignment.
+        # Safely clamped with `[ \t]*=[ \t]*` to avoid newline spirals. Bounded nested fields `{0,5}`.
+        # BUG FIX (Rule 11, nested-delimiter coverage): the flat `[^)]*`/`[^}]*`
+        # classes broke on one level of nested indexing, e.g. `data(idx(1)) = v;`
+        # -- a common, realistic MATLAB pattern (indexing by another array/
+        # function's result). The truncated inner match left a stray closing
+        # bracket unconsumed, which then broke the required trailing `=`, so
+        # the WHOLE assignment went undetected (a true false negative, unlike
+        # a bare boolean-only rule where truncation still finds *a* match).
+        # Widened each segment to tolerate one level of self-nesting, same
+        # non-overlapping-alternatives shape the doc's Rule 11 example uses.
+        "state_mutation": re.compile(
+            r"^[ \t]*[a-zA-Z_]\w*"
+            r"(?:\((?:[^()]|\([^()]*\))*\)|\{(?:[^{}]|\{[^{}]*\})*\}|\.[a-zA-Z_]\w*){0,5}"
+            r"[ \t]*=[ \t]*[^=]|\b(?:clear|clearvars)\b",
+            re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"^[ \t]*%[ \t]*(?:if|for|while|function|classdef)\b", re.M),
+        # doc: Standard MATLAB Help text (`%%` sections) or typed annotations.
+        "doc": re.compile(
+            r"^[ \t]*%[ \t]*@(?:param|return|author)|^[ \t]*%%[ \t]*[A-Z][A-Z0-9_]*",
+            re.M,
+        ),
+        # test: MATLAB unit testing framework keywords.
+        "test": re.compile(
+            r"\b(?:matlab\.unittest|TestCase|verifyEqual|assertEqual|assertGreaterThan|verifyTrue|verifyFalse|verifyError)\b"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # concurrency: Parallel Computing Toolbox (parallel loops and batch jobs).
+        "concurrency": re.compile(
+            r"\b(?:parfor|parfeval|spmd|batch|createJob|createTask|BackgroundPool|parpool|fetchOutputs)\b"
+        ),
+        # ui_framework: MATLAB UI Figures and App Designer interfaces.
+        "ui_framework": re.compile(
+            r"\b(?:uifigure|uicontrol|uiaxes|uilabel|uibutton|appdesigner|guide|drawnow|msgbox|errordlg|warndlg|figure|plot|scatter|surf)\b"
+        ),
+        # closures: Anonymous functions (MATLAB's lambdas).
+        "closures": re.compile(r"@[ \t]*\([^)]*\)"),
+        # globals: Globals and persistent memory retaining state across calls.
+        "globals": re.compile(r"\b(?:global|persistent|setenv|getenv)\b"),
+        # decorators: MATLAB Property/Method attribute blocks (e.g., `methods (Access = private)`).
+        # Safely bounded with `\([^)]*\)` to avoid ReDoS.
+        "decorators": re.compile(r"^[ \t]*(?:properties|methods|events)[ \t]*\([^)]*\)", re.M),
+        # generics: MATLAB is dynamically typed. Generics do not exist natively.
+        "generics": None,
+        # comprehensions: MATLAB array mapping functions (the closest equivalent to list comprehensions).
+        "comprehensions": re.compile(r"\b(?:arrayfun|cellfun|structfun|rowfun|varfun)\b"),
+        # scientific: The core of MATLAB. High-density built-in numerical solvers and DSP operations.
+        "scientific": re.compile(
+            r"\b(?:fft|ifft|svd|eig|inv|det|polyfit|ode45|ode15s|integral|cross|dot)\b|\.\*|\./|\.\^"
+        ),
+        # heat_triggers: Metaprogramming (feval), implicit expansion (bsxfun), and reflection.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:feval|bsxfun|cell2mat|mat2cell|num2cell|struct2cell|str2func|func2str|meta\.class|metaclass)\b|\?[a-zA-Z_]\w*"
+        ),
+        # import: Namespace/Class loading.
+        "import": re.compile(r"^[ \t]*import[ \t]+[a-zA-Z0-9_.*]+", re.M),
+        "_dependency_capture": re.compile(r"^[ \t]*import(?:[ \t]|\.\.\.[^\n]*\n)+([a-zA-Z0-9_.*]+)", re.M),
+        # ownership: Standard MATLAB comment authorship signatures.
+        "ownership": re.compile(r"^[ \t]*%[ \t]*(?:Author|Created by|Copyright)[ \t]*:(.*)", re.M | re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # BUG FIX: adjacent unbounded quantifiers with overlapping character
+        # sets (`\d+` immediately followed by `[^\]]*`, which also matches
+        # digits) -- the same ReDoS shape already found and fixed
+        # independently in embedded_python, css, and tcl in this epic.
+        # Confirmed via scaling sweep (~4x per doubling before the fix).
+        # Bounded both quantifiers, consistent with the established fix.
+        "spec_exposure": re.compile(r"\[(?:[ \t]*SPEC[ \t]*-[ \t]*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # ssr_boundaries: Web App compiler hooks.
+        "ssr_boundaries": re.compile(r"\b(?:webwindow|htmlTree)\b"),
+        # events: MATLAB Object-Oriented Event triggering.
+        "events": re.compile(r"\b(?:notify|event\.EventData|event\.PropertyEvent)\b"),
+        "dependency_injection": None,
+        "macros": None,
+        # pointers: C/C++ FFI pointer manipulation via MATLAB's `libpointer` or `handle` class.
+        "pointers": re.compile(r"\b(?:libpointer|calllib)\b|<[ \t]*handle\b"),
+        # memory_alloc: Explicit pre-allocation (a critical MATLAB performance mechanism to avoid array resizing).
+        "memory_alloc": re.compile(
+            r"\b(?:zeros|ones|nan|NaN|false|true|cell|struct|prealloc)[ \t]*\([^)]*\)",
+            re.I,
+        ),
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # telemetry: Custom structured logging frameworks.
+        "telemetry": re.compile(
+            r"\b(?:log4m|logger\.(?:info|debug|warn|error)|logDebug|logInfo|logWarn|logError)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        "debug_prints": re.compile(r"\b(?:disp|warning|fprintf(?![ \t]*\([ \t]*[a-zA-Z_]))\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\b(?:cast|typecast|int8|uint8|int16|uint16|int32|uint32|int64|uint64|single|double|logical)\s*\("
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # BUG FIX (Rule 3, Annotation & Execution Isolation): the bare `error`
+        # alternative fired on `logger.error(...)`/`log.error(...)` -- a
+        # custom logging framework's benign structured-logging call (already
+        # captured by `telemetry`), not MATLAB's built-in `error()` function,
+        # which actually throws and halts execution. A dot immediately before
+        # "error" is always a method-call chain, never the standalone
+        # builtin, so excluded via a negative lookbehind.
+        "panics_and_aborts": re.compile(r"\b(?:throw|rethrow|MException|throwAsCaller)\b|(?<!\.)\berror\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\bpause[ \t]*\("),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"\b(?:bitand|bitor|bitxor|bitcmp|bitshift|bitset|bitget)\b"),
+        # sync_locks: Managing parallel data queues and thread pooling barriers.
+        "sync_locks": re.compile(r"\b(?:labBarrier|labSend|labReceive|labBroadcast)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\bConstant\b"),
+        # cleanup: Garbage collection and explicit file/handle destruction.
+        "cleanup": re.compile(r"\b(?:clear|clearvars|delete|close|fclose|onCleanup)\b"),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"Access[ \t]*=[ \t]*(?:private|protected)"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(?:addlistener|event\.listener|event\.proplistener)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs) Safety Theater bypasses.
+        "test_skip": re.compile(r"\b(?:assume|assumeFail|assumeTrue|assumeFalse)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (MATLAB Specifics) ---
+        "serialization_parsing": re.compile(r"\b(jsondecode|jsonencode|xmlread|xmlwrite|load|save|readtable)\b"),
+        "regex_execution": re.compile(r"\b(regexp|regexpi|regexprep)\b"),
+        "time_date_logic": re.compile(r"\b(tic|toc|datetime|clock|now|pause|cputime)\b"),
+        # BUG FIX: missing `re.M` entirely on this `^`-anchored alternative
+        # (epic recurring bug class #6) -- `^` anchored to true string start
+        # only, so the shell-escape `!cmd` form could only ever fire if `!`
+        # were the very first character of the entire file, never on any
+        # later line where a real shell-escape command actually appears in
+        # practice. Also switched `\s*` to `[ \t]*` per Rule 5 (horizontal-
+        # only spacing must not cross newlines under `re.M`).
+        "ipc_rpc_bridges": re.compile(
+            r"\b(system|dos|unix|tcpclient|tcpserver|parpool|parfor)\b|^[ \t]*!",
+            re.M,
+        ),  # '!' is MATLAB's native shell escape
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/mlir.py b/gitgalaxy/standards/language_standards/languages/mlir.py
new file mode 100644
index 000000000..952c4d193
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/mlir.py
@@ -0,0 +1,33 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "LLVM MLIR",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "1.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: The standard dialect and transformation format for MLIR.
+    "extensions": [".mlir"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: IR files strictly rely on their extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: LLVM TableGen definitions, core LLVM IR, and CMake configs anchoring the compiler toolchain.
+    "discriminators": [".mlir", ".td", ".ll", "CMakeLists.txt"],
+    # EXECUTION SIGNATURES: MLIR is ingested by tools like mlir-opt; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: MLIR intentionally adopts standard LLVM assembly syntax conventions,
+    # using '//' exclusively for line comments to maintain C++ ecosystem familiarity.
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/nix.py b/gitgalaxy/standards/language_standards/languages/nix.py
new file mode 100644
index 000000000..3c2379b61
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/nix.py
@@ -0,0 +1,21 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {"target_version": "Nix Expression Language", "status": "production"},
+    "extensions": [".nix"],
+    "exact_matches": [],
+    "discriminators": ["flake.nix", "default.nix", "shell.nix"],
+    "shebangs": [],
+    "lexical_family": "line_exclusive",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/objectivec.py b/gitgalaxy/standards/language_standards/languages/objectivec.py
new file mode 100644
index 000000000..3607cab87
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/objectivec.py
@@ -0,0 +1,347 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Objective-C 2.0 (ARC) & Modern Runtime",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources, Objective-C++ files (.mm), and shared C/C++ headers.
+    "extensions": [".m", ".mm", ".h"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Objective-C executes natively on Apple platforms; no extensionless configurations exist.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: The ultimate defense against MATLAB. Apple UI components and Xcode project files act as massive gravity anchors.
+    "discriminators": [
+        ".m",
+        ".mm",
+        "project.pbxproj",
+        ".storyboard",
+        ".xib",
+        ".xcworkspace",
+        "Podfile",
+        "Cartfile",
+    ],
+    # #377: the symmetric counterpart to matlab's disqualifiers above -- heavy
+    # presence of MATLAB's own ecosystem anchors elsewhere in the repo is
+    # direct evidence AGAINST an ambiguous .m file being Objective-C.
+    "disqualifiers": [".mat", ".fig", ".mlx", "project.prj"],
+    # EXECUTION SIGNATURES: Compiled natively via LLVM/Clang; no shebangs exist.
+    "shebangs": [],
+    "internal_discriminator": re.compile(
+        r'^[ \t]*#import\s+[<"][^>"]+\.h[>"]|'
+        r"^[ \t]*@(?:interface|implementation|protocol|property|class)\b",
+        re.M,
+    ),
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: Uses standard '//' for line-level literature and '/*' '*/' for blocks.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: Decisions that split flow. Includes Obj-C specific @try/@catch blocks.
+        # BUG FIX: @try/@catch/@finally were inside the shared \b(...)\b
+        # group. \b requires a word/non-word transition, but `@` is
+        # non-word, so the leading \b could never match once `@` was
+        # preceded by anything else non-word (a space, line start) --
+        # meaning these 3 alternatives never actually matched real code.
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|while|do|break|continue|return|goto)\b|@(try|catch|finally)\b|&&|\|\||\?"
+        ),
+        # 2. args: Parameters / Coupling. Captures method parameters (colons), C-style args, and Blocks (^).
+        "args": re.compile(
+            # =====================================================================
+            # [ THE GHOST ARGS & BLOCK SHIELD (OBJECTIVE-C) ]
+            # Objective-C functions look like standard C functions. The previous regex
+            # `\b[a-zA-Z_]\w*\s*\([^)]*\)\s*(?:\{|;)` hallucinated `if (a) {` as a function.
+            # FIX: Injected `(?!(?:if|for|while|switch|catch|return)\b)` to block control flow.
+            # =====================================================================
+            # #1209: branch 1 (keyword-message selectors) now captures
+            # the WHOLE repeated `label:(Type)name label:(Type)name ...`
+            # span in one group instead of matching just the FIRST
+            # segment on its own -- the old single-segment match had no
+            # way to represent "this method takes 2+ parameters" at all
+            # (no commas exist in this syntax to count), so every
+            # multi-param method silently undercounted to 1 regardless of
+            # its real arity, and the unanchored single-segment form
+            # could even false-match a `:(Type)` cast expression sitting
+            # inside a DIFFERENT method's body. detector.py's
+            # `_count_colon_selector_segments` counts the real parameter
+            # count from this span by counting top-level `:`
+            # occurrences (one per segment) instead of commas. Branches
+            # 2/3 (Blocks and plain C-style functions) get the same
+            # capture-group treatment as every other C-family language.
+            #
+            # #1335: the `(Type)` cast used to be REQUIRED after every
+            # `label:`, so older, still-valid untyped keyword-message
+            # style (`- back:sender`, defaulting to `id`, common in
+            # 1990s NeXTSTEP-era code -- language-crucible/data/
+            # objective-c/worldwideweb/HyperManager.m has ~20 of these
+            # in one file) matched zero segments here and silently
+            # undercounted to args=0. Added a SECOND, separate
+            # alternative for this shape rather than loosening the
+            # existing typed one in place -- the original
+            # `(?:label)?:(Type)name` (label optional, type mandatory)
+            # stays completely unchanged (every pre-#1335 valid/invalid
+            # case for it is untouched), and the new
+            # `label:name` (label MANDATORY, no type) alternative is
+            # additive. The label is mandatory here specifically because
+            # every real keyword-message parameter has one -- this loses
+            # no real match, only narrows what an untyped segment can be.
+            #
+            # This still can't structurally tell a real untyped param
+            # (`back:sender`) apart from a body-only lookalike with the
+            # exact same shape -- a goto label followed by a statement
+            # (`label: statement;`) or a ternary's true-branch read as a
+            # label (`cond ? isOn : isOff`, "isOn" here IS a syntactically
+            # valid label) -- because those are lexically identical to a
+            # real untyped parameter; no local, bounded regex can
+            # distinguish them without knowing it's inside a method
+            # signature already. That's WHY this alternative is safe only
+            # because detector.py's `_slice_by_braces` now bounds the
+            # whole `args` search to the method's own signature text for
+            # objc specifically (never the body), making a body-only
+            # lookalike structurally unreachable in the real pipeline --
+            # see `_calculate_block_metrics`'s `args_search_text` param
+            # and tests/core_engine/test_detector.py's
+            # test_objectivec_args_body_lookalikes_excluded_by_signature_bound.
+            # In ISOLATION (the regex alone, as the adversarial test
+            # gauntlet in tests/extraction/languages/test_objectivec.py
+            # exercises it) these lookalikes DO still match -- a
+            # documented, pipeline-shielded limitation, the same shape as
+            # the pre-existing comment/string-lookalike one just below in
+            # this same file's test suite.
+            r"((?:(?:[a-zA-Z_]\w{0,80}[ \t\n]*)?:\s*\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\)\s*[a-zA-Z_]\w*[ \t\n]*|[a-zA-Z_]\w{0,80}[ \t\n]*:\s*[a-zA-Z_]\w*[ \t\n]*)+)|\^[ \t]*([a-zA-Z_]\w*\s*)?(\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\))|(?!(?:if|for|while|switch|catch|return|sizeof)\b)\b([a-zA-Z_]\w*)[ \t\n]*(\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\))[ \t\n]*(?:\{|;)",
+            re.M,
+        ),
+        # Which `args` capture-group index represents an objc
+        # keyword-message colon-selector span (routes to
+        # `_count_colon_selector_segments` in detector.py rather than
+        # the generic comma/whitespace counters) -- see the comment on
+        # `args` above. Leading underscore excludes this from the
+        # structural-signal scan loop, same convention as haskell's
+        # `_args_arrow_count_groups`.
+        "_args_colon_selector_groups": {1},
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining interface, implementation, and memory types.
+        # BUG FIX: the 8 @-prefixed alternatives never matched -- same
+        # \b-before-@ shape as branch's fix above.
+        "structural_boundaries": re.compile(
+            r"@(interface|implementation|protocol|end|synthesize|dynamic|class|import)\b|\b(typedef|struct|enum|union|__block|__weak|__strong)\b"
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic.
+        # The Critical Fix: Compiled with re.M and optional return types for TBL / NeXTSTEP syntax
+        # #1336: injected a "not a function" shield -- `(?!(?:if|for|...)\b)` -- right before
+        # the C-style alternative's (?:type-token)+ loop. Without it, this alternative already
+        # matched bare two-token call/return statements like `return foo(x);` (any single
+        # leading word satisfies the loop as a fake "return type") -- previously "harmless"
+        # only because detector.py's brace-only fallback silently dropped the match when no
+        # `{` followed nearby, but a `{` from unrelated later code (e.g. a neighboring
+        # `@interface` block's own ivar-list braces) could still get wrongly attributed as
+        # this phantom "function"'s body. `_slice_by_braces`'s objc branch now explicitly
+        # detects and rejects the bodyless-`;` case for this alternative (prototypes have no
+        # body to score, so they're out of func_start's scope, not a recall gap) instead of
+        # falling through to that blind forward search -- this shield is what makes a bare
+        # statement safe to have reach that rejection path at all, rather than being
+        # misidentified as a genuine prototype. Blocks exactly the same control-flow-keyword
+        # set `branch` above already treats as non-function-starting, so real prototypes
+        # (`extern void foo(T x);`, whose leading token is always a type/modifier, never a
+        # keyword) are unaffected.
+        "func_start": re.compile(
+            r"^[ \t]*(?:[A-Z_0-9]+\s+|__attribute__\s*\([^()]*(?:\([^()]*\)[^()]*)*\)\s+)*[-+][ \t\n]*(?:\([^()]*(?:\([^()]*(?:\([^()]*\)[^()]*)*\)[^()]*)*\)[ \t\n]*|(?:[a-zA-Z_]\w*[ \t\n]+){1,3})?([a-zA-Z_]\w*)(?=[ \t\n]*(?:__attribute__\s*\([^()]*(?:\([^()]*\)[^()]*)*\)|[A-Z_0-9]+(?:\([^)]*\))?)*[ \t\n]*[:\{;]|$)|"
+            r"^[ \t]*(?:(?:static|inline|extern|__attribute__\s*\([^()]*(?:\([^()]*\)[^()]*)*\)|template\s*<[^>]*>)[ \t\n]+)*"
+            r"(?!(?:if|for|while|switch|return|else|case|default|do|break|continue|goto|sizeof|catch)\b)"
+            r"(?:(?:\b[a-zA-Z_]\w*\b|extern\s+\"C\")[ \t\n]*(?:\*[ \t\n]*)*)+([a-zA-Z_]\w*)(?=[ \t\n]*\()",
+            re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines OO boundaries.
+        "class_start": re.compile(
+            r"^[ \t]*@\s*(?:interface|implementation|protocol)(?:\\?\s)+([a-zA-Z_]\w*)(?=(?:\\?\s)*(?:[:(<{/\n]|$))",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. ARC memory qualifiers and Cocoa/NeXT Assertions.
+        # BUG FIX: @try/@catch/@finally never matched -- same \b-before-@
+        # shape as branch's fix above.
+        "safety": re.compile(
+            r"@(try|catch|finally)\b|\b(__weak|__strong|__auto_type|NSAssert|NSParameterAssert|NSError|nil|Nil)\b"
+        ),
+        # 7. safety_neg: Safety Bypasses. Bypassing ARC, raw void pointers, and dangerous dynamic selectors.
+        # BUG FIX: `void\s*\*` (trailing \b after a literal `*`) and
+        # `performSelector:` (trailing \b after a literal `:`) only
+        # matched when immediately followed by another non-word char
+        # (rare -- an identifier or `@selector(...)` almost always
+        # follows in real code). Dropped the trailing \b for both;
+        # also dropped the now-redundant "performSelector:withObject:"
+        # alternative, since "performSelector:" already matches as its
+        # prefix (alternation tries left-to-right and returns first hit).
+        "safety_bypasses": re.compile(
+            r"\b(__unsafe_unretained|unsafe_unretained|id)\b|void\s*\*|performSelector:|!\s*[;,\]\)\.]|#pragma\s+clang\s+diagnostic\s+ignored"
+        ),
+        # 8. danger: High-Risk Execution. Process killers.
+        "high_risk_execution": re.compile(r"\b(abort|exit)\b"),
+        # 9. io: I/O & Network Boundaries. Disk, Network, and URL fetching (Includes NeXTSTEP NX prefixes & TBL WWW wrappers).
+        "io": re.compile(
+            r"\b(NSFileHandle|NSFileManager|NSURLSession|NSURLConnection|NSData|NXNetPath|NXSocket|NXStream|NXFile|HTLoad|HyperText|HTGet|socket|connect|send|recv)\b"
+        ),
+        # 10. api: Public Surface Area. Exposed interface/C-level exports and Interface Builder hooks.
+        "api": re.compile(r"\b(FOUNDATION_EXPORT|UIKIT_EXTERN|OBJC_EXPORT|extern)\b|@(property)\b|IBOutlet|IBAction"),
+        # 11. flux: State Mutation. State mutation (Property setters and raw assignments).
+        "state_mutation": re.compile(r"\b(?:self\.)?[a-zA-Z_]\w*[ \t]*=|\[self\s+set[A-Z]\w*:|(?:\+\+|--)"),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code.
+        "dead_code": re.compile(
+            r"//[ \t]*(?:@interface|@implementation|\[|if|NSLog|- \()|/\*[ \t]*(?:@interface|@implementation|\[|if|NSLog|- \()"
+        ),
+        # 13. doc: Structured Documentation. Structured documentation (Includes NeXT style).
+        "doc": re.compile(r"/\*\*|///|/\*!|@param|@return|@brief|@discussion"),
+        # 14. test: Testing & Assertions. Unit testing framework markers (OCUnit/XCTest).
+        "test": re.compile(
+            r"\b(XCTest|XCTestCase|XCTAssert[A-Za-z]*|SenTestCase|STAssert[A-Za-z]*)\b|\b(?:setUp|tearDown)\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. GCD (Grand Central Dispatch), NSOperation, and Locks.
+        # BUG FIX: @synchronized never matched -- same \b-before-@ shape
+        # as branch's fix above.
+        "concurrency": re.compile(
+            r"\b(dispatch_async|dispatch_sync|dispatch_once|dispatch_queue_t|NSOperation|NSThread|NSLock|NXConditionLock)\b|@(synchronized)\b"
+        ),
+        # 16. ui_framework: UI / View Components. Cocoa, UIKit, and AppKit hierarchies (Includes legacy NX classes).
+        "ui_framework": re.compile(
+            r"\b(UIView|UIViewController|UIWindow|NSView|NSWindow|NXWindow|NXApp|NXBrowser|NXText|Text|ScrollView|HyperText|WorldWideWeb|SGML)\b"
+        ),
+        # 17. closures: Closures / Anonymous Functions. Objective-C Blocks.
+        "closures": re.compile(r"\^[ \t]*(?:[a-zA-Z_]\w*\s*)?\s*\([^)]*\)[ \t]*\{"),
+        # 18. globals: Global / Shared State. Singleton/Shared instance access.
+        # BUG FIX: the two bracket-message alternatives never matched --
+        # `\b` requires a word/non-word transition, but `[`/`]` are both
+        # non-word, so both the leading and trailing \b could never
+        # match once flanked by anything else non-word (a space,
+        # semicolon, line start). Split them out of the shared wrapper.
+        "globals": re.compile(
+            r"\b(extern|NSUserDefaults|NXDefaults|NXApp)\b|\[UIApplication\s+sharedApplication\]|\[NSWorkspace\s+sharedWorkspace\]"
+        ),
+        # 19. decorators: Decorators / Annotations. Attributes and Property decorators.
+        "decorators": re.compile(r"\b__attribute__\s*\(\([^)]*\)\)|@property\s*\([^)]+\)"),
+        # 20. generics: Generics / Type Parameters. Lightweight generics (introduced in Xcode 7).
+        "generics": re.compile(r"<\s*[A-Z][^>]*\s*\*?\s*>"),
+        # 21. comprehensions: Iterators / Comprehensions. Block-based array/set enumeration.
+        # BUG FIX: the trailing \b (after a literal `:`) never matched --
+        # `:` is non-word, so the boundary only worked when followed by
+        # another non-word char, which is rare in real Obj-C selector
+        # syntax (a block or argument almost always follows). Moved the
+        # \b to before the colon instead, where it correctly applies to
+        # the preceding word character.
+        "comprehensions": re.compile(
+            r"\b(?:enumerateObjectsUsingBlock|filteredArrayUsingPredicate|makeObjectsPerformSelector)\b:"
+        ),
+        # 22. scientific: Numerical / Compute Libraries. C-Math and CoreGraphics structs.
+        "scientific": re.compile(
+            r"\b(math\.h|sin|cos|tan|sqrt|exp|log|abs|NSDecimalNumber|CGVector|CGAffineTransform|CGPoint|CGRect|CGSize|NXRect|NXSize)\b"
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Objective-C Runtime Swizzling and dynamic messaging.
+        "reflection_metaprogramming": re.compile(
+            r"\b(objc_msgSend|performSelector|method_exchangeImplementations|class_addMethod|objc_allocateClassPair|isa|object_setClass)\b|<objc/runtime\.h>"
+        ),
+        # 24. import: Dependency Inclusions. Module and header inclusion.
+        "import": re.compile(r"^[ \t]*(?:#import|#include|@import)\b", re.M),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:#\s*import|#\s*include)\s*(?:\\?\n\s*)?(?:<([^>]+)>|[\"']([^\"']+)[\"'])|^[ \t]*@\s*import\s+([\w.]+)",
+            re.M,
+        ),
+        # 25. ownership: Authorship metadata.
+        # BUG FIX: `@author` (leading \b before non-word `@`) and
+        # `Author:` (trailing \b after non-word `:`) never matched --
+        # same shape as branch's @try fix above.
+        "ownership": re.compile(r"\b(?:Created by|Copyright|Tim Berners-Lee)\b|@author|\bAuthor:", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(
+            r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit|RFC|W3C|CERN|TBL|ENQUIRE)[^\]]{0,300}\]|\b(?:WorldWideWeb|HyperText\s+Proposal|NeXTSTEP\s+Docs)\b",
+            re.I,
+        ),
+        "ssr_boundaries": re.compile(r"\b(WOComponent|WOResponse|WOContext|WOApplication|WODirectAction|WebObjects)\b"),
+        "events": re.compile(r"\b(NSNotificationCenter|addObserver|postNotification|NXApp\s+run|sendEvent)\b"),
+        # BUG FIX: `inject:`/`initWithDependency:` (trailing \b after a
+        # literal `:`) only matched when immediately followed by another
+        # non-word char -- true for a plain identifier argument, but
+        # false for the equally common `@selector(...)` argument form.
+        # Moved the \b to before the colon instead.
+        "dependency_injection": re.compile(
+            r"\b(TyphoonComponentFactory|TyphoonDefinition|JSObjection)\b|\b(?:inject|initWithDependency)\b:"
+        ),
+        "macros": re.compile(
+            r"^[ \t]*#(?:define|undef|ifdef|ifndef|if|elif|else|endif|pragma)\b",
+            re.M,
+        ),
+        "pointers": re.compile(r"->|&\w+|\b(?:id|Class|SEL|IMP)\b|(?<=[=(,])[ \t]*\*[a-zA-Z_]\w*"),
+        "memory_alloc": re.compile(
+            r"\b(alloc|init|new|copy|mutableCopy|retain|malloc|calloc|NX_MALLOC|NX_ZONEMALLOC|NSZoneMalloc)\b"
+        ),
+        "inline_asm": re.compile(r"\b(?:__asm__|asm|__asm)\b(?:\s+volatile)?\s*\([^)]*\)"),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics.
+        "telemetry": re.compile(r"\b(os_log|OSLog|DDLogInfo|DDLogError|DDLogWarn|DDLogDebug|syslog)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(printf|fprintf|NXPrintf|NSLog)\b"),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit type coercion.
+        "explicit_casts": re.compile(r"\(\s*[A-Za-z_]\w*\s*\*?\s*\)\s*[a-zA-Z_$]|typeof\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting execution context.
+        # BUG FIX: @throw never matched -- same \b-before-@ shape as
+        # branch's fix above.
+        "panics_and_aborts": re.compile(r"@(throw)\b|\b(abort|exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) Forcing threads to sleep.
+        "thread_sleeps": re.compile(r"\b(sleep|usleep|nanosleep)\s*\("),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability) Coordinated threading logic.
+        # BUG FIX: @synchronized never matched -- same \b-before-@ shape
+        # as branch's fix above.
+        "sync_locks": re.compile(
+            r"@(synchronized)\b|\b(NSLock|NSRecursiveLock|NSConditionLock|dispatch_semaphore_wait)\b"
+        ),
+        # 45. immutability_locks (Immutability Constraints) Immutability.
+        "immutability_locks": re.compile(r"\b(const|readonly|immutable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown) Resource release (Crucial for MRC NeXT era).
+        "cleanup": re.compile(r"\b(dealloc|release|autorelease|free|NX_FREE)\b"),
+        # 47. encapsulation Hiding logic from the application.
+        # BUG FIX: the leading \b before `@` never matched (same shape as
+        # branch's fix above). The trailing \b is fine as-is (each
+        # keyword ends in a letter).
+        "encapsulation": re.compile(r"@(?:private|protected|package)\b"),
+        # 48. listeners (Event Listeners / Observers) Waiting for state broadcasts.
+        # BUG FIX: trailing \b after a literal `:` only matched when
+        # immediately followed by another non-word char -- true for a
+        # plain identifier argument, false for the equally common
+        # `@selector(...)` argument form. Moved the \b to before the colon.
+        "listeners": re.compile(r"\b(?:addObserver|observeValueForKeyPath|subscribeNext)\b:"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(XCTSkip|xit|xdescribe)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Objective-C Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(NSJSONSerialization|NSKeyedUnarchiver|NSKeyedArchiver|NSXMLParser|NSPropertyListSerialization)\b"
+        ),
+        "regex_execution": re.compile(r"\b(NSRegularExpression|NSRegularExpressionSearch)\b"),
+        "time_date_logic": re.compile(
+            r"\b(NSDate|NSDateFormatter|NSTimer|CFAbsoluteTimeGetCurrent|NSDateComponents)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"\b(NSXPCConnection|NSTask|NSPipe|NSURLConnection|NSURLSession|NSMachPort)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/pbtxt.py b/gitgalaxy/standards/language_standards/languages/pbtxt.py
new file mode 100644
index 000000000..d071161d0
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/pbtxt.py
@@ -0,0 +1,33 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Protobuf Text Format",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "6.30",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Protobuf text and binary message formats used heavily in Google/Bazel ecosystems.
+    "extensions": [".pbtxt", ".textproto", ".textpb", ".pb"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: PBTXT strictly relies on its extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Standard .proto schema definitions and Bazel build files acting as disambiguation anchors.
+    "discriminators": [".proto", "WORKSPACE", "BUILD.bazel", "BUILD"],
+    # EXECUTION SIGNATURES: PBTXT is purely serialized message data; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: While standard .proto schemas use C-style (//) comments, the instantiated
+    # Text Format (.pbtxt) strictly uses '#' for comments.
+    "lexical_family": "line_exclusive",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/perl.py b/gitgalaxy/standards/language_standards/languages/perl.py
new file mode 100644
index 000000000..bec9ffaf5
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/perl.py
@@ -0,0 +1,385 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Perl 5.42.0 (Corinna Native OOP, Signatures, Try/Catch, Defer)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard scripts, modules, tests, POD docs, and legacy CGI web scripts.
+    "extensions": [".pl", ".pm", ".t", ".pod", ".plx", ".cgi", ".al", ".ph"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Core build scripts that are purely executed Perl code.
+    "exact_matches": ["Makefile.PL", "Build.PL"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and CPAN metadata to resolve .pl (Prolog collision) and .t.
+    "discriminators": [
+        ".pm",
+        ".pod",
+        ".pl",
+        "cpanfile",
+        "cpanfile.snapshot",
+        "META.json",
+        "META.yml",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["perl", "perl5", "perl6"],
+    # UPGRADED: Maps to Family 6 (Polyglot)
+    # Rationale: Perl's interaction with POD documentation blocks (=head, =cut) and embedded regex makes it a true polyglot lexical engine.
+    # #621: was "standard_block" (shared a regex with C-style languages,
+    # got zero comment stripping -- standard_block never used the `#`
+    # token). "line_exclusive" fixes the basic `#` line-comment case
+    # (needed no new family at all -- line_exclusive's own delimiter
+    # table already leads with `#`). The full "Polyglot" vision in the
+    # rationale above -- POD blocks (=head/=cut) -- is NOT covered by
+    # this; line_exclusive's real config has Ruby's =begin/=end but not
+    # Perl's own POD markers. Known remaining gap, not fixed here.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: Decisions that split the flow. Includes modern try/catch/finally and defer.
+        "branch": re.compile(
+            r"\b(if|unless|elsif|else|while|until|for|foreach|given|when|next|last|redo|try|catch|finally|defer|goto|continue|default)\b|&&|\|\||//|\?|(?<!:):(?!:)"
+        ),
+        # 2. args: Parameters / Coupling. Captures modern signatures, traditional @_ unpacking, and shift.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # the first two alternatives (was only reachable via group(0),
+        # the whole match including the "sub"/"my" prefix) so detector.py's
+        # counter isolates just the real parameter text -- the whole-match
+        # fallback overcounted every zero/one-arg signature by +1 the same
+        # way Python's did (#1199).
+        # #1519: the bare `(\bshift\b)` alternative used to match ANY
+        # occurrence of the word "shift" anywhere in the body -- including
+        # `shift @other_queue`/`shift(@other_queue)`, which shifts a
+        # DIFFERENT array, nothing to do with unpacking @_. Added a
+        # negative lookahead excluding those explicit-argument forms
+        # (bare `shift;`/`shift` and `my $x = shift;` both still match --
+        # only an explicit `(`/`@` right after "shift" is excluded).
+        # #1607 follow-up: also added a negative LOOKBEHIND excluding a
+        # sigil (`$@%&`) immediately before "shift" -- without it, a local
+        # variable literally NAMED `$shift` (a real, if thematically
+        # ironic, idiom: e.g. exiftool's `ConvertDateTime` stores its
+        # GlobalTimeShift option in `my $shift = ...`) false-matched on
+        # every later bare reference to that variable (`if ($shift)`,
+        # `$shift =~ ...`) as if each were its own real `shift` builtin
+        # call unpacking @_ -- confirmed inflating that one function's
+        # count from a real 2 to 8. `\b` alone doesn't exclude this: `$`
+        # is a non-word character, so `\bshift\b` still matches the
+        # "shift" substring inside `$shift` starting right after the `$`.
+        # Named in `_args_findall_sum_groups` below alongside the
+        # `my (...) = @_` group -- traditional Perl commonly unpacks args
+        # across MULTIPLE statements (`my $class = shift;` for the
+        # invocant, then later `my ($a, $b) = @_;` for the rest, or
+        # several sequential `my $x = shift;` lines), and a single match
+        # only ever sees the first one. `_args_findall_sum_groups` tells
+        # detector.py's counter to re-scan the whole block and SUM every
+        # matching statement's own contribution instead. A sub WITH a
+        # real declared signature/prototype (group 2) is unaffected --
+        # that always sits earlier in the text than any body-level idiom,
+        # so ordinary leftmost-match search already prefers it.
+        # Group 5: the OTHER extremely common "rest of the args" idiom --
+        # `my @statuses = @_;`, a bare (parenless) array catching every
+        # remaining positional arg after some have already been `shift`ed
+        # off, e.g. `my $class = shift; my @statuses = @_;`. Distinct
+        # from group 3's `my (...) = @_` (a fixed-size destructure) --
+        # this is inherently variadic, so it contributes exactly 1 (a
+        # single "rest" slot) via the same not-self-contained-parens
+        # fallback every other non-tuple match in this sum already uses,
+        # not a real element count.
+        "args": re.compile(
+            r"\b(?:sub|method)(\s+[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)?\s*(\([^)]*\))"
+            r"|\bmy\s*(\([^)]*\))\s*=\s*@_"
+            r"|((?<![$@%&])\bshift\b(?!\s*[(@]))"
+            r"|(\bmy\s+@\w+\s*=\s*@_\b)"
+        ),
+        "_args_findall_sum_groups": {3, 4, 5},
+        # #1607: group 2 (the "sub/method (...)" capture) matches BOTH a real
+        # modern named signature (`sub foo($a, $b)`) and a legacy bare-sigil
+        # PROTOTYPE (`sub Options($$;@)`, `sub Get8u($$)`) -- the two are
+        # syntactically indistinguishable from the regex alone (both are just
+        # "(...)" after the sub/method keyword). detector.py uses this flag to
+        # tell prototypes apart from real signatures at count time (no commas
+        # ever appear in a prototype, by grammar, regardless of true arity) and
+        # falls through to the same body-idiom scan (`_args_findall_sum_groups`)
+        # already used for signature-less traditional subs, instead of trusting
+        # a prototype's declaration for a count it can't actually give.
+        "_args_prototype_groups": {2},
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and immutability.
+        "structural_boundaries": re.compile(
+            r"\b(my|our|state|local|field|class|role|package|sub|method|return|yield|use|require|undef|do|true|false|await)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Anchors executable logic blocks. MUST HAVE EXACTLY ONE CAPTURE GROUP for the name.
+        #
+        # LLM/MAINTAINER CONTEXT & DOMAIN KNOWLEDGE:
+        # 1. THE KEYWORDS: Captures standard `sub` and Perl 5.38+ Corinna OOP `method`.
+        # 2. THE CAPTURE: `([a-zA-Z_]\w*)` isolates the exact function name.
+        # 3. THE LOOKAHEAD GUARDRAILS `(?= ... )`: Perl allows a lot of junk between the name and the code block.
+        #    - `\(` : Safely steps over legacy Prototypes `sub foo ($$)` and modern Signatures `sub foo ($a, $b)`.
+        #    - `:`  : Safely steps over Subroutine Attributes `sub foo : lvalue : method {`.
+        #    - `\{` : Matches standard immediate block openings `sub foo {`.
+        #    - `\n|$`: Handles K&R style newline brace placements.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL SUBROUTINE SHIELD (PERL) ]
+            # Perl 5 (and modern Corinna OOP) allows newlines between the `sub`/`method`
+            # keyword and the function name.
+            # FIX: Exchanged `\s+` (which triggers ReDoS if unbounded) with a strictly
+            # controlled `[ \t\n]+` to allow vertical jumps. Upgraded the trailing
+            # lookahead to safely handle vertical gaps before the opening `{` or `(`.
+            # =====================================================================
+            r"^[ \t]*(?:sub|method)[ \t\n]+"
+            r"([a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)"
+            r"(?=[ \t\n]*(?::(?!:)|[\(\{]|$))",
+            re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines object-oriented and structural boundaries.
+        "class_start": re.compile(
+            r"^[ \t]*(?:package|class|role)\s+([a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)(?=[ \t\n]*[\d\.v_]*[ \t\n]*(?::(?!:)|[;\{]|$))",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Defensive constructs (strict, warnings, safe exceptions).
+        # BUG FIX: `eval[ \t]*\{` was inside the shared \b(...)\b wrapper.
+        # It ends on the literal `{` (non-word), so the trailing \b only
+        # matched when a word character immediately followed the brace
+        # (e.g. `eval{risky()}`) -- the far more common idiomatic style
+        # with a space after `{` (`eval { risky(); }`) has a non-word
+        # char (the space) right after the brace, so the boundary could
+        # never fire and the whole safe-eval-block form silently never
+        # matched. Also widened `[ \t]*` to `[ \t\n]*` to match perl's own
+        # vertical func_start shield -- a vertically-placed opening brace
+        # (`eval\n{`) is valid, if less common, style.
+        "safety": re.compile(
+            r"\b(?:use\s+strict|use\s+warnings|use\s+v5\.\d+|croak|confess|try|catch|finally|defer|isa|DOES)\b"
+            r"|\beval[ \t\n]*\{|->isa\b|->DOES\b"
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing safety (no strict, string eval).
+        # BUG FIX: the whole alternation used to be wrapped in \b(...)\b.
+        # `eval\s+(?!\w|{)` and `goto\s+\&` both end on a non-word
+        # character by construction (the negative lookahead guarantees
+        # the char after the trailing whitespace isn't \w, and `&` is
+        # never a word char) -- so the shared trailing \b, which needs a
+        # non-word/word transition, could never be satisfied. This
+        # silently dropped the two most common dangerous idioms:
+        # `eval $code;` / `eval($code);` (string-eval on a variable, not
+        # a literal) and `goto &$sub;` (dynamic dispatch). Each
+        # alternative now carries only the boundary that makes sense for
+        # its own shape. Also added a dedicated `eval\s*\(` alternative
+        # so the equally common no-space function-call form
+        # `eval($code)` is caught alongside `eval $code` -- naively
+        # widening the existing `eval\s+(?!\w|{)` to `eval\s*(?!\w|{)`
+        # doesn't work here, since `\s*` can backtrack to zero-width and
+        # let the lookahead be satisfied by the whitespace character
+        # itself, re-admitting the safe `eval q{1}` / `eval { ... }`
+        # bareword and block forms this guard exists to exclude.
+        "safety_bypasses": re.compile(
+            r'\b(?:no\s+strict|no\s+warnings)\b|\beval\s*["\']|\beval\s*\(|\beval\s+(?!\w|{)|\bgoto\s+&'
+        ),
+        # 8. danger: High-Risk Execution. Process killers and raw shell execution.
+        "high_risk_execution": re.compile(r"\b(system|exec|exit|qx|CORE::dump)\b|`[^`]+`"),
+        # 9. io: I/O & Network Boundaries. Disk, Network, DBI, and standard handles.
+        "io": re.compile(
+            r"\b(open|close|sysopen|sysread|syswrite|opendir|closedir|DBI->connect|Mojo::UserAgent|HTTP::Tiny|LWP::UserAgent|socket|connect|bind)\b|<[A-Z_0-9]+>|<>"
+        ),
+        # 10. api: Public Surface Area. Exposed surface area (Exports and modern routing).
+        "api": re.compile(
+            r'\b(?:get|post|put|del|any|patch)\s+[\'"]/[^\'"]*[\'"]|@(?:EXPORT|EXPORT_OK|EXPORT_TAGS|ISA)\b|use\s+(?:Exporter|parent|base)\b|:\s*(?:reader|writer|param)\b'
+        ),
+        # 11. flux: State Mutation. State mutation (assignments, array mutators, substitutions).
+        # UPDATED: Removed '.=' and '=~' / '!~' to prevent massive string-builder false positives.
+        "state_mutation": re.compile(
+            r"\b(?:push|pop|shift|unshift|splice|delete)\b|[\$@%][a-zA-Z_]\w*(?:->|\[|\{){0,5}\s*(?:\+|-|\*|/|\||&|\^|%|x)?=(?!=)|(?:\+\+|--)|\bs/"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural logic.
+        "dead_code": re.compile(
+            r"^[ \t]*#\s*(?:my|our|state|sub|method|class|package|if|unless|while|print|say)\b",
+            re.M,
+        ),
+        # 13. doc: Structured Documentation. Structured POD documentation.
+        "doc": re.compile(r"^=(?:pod|head[1-6]|item|over|back|cut|begin|end|encoding|for)\b", re.M),
+        # 14. test: Testing & Assertions. Assertions and Test frameworks.
+        "test": re.compile(
+            r"\b(?:Test2::V0|Test::More|cmp_ok|is_deeply|subtest|done_testing|BAIL_OUT)\b|\b(?:ok|is|isnt|like|unlike|plan|diag|note)\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Async, forks, and threads.
+        "concurrency": re.compile(
+            r"\b(async|await|fork|waitpid|threads(?:->create)?|threads::shared|AnyEvent|Coro|Mojo::IOLoop|Mojo::Promise|Future|Parallel::ForkManager)\b"
+        ),
+        # 16. ui_framework: UI / View Components. GUI libraries and template engines.
+        "ui_framework": re.compile(
+            r"\b(Tk::|Wx::|Gtk2::|Gtk3::|Prima::|Template|HTML::Mason|Mojolicious::Plugin::TagHelpers)\b|\brender(?:_to_string)?\b|<%|%>|\[%|%\]"
+        ),
+        # 17. closures: Closures / Anonymous Functions. Anonymous subroutines.
+        "closures": re.compile(r"\bsub\s*(?:\([^)]*\))?[ \t]*\{"),
+        # 18. globals: Global / Shared State. Magic variables and system globals.
+        # BUG FIX: `$$`, `$@`, `$!`, and `$?` were inside the shared
+        # trailing \b group. Each ends on a symbolic, non-word character,
+        # so the trailing \b (needed for the word-ending alternatives,
+        # to stop `$a` from matching inside `$abc`) could only fire when
+        # a word char immediately followed -- never true for how these
+        # 4 special vars are actually written (`$$;`, `if ($@)`, `warn
+        # $!;`, `$? >> 8`). All 4 of the most common Perl magic
+        # variables silently never matched.
+        "globals": re.compile(
+            r"(?:\$a|\$b|\$_|\$0|%ENV|%SIG|@ARGV|@INC)\b|\$\$|\$@|\$!|\$\?|^[ \t]*our\s+[\$@%]",
+            re.M,
+        ),
+        # 19. decorators: Decorators / Annotations. Subroutine and variable attributes.
+        "decorators": re.compile(r":\s*[a-zA-Z_]\w*(?:\([^)]*\))?"),
+        # 20. generics: Generics / Type Parameters. Parameterized types (via Type::Tiny/Moose).
+        "generics": re.compile(r"\b(?:ArrayRef|HashRef|Map|Tuple|Dict|Maybe|InstanceOf|ConsumerOf|Enum)\[[^\]]*\]"),
+        # 21. comprehensions: Iterators / Comprehensions. Map and Grep.
+        "comprehensions": re.compile(r"\b(?:map|grep|reduce|any|all|none|notall|first|List::Util)\b"),
+        # 22. scientific: Numerical / Compute Libraries. PDL and Math::BigInt.
+        "scientific": re.compile(
+            r"\b(Math::Trig|Math::BigInt|Math::BigFloat|Math::Complex|PDL|sin|cos|exp|log|sqrt|atan2|abs|int|rand|srand)\b"
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Metaprogramming and Symbol table hacks.
+        "reflection_metaprogramming": re.compile(
+            r"\b(AUTOLOAD|DESTROY|BEGIN|UNITCHECK|CHECK|INIT|END|tie|untie|bless|overload)\b|\*[a-zA-Z_]\w*[ \t]*=\s*(?:\\|&)|goto\s+&"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"\b(?:use|require|no)\s+[a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*", re.M),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (PERL) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Firewall.
+            #
+            # HISTORICAL BUG: Anchored to `^[ \t]*`. While `use` is evaluated at
+            # compile-time and is typically top-level, `require` is evaluated at
+            # runtime and is very frequently scoped inside `if` statements or
+            # subroutines to defer loading heavy modules. The line anchor blinded
+            # the engine to these runtime inclusions.
+            #
+            # THE FIX: Stripped the `^` anchor and rely on the `\b` word boundary
+            # to capture module loading anywhere in the execution path.
+            # =====================================================================
+            r"\b(?:use|require|no)\s+([a-zA-Z_]\w*(?:::[a-zA-Z_]\w*)*)",
+            re.M,
+        ),
+        # 25. ownership: Authorship metadata.
+        "ownership": re.compile(
+            r"^=head1\s+(?:AUTHOR|COPYRIGHT|LICENSE)|#\s*(?:Author|Maintainer|Created by):\s+([^\n]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags.
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries: View Horizon. Server-Side Rendering computation boundaries.
+        "ssr_boundaries": re.compile(
+            r"\b(Mojolicious::Controller|Dancer2|Catalyst::Controller|render|template|reply->|to_app)\b"
+        ),
+        # 32. events: Pub/Sub Network. Event-driven architecture signatures and message brokers.
+        "events": re.compile(
+            r'\b(?:emit|once|unsubscribe|catch|Mojo::EventEmitter|AnyEvent->condvar)\b|\b(?:on|subscribe)\s+[\'"]'
+        ),
+        # 33. dependency_injection: Inversion of Control. Inversion of Control (IoC) injection markers.
+        "dependency_injection": re.compile(r"\b(Bread::Board|Beam::Wire|IOC|container|resolve|inject|service)\b"),
+        # 34. macros: Preprocessor Hooks. Compiler pragmas or source filters.
+        "macros": re.compile(
+            r"\b(Filter::Simple|Filter::Util::Call|Devel::Declare|Keyword::Declare)\b|^[ \t]*BEGIN[ \t]*\{",
+            re.M,
+        ),
+        # 35. pointers: Memory Map. Explicit tracking of memory addressing or references.
+        # UPDATED: Removed '\\[$@%&*]\w+' to stop flagging standard pass-by-reference variables.
+        "pointers": re.compile(r"->(?:\[[^\]]*\]|\{[^\}]*\})|@\$|%\$|\$\$|\&\$"),
+        # 36. memory_alloc: Manual Memory Management. Explicit heap manipulations or reference count controls.
+        "memory_alloc": re.compile(
+            r"\b(Scalar::Util::weaken|Scalar::Util::isweak|Internals::SvREFCNT|Internals::SvREADONLY|undef|Devel::Peek)\b"
+        ),
+        # 37. inline_asm: Bare Metal. Direct architecture bridging via Inline modules.
+        "inline_asm": re.compile(r'\buse\s+Inline\s+[\'"](?:C|CPP|ASM)[\'"]'),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: The Professional. Structured logging and observability frameworks.
+        "telemetry": re.compile(
+            r"\b(?:Log::Log4perl|Log::Any|Mojo::Log|log_(?:info|debug|warn|error|fatal))\b|->(?:debug|info|warn|error|fatal|trace)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): The Amateur / Space Debris. Ad-hoc debug statements.
+        "debug_prints": re.compile(r"\b(print|say|printf|sprintf|warn)\b"),
+        # 40. explicit_casts (Explicit Type Casting): The "Trust Me" Tax. Explicitly bypassing the type-checker or manual blessing.
+        # UPDATED: Removed the pointer/reference overlap.
+        "explicit_casts": re.compile(r"\b(int|oct|hex|vec|ref|bless)\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts): The Detonators. Forcefully destroying the current execution context.
+        "panics_and_aborts": re.compile(r"\b(die|confess|croak|exit|BAIL_OUT)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) Forcing a thread to sleep or blocking waits.
+        "thread_sleeps": re.compile(r"\bsleep\b"),
+        # 43. bitwise_ops (Bitwise Operations) Manipulating raw bytes and memory registers.
+        # UPDATED: Added negative lookbehinds '(?<![=!])~' to ignore Perl regex operators.
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|(?<![=!])~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(lock|threads::shared|Thread::Semaphore)\b"),
+        # 45. immutability_locks (Immutability Constraints) Explicitly locking data so it cannot be mutated.
+        "immutability_locks": re.compile(r"\b(Readonly|Const::Fast|Internals::SvREADONLY)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown) Explicitly destroying state or releasing resources.
+        "cleanup": re.compile(r"\b(DESTROY|undef|close|closedir|finish)\b|^[ \t]*END[ \t]*\{", re.M),
+        # 47. encapsulation Explicitly hiding logic from the rest of the application.
+        "encapsulation": re.compile(r"\b(my|state|local)\b|:private\b"),
+        # 48. listeners (Event Listeners / Observers) Waiting to receive state from an external broadcast.
+        # BUG FIX: `on\s*\(` and `subscribe\s*\(` both end in a literal
+        # `(` (non-word), so the shared trailing \b could only fire when
+        # a word char immediately followed -- never true for the most
+        # common real call shape, `on('event', ...)`, where a quote
+        # follows the paren. Both never matched at all.
+        "listeners": re.compile(r"\bon\s*\(|\bsubscribe\s*\(|\badd_listener\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs) Code that bypasses test verification.
+        "test_skip": re.compile(r"\b(skip|todo_skip)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Perl Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(Storable::(?:thaw|fd_retrieve)|JSON::(?:decode_json|from_json)|YAML::(?:Load|LoadFile))\b"
+        ),
+        # BUG FIX: the trailing `\s*[/\W]` allowed the delimiter check to
+        # be satisfied by an ordinary whitespace/punctuation character
+        # that has nothing to do with a regex delimiter -- `\W` matches
+        # ANY non-word char, including plain space. This meant an
+        # ordinary bareword-named scalar (`$s`, `$m`, `$y`) followed by
+        # any operator or even just a space (`$s = 5;`, `my $y = 1;`)
+        # was misclassified as the `s///`/`m//`/`y///` operator. Dropped
+        # `\s*` (real delimiter usage never has a space before the
+        # opening delimiter) and narrowed the trailing class to actual
+        # Perl regex delimiter punctuation, excluding whitespace and the
+        # ordinary-code characters (`=`, `;`, `,`) that triggered the
+        # false positive.
+        "regex_execution": re.compile(
+            r"(=~|!~|\b(?:qr|m|s|tr|y)\b[/{}\[\]()<>!|#~^])"
+        ),  # Catches Perl's native binding operators and regex quotes
+        "time_date_logic": re.compile(r"\b(localtime|gmtime|Time::HiRes|sleep|time)\b"),
+        # BUG FIX: the whole alternation used to be wrapped in \b(...)\b.
+        # \b requires a word/non-word transition; `system\s*\(` and
+        # `exec\s*\(` both END in a literal `(` (non-word), so the
+        # trailing \b could never match once the paren was followed by
+        # anything else non-word (e.g. a string-literal quote or
+        # variable sigil) -- meaning `system("ls")` and `exec("ls")`,
+        # the two most common forms, never matched at all. Each
+        # alternative now carries only the boundary that makes sense
+        # for its own shape (leading \b for word-prefixed forms, none
+        # for the punctuation-delimited backtick form).
+        "ipc_rpc_bridges": re.compile(
+            r"\bsystem\s*\(|\bexec\s*\(|\bfork\b|\bIPC::Open[23]\b|\bqx\b|`.*`"
+        ),  # Backticks and qx// are shell executions
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/php.py b/gitgalaxy/standards/language_standards/languages/php.py
new file mode 100644
index 000000000..d26ce43ed
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/php.py
@@ -0,0 +1,334 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "PHP 8.5.x / Modern Laravel 11+, Symfony 7+, & PSR-12 Paradigms",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Merged standard suffixes, legacy formats, UI templates (.phtml, .ctp), and CMS "unparsable artifacts" (.module, .inc).
+    "extensions": [
+        ".php",
+        ".phtml",
+        ".php3",
+        ".php4",
+        ".php5",
+        ".php7",
+        ".php8",
+        ".phps",
+        ".ctp",
+        ".module",
+        ".inc",
+        ".theme",
+        ".install",
+        ".profile",
+        ".engine",
+        ".aw",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless framework CLI entry points that are secretly pure PHP code.
+    "exact_matches": ["artisan", "composer.phar", "drush", "wp-cli", "phpunit"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files (like .inc).
+    "discriminators": [
+        ".php",
+        "composer.json",
+        "composer.lock",
+        "phpunit.xml",
+        "phpunit.xml.dist",
+        "phpcs.xml",
+        ".php_cs",
+        ".php_cs.dist",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["php", "php-cli", "php-cgi", "hhvm"],
+    # UPGRADED: Maps to Family 6 (Polyglot)
+    # Rationale: PHP fundamentally operates within an HTML context, requiring the parser
+    # to explicitly hunt for <?php execution boundaries. It also supports multiple
+    # comment styles (//, #, and /* */).
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Control flow. Includes modern match expression. EXCLUDES throw (bailout_hits).
+        "branch": re.compile(
+            r"(?<!\$)(?<!->)(?<!::)\b(if|else|elseif|switch|case|default|foreach|for|while|do|try|catch|finally|break|continue|match|goto)\b|&&|\|\||\?\?|\?"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Signatures for functions and arrow functions. Bounded to prevent ReDoS.
+        # #1209: parameter-list span wrapped in its own capture group (was
+        # only reachable via group(0), the whole match including the
+        # "function"/"fn"/name prefix) so detector.py's counter isolates
+        # just "(...)" -- the whole-match fallback overcounted every
+        # zero/one-arg signature by +1 the same way Python's did (#1199).
+        # Name group added too, purely so existing extraction tests keep
+        # passing.
+        "args": re.compile(
+            r"(?<!\$)(?<!->)(?<!::)\b(?:function|fn)[ \t\n]*(?:&[ \t\n]*)?(?:/\*.*?\*/[ \t\n]*){0,3}([a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*)?[ \t\n]*(\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\))*\))*\))",
+            re.M | re.I,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const/readonly (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"(?<!\$)(?<!->)(?<!::)\b(namespace|use|class|interface|trait|enum|function|return|yield|declare|require|require_once|include|include_once|as|implements|extends|clone|new)\b"
+        ),
+        "func_start": re.compile(
+            r"(?:^|(?<!->)(?<!::)[^a-zA-Z0-9_$])(?:#\[(?:[^\]\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\][ \t\n]*){0,10}"
+            r"(?:(?:public|protected|private|static|final|abstract)[ \t\n]+){0,5}"
+            r"(?<!->)(?<!::)\bfunction[ \t\n]+(?:&[ \t\n]*)?(?:/\*.*?\*/[ \t\n]*){0,3}([a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*)[ \t\n]*(?=\()",
+            re.M | re.I,
+        ),
+        "class_start": re.compile(
+            r"^[ \t]*(?:#\[(?:[^\]\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\][ \t\n]*){0,10}"
+            r"(?:(?:abstract|final|readonly)[ \t\n]+){0,3}(?:class|interface|trait|enum)[ \t\n]+(?:/\*.*?\*/[ \t\n]*){0,3}(?!(?:extends|implements)\b)([a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*)(?![a-zA-Z0-9_\x80-\xff])",
+            re.M | re.I,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|declare\s*\(\s*strict_types[ \t]*=\s*1\s*\)|readonly|Throwable|Exception|assert|isset|empty|is_null|instanceof)\b|\?\?|\?->|#\[Override\]"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Error suppression, dangerous eval, and loose equality.
+        # (?<![=!]) on the == branch: without it, `===`/`!==` (strict
+        # equality/inequality, explicitly SAFE per this language's own
+        # `safety` rule above) both still matched via their trailing `==`
+        # substring at a shifted offset -- same bug found in javascript.
+        # BUG FIX: the `@` error-suppression check required the next
+        # char to be a letter/underscore, matching `@someFunc()` but
+        # missing PHP's extremely common `@$array['key']`/`@$var`
+        # suppression idiom (silencing "undefined index" notices).
+        # Widened to also allow `$` immediately after `@`.
+        "safety_bypasses": re.compile(
+            r"@(?:[a-zA-Z_\x80-\xff]|\$)|\b(unserialize|extract|parse_str|phpinfo)\b|error_reporting\s*\(\s*0\s*\)|(?<![=!])==(?!=)|!=(?!=)"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Shell execution and process killers. EXCLUDES prints (Phase 5).
+        "high_risk_execution": re.compile(r"\b(exec|shell_exec|system|passthru|proc_open|popen)\b|`[^`]+`"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(fopen|fread|fwrite|file_get_contents|file_put_contents|PDO|mysqli|curl_exec|socket|header|setcookie)\b|\$_(?:GET|POST|FILES|REQUEST|COOKIE)"
+        ),
+        # 10. api (Public Surface Area)
+        # Exposed surface. Explicit public markers + attribute routes.
+        "api": re.compile(r"\b(public)\b|#\[(?:ApiResource|Route|Get|Post|Put|Delete|Patch)[^\]]*\]"),
+        # 11. flux (State Mutation)
+        # Mutation of state. Variable reassignments and array mutators.
+        # QUADRATIC BLOWUP FIX: the optional `(?:\w+)?` before the
+        # required-but-often-absent `->`/`::` was unbounded with no
+        # preceding \b anchor -- O(n^2) on a long run of word characters
+        # with neither token present. Bounded to {1,100}.
+        "state_mutation": re.compile(
+            r"\$[a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*\s*(?:[-+*./%&|])?=|&\$|\bglobal\s+\$|(?:\w{1,100})?(?:->|::)[a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*[ \t]*=|array_(?:push|pop|shift|unshift|splice)\b|(?:\+\+|--)"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # BUG FIX: the `function|class|namespace|use|if|foreach`
+        # keyword check only ran after `/*` (the rare block-comment
+        # form) -- a commented-out declaration using `//` (PHP's
+        # standard, far more common single-line comment style, e.g.
+        # `// function foo() {}`) never matched at all. Applied the
+        # same keyword check to both comment styles.
+        "dead_code": re.compile(
+            r"//\s*[;{}]|(?://|/\*)\s*(?:function|class|namespace|use|if|foreach)\b"
+            r"|#\s*\$|//\s*(?:echo|print|\$|return|var_dump)"
+        ),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"/\*\*|@param|@return|@throws|@var|@deprecated|@property|@method"),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r"\b(PHPUnit|TestCase|assertSame|assertEquals|assertTrue|assertFalse|mock|spy|expects|toBe|test|it)\b|#\[Test\]"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # BUG FIX: `go\(` ends on `(` (non-word), so the shared
+        # trailing \b only fired when a word char immediately followed
+        # the paren -- never true for the zero-argument form (`go();`).
+        "concurrency": re.compile(
+            r"\b(?:Fiber|yield|Swoole|React\\|Amp\\|Coroutine|await|suspend|resume|pcntl_fork)\b|\bgo\("
+        ),
+        # 16. ui_framework (UI / View Components)
+        # BUG FIX: `view\s*\(`/`render\s*\(` both end on `(` (non-word),
+        # so the shared trailing \b only fired when a word char
+        # immediately followed the paren -- never true for the common
+        # real call shape `view("index")`, where a quote follows.
+        "ui_framework": re.compile(
+            r"\b(?:renderView|extends\s+Controller|Blade::|Twig\\Environment)\b"
+            r"|\bview\s*\(|\brender\s*\("
+            r'|@(?:if|foreach|yield|section|extends)\b|<\?=|echo\s+[\'"]<|\{\{[^}]*\}\}|\{%\s*[^%]*\s*%\}'
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"\b(?:function\s*\([^)]*\)\s*(?:use\s*\([^)]*\)\s*)?\{|fn\s*\([^)]*\)[ \t]*=>)"),
+        # 18. globals (Global / Shared State)
+        # BUG FIX: the leading \b before `$_SERVER`/`$_SESSION`/
+        # `$_ENV`/`$GLOBALS` requires a word char immediately before
+        # the `$` -- never true in real PHP, where a superglobal is
+        # always preceded by whitespace, `=`, `(`, or a line start
+        # (all non-word). All 4 of PHP's most common superglobal
+        # accesses never matched at all. `$` is unambiguous as a
+        # start anchor on its own; no leading \b was needed.
+        "globals": re.compile(r"(?:\$_SERVER|\$_SESSION|\$_ENV|\$GLOBALS)\b|\bglobal\s+\$", re.I),
+        # 19. decorators (Decorators / Annotations)
+        # BUG FIX (ReDoS): `[a-zA-Z0-9_:\\]+` and `[^\]]*` are two
+        # adjacent unbounded quantifiers matching an overlapping
+        # character set (both match plain letters/digits) -- against
+        # an adversarial attribute name with no closing `]`, every
+        # possible split between the two quantifiers gets tried
+        # before failing. Confirmed genuine O(n^2) scaling (0.045s/
+        # 0.18s/0.71s/2.85s for n=10k/20k/40k/80k, ~4x per doubling).
+        # Bounded both to reasonable caps.
+        "decorators": re.compile(r"#\[\s*[a-zA-Z0-9_:\\]{1,100}[^\]]{0,300}\]", re.M),
+        # 20. generics (Generics / Type Parameters)
+        # Simulated/Docblock generics.
+        "generics": re.compile(
+            r"@(?:template|implements|extends|use)\s+[a-zA-Z0-9_\\]+(?:<[^>]*>)?|\b(?:array|iterable|Collection)<[^>]*>"
+        ),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(
+            r"\b(array_map|array_filter|array_reduce|array_walk|array_column|array_find|array_any|array_all)\b"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(bcadd|bcsub|bcmul|bcdiv|gmp_add|gmp_mul|abs|cos|sin|tan|sqrt|log|exp|pow)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Magic methods, reflection, and variable variables.
+        "reflection_metaprogramming": re.compile(
+            r"\b(__(?:get|set|call|callStatic|invoke|destruct|clone)|Reflection(?:Class|Method|Property)|call_user_func(?:_array)?)\b|\$\$[a-zA-Z_\x80-\xff]"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r"\b(?:use\s+(?:function|const[ \t]+)?[\w\\]+|require|include|require_once|include_once)\b",
+            re.M,
+        ),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (PHP) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
+            #
+            # HISTORICAL BUG: Originally, this regex was anchored to the start of the
+            # line `^[ \t]*`. This blinded the firewall to PHP's dynamic execution
+            # patterns. PHP applications (especially legacy frameworks) frequently
+            # lazy-load files inside controllers, `if` statements, or assign the result
+            # of a file inclusion directly to a variable (e.g., `$config = require 'cfg.php';`).
+            #
+            # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
+            # boundary to find the inclusion keywords anywhere in the file.
+            #
+            # [ THE ASSIGNMENT SHIELD SIMPLIFICATION ]
+            # Because the regex is no longer anchored to the start of the line, we were
+            # able to completely delete the bloated, ReDoS-prone assignment capture group
+            # `(?:\$[a-zA-Z_]...=)?`. The engine now effortlessly ignores the `$var = `
+            # portion and skips straight to the `require` boundary.
+            #
+            # [ THE PARENTHESIS SHIELD ]
+            # PHP allows `require 'file.php'` and `require('file.php')`. The `\(?` safely
+            # bridges both syntaxes while capturing the target path.
+            # =====================================================================
+            r"\b(?:use[ \t\n]+(?:function[ \t\n]+|const[ \t\n]+)?([a-zA-Z0-9_\\]+(?:[ \t\n]*(?:as[ \t\n]+|[,{])[a-zA-Z0-9_\\ \t\n{},]+?)?)[ \t\n]*;|(?:require|require_once|include|include_once)[ \t\n]*\(?[ \t\n]*(?:['\"]([^'\"]+)['\"]|([^;]+?)[ \t\n]*(?=\)?\s*;)))",
+            re.M | re.I,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"@(?:author|copyright)\s+(.*)|(?:Created by|Maintainer):?\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(Response|JsonResponse|HtmlResponse|RedirectResponse|Symfony\\Component\\HttpFoundation|Illuminate\\Http\\Response)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(EventDispatcher|dispatchEvent|Listener|dispatch|broadcast|notify|Event::|listen)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # BUG FIX: `app\(`/`make\(` both end on `(` (non-word), so the
+        # shared trailing \b only fired when a word char immediately
+        # followed the paren -- never true for the zero-argument form
+        # (`app();`/`make();`).
+        "dependency_injection": re.compile(
+            r"\b(?:ContainerInterface|Container|getContainer|inject|bind|singleton)\b"
+            r"|\bapp\(|\bmake\(|#\[(?:Inject|Autowire)[^\]]*\]"
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        # BUG FIX: `macro\s*\(`/`mixin\s*\(` both end on `(` -- the
+        # shared trailing \b only fired when a word char immediately
+        # followed the paren, e.g. `mixin(new Foo())` worked (`new`
+        # follows) but `macro("foo", ...)` didn't (a quote follows).
+        "macros": re.compile(r"\bMacroable\b|\bmacro\s*\(|\bmixin\s*\("),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": re.compile(r"\b(FFI::cast|FFI::addr|FFI::scope|FFI::new)\b"),
+        # 36. memory_alloc
+        "memory_alloc": re.compile(r"\bnew\s+[a-zA-Z_\x80-\xff][a-zA-Z0-9_\x80-\xff]*"),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        # BUG FIX: `logger\(` ends on `(` (non-word), so the shared
+        # trailing \b only fired when a word char immediately followed
+        # the paren -- never true for the idiomatic Laravel chain form
+        # `logger()->info('message')`, where `)` follows.
+        "telemetry": re.compile(
+            r"(?:\b(?:Log::|LoggerInterface|Monolog\\|error_log|Psr\\Log)\b|logger\()"
+            r".*?(?:info|error|warning|debug|trace|notice|critical|alert|emergency)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(echo|print|var_dump|print_r|printf|vprintf|var_export|die|exit|dd|dump)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\((?:int|integer|bool|boolean|float|double|string|array|object|unset)\)\s*|\bsettype\s*\("
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|die|exit|abort)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(sleep|usleep|time_nanosleep|time_sleep_until)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(mutex|lock|synchronized|Semaphore|flock|sem_acquire)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|readonly|final)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(unset|fclose|mysql_close|mysqli_close|PDO::null|dispose|cleanup)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b(private|protected|internal)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\.on\(|addEventListener|subscribe|@KafkaListener|@RabbitListener"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX: `mock\(`/`fake\(` both end on `(` (non-word), so the
+        # shared trailing \b only fired when a word char immediately
+        # followed the paren -- never true for the zero-argument form
+        # (`mock();`).
+        "test_skip": re.compile(r"\b(?:markTestSkipped|test\.skip|it\.skip)\b|\bmock\(|\bfake\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (PHP Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(unserialize|serialize|json_decode|json_encode|simplexml_load_(?:string|file)|DOMDocument)\b"
+        ),
+        "regex_execution": re.compile(r"\b(preg_match(?:_all)?|preg_replace(?:_callback)?|preg_split|preg_filter)\b"),
+        # BUG FIX: `time\s*\(`/`date\s*\(` both end on `(` (non-word),
+        # so the shared trailing \b only fired when a word char
+        # immediately followed the paren -- never true for the
+        # zero-argument form (`time()`) or a quoted format string
+        # (`date("Y-m-d")`).
+        "time_date_logic": re.compile(r"\b(?:strtotime|DateTime(?:Immutable)?|date_create)\b|\btime\s*\(|\bdate\s*\("),
+        "ipc_rpc_bridges": re.compile(r"\b(shell_exec|exec|system|passthru|proc_open|curl_exec|fsockopen)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/plaintext.py b/gitgalaxy/standards/language_standards/languages/plaintext.py
new file mode 100644
index 000000000..badfd0b54
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/plaintext.py
@@ -0,0 +1,62 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Universal Plaintext & ASCII Secrets",
+        "last_updated": "2026-04-01",
+        "blueprint_version": "1.1",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard text, log outputs, and UNIX man pages.
+    # FIX: Removed JCL/BMS (executable) and p12/pfx/jks/kdbx (lethal binary blobs).
+    "extensions": [
+        ".txt",
+        ".text",
+        ".log",
+        ".out",
+        ".err",
+        ".nfo",
+        ".golden",
+        ".properties",
+        ".1",
+        ".2",
+        ".3",
+        ".4",
+        ".5",
+        ".6",
+        ".7",
+        ".8",
+        ".9",
+    ],
+    # ABSOLUTE IDENTITY: The universally recognized, extensionless plaintext anchors.
+    # FIX: Added ubiquitous community files. Removed binary keystore exact matches.
+    "exact_matches": [
+        "AUTHORS",
+        "NOTICE",
+        "COPYING",
+        "INSTALL",
+        "acknowledgements",
+        "CHANGELOG",
+        "CONTRIBUTING",
+        "CODE_OF_CONDUCT",
+        "SECURITY",
+        "MAINTAINERS",
+    ],
+    # ECOSYSTEM ANCHORS: Universal fallback discriminators.
+    "discriminators": [".txt", ".md", "README", "LICENSE"],
+    # EXECUTION SIGNATURES: Plaintext is unexecuted raw string data.
+    "shebangs": [],
+    # THE FIX: Plaintext is mathematically inert. It has no lexical family.
+    "lexical_family": "non_lexical",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/powershell.py b/gitgalaxy/standards/language_standards/languages/powershell.py
new file mode 100644
index 000000000..e8d01f65e
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/powershell.py
@@ -0,0 +1,369 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "PowerShell 7.5.4 (Core / Cross-Platform / PSClasses)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard scripts (.ps1), modules (.psm1), data files evaluated as AST (.psd1), and type formatting files.
+    "extensions": [".ps1", ".psm1", ".psd1", ".ps1xml", ".psc1", ".pssc", ".cdxml"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: PowerShell rarely uses extensionless execution scripts; its conventions demand extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and analyzer settings to lock in context.
+    "discriminators": [
+        ".ps1",
+        ".psm1",
+        "PSScriptAnalyzerSettings.psd1",
+        "psake.ps1",
+    ],
+    # EXECUTION SIGNATURES: Modern cross-platform and legacy Windows interpreters found on Line 1.
+    "shebangs": ["pwsh", "powershell"],
+    # Maps to Family 4 (Hybrid Hash) -- #621: this comment always said
+    # "Family 4 (Hybrid Hash)" but the value below was "standard_block"
+    # until now, meaning PowerShell shared a regex with C-style languages
+    # and got zero comment stripping (standard_block never used the `#`
+    # token). "embedded_syntax" is the real family for this shape.
+    # Rationale: PowerShell uses '#' for single-line comments but relies on
+    # a unique '<# #>' syntax for multi-line block comments, requiring hybrid parsing logic.
+    "lexical_family": "embedded_syntax",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # branch: decisions that split flow. Includes ternary operators (?) and null-coalescing (??).
+        "branch": re.compile(
+            r"(?<![-$.])\b(if|else|elseif|switch|for|foreach|while|do|until|try|catch|finally|throw|trap|break|continue|return)\b|-and|-or|-not|-xor|\?\?|(?<=\s)\?(?=\s|\{)",
+            re.I,
+        ),
+        # args: Parameters / Coupling. Captures the param block mass of functions and script files.
+        # RULE 11 FIX (epic #813/#834): both alternatives used the flat `\([^)]*\)`,
+        # truncating at the FIRST `)` and breaking on a realistic default-value expression
+        # containing its own parens (`param($Config = (Get-DefaultConfig))`, extremely common
+        # for computed defaults) -- the paren variant of the same Rule-11 bug class already
+        # fixed for angle- and square-bracket generics elsewhere. Widened to the established
+        # one-level-nesting idiom.
+        # MISSING-DECLARATION-SHAPE FIX (epic #813/#834): PS class constructors
+        # (`Foo([string]$name) { ... }`) have no leading `function` keyword and no return-type
+        # bracket, so their parameter list was invisible to this rule entirely -- added as a
+        # third alternative, anchored to a trailing `{` (not just optional) specifically so it
+        # can't also match a bare call statement (`Foo($a, $b)` with no body), which PowerShell
+        # constructors/methods always have and bare calls never do immediately on the same line.
+        # SCOPE-QUALIFIER FIX (epic #813/#834): PowerShell allows an explicit scope modifier
+        # before a function name (`function global:Foo(...)`, also `script:`/`local:`/
+        # `private:`, a real idiom for module-authored functions that need global-scope
+        # visibility). The identifier class `[a-zA-Z0-9_-]+` doesn't include `:`, so the whole
+        # alternative failed to match at all past the scope prefix -- added as an optional
+        # non-capturing step-over before the name.
+        # NEW-ALTERNATIVE FALSE-POSITIVE FIX (epic #813/#834): the bare-identifier constructor
+        # alternative just above, on its own, ALSO matched PowerShell's own control-flow
+        # statements -- `if (...) {`, `while (...) {`, `switch (...) {`, `for (...) {`,
+        # `foreach (...) {`, `elseif (...) {` all share the exact "identifier, parens, trailing
+        # brace" shape a constructor call has. Caught by hand-testing the fix's own "invalid"
+        # case (`if ($a -eq $b) {`) before shipping, not by crucible (matches recurring class 21's
+        # lesson about a new alternative's own blind spots -- here at authoring time instead of
+        # via a corpus diff). Fixed with a negative-lookahead keyword exclusion.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # all three branches (was only reachable via group(0), the whole
+        # match including the "param"/"function"/name prefix) so
+        # detector.py's counter isolates just "(...)" -- the whole-match
+        # fallback overcounted every zero/one-arg signature by +1 the
+        # same way Python's did (#1199). Name groups added to branches
+        # 2/3 too, purely so existing extraction tests keep passing.
+        "args": re.compile(
+            r"\b(param)\s*(\((?:[^()]|\([^()]*\))*\))"
+            r"|\bfunction\s+(?:(?:global|script|local|private):)?([a-zA-Z0-9_-]+)\s*(\((?:[^()]|\([^()]*\))*\))"
+            r"|^[ \t]*(?:(?:hidden|static)\s+)*(?:\[(?:[^\[\]]|\[[^\[\]]*\])+\]\s+)?"
+            r"(?!(?:if|elseif|switch|while|for|foreach|until|trap|catch)\b)"
+            r"([A-Za-z_]\w*)\s*(\((?:[^()]|\([^()]*\))*\))\s*[ \t\n]*\{",
+            re.I | re.M,
+        ),
+        # linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope (process, begin, end).
+        # EXCLUDES access modifiers (hidden, static) to prevent Structural Complexity Inflation.
+        "structural_boundaries": re.compile(
+            r"(?<![-$.])\b(?:(?:function|filter|workflow|configuration|class|enum)\s+[a-zA-Z_]"
+            r"|(?:process|begin|end|clean)\s*\{"
+            r"|(?:return|exit)\b(?![-])"
+            r"|using\s+(?:namespace|module)\b)",
+            re.I,
+        ),
+        # func_start: Executable Logic Anchors. Anchors executable logic blocks.
+        # EXCLUDES class/enum to fix False Positives.
+        # BUG FIX: the return-type bracket class `[^\]]+` couldn't
+        # represent one level of nested brackets, so a PS class method
+        # with a generic .NET return type (e.g.
+        # `[Dictionary[string,int]] GetMap() {` /
+        # `[System.Collections.Generic.List[string]] GetItems() {`) --
+        # a common real-world form -- never matched at all, unlike the
+        # identical non-generic form (`[int] GetValue() {`), which did.
+        # MISSING-DECLARATION-SHAPE FIX (epic #813/#834): PS class constructors
+        # (`Foo([string]$name) { ... }`) have neither a leading `function` keyword nor a
+        # return-type bracket, so they were entirely invisible to this rule (only typed
+        # methods and `function`-keyword declarations matched). Added as a third
+        # alternative, anchored to a trailing `{` (not just optional) specifically so it
+        # can't also match a bare call statement (`Foo($a, $b)` with no body) -- PowerShell
+        # constructors/methods always have a body immediately following on the same
+        # logical statement, and a bare call never continues into an unrelated `{` like
+        # that in realistic code.
+        # SCOPE-QUALIFIER FIX (epic #813/#834): PowerShell allows an explicit scope modifier
+        # before a function name (`function global:Foo {}`, also `script:`/`local:`/
+        # `private:`). The identifier class doesn't include `:`, so the capture greedily
+        # consumed only the SCOPE KEYWORD itself (e.g. "global") as if it were the function
+        # name, silently returning a wrong name rather than failing to match -- worse than a
+        # non-match. Added an optional non-capturing step-over before the name.
+        # NEW-ALTERNATIVE FALSE-POSITIVE FIX (epic #813/#834): same as `args` above -- the
+        # bare-identifier constructor alternative just below also matched PowerShell's own
+        # control-flow statements (`if (...) {`, `while (...) {`, `switch (...) {`, `for (...)
+        # {`, `foreach (...) {`, `elseif (...) {`). Fixed with the same negative-lookahead
+        # keyword exclusion.
+        "func_start": re.compile(
+            r"^[ \t]*(?:function|filter|workflow)\s+(?:(?:global|script|local|private):)?([a-zA-Z0-9_-]+)"
+            r"|^[ \t]*(?:(?:hidden|static)\s+)*\[(?:[^\[\]]|\[[^\[\]]*\])+\]\s+(?!(?:if|elseif|switch|while|for|foreach|until|trap|catch|param)\b)([a-zA-Z_]\w*)(?=\s*\()"
+            r"|^[ \t]*(?:(?:hidden|static)\s+)*(?!(?:if|elseif|switch|while|for|foreach|until|trap|catch|param)\b)"
+            r"([A-Za-z_]\w*)\s*\((?:[^()]|\([^()]*\))*\)\s*[ \t\n]*\{",
+            re.I | re.M,
+        ),
+        # class_start: Object / Entity Declarations. Defines OO boundaries (Classes and Enums).
+        # #1295-adjacent: no capture group around the name meant every match collapsed into
+        # "Anonymous_Class" in the named-extraction path -- powershell has been in
+        # _CLASS_START_NAMED_EXTRACTION_LANGS since #1264, but this specific gap was never
+        # caught (real_classes=5 in the corpus, found_classes=0). Purely additive change --
+        # doesn't alter which lines match or how many, only makes match.groups() richer.
+        "class_start": re.compile(r"^[ \t]*(?:class|enum)\s+([a-zA-Z_]\w*)", re.I | re.M),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # safety: Defensive Programming. Strict mode, validation attributes, and null-conditional access (?.).
+        "safety": re.compile(
+            r"\b(try|catch|finally|trap|Set-StrictMode|ValidateNotNull|ValidateSet|ValidateRange|ValidatePattern)\b|-ErrorAction\s+Stop|\$\?|\?\.",
+            re.I,
+        ),
+        # safety_neg: Safety Bypasses. Actively bypassing errors or type checks (Out-Null, SilentlyContinue).
+        "safety_bypasses": re.compile(
+            r"-ErrorAction\s+SilentlyContinue|-WarningAction\s+SilentlyContinue|Out-Null|\[void\]|ExecutionPolicy\s+Bypass|\bIgnore\b",
+            re.I,
+        ),
+        # danger: High-Risk Execution. Dynamic code execution and process terminators.
+        "high_risk_execution": re.compile(r"\b(Invoke-Expression|iex|Stop-Process|kill|Exit)\b", re.I),
+        # io: I/O & Network Boundaries. Disk, Network, and URL fetching (Includes CERN/TBL legacy emulation triggers).
+        "io": re.compile(
+            r"\b(Get-Content|Set-Content|Out-File|Invoke-WebRequest|iwr|Invoke-RestMethod|irm|TcpClient|HttpListener|HTLoad|HTGet|ENQUIRE)\b",
+            re.I,
+        ),
+        # api: Public Surface Area. Exposed surface area (Module exports and non-hidden functions).
+        "api": re.compile(
+            r"\b(Export-ModuleMember|New-Alias|CmdletBinding)\b|^[ \t]*(?!hidden\s+)[a-zA-Z_]\w*\s*\(",
+            re.I | re.M,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. Captures assignments, scoped variables, array indexing, and anchored increments.
+        "state_mutation": re.compile(
+            # PATH A: EXPLICIT CMDLET MUTATION
+            r"\bSet-Variable\b|"
+            # PATH B: STANDARD ASSIGNMENT (Variables, Scopes, Properties, and Arrays)
+            # Safely captures $var, $global:var, $env:PATH
+            r"\$(?:[a-zA-Z]+:)?[a-zA-Z_]\w*"
+            # The Chain: Safely captures .Property OR ['Index'], clamped to {0,4} to prevent runaway depth
+            r"(?:\.[a-zA-Z_]\w*|\[[^\]\n]+\]){0,4}"
+            # The Operator: Uses [ \t]* instead of \s* to prevent O(N^2) vertical newline bleeding
+            r"[ \t]*(?:\+|-|\*|/|%)?=|"
+            # PATH C: PRE-INCREMENT / PRE-DECREMENT
+            # Anchored to a variable to prevent matching "C++" in strings
+            r"(?:\+\+|--)[ \t]*\$(?:[a-zA-Z]+:)?[a-zA-Z_]\w*|"
+            # PATH D: POST-INCREMENT / POST-DECREMENT
+            # Includes property/array chaining before the increment (e.g. $arr[0]++)
+            r"\$(?:[a-zA-Z]+:)?[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*|\[[^\]\n]+\]){0,4}[ \t]*(?:\+\+|--)",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out execution logic indicating dead features. Supports both `//` and `#` style comments.
+        "dead_code": re.compile(r"(?:#|<#)[ \t]*(?:function|class|if|foreach|while|return)\b", re.I),
+        # doc: Structured Documentation. Get-Help comment-based documentation.
+        "doc": re.compile(
+            r"\.(?:SYNOPSIS|DESCRIPTION|PARAMETER|EXAMPLE|NOTES|LINK|INPUTS|OUTPUTS|ROLE)\b",
+            re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        # Triggers indicating internal verification. MUST strictly anchor 'it', 'test', and 'toBe' with opening parentheses to prevent triggering on prose inside Pest/PHPUnit tests.
+        "test": re.compile(
+            r'\b(?:Mock|Assert-MockCalled|BeforeAll|AfterAll|BeforeEach|AfterEach|Should)\b|\b(?:Describe|Context|It)\s+[\'"]',
+            re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # concurrency: Temporal Static. Jobs, Runspaces, and PS7 Parallel pipelines.
+        # BUG FIX: `-Parallel` starts with `-` (non-word), so the
+        # shared leading \b could only fire when a word char
+        # immediately preceded the `-` -- never true for how this
+        # ForEach-Object flag is actually written (preceded by
+        # whitespace). PS7's parallel pipeline feature never matched.
+        "concurrency": re.compile(
+            r"\b(?:Start-Job|Wait-Job|Receive-Job|Start-ThreadJob|RunspaceFactory|PowerShell\.Create)\b|-Parallel\b",
+            re.I,
+        ),
+        # ui_framework: UI / View Components. WinForms/WPF bridges (Includes TBL WWW rendering emulation triggers).
+        "ui_framework": re.compile(
+            r"\[System\.Windows\.(?:Forms|Controls|Markup)\]|New-Object\s+System\.Windows\.|Out-GridView|HtmlDocument|WebBrowser|SGML|WorldWideWeb",
+            re.I,
+        ),
+        # closures: Closures / Anonymous Functions. ScriptBlocks (The foundation of PS closures).
+        # BUG FIX (ReDoS): the unbounded `[^}]*` before the closing `}`,
+        # combined with unanchored search, is O(n^2) on payloads with many
+        # `{` and no matching `}` (each of the n starting positions scans
+        # ~n chars before failing) -- confirmed via scaling measurements
+        # (~4x slowdown per input-size doubling). Bounded quantifiers cap
+        # the per-position scan cost, same fix shape as go/dart closures.
+        "closures": re.compile(r"\{\s{0,20}(?:param\s{0,10}\([^)]{0,300}\))?[^}]{0,500}\}", re.I),
+        # globals: Global / Shared State. Environment and global/script scope variables.
+        "globals": re.compile(
+            r"\$(?:global|env|script):[a-zA-Z_]\w*|\b(?:ErrorActionPreference|WarningPreference|ConfirmPreference)\b",
+            re.I,
+        ),
+        # decorators: Decorators / Annotations. Cmdlet and Parameter attributes.
+        "decorators": re.compile(
+            r"\[(?:CmdletBinding|Parameter|Alias|OutputType|AllowNull|AllowEmptyString)\s*\([^)]*\)\]",
+            re.I,
+        ),
+        # generics: Generics / Type Parameters. .NET generic type invocations.
+        "generics": re.compile(r"\[[a-zA-Z_.]+(?:`\d+)?\[[^\]]*\]\]", re.I),
+        # comprehensions: Iterators / Comprehensions. Pipeline filtering and projection.
+        "comprehensions": re.compile(
+            r"\|\s*(?:Where-Object|\?|Select-Object|select|ForEach-Object|%)[ \t]*\{",
+            re.I,
+        ),
+        # scientific: Numerical / Compute Libraries. .NET Math primitives.
+        "scientific": re.compile(
+            r"\[Math\]::(?:Abs|Acos|Asin|Atan|Ceiling|Cos|Exp|Floor|Log|Max|Min|Pow|Round|Sin|Sqrt|Tan|PI)\b",
+            re.I,
+        ),
+        # heat_triggers: Metaprogramming & Reflection. Reflection and on-the-fly C# compilation via Add-Type.
+        "reflection_metaprogramming": re.compile(
+            r"\b(Add-Type|System\.Reflection|System\.Management\.Automation\.Language|Invoke-Expression|iex)\b|&\s*\$[a-zA-Z_]\w*",
+            re.I,
+        ),
+        # import: Dependency Inclusions. Module and assembly loading.
+        # BUG FIX: the dot-sourcing alternative (`. .\script.ps1`)
+        # starts with `.` (non-word), so the shared leading \b could
+        # only fire when a word char immediately preceded the `.` --
+        # never true for how dot-sourcing is actually written (always
+        # preceded by whitespace or a line start). This common
+        # PowerShell module-loading idiom never matched at all.
+        "import": re.compile(
+            r"\b(?:Import-Module|using\s+module|using\s+namespace|using\s+assembly)\b|\.\s+[\w.\/\\]+\.ps1\b",
+            re.I,
+        ),
+        # --- UPDATED LINE FOR THE ORCHESTRATOR ---
+        # BUG FIX (epic #813/#834): the quoted-path branches used `['\"]?...['\"]?` -- an
+        # OPTIONAL quote pair around a capture class that excludes `\s` regardless of whether
+        # a quote is actually present. So a quoted path containing a space (e.g. the extremely
+        # common Windows `'C:\Program Files\MyModule\MyModule.psd1'`) silently truncated at the
+        # first space, losing everything after it. Replaced the single optional-quote capture
+        # with three real alternatives per import form (single-quoted / double-quoted / bare):
+        # a quoted capture now allows any character except its own quote (so spaces are fine),
+        # while the bare (unquoted) form keeps the original space/semicolon exclusion, since an
+        # unquoted PowerShell path genuinely cannot contain a space.
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:Import-Module|using[ \t\n]+(?:module|namespace|assembly))[ \t\n]+"
+            r"(?:'([^'\n]+)'|\"([^\"\n]+)\"|([^'\"\s;]+))"
+            r"|^[ \t]*\.[ \t\n]+"
+            r"(?:'([^'\n]+\.ps1)'|\"([^\"\n]+\.ps1)\"|([^'\"\s;]+\.ps1))",
+            re.I | re.M,
+        ),
+        # ownership: Authorship indicators in comments or metadata.
+        "ownership": re.compile(
+            r"^[ \t]*#\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)|\.AUTHOR\s+([^\n]+)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
+        "ssr_boundaries": re.compile(
+            r"\b(New-PodeServer|Add-PodeRoute|Write-PodeHtmlResponse|New-UDEndpoint|New-UDPage)\b",
+            re.I,
+        ),
+        "events": re.compile(
+            r"\b(Register-ObjectEvent|Register-EngineEvent|Register-WmiEvent|Unregister-Event|Wait-Event)\b",
+            re.I,
+        ),
+        "dependency_injection": re.compile(
+            r"\b(InversionOfControl|DependencyInjection|Register-Service|Get-Service|Resolve-Dependency)\b",
+            re.I,
+        ),
+        "macros": None,  # PowerShell lacks a preprocessor
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # PHP natively lacks pointers, but FFI (Foreign Function Interface) memory bounds are safely captured.
+        "pointers": re.compile(r"\[(?:IntPtr|UIntPtr)\]|\[ref\]\s*\$[a-zA-Z_]\w*", re.I),
+        "memory_alloc": re.compile(
+            r"\[System\.Runtime\.InteropServices\.Marshal\]::(?:AllocHGlobal|AllocCoTaskMem)",
+            re.I,
+        ),
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # telemetry: Professional observers. Structured pipeline logging.
+        "telemetry": re.compile(
+            r"\b(Write-Verbose|Write-Debug|Write-Information|Write-Warning|Start-Transcript|Write-Log)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        "debug_prints": re.compile(r"\b(Write-Host|echo)\b", re.I),
+        # # 40. explicit_casts (Explicit Type Casting)
+        # Forceful type coercion. PHP has a strict, built-in casting syntax which prevents false positives naturally.
+        "explicit_casts": re.compile(
+            r"\[(?:int|long|string|char|byte|bool|double|float|decimal|array|hashtable)\]\s*[\$\(]",
+            re.I,
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|Exit)\b|-ErrorAction\s+Stop", re.I),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(Start-Sleep|sleep)\b", re.I),
+        # 43. bitwise_ops (Bitwise Operations)
+        # Low-level byte manipulation. CRITICAL: Removed the pipe '|' (PHP 8 Union Types), ampersand '&' (Pass-by-reference `&$var`), and used lookarounds for `<<` to prevent triggering on Heredocs (`<<<EOF`).
+        "bitwise_ops": re.compile(r"-(?:band|bor|bxor|bnot|shl|shr)\b", re.I),
+        # sync_locks: Barricades. Coordinated threading logic.
+        "sync_locks": re.compile(r"\b(lock|Monitor|Mutex|Semaphore|atomic|WaitOne)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"New-Variable\s+[^;]*?-Option\s+Constant|readonly", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown) Resource release.
+        "cleanup": re.compile(
+            r"\b(dispose|Remove-Variable|Remove-Item|Remove-Module|Stop-Transcript)\b",
+            re.I,
+        ),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"\b(hidden|private)\b", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(Register-ObjectEvent|on_|Connect-)\b", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs) Safety Theater.
+        "test_skip": re.compile(r"\b(pending|skip|Ignore)\b", re.I),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (PowerShell Specifics) ---
+        "serialization_parsing": re.compile(
+            r"(?i)\b(ConvertFrom-Json|ConvertTo-Json|Import-Clixml|ConvertFrom-Csv|Import-Csv)\b"
+        ),
+        # BUG FIX: `-match`/`-replace`/`-split` all start with `-`
+        # (non-word), so the shared leading \b could only fire when a
+        # word char immediately preceded the `-` -- never true for how
+        # these operators are actually written (always preceded by
+        # whitespace, after the left-hand operand). PowerShell's THREE
+        # most common native regex operators never matched at all.
+        # Same shape on `[regex]::` (leading `\b` before `[`, a
+        # non-word char, requires a preceding word char that's never
+        # actually there -- always whitespace, `=`, or line start) --
+        # dropped since `[` is already self-delimiting.
+        "regex_execution": re.compile(
+            r"(?i)-match\b|-replace\b|-split\b|\bSelect-String\b|\[regex\]::(?:Match|Replace|Matches)\b"
+        ),
+        "time_date_logic": re.compile(r"(?i)\b(Get-Date|New-TimeSpan|Start-Sleep|Measure-Command)\b"),
+        "ipc_rpc_bridges": re.compile(
+            r"(?i)\b(Invoke-Command|Invoke-RestMethod|Invoke-WebRequest|Start-Process|Start-Job|Enter-PSSession)\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/proto.py b/gitgalaxy/standards/language_standards/languages/proto.py
new file mode 100644
index 000000000..cc23d5b7d
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/proto.py
@@ -0,0 +1,39 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Protocol Buffers 3 (proto3)",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "1.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Protocol Buffer schema definition files.
+    "extensions": [".proto"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Schemas strictly rely on their extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Buf configuration files, Bazel build files, and generated code markers acting as anchors.
+    "discriminators": [
+        ".proto",
+        "buf.yaml",
+        "buf.gen.yaml",
+        "WORKSPACE",
+        "BUILD.bazel",
+        "BUILD",
+    ],
+    # EXECUTION SIGNATURES: Protobuf is a declarative schema language; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: Protobuf schemas strictly use standard '//' and '/* */' comments.
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/python.py b/gitgalaxy/standards/language_standards/languages/python.py
new file mode 100644
index 000000000..8823546c7
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/python.py
@@ -0,0 +1,354 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import (
+    GLOBAL_DL_FRAMEWORKS,
+    GLOBAL_FRAGILE_DEBT,
+    GLOBAL_LLM_API,
+    GLOBAL_LLM_ORCHESTRATOR,
+    GLOBAL_LLM_VECTOR_STORE,
+    GLOBAL_ML_TRADITIONAL,
+    GLOBAL_PLANNED_DEBT,
+)
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Python 3.14",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "6.30",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, legacy formats, typed stubs, Cython, and build-tooling dialects.
+    "extensions": [
+        ".py",
+        ".py3",
+        ".py2",
+        ".pyw",
+        ".pyi",
+        ".pyx",
+        ".pxd",
+        ".pxi",
+        ".pyz",
+        ".pyzw",
+        ".bzl",
+        ".gyp",
+        ".gypi",
+        ".vpython",
+        ".vpython3",
+        ".rpy",
+        ".smk",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": [
+        "setup.py",
+        "SConstruct",
+        "SConscript",
+        "BUCK",
+        "BUILD",
+        "wscript",
+        "Snakefile",
+    ],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
+    "discriminators": [
+        ".py",
+        "requirements.txt",
+        "pyproject.toml",
+        "Pipfile",
+        "Pipfile.lock",
+        "tox.ini",
+        "poetry.lock",
+        "setup.cfg",
+    ],
+    "internal_discriminator": re.compile(
+        r"^[ \t]*(?:import|from)\s+(?:subprocess|multiprocessing|threading|requests|pandas|numpy|django|flask|fastapi|sqlalchemy|boto3|httpx|matplotlib|scipy|tensorflow|torch)\b",
+        re.M,
+    ),
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["python", "python3", "python2", "pypy", "pypy3", "jython"],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Uses '#' for line-level literature; multi-line literature
+    # (docstrings) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Includes match/case (3.10+) and logical short-circuits. EXCLUDES exceptions.
+        "branch": re.compile(r"\b(if|elif|else|for|while|with|try|finally|match|case|and|or)\b"),
+        # 2. args (Parameters / Coupling)
+        # Signatures for def/lambda. Bounded generics and params [^)]*.
+        # RULE 11 FIX (epic #813/#818): the PEP 695 (3.12+) generic-parameter step-over was a
+        # flat `[^\]]*`, truncating at the FIRST `]` and breaking any type param with a
+        # nested-bracket bound (e.g. `def Foo[T: Sequence[int]](x: T) -> T:`, a realistic bounded
+        # generic). Widened to the established one-level-nesting idiom (square-bracket variant).
+        # #1199: the parameter list is now captured in its own group
+        # (group 1 for def/lambda-with-parens, group 2 for bare
+        # lambda params) instead of only ever being reachable via
+        # group(0), which used to include the "def name"/"lambda"
+        # keyword prefix -- that prefix supplied a spurious extra
+        # whitespace-split token that overcounted every zero/one-arg
+        # signature by +1 downstream in detector.py's args-counter.
+        # Group 1's body also steps over one level of nested parens
+        # (the same bounded one-level-nesting idiom RULE 11 already
+        # uses for square brackets above) so a default value that's
+        # itself a call, e.g. `def f(x=foo(1, 2), y=3):`, doesn't
+        # truncate the capture at the default's own closing paren and
+        # silently drop every parameter after it.
+        "args": re.compile(
+            r"(?:async[ \t]+)?def[ \t]+(\w+)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|"
+            r"\blambda\b[ \t]*([^:]*):|"
+            r"^[ \t]*cp?def[ \t]+(?!(?:class|struct|enum|union|extern|packed|fused)\b)"
+            r"(?:(?:inline|public|readonly|api)[ \t]+){0,3}"
+            r"(?:(?:[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*|\{\{[ \t]*[A-Za-z_]\w*[ \t]*\}\})[ \t]+){0,2}"
+            r"\*{0,2}[ \t]*(\w+)[ \t]*(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: _private (encapsulation) and Final (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(def|class|return|import|from|as|pass|continue|break|await|assert|del|global|nonlocal|type)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Anchors executable logic. Steps safely over decorators.
+        # RULE 11 FIX (epic #813/#818): see args' comment above -- same PEP 695 nested-bracket
+        # gap, same fix (widened generic-parameter step-over).
+        # tri-comparison-ledger-sweep (2026-08-20): second alternative adds Cython's
+        # `cdef`/`cpdef` module-level function definitions (`.pyx`/`.pxd`/`.pxi` are
+        # deliberately routed to "python" -- see `extensions` above -- for exactly this
+        # comprehensive-Cython-surface reason). These have no `def` keyword at all
+        # (`cdef int _allocate_buffer(array self) except -1:`), so the first alternative
+        # never saw them -- confirmed as a real, complete recall gap (68 real functions
+        # across `cython/MemoryView.pyx`/`.pxd` in the crucible corpus, ctags-corroborated,
+        # 0 found by GitGalaxy). Excludes `cdef class`/`struct`/`enum`/`union`/`extern`/
+        # `packed`/`fused` up front (declarations, not functions -- `class_start` above
+        # already owns `cdef class`) and tolerates up to 2 return-type words plus an
+        # optional pointer star before the name (`cdef char *pybuffer_index(...)`), mirroring
+        # the same bounded-repetition discipline as the decorator step-over rather than an
+        # unbounded quantifier. A bare `cdef`-prefixed variable/attribute declaration (no
+        # trailing `(` on the same line, e.g. `cdef bint broadcasting`) never matches either
+        # branch since both require the literal `(` to close the match.
+        # tri-comparison-ledger-sweep follow-up (2026-08-21): a return-type token can also be
+        # a Cython Tempita codegen placeholder (`cdef {{memviewslice_name}} *get_slice_from_
+        # memview(...)`, cython/MemoryView.pyx -- Cython's own source templates specialized
+        # copies of this file per element type). The plain-identifier alternative can't start
+        # with `{`, so this was the one remaining real function this rule missed on the
+        # crucible corpus. Added as a second, bounded alternative in the same repeated
+        # return-type group (`\{\{...\}\}`, one identifier only -- no nested unbounded
+        # quantifier, same ReDoS discipline as everything else in this rule).
+        "func_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}(?:async[ \t]+)?def[ \t]+\w+(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?[ \t]*\("
+            r"|"
+            r"^[ \t]*cp?def[ \t]+(?!(?:class|struct|enum|union|extern|packed|fused)\b)"
+            r"(?:(?:inline|public|readonly|api)[ \t]+){0,3}"
+            r"(?:(?:[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*|\{\{[ \t]*[A-Za-z_]\w*[ \t]*\}\})[ \t]+){0,2}"
+            r"\*{0,2}[ \t]*\w+[ \t]*\(",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # RULE 11 FIX (epic #813/#818): same PEP 695 nested-bracket gap as func_start/args above,
+        # here it silently dropped the base-class capture (group 2) rather than failing the whole
+        # match, since the class NAME (group 1) is captured before the generic step-over -- an
+        # easy miss for the same reason java's #816 class_start bug was (name looks fine,
+        # inheritance info silently vanishes).
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]+){0,5}(?:cdef[ \t]+|cpdef[ \t]+)?class[ \t]+([a-zA-Z_]\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?(?:[ \t]*\(([^)]*)\))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|except(?:\*)?|finally|assert|isinstance|issubclass|hasattr|getattr|dataclass|BaseModel|Field|TypeGuard|override)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Swallowed errors, wildcard imports, and Any bypasses.
+        "safety_bypasses": re.compile(
+            r"\bpass\b[ \t]*$|except\s*[:(]|except\s+(?:Base)?Exception|from\s+[\w.]+\s+import\s+\*|#\s*type:\s*ignore|\b(Any|cast)\b|=\s*\[\s*\]|=[ \t]*\{\s*\}",
+            re.M,
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and un-sanitized deserialization. EXCLUDES TODO/print.
+        "high_risk_execution": re.compile(
+            r"\b(eval|exec|subprocess\.(?:call|Popen|run)|os\.system|pickle\.loads?|yaml\.unsafe_load|shell=True)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(open|requests|httpx|aiohttp|boto3|os\.|sys\.|pathlib|socket|sqlalchemy|psycopg2?|asyncpg)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Implicit public defaults (undercased root definitions) + explicit __all__.
+        "api": re.compile(
+            r"^[ \t]*(?:async[ \t]+)?def\s+[^_]\w+|^[ \t]*class\s+[^_]\w+|^__all__[ \t]*=|@(?:app|router|blueprint)\.(?:get|post|put|delete)",
+            re.M,
+        ),
+        # 11. flux (State Mutation)
+        # State mutation. Includes Walrus operator and collection mutators.
+        "state_mutation": re.compile(
+            r"\bglobal\b|\bnonlocal\b|\b(?:self|cls)\.\w+[ \t]*=|:=|(?:\.\w+)?\.(?:append|extend|update|pop|remove|insert|clear)\s*\("
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"#[ \t]*(?:def|class|import|if|for|while|try|return)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r'"""|\'\'\'|:param|:return|:raises|:type|\b(?:Args|Returns|Yields|Raises|Attributes):\b'),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(r"\b(unittest|pytest|TestCase|fixture|patch)\b|def[ \t]+test_|\bassert\b|\bMock\b"),
+        # --- PHASE 3: SPECIALIZED SENSORS (Architecture & Hidden Complexity) ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|asyncio|threading|multiprocessing|ThreadPoolExecutor|TaskGroup|gather|create_task)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r"\b(streamlit|django\.shortcuts|flask\.render_template|gradio|dash|fasthtml|jinja2|render)\b"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"\blambda\b"),
+        # 18. globals (Global / Shared State)
+        # BUG FIX: `globals\(\)`/`locals\(\)` both end on `)`
+        # (non-word), so the shared trailing \b could never fire --
+        # whatever follows a function call (`;`, a newline, `.method`,
+        # end of string) is never a word character. Neither builtin
+        # ever matched in any real usage.
+        "globals": re.compile(r"\b(?:os\.environ|sys\.argv|sys\.path)\b|\bglobals\(\)|\blocals\(\)"),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"^[ \t]*@[\w.]+", re.M),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(
+            r"\b(List|Dict|Set|Tuple|Optional|Union|TypeVar|Generic|Any|Callable|Mapping)\b\[[^\]]*\]|\b(list|dict|set|tuple|type)\[[^\]]*\]|->"
+        ),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Was `\.(?:map|filter|reduce|...)\s*\(` -- JavaScript's Array-method
+        # idiom, copy-pasted in by mistake (that pattern correctly belongs
+        # to javascript/typescript's own comprehensions rule, not this
+        # one). Python doesn't have `.map(`/`.filter(` as builtin list
+        # methods; it has comprehension syntax (`[x for x in y]`,
+        # `{k: v for k, v in items}`, generator expressions). The old
+        # pattern never matched a single real Python comprehension and
+        # only fired incidentally on unrelated methods that happen to
+        # share a name (e.g. a Django queryset's `.filter(active=True)`).
+        # Matches embedded_python's (correct, already ReDoS-bounded)
+        # comprehension pattern.
+        "comprehensions": re.compile(
+            r"\[[^\]]{0,500}\bfor\b[^\]]{0,500}\]|\{[^}]{0,500}\bfor\b[^}]{0,500}\}|\([^)]{0,500}\bfor\b[^)]{0,500}\)"
+        ),
+        "scientific": re.compile(r"\b(?:import|require|from)\b.*?(?:numpy|pandas|scipy|matplotlib|opencv|cv2)\b"),
+        "hardware_bridge": re.compile(
+            r"\b(?:import|require|from)\b.*?(?:serialport|usb|bluetooth|socket\.io|websocket|printer|webgl)\b"
+        ),
+        "cryptography": re.compile(
+            r"\b(?:import|require|from)\b.*?(?:crypto|bcrypt|x509|tls|ssl|jsonwebtoken|argon2)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Metaprogramming and class-level binding.
+        "reflection_metaprogramming": re.compile(
+            r"__(?:getattr|setattr|del|call|new|metaclass|dict|dir|import)__|@(?:staticmethod|classmethod|property)|\b(?:getattr|setattr|inspect\.)\b"
+        ),
+        # --- AI & LLM SDK SENSORS (GLOBAL_, see #322) ---
+        "llm_api": GLOBAL_LLM_API,
+        "llm_orchestrator": GLOBAL_LLM_ORCHESTRATOR,
+        "llm_vector_store": GLOBAL_LLM_VECTOR_STORE,
+        "ml_traditional": GLOBAL_ML_TRADITIONAL,
+        "dl_frameworks": GLOBAL_DL_FRAMEWORKS,
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r"\b(?:from[ \t]+[a-zA-Z0-9_.]+[ \t]+import\b|import[ \t]+[a-zA-Z0-9_., \t]+|\b__import__[ \t]*\(|\bimportlib\.import_module[ \t]*\()",
+            re.M,
+        ),
+        "_dependency_capture": re.compile(
+            r"\bfrom[ \t]+([a-zA-Z0-9_.]+)[ \t]+import\b|"
+            r"\bimport[ \t]+([a-zA-Z0-9_.]+(?:[ \t]*,[ \t]*[a-zA-Z0-9_.]+)*)|"
+            r"\b(?:__import__|importlib\.import_module)\s*\(\s*['\"]([a-zA-Z0-9_.]+)['\"]",
+            re.M,
+        ),
+        "_named_token_capture": re.compile(r"^[ \t]*from\s+[\w.]+\s+import\s+([^({\n]+)", re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:__author__[ \t]*=|Author:|Created by:)\s*(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(render_template|HttpResponse|JSONResponse|TemplateResponse|WSGIApplication|ASGIApplication)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(
+            r"\b(Signal|receiver|post_save|pre_save|asyncio\.Event|EventDispatcher|emit|send|blinker)\b"
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(
+            r"\b(Depends|Provide|Inject|Container|dependency_injector|fastapi\.Depends)\b"
+        ),
+        # 34. macros
+        "macros": None,  # Python lacks a C-style preprocessor.
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": re.compile(r"\b(ctypes\.POINTER|c_void_p|byref)\b"),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": None,  # Managed by GC.
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(logging|logger|structlog|sentry_sdk|datadog|loguru)\.(?:info|error|warn|warning|debug|trace|log|exception|critical)\b"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(print|input)\s*\("),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\b(int|str|float|list|dict|set|tuple|bool|bytes|cast)\b\s*\("),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(raise|quit|exit|sys\.exit|abort)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(time\.sleep|asyncio\.sleep|Thread\.join)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(Lock|RLock|Semaphore|BoundedSemaphore|Event|Condition|Barrier)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(Final|frozenset|mappingproxy|immutable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(close|__exit__|del|shutdown|cleanup)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Captures protected/private members via underscore convention.
+        "encapsulation": re.compile(r"\b_[a-zA-Z_]\w*\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(on_event|add_listener|subscribe|callback|handler)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(pytest\.mark\.skip|unittest\.skip|mock\.|MagicMock)\b"),
+        # --- NEW: ADVANCED ALGORITHMIC SENSORS ---
+        "lazy_evaluation": re.compile(r"\b(yield|yield\s+from|Generator|AsyncGenerator|Iterator|AsyncIterator)\b"),
+        "vectorized_math": re.compile(
+            r"\b(einsum|matmul|tensordot|vdot|bmm)\b|\.dot\s*\(|(?<=[a-zA-Z0-9_\]\)])\s*@\s*(?=[a-zA-Z0-9_\[\(])"
+        ),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Python Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(pickle\.loads?|pickle\.Unpickler|marshal\.loads?|ast\.literal_eval)\b"
+        ),
+        "regex_execution": re.compile(r"\b(re\.compile|re\.search|re\.match|re\.sub|re\.findall|re\.split)\b"),
+        "time_date_logic": re.compile(r"\b(datetime\.datetime|timedelta|time\.sleep|time\.time|calendar)\b"),
+        "ipc_rpc_bridges": re.compile(r"\b(multiprocessing|subprocess|xmlrpc|socketserver)\b"),
+        # --- PHASE 4: APPSEC & AI SENSORS (Zero-Trust Pipelines) ---
+        "memory_scraping": re.compile(r"['\"]/proc/['\"]\s*\+\s*(?:str\([^)]*\)|f?['\"]\{[^}]*\})|/proc/\w+/mem"),
+        "exfiltration_camouflage": re.compile(
+            r"\b(requests\.post|urllib\.request|httpx\.post)\s*\([^)]*(?:checkmarx|telemetry|metrics|audit|log)\b",
+            re.I,
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/ruby.py b/gitgalaxy/standards/language_standards/languages/ruby.py
new file mode 100644
index 000000000..33da369ca
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/ruby.py
@@ -0,0 +1,307 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Ruby 4.0 Paradigms (Ruby 3.4+ / Ractors / Sorbet / Pattern Matching)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard suffixes, rack configs (.ru), gem specs, and various templating/DSL extensions.
+    "extensions": [
+        ".rb",
+        ".rbw",
+        ".rake",
+        ".rbi",
+        ".gemspec",
+        ".rbx",
+        ".builder",
+        ".ru",
+        ".podspec",
+        ".jbuilder",
+        ".rabl",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless infrastructure-as-code and dependency configurations that are secretly pure Ruby.
+    "exact_matches": [
+        "Gemfile",
+        "Rakefile",
+        "Vagrantfile",
+        "Guardfile",
+        "Capfile",
+        "Thorfile",
+        "Berksfile",
+        "Cheffile",
+        "Podfile",
+        "Fastfile",
+        "Appraisals",
+    ],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, lockfiles, and environment pins to lock in context.
+    "discriminators": [
+        ".rb",
+        "Gemfile.lock",
+        ".ruby-version",
+        ".ruby-gemset",
+        "config.ru",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["ruby", "macruby", "jruby", "rbx"],
+    # UPGRADED: Maps to Family 4 (Hybrid Hash)
+    # Rationale: Uses '#' for single-line comments, but multi-line literature
+    # utilizes the `=begin ... =end` block syntax, requiring hybrid parsing rules.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES raise/throw (bailout_hits).
+        "branch": re.compile(
+            r"\b(if|unless|elsif|else|case|when|in|for|while|until|begin|rescue|ensure|break|next|redo|retry)\b|&&|\|\||\?|=>"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks of methods, lambdas, and blocks. Bounded to prevent ReDoS.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # all four branches (was only reachable via group(0), the whole
+        # match including the "def"/"do"/"->" prefix) so detector.py's
+        # counter isolates just the real parameter text -- the
+        # whole-match fallback overcounted every zero/one-arg signature
+        # by +1 the same way Python's did (#1199). Name group added to
+        # the first branch too, purely so existing extraction tests keep
+        # passing.
+        "args": re.compile(
+            r"\bdef\s+(?:(?:[^\W\d]\w*(?:::[^\W\d]\w*)*\.|self\.)[ \t\n]*)?([^\W\d]\w*[=!?]?|\[\]=?|<<|>>|<=>|===?|!=|=~|!~|<=?|>=?|[+\-*/%&|^~`!])\s*(\((?:(?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\))*\))*)\))|"
+            r"\A(?!\s*\bdef\b)[\s\S]*?(?:\bdo\s*\|([^|]*)\||\{\s*\|([^|]*)\|)|"
+            r"->\s*(\((?:(?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:(?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")|\((?:[^()\'\"]|'(?:[^'\\]|\\.)*'|\"(?:[^\"\\]|\\.)*\")*\))*\))*)\))",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and const (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(class|module|def|yield|return|super|alias|undef|require|require_relative|include|extend|prepend|attr_reader|attr_writer|attr_accessor|Data\.define)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks. EXCLUDES class/module definitions.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL CLASS-METHOD SHIELD (RUBY) ]
+            # Ruby allows 'def', 'self.', the function name, and the argument list
+            # to be separated by vertical newlines.
+            # FIX: Replaced `\s+` with `[ \t\n]+` and explicitly allowed `[ \t\n]*`
+            # after `self.` so the parser doesn't break when tracking singleton methods.
+            # Upgraded the trailing lookahead to safely handle newlines before `(`.
+            # Upgraded name parsing to support operator overloads, unicode, and explicit namespace contexts.
+            # =====================================================================
+            r'^[ \t]*(?:def[ \t\n]+(?:(?:[^\W\d]\w*(?:::[^\W\d]\w*)*\.|self\.)[ \t\n]*)?|define_method[ \t\n]*\(?[ \t\n]*[:\'"]?)([^\W\d]\w*[=!?]?|\[\]=?|<<|>>|<=>|===?|!=|=~|!~|<=?|>=?|[+\-*/%&|^~`!])(?=[ \t\n]*[)(]|[\'"]?[ \t\n]*(?:\{|do)|[ \t\n]|$)',
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        "class_start": re.compile(
+            r"^[ \t]*(?:class|module)\s+(?:::)?([^\W\d]\w*(?:::[^\W\d]\w*)*|<<\s*self|<<\s*@[a-zA-Z_]\w*)(?:\s*<\s*(?:::)?([^\W\d]\w*(?:::[^\W\d]\w*)*))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\&\.|\b(rescue|ensure|fetch|frozen_string_literal|freeze|catch|throw|safe_load|T\.must|T\.let|T\.cast|T\.bind)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Dynamic logic bypasses and Sorbet escape hatches.
+        "safety_bypasses": re.compile(
+            r"\b(eval|class_eval|instance_eval|module_eval|send|__send__|public_send|binding|instance_variable_set|unsafe_load|T\.unsafe|T\.untyped)\b"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and shell execution. EXCLUDES puts (Phase 5).
+        "high_risk_execution": re.compile(r"\b(abort|exit|exit!|system|exec|spawn|fork)\b|`[^`]+`|IO\.popen"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(File|Dir|IO|Net::HTTP|URI\.open|Socket|TCPSocket|FileUtils|ActiveRecord::Base|find|where|create|update|destroy)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Implicit public defaults (undercased defs) + explicit module functions.
+        "api": re.compile(
+            r'\b(module_function)\b|^[ \t]*(?:get|post|put|patch|delete|resources?)\s+[:\'"]',
+            re.M,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES const (freeze_hits).
+        # BUG FIX: the 6 bang-method alternatives (`merge!`, `update!`,
+        # `gsub!`, `map!`, `select!`, `reject!`) all end on `!`
+        # (non-word), so the shared trailing \b could never fire --
+        # whatever follows a Ruby bang-method call (`;`, `)`, a
+        # newline, another `.method`) is never a word character. None
+        # of Ruby's canonical in-place-mutation methods ever matched.
+        "state_mutation": re.compile(
+            r"@[a-zA-Z_]\w*\s*(?:\+|-|\*|/)?=|@@[a-zA-Z_]\w*\s*(?:\+|-|\*|/)?="
+            r"|\b(?:push|pop|shift|unshift|delete|clear)\b|<<"
+            r"|\bmerge!|\bupdate!|\bgsub!|\bmap!|\bselect!|\breject!"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"#[ \t]*(?:def|class|module|if|unless|while|puts|p)\b"),
+        # 13. doc (Structured Documentation)
+        # Captures YARD tags, Sorbet signatures, RDoc blocks/modifiers, and standard documentation headers.
+        "doc": re.compile(
+            r"^[ \t]*#\s*@(?:param|return|api|yield|raise|see|abstract|deprecated|note|example)|^[ \t]*sig[ \t]*\{|^=begin\s+(?:rdoc|pod)\b|^[ \t]*#\s*(?::nodoc:|:yields:|:args:|:return:)|^[ \t]*#\s*(?:Description|Usage|Example|Summary):\s+",
+            re.M | re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r'\b(describe|context|expect|assert[a-zA-Z_]*|refute[a-zA-Z_]*|setup|teardown|before|after|let|subject)\b|\b(?:it|test)\s+[\'"]'
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(r"\b(Thread|Mutex|Monitor|ConditionVariable|Ractor|Fiber|Async|await|Concurrent)\b"),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r"\b(ActionView|render|render_to_string|ViewComponent::Base|Phlex::HTML|form_with|form_for|link_to|stylesheet_link_tag|Turbo|Stimulus|Hotwire)\b|<%|%>"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        # BUG FIX: all 4 alternatives shared one leading \b, but the
+        # brace-block (`{ |x| ... }`) and stabby-lambda (`->(x) { ... }`)
+        # forms both start with a non-word character (`{`/`-`) -- the
+        # shared leading \b could only fire when a word char
+        # immediately preceded them, never true for how these are
+        # actually written (preceded by whitespace, `=`, or a line
+        # start). Only the `do`-based forms ever matched; the brace
+        # block and stabby lambda -- two of Ruby's most common closure
+        # forms -- never did.
+        "closures": re.compile(r"\bdo\s*\|[^|]*\||\bdo\b|\{\s*\|[^|]*\||->\s*(?:\([^)]*\))?[ \t]*\{"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(r"\$[a-zA-Z_]\w*|\b(ENV|ARGV|ARGF|STDIN|STDOUT|STDERR|RUBY_VERSION)\b"),
+        # 19. decorators (Decorators / Annotations)
+        # Rails class macros acting as metadata descriptors.
+        "decorators": re.compile(
+            r"^[ \t]*(?:before_action|after_action|around_action|before_save|after_commit|validates|has_many|belongs_to|has_one)\b",
+            re.M,
+        ),
+        # 20. generics (Generics / Type Parameters)
+        # Sorbet parameterized types.
+        "generics": re.compile(r"\b(?:T::|::T::)?(?:Array|Hash|Set|Enumerable|Class)\[[^\]]*\]"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(
+            r"\.(?:map|collect|select|reject|reduce|inject|filter_map|flat_map|each_with_object|partition|group_by)\b(?:[ \t]*\{|\s*do)"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(Math|Complex|Rational|Matrix|Vector|Numo::NArray|BigDecimal)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Metaprogramming and runtime object extensions.
+        # BUG FIX: `respond_to_missing\?` ends on `?` (non-word), so the
+        # shared trailing \b could never fire. Never matched.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:method_missing|define_method|const_missing|included|extended|prepended|class\s*<<\s*self)\b"
+            r"|respond_to_missing\?"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"\b(?:require|require_relative|load|autoload)\b[^'\"]*['\"]", re.M),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (RUBY) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
+            #
+            # HISTORICAL BUG: Originally, this regex was anchored to the start of the
+            # line `^[ \t]*`. While this perfectly prevented hallucinations on commented-out
+            # imports, it completely blinded the firewall to Ruby's highly dynamic execution
+            # patterns. Ruby developers frequently lazy-load dependencies inside methods
+            # (e.g., `def parse; require 'json'; end`) or behind conditionals. The anchored
+            # regex missed these entirely, allowing Trojans to slip through.
+            #
+            # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
+            # boundary to find the keywords anywhere in the file.
+            #
+            # [ THE OPTIONAL PARENTHESIS & AUTOLOAD SHIELD ]
+            # Ruby methods do not require parentheses (e.g., `require 'json'` vs `require('json')`).
+            # Additionally, `autoload` takes a symbol before the path (e.g., `autoload :MyMod, 'path'`).
+            # By injecting `[^'\"]*` between the keyword and the string delimiter, the engine
+            # safely bridges across optional parentheses, whitespace, and `autoload` symbol arguments
+            # to securely capture the target string.
+            # =====================================================================
+            r"\b(?:require|require_relative|load|autoload)\b[ \t\n(]*(?:['\"]([^'\"]+)['\"]|%[qQwW]\W([^ \t\n\W]+)\W)|\b(?:include|extend)\b[ \t\n(]+([^\W\d]\w*(?:::[^\W\d]\w*)*)",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"#\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(ActionController::Base|ActionController::API|Sinatra::Base|Hanami::Action|respond_to|format\.html|format\.json)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(Wisper|broadcast|subscribe|ActiveSupport::Notifications\.instrument|publish)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(r"\b(Dry::Container|Dry::AutoInject|include\s+Import|inject)\b"),
+        # 34. macros (Preprocessor Directives / Macros)
+        # Ruby DSL macros.
+        "macros": re.compile(
+            r"^[ \t]*(?:attr_accessor|attr_reader|attr_writer|scope|delegate)\b",
+            re.M,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": re.compile(r"\b(FFI::Pointer|Fiddle::Pointer|Fiddle::Function)\b"),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(r"\b(ObjectSpace|GC\.start|GC\.disable|GC\.enable|FFI::MemoryPointer)\b"),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:Rails\.logger|Logger\.new|SemanticLogger|[a-zA-Z_]\w*logger)\.(?:debug|info|warn|error|fatal|unknown)\b"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(puts|print|p|pp|warn)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\b(Integer|Float|String|Array|Hash|Complex|Rational)\b\s*\("),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # BUG FIX: `exit!` ends on `!` (non-word), so the shared
+        # trailing \b could never fire -- unlike high_risk_execution's
+        # copy of this same alternative (which is harmlessly masked by
+        # its own bare `exit` alternative), there's no bare `exit` here
+        # to save it. Never matched.
+        "panics_and_aborts": re.compile(r"\b(?:raise|fail|abort)\b|\bexit!"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\bsleep\b\s*[0-9.]+"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"\^|(?<![=!])~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(mutex|lock|synchronized|Semaphore|Monitor|Atomic[A-Z]\w*)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(freeze|frozen_string_literal|immutable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(close|GC\.start|dispose|shutdown|cleanup)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Visibility modifiers in Ruby.
+        "encapsulation": re.compile(r"\b(private|protected)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\.subscribe\(|\.on\(|addEventListener"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(skip|xit|xdescribe|mock|stub|double)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Ruby Specifics) ---
+        "serialization_parsing": re.compile(r"\b(JSON\.parse|YAML\.load|Marshal\.load|Nokogiri::(?:XML|HTML))\b"),
+        "regex_execution": re.compile(r"\b(Regexp\.new)\b|\.(match|scan|gsub|sub)\b|=~"),
+        "time_date_logic": re.compile(r"\b(Time\.now|Date\.today|DateTime\.now|sleep)\b"),
+        # BUG FIX: `system\s*\(` ends on `(` and `%x\{` both starts and
+        # ends on non-word characters (`%` / `{`) -- the shared \b
+        # boundaries could never fire for either. Neither ever matched.
+        "ipc_rpc_bridges": re.compile(r"\b(?:Open3|IO\.popen|Net::HTTP|TCPSocket)\b|\bsystem\s*\(|%x\{"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/rust.py b/gitgalaxy/standards/language_standards/languages/rust.py
new file mode 100644
index 000000000..88313db54
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/rust.py
@@ -0,0 +1,318 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Rust 1.93.1 / Edition 2024 / Modern Async & Macro Stacks",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, libraries, and metadata formats.
+    "extensions": [".rs", ".rlib", ".rmeta"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": ["build.rs"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
+    "discriminators": [
+        ".rs",
+        "Cargo.toml",
+        "Cargo.lock",
+        "rust-toolchain",
+        "rust-toolchain.toml",
+        "rustfmt.toml",
+        "clippy.toml",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["rustc", "cargo", "rust-script", "cargo-script", "evcxr"],
+    # UPGRADED: Maps to Family 2 (Nested C)
+    # Rationale: Rust explicitly allows nested block comments (/* /* */ */),
+    # unlike standard C/C++. Standard C parsing would prematurely terminate here.
+    "lexical_family": "recursive_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. EXCLUDES panic!/throw (bailout_hits).
+        "branch": re.compile(
+            r"(?<!r#)(?<!')\b(if|else|match|for|while|loop|break|continue)\b|(?<=[a-zA-Z0-9_)\]}])\?(?!Sized\b)|&&|\|\|"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks of functions and closures. Bounded to prevent ReDoS on complex types.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL NESTING SHIELD (RUST) ]
+            # Rust closures `impl FnOnce(i32)` introduce nested parentheses inside the
+            # parameter block, instantly breaking `[^)]*`.
+            # FIX: Replaced `[^)]*` with `(?:[^)(]|\([^)]*\))*` to swallow 1-level deep
+            # closures and strictly removed the `+` to mathematically prevent ReDoS
+            # on deeply nested Bevy ECS queries.
+            # RULE 11 FIX (epic #813/#819): the generic step-over was still the flat
+            # `<[^>]*>`, unlike func_start's own two-level-nesting idiom below (fixed earlier)
+            # -- broke on any nested trait bound (`fn foo<T: Into<String>>(x: T) {`), a
+            # realistic, common Rust pattern. Widened to match func_start's already-proven
+            # two-level idiom.
+            # =====================================================================
+            # #1209: parameter-list span wrapped in its own capture group
+            # in all three alternatives (was only reachable via group(0),
+            # the whole match including the "fn"/"move"/name prefix) so
+            # detector.py's counter isolates just the real parameter text
+            # -- the whole-match fallback overcounted every zero/one-arg
+            # signature by +1 the same way Python's did (#1199), including
+            # a genuinely empty closure `|| ...`. Name group added to the
+            # first alternative too, purely so existing extraction tests
+            # keep passing.
+            r"\bfn[ \t\n]+([a-zA-Z_]\w*)(?:[ \t\n]*<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->){0,100}>){0,100}>){0,100}>)?[ \t\n]*(\((?:[^)(]|\([^)]*\))*\))|\bmove[ \t\n]*\|([^|]*)\||(?:^|[=(,\[{<>;:])[ \t\n]*\|([^|]*)\|",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (pub) and Immutability (const/static).
+        "structural_boundaries": re.compile(
+            r"(?<!r#)(?<!')\b(let|struct|enum|union|trait|impl|use|mod|type|yield|await|where|mut|ref|move|return)\b"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks. EXCLUDES structs/traits to prevent False Positives.
+        # BUG FIX (Rule 11, nested-delimiter coverage): the flat `[^>]*`
+        # generic step-over broke on nested angle brackets in a trait
+        # bound (`fn foo<T: Into<String>>` -- one level -- and
+        # `fn foo<T: Clone + Into<Vec<u8>>>` -- two levels), both common
+        # realistic Rust patterns -- func_start silently failed to match
+        # the WHOLE function. Widened to tolerate two levels of
+        # self-nesting (still non-overlapping alternatives, no new ReDoS
+        # risk per the doc's own Rule 11 example).
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL MACRO & GENERICS SHIELD ]
+            # Rust functions can be preceded by multiple attribute macros (#[inline])
+            # and have decoupled generics `<T>`.
+            # FIX: Injected the Macro Shield `(?:#\[[^\]]*\][ \t\n]*){0,5}`, upgraded
+            # modifier spaces to `[ \t\n]+`, and detached the generic stepper `(?:[ \t\n]*<[^>]*>)?`
+            # so the parser can trace the name through massive vertical formatting.
+            # =====================================================================
+            r"^[ \t]*(?:#\[[^\]]*\][ \t\n]*){0,5}"
+            r"(?:pub(?:\([^)]*\))?[ \t\n]+){0,3}"
+            r"(?:(?:const|async|unsafe|extern(?:[ \t\n]+\"[^\"]*\")?)[ \t\n]+){0,3}"
+            r"fn[ \t\n]+(?:r#)?([a-zA-Z_]\w*)(?:[ \t\n]*<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->|<(?:[^<>-]|-(?!>)|->){0,100}>){0,100}>){0,100}>)?[ \t\n]*(?=\()",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        "class_start": re.compile(
+            r"^[ \t]*(?:pub(?:\([^)]*\))?[ \t]+){0,3}(?:unsafe[ \t]+)?(?:auto[ \t]+)?(?:struct|enum|union|trait)\s+(?:r#)?([a-zA-Z_]\w*)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(Option|Result|Mutex|RwLock|Arc|Rc|Box|RefCell|match|if\s+let|while\s+let|let\s+else|Ok|Err|Some|None)\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Actively bypasses type safety (unwraps and forced expectations).
+        "safety_bypasses": re.compile(r"\b(unwrap|expect|unwrap_err|unwrap_unchecked)\b"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process-killing commands. EXCLUDES TODO (debt) and println! (print_hits).
+        # BUG FIX: `panic!`/`todo!`/`unimplemented!` shared a trailing `\b`
+        # with word-ending siblings, but all three end in `!` -- Rust
+        # macro-invocation syntax is always immediately followed by `(` or
+        # whitespace, both non-word, so `\b` could never fire. None of
+        # these three -- among the most common constructs in any real Rust
+        # file -- ever matched. Pulled out of the shared boundary group.
+        "high_risk_execution": re.compile(r"panic!|todo!|unimplemented!|\b(?:process::exit|abort)\b"),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(std::fs|File::|std::net|tokio::net|tokio::fs|reqwest|std::io|hyper::|sqlx::|diesel::|sea_orm::)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Code exposed to the outside world.
+        "api": re.compile(r"\bpub(?:\([^)]*\))?\b"),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES const (freeze_hits).
+        "state_mutation": re.compile(r"\bmut\b|\.borrow_mut\(\)|\.write\(\)|Cell::|RefCell::|Atomic[A-Za-z0-9]+"),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # BUG FIX (Engine Rule 12, Comment-Style Completeness): rust is
+        # `recursive_block` (both `//` and nested `/* */` are real
+        # comment styles), but this only ever checked `//` -- a block-
+        # commented-out function/struct (`/* fn foo() {} */`) was
+        # invisible.
+        "dead_code": re.compile(r"(?://|/\*)[ \t]*(?:fn|let|struct|impl|mod|use|match|for|while|loop|if|return)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"///|//!|#!?\[doc\b[^\]]*\]"),
+        # 14. test (Testing & Assertions)
+        # Triggers indicating internal verification. Anchors standard testing macros and prevents prose collisions for BDD frameworks (rstest/spec).
+        # BUG FIX: `assert!`/`assert_eq!`/`assert_ne!` shared a trailing
+        # `\b` with the word-ending `describe`/`it`/`test` group -- all
+        # three end in `!`, always followed by `(` in real usage (never a
+        # word char), so none of these extremely common assertion macros
+        # ever matched.
+        "test": re.compile(
+            r"#\[(?:tokio::)?test\]|#\[cfg\(test\)\]|assert!|assert_eq!|assert_ne!|\b(?:describe|it|test)\s*\("
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|std::thread|spawn|tokio::spawn|mpsc::|async_trait|Future|Stream|Send|Sync)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        # BUG FIX: `html!`/`rsx!`/`view!` shared a trailing `\b` with
+        # word-ending siblings, but all three end in `!` -- these macro
+        # invocations are always followed by `{`/`(`, never a word char,
+        # so none of them -- Yew's/Dioxus's/Leptos's canonical templating
+        # macros -- ever matched.
+        "ui_framework": re.compile(r"\b(?:yew::|dioxus::|iced::|slint|leptos::|tauri::)\b|html!|rsx!|view!"),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"\|[^|]*\|[ \t]*\{"),
+        # 18. globals (Global / Shared State)
+        # BUG FIX: `lazy_static!` shared a trailing `\b` with word-ending
+        # siblings, but ends in `!` -- always followed by whitespace/`{`
+        # in real usage (`lazy_static! { ... }`), never a word char.
+        "globals": re.compile(r"\bstatic\s+mut\b|lazy_static!|\b(?:OnceCell|OnceLock|LazyLock|std::env::var)\b"),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"^[ \t]*#!?\[[^\]]*\]", re.M),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"<\s*[A-Z\'][^>]*>|\bwhere\b|\'[a-z]+\b|\bimpl\s+[A-Z]\w+"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(r"\.(?:map|filter|fold|collect|flat_map|any|all|reduce|for_each|find|zip)\s*\("),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(ndarray::|nalgebra::|num::|f32|f64|std::simd)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Metaprogramming and memory transmutation.
+        # BUG FIX: `macro_rules!` shared a trailing `\b` with word-ending
+        # siblings, but ends in `!` -- always followed by whitespace/`{`
+        # in real usage (`macro_rules! foo { ... }`), never a word char.
+        "reflection_metaprogramming": re.compile(
+            r"macro_rules!|\b(?:std::mem::transmute|Pin::|PhantomData|UnsafeCell)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"\b(?:pub[ \t]+)?use\s+[^;]+;", re.M),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (RUST) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
+            #
+            # HISTORICAL BUG: Originally, this regex was anchored to the start of the
+            # line `^[ \t]*`. While Rust doesn't evaluate dependencies dynamically at
+            # runtime like scripting languages, it heavily utilizes locally scoped imports
+            # inside functions or trait implementations (e.g., `fn do_work() { use std::fs; }`).
+            # The anchored regex completely missed these localized dependencies.
+            #
+            # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
+            # boundary to locate the `use` keyword anywhere in the file.
+            #
+            # [ THE COMMA-SEPARATED DESTRUCTURING SHIELD ]
+            # Previously, `_dependency_capture` stopped at the first non-word character,
+            # which meant for `use std::collections::{HashMap, HashSet};` it only captured
+            # `std::collections`. The expanded capture group `([a-zA-Z0-9_:{},\s]+)` now
+            # explicitly swallows the entire comma-separated bracket block up to the semicolon.
+            # NOTE: The downstream parser MUST flatten and split this string on commas and
+            # brackets to accurately register the individual nodes.
+            # GLOB IMPORT FIX (epic #813/#819): the character class was missing `*`, so a glob
+            # import (`use std::io::*;`, extremely common Rust for re-exporting a module's
+            # entire public surface) didn't match at all -- the whole `use` statement was
+            # invisible to the dependency graph.
+            # =====================================================================
+            r"\b(?:pub[ \t]+)?use\s+([a-zA-Z0-9_:{},*\s]+);",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"//\s*(?:Author|Maintainer|Copyright):\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX: adjacent unbounded quantifiers with overlapping
+        # character sets (`\d+` next to `[^\]]*`) -- the same ReDoS
+        # shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, and typescript
+        # earlier in this epic. Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(actix_web|axum|rocket|HttpResponse|Responder|IntoResponse|Html|askama::|tera::)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(tokio::sync::broadcast|std::sync::mpsc|crossbeam_channel|Sender|Receiver)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(
+            r"\b(axum::extract::State|actix_web::web::Data|Extension|Provider|shaku::)\b"
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        # BUG FIX: same `macro_rules!` trailing-`\b`-after-`!` defect as
+        # reflection_metaprogramming's copy above.
+        "macros": re.compile(r"macro_rules!|\b(?:proc_macro|proc_macro_derive|proc_macro_attribute)\b"),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Raw memory addressing. Shielded from standard multiplication by explicitly mapping to native Rust unsafe pointer primitives and dereferencing.
+        "pointers": re.compile(r"\*const\b|\*mut\b|\bNonNull\b|\bstd::ptr\b|->"),
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(
+            r"\b(Box::new|Rc::new|Arc::new|Vec::with_capacity|String::with_capacity|alloc::|GlobalAlloc)\b"
+        ),
+        # 37. inline_asm (The Bare Metal)
+        # BUG FIX: all four alternatives end in `!` (Rust macro-invocation
+        # syntax), but shared a trailing `\b` -- `asm!(...)` is always
+        # followed by `(`, never a word char, so none of these -- the
+        # ONLY way to write inline assembly in Rust -- ever matched.
+        "inline_asm": re.compile(r"\bcore::arch::asm!|\bstd::arch::asm!|\basm!|\bglobal_asm!"),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        # BUG FIX: `info!`/`warn!`/`error!`/`debug!`/`trace!`/`span!` all
+        # end in `!` but shared a trailing `\b` with `instrument` -- Rust
+        # macro-invocation syntax is always followed by `(`, never a word
+        # char, so none of the tracing/log macros ever matched.
+        "telemetry": re.compile(r"\b(?:log::|tracing::)?(?:info|warn|error|debug|trace|span)!|\binstrument\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        # BUG FIX: all five alternatives end in `!` but shared a trailing
+        # `\b` -- `println!("...")` is always followed by `(`, never a
+        # word char, so none of these -- arguably the single most common
+        # construct in any real Rust codebase -- ever matched.
+        "debug_prints": re.compile(r"\b(?:println|print|eprintln|eprint|dbg)!"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        # Forceful type coercion bypassing the safety engine. Enforces strict mapping to the `as` keyword followed by standard primitive types.
+        "explicit_casts": re.compile(
+            r"\bas\s+(?:i8|i16|i32|i64|i128|isize|u8|u16|u32|u64|u128|usize|f32|f64|bool|char)\b"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        # BUG FIX: same `panic!` trailing-`\b`-after-`!` defect as
+        # high_risk_execution's copy above.
+        "panics_and_aborts": re.compile(r"panic!|\b(?:abort|process::exit|fatalError)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(std::thread::sleep|tokio::time::sleep|Duration::from)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        # Low-level byte manipulation. CRITICAL: Removed the pipe '|' (used for closures `|x| x+1` and patterns), ampersand '&' (used for references), and exclamation '!' (used for macros and logical NOT).
+        "bitwise_ops": re.compile(r"<<|>>|\^"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(Mutex|RwLock|lock|barrier|atomic|Semaphore)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|static|immutable|readonly)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(drop|free|delete|close|shutdown)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Visibility variant tracking.
+        "encapsulation": re.compile(r"\bpub(?:\(crate\)|\(super\)|\(self\))?\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\.subscribe\(|\.on\(|addEventListener"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"#\[ignore\]|test\.skip\(|mock\(|fake\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Rust Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(serde_json::from_str|serde_json::to_string|serde_json::from_slice|bincode::deserialize|toml::from_str)\b"
+        ),
+        "regex_execution": re.compile(r"\b(Regex::new)\b"),
+        "time_date_logic": re.compile(
+            r"\b(std::time::Duration|std::time::Instant|std::time::SystemTime|chrono::Utc::now|chrono::Local::now)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(
+            r"\b(std::process::Command|tokio::process|tonic::transport::Server|mpsc::channel)\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/scala.py b/gitgalaxy/standards/language_standards/languages/scala.py
new file mode 100644
index 000000000..877886394
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/scala.py
@@ -0,0 +1,347 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Scala 3 (Dotty / Braceless Syntax / Contextual Abstractions)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources, worksheet files (.sc), and pure-Scala build tool configurations (.sbt).
+    "extensions": [".scala", ".sc", ".sbt", ".kojo"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Scala build definitions are typically handled by .sbt extensions rather than extensionless files.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, build files, and Play framework configurations to anchor the ecosystem.
+    "discriminators": [
+        ".scala",
+        "build.sbt",
+        "application.conf",
+        "Dependencies.scala",
+        "project/build.properties",
+        "project/plugins.sbt",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for Scala scripting and the Ammonite REPL.
+    "shebangs": ["scala", "amm", "scala-cli"],
+    # UPGRADED: Maps to Family 2 (Nested C)
+    # Rationale: Scala explicitly supports nested multi-line comments (/* /* */ */),
+    # requiring depth-aware stripping to prevent premature termination.
+    "lexical_family": "recursive_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes Scala 3 if-then and match-case.
+        "branch": re.compile(
+            r"\b(if|then|else|match|case|try|catch|finally|for|while|do|throw|yield)\b|&&|\|\|",
+            re.I,
+        ),
+        # 2. args: Parameters / Coupling. Captures parameters in method signatures and lambdas.
+        # RULE 11 FIX (epic #813/#825): the generic-parameter step-over was the flat
+        # `\[[^\]]*\]`, truncating at the FIRST `]` and breaking any nested generic bound
+        # (`def foo[T <: Comparable[T]](x: T): T = {`, a realistic bounded generic method --
+        # the square-bracket variant of the same Rule-11 bug class already fixed for
+        # java/typescript/python/rust/csharp/kotlin/swift).
+        # IDENTIFIER-GRAMMAR FIX (epic #813/#825): the name step-over required a plain
+        # `[a-zA-Z_]\w*`, so any backtick-quoted arbitrary identifier (Scala's escape hatch for
+        # reserved-word/space-containing method names, e.g. `` def `must not fail`(x: Int): Int
+        # = x ``, a realistic idiom for Java-interop/reserved-word names) never matched at all
+        # (doc's Rule 16 shape). Added as an alternative, not a widened class, so it can't loosen
+        # the plain-identifier path.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # all three alternatives (was only reachable via group(0), the
+        # whole match including the "def"/name prefix, or for arrow
+        # functions the trailing "=>") so detector.py's counter isolates
+        # just the real parameter text -- the whole-match fallback
+        # overcounted every zero/one-arg signature by +1 the same way
+        # Python's did (#1199), including the bare single-identifier
+        # arrow form (`x => ...`, always exactly 1 arg). Name group added
+        # to the first alternative too, purely so existing extraction
+        # tests keep passing.
+        "args": re.compile(
+            r"\bdef\s+(`[^`\n]{1,200}`|[a-zA-Z_]\w*)(?:\[(?:[^\[\]]|\[[^\[\]]*\])*\])?\s*(\((?:[^()]|\([^()]*\))*\))|(\((?:[^()]|\([^()]*\))*\))[ \t]*=>|\b([a-zA-Z_]\w*)[ \t]*=>"
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and val/var.
+        "structural_boundaries": re.compile(
+            r"\b(lazy|type|opaque|class|trait|object|enum|extension|import|export|return|extends|with|derives|new|given|using)\b"
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic. EXCLUDES structural headers.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL MODIFIER SHIELD (SCALA) ]
+            # Scala 3 developers frequently stack modifiers (inline, transparent)
+            # and annotations across multiple lines before the `def` keyword.
+            # FIX: Upgraded horizontal spaces `[ \t]+` to vertical spaces `[ \t\n]+`
+            # across the attribute stepper and modifier capture, explicitly allowing
+            # the engine to wrap lines without triggering ReDoS.
+            # =====================================================================
+            # IDENTIFIER-GRAMMAR FIX (epic #813/#825): same backtick-identifier gap as `args`
+            # above (doc's Rule 16) -- added as an alternative capture group, not a widened
+            # class. detector.py already resolves the fired group via `match.lastindex` for
+            # exactly this kind of multi-alternative name capture (see java's `(init)|
+            # (constructor)` groups), so no downstream change is needed.
+            # QUALIFIED-ACCESS FIX (#1266): `private`/`protected` accept an optional
+            # bracketed scope qualifier (`private[kafka]`, `private[this]`,
+            # `protected[network]`) -- a mainstream Scala idiom for package-/
+            # instance-private members, not a rare one (confirmed: every missing
+            # function found investigating #1266's scala recall gap on a real Kafka
+            # corpus file used this form). Without it, the bare `private`/`protected`
+            # alternative consumed nothing (no trailing whitespace immediately
+            # follows before the `[`), so the whole match failed to reach `def` at
+            # all -- not a partial/wrong match, a total miss.
+            r"^[ \t]*(?:@[\w.]+(?:\((?:[^()]|\([^()]*\))*\))?[ \t\n]*){0,5}"
+            r"(?:(?:override|private(?:\[[\w.]+\])?|protected(?:\[[\w.]+\])?|final|implicit|inline|transparent|open|lazy)[ \t\n]+){0,3}"
+            r"def[ \t\n]+(?:`([^`\n]{1,200})`|([a-zA-Z_]\w*))(?=[ \t\n]*[\[(:=]|$)",
+            re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines structural entities and OO boundaries.
+        # BUG FIX (#1295 polish pass): the modifier alternation was missing
+        # private(?:[scope])?/protected(?:[scope])? -- func_start right above already handles
+        # these correctly, class_start just never got the same list. Real recall gap, confirmed
+        # via kafka's `private class LogRecoveryThreadFactory`, `private[kafka] abstract class
+        # Acceptor`, `private[network] case class DelayedCloseSocket`.
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\((?:[^()]|\([^()]*\))*\))?[ \t\n]*){0,5}"
+            r"(?:(?:sealed|abstract|final|case|open|opaque|transparent|private(?:\[[\w.]+\])?|protected(?:\[[\w.]+\])?)[ \t\n]+){0,3}"
+            r"(?:class|trait|object|enum)\s+([A-Za-z_]\w*)(?=[ \t]*[\[({]|\s+extends|\n|$)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Monadic error handling (Option/Try) and assertions.
+        "safety": re.compile(
+            r"\b(Option|Some|None|Try|Success|Failure|Either|Left|Right|sealed|require|assert|assume)\b|\|\s*Null\b"
+        ),
+        # 7. safety_neg: Safety Bypasses. Actively bypassing type safety (asInstanceOf, .get).
+        # BUG FIX: `@unchecked` is `@`-prefixed -- the shared leading
+        # \b could only fire when a word char immediately preceded the
+        # `@`, never true for how annotations are actually written.
+        # Never matched at all. (`.get` is left as-is: a leading `.` is
+        # preceded by an identifier in real method-chain usage, so that
+        # leading \b fires correctly.)
+        "safety_bypasses": re.compile(r"\b(?:null|asInstanceOf|isInstanceOf|Any|AnyRef)\b|\.get\b(?!Class)|@unchecked"),
+        # 8. danger: High-Risk Execution. Process killers and catastrophic exit commands.
+        "high_risk_execution": re.compile(r"\b(System\.exit|sys\.exit|Thread\.stop|Runtime\.getRuntime\.exec)\b"),
+        # 9. io: I/O & Network Boundaries. Filesystem, Network, and Http Clients (Includes CERN triggers).
+        "io": re.compile(
+            r"\b(Source|java\.io|java\.nio|Files\.|Socket|ServerSocket|sttp|Http|WSClient|HTLoad|HTGet|ENQUIRE)\b"
+        ),
+        # 10. api: Public Surface Area. Implicit public visibility and Scala 3 @main entry points.
+        "api": re.compile(
+            r"\b(export)\b|@(?:main|GetMapping|PostMapping|Endpoint|Path)\b|^[ \t]*(?:override\s+|inline\s+|transparent[ \t]+)?def\s+[^_]\w+",
+            re.M,
+        ),
+        # 11. flux: State Mutation. State mutation (var and mutable collection updates).
+        "state_mutation": re.compile(
+            r"\b(var|scala\.collection\.mutable|AtomicReference|AtomicInteger)\b|^[ \t]*[a-zA-Z_]\w*[ \t]*=",
+            re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code or logic trails.
+        "dead_code": re.compile(
+            r"//[ \t]*(?:def|val|var|class|object|trait|if|match|println|import)\b|/\*[ \t]*(?:def|val|class|object)"
+        ),
+        # 13. doc: Structured Documentation. Scaladoc documentation (/**) and annotations.
+        "doc": re.compile(r"/\*\*|@param|@return|@tparam|@throws|@see|@note"),
+        # 14. test: Testing & Assertions. ScalaTest, MUnit, and standard expect/verify markers.
+        # BUG FIX: `test\s*\(` ends on `(` (non-word), so the shared
+        # trailing \b could never fire. Never matched.
+        "test": re.compile(
+            r"\b(?:it\s+should|assertEquals|assertThrows|AnyFunSuite|WordSpec|munit|weaver)\b"
+            r"|\btest\s*\(|\b(?:must|expect|assert)\s*[\(\{]"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Effect systems and Actor paradigms (ZIO, Cats Effect, Akka).
+        "concurrency": re.compile(
+            r"\b(Future|Promise|Await|Actor|Behavior|ZIO|UIO|Task|RIO|cats\.effect\.IO|Fiber|FiberRef|Ref|Deferred|Semaphore)\b"
+        ),
+        # 16. ui_framework: UI / View Components. Scala.js DOM and XML literals (Includes TBL triggers).
+        "ui_framework": re.compile(
+            r"\b(dom\.|Laminar|Tyrian|HtmlElement|Document|Node|SGML|HyperLink|scala\.xml|Elem|XML|WorldWideWeb|BrowserView)\b"
+        ),
+        # 17. closures: Closures / Anonymous Functions. Anonymous function fat-arrows and underscores.
+        "closures": re.compile(r"=>|(?<=\()\s*_\s*(?=[\),])|(?<=\W)_\s*(?=\W)"),
+        # 18. globals: Global / Shared State. Singletons (objects) and JVM environment bindings.
+        "globals": re.compile(
+            r"\b(object\s+[A-Z]\w*|sys\.env|sys\.props|System\.getProperty|scala\.util\.Properties)\b"
+        ),
+        # 19. decorators: Decorators / Annotations. Method and class annotations.
+        "decorators": re.compile(r"@[A-Za-z_]\w*(?:\([^)]*\))?"),
+        # 20. generics: Generics / Type Parameters. Type parameterization and HKT constraints.
+        "generics": re.compile(r"\[\s*[+-]?[A-Z][^\]]*\]|\bF\[_\]|<:|>:|\[[ \t]*_\s*\]"),
+        # 21. comprehensions: Iterators / Comprehensions. For-comprehensions and monadic chains.
+        "comprehensions": re.compile(
+            r"\bfor\s*(?:\{[^}]*\}|\([^)]*\))\s*yield\b|\.(?:map|flatMap|filter|withFilter|foldLeft|reduce|collect)\s*[\(\{]"
+        ),
+        # 22. scientific: Numerical / Compute Libraries. Math library and linear algebra wrappers.
+        "scientific": re.compile(
+            r"\b(scala\.math|breeze\.|spire\.|algebird|Math\.|StrictMath\.|DenseMatrix|DenseVector)\b"
+        ),
+        # 23. heat_triggers: Metaprogramming & Reflection. Contextual abstractions and implicit resolution.
+        "reflection_metaprogramming": re.compile(
+            r"\b(implicit|given|using|inline|extension|TypeTag|ClassTag|scala\.reflect|Typeable|Dynamic|summon|derives)\b"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"\b(?:import|export)\s+[\w.{}\s,]+", re.M),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (SCALA) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Firewall.
+            #
+            # HISTORICAL BUG: Anchored to the start of the line `^[ \t]*`. Scala
+            # developers frequently scope imports locally inside methods, classes,
+            # or traits to prevent namespace pollution. The anchored regex missed
+            # all of these local dependencies.
+            #
+            # THE FIX: Stripped the `^` anchor and rely on the `\b` word boundary.
+            #
+            # [ THE BLOCK DESTRUCTURING SHIELD ]
+            # Scala relies heavily on bracketed block imports: `import java.util.{List, Map}`.
+            # A trailing `{...}` block is captured as its own alternative below so its content
+            # (which may span multiple lines and contain `=>` renames) is swallowed whole. The
+            # downstream parser (galaxyscope.py) flattens this string and splits on commas/
+            # brackets to extract the individual modules.
+            #
+            # BUG FIX (epic #813/#825): the previous capture, `[\w.{}\s,]+`, was a single flat
+            # character class with no statement boundary at all -- since `\s` matches newlines,
+            # it kept consuming across subsequent, unrelated lines (including a SECOND import
+            # statement) until it happened to hit some character outside the class. Confirmed on
+            # a realistic 2-import file: the first match's capture group swallowed the entire
+            # second `import` line plus part of the following `case class` line, so the second
+            # import was never separately detected at all. The same flat class also truncated at
+            # the first `*`/`=`/`>`, so Scala 3 wildcard imports (`import scala.util.chaining.*`)
+            # lost their trailing `*` and `=>`-renamed block imports (`import scala.util.{Try =>
+            # STry}`) were cut off mid-block. Replaced with a properly bounded
+            # segmented-dotted-path grammar: repeat `identifier.` segments, then end on either a
+            # `{...}` block (unrestricted content except braces themselves, so `=>` renames and
+            # multi-line layouts both work) or a bare trailing identifier/wildcard segment
+            # (`[\w*]+`, covering both Scala 2 `_` and Scala 3 `*` wildcards via `\w`/`*`). This
+            # is bounded per-statement by construction -- there is no `\s`/`.` left dangling
+            # outside an explicit brace block for it to bleed through.
+            # =====================================================================
+            r"\b(?:import|export)\s+((?:[\w]+\.)*(?:\{[^{}]*\}|[\w*]+))",
+            re.M,
+        ),
+        # 25. ownership: Authorship indicators.
+        # BUG FIX: the Scaladoc `@author` tag was grouped with
+        # `Created by`/`Maintainer`/`Copyright`, all of which require a
+        # literal `:` -- but Scaladoc's actual convention (matching
+        # Javadoc, and how java's own ownership rule already handles
+        # it) is `@author Jane Doe`, with no colon at all. The colon
+        # requirement meant the real Scaladoc tag never matched.
+        "ownership": re.compile(
+            r"@author\s+([^\n]+)|(?:Created by|Maintainer|Copyright|Tim Berners-Lee):\s+([^\n]+)",
+            re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags and architecture specs.
+        "spec_exposure": re.compile(
+            r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]|\b(?:WorldWideWeb|HyperText\s+Proposal|NeXTSTEP)\b",
+            re.I,
+        ),
+        # 31. ssr_boundaries: View Horizon. Play Framework and twirl template endpoints.
+        # BUG FIX: `Ok\(`/`BadRequest\(` both end on `(` (non-word), so
+        # the shared trailing \b could never fire. Neither of Play's
+        # two most common Result constructors ever matched.
+        "ssr_boundaries": re.compile(
+            r"\b(?:Action|Controller|HttpRoutes|ServerEndpoint|twirl|html\.[a-zA-Z_]\w*)\b|\bOk\(|\bBadRequest\("
+        ),
+        # 32. events: Pub/Sub Network. Stream processing and event bus signatures.
+        "events": re.compile(r"\b(Source|Flow|Sink|fs2\.Stream|ZStream|EventBus|system\.eventStream|Observable)\b"),
+        # 33. dependency_injection: Inversion of Control. ZLayer and ReaderT patterns.
+        # BUG FIX: `@Inject` is `@`-prefixed -- the shared leading \b
+        # could only fire when a word char immediately preceded the
+        # `@`, never true for how annotations are actually written.
+        # Never matched at all.
+        "dependency_injection": re.compile(
+            r"\b(?:wire\[|ZLayer|ZLayer\.from|provide|provideSome|ReaderT|Kleisli|requires)\b|@Inject"
+        ),
+        # 34. macros: Preprocessor Hooks. Scala 3 inline and quoted metaprogramming.
+        "macros": re.compile(
+            r"\b(inline\s+def|transparent\s+inline|macro|scala\.quoted|Expr|Type|Quotes)\b|\$\{.*?\}|\'\{"
+        ),
+        # 35. pointers: Memory Map. Scala Native C-Interop pointers.
+        # BUG FIX: `Ptr\[[^\]]+\]` ends on the closing `]` (non-word),
+        # so the shared trailing \b could never fire -- unlike
+        # `decode\[` elsewhere (bounded only by the opening `[`, always
+        # followed by a word-char type name), this alternative matches
+        # through the CLOSING bracket, and whatever follows a type
+        # declaration (` = `, `;`, a newline) is never a word
+        # character. Never matched. Also bounded the previously
+        # unbounded `[^\]]+` to `{1,200}`. (`!ptr` is left as-is: it's
+        # harmlessly masked by `ptr\.` matching the same text via its
+        # own valid boundary, since `!` immediately preceding `ptr` is
+        # a valid non-word-to-word transition.)
+        "pointers": re.compile(
+            r"\bPtr\[[^\]]{1,200}\]|\b(?:scala\.scalanative\.unsafe|!ptr|ptr\.|CFuncPtr|CStruct\d+)\b"
+        ),
+        # 36. memory_alloc: Manual Memory Management. Heap and Native allocations.
+        # BUG FIX: `zone[ \t]*\{` ends on `{` and `alloc\[[^\]]+\]` ends
+        # on the closing `]` -- both non-word, so the shared trailing
+        # \b could never fire for either. Neither ever matched. Also
+        # bounded the previously unbounded `[^\]]+` to `{1,200}`.
+        "memory_alloc": re.compile(
+            r"\b(?:Zone|malloc|calloc|free|scala\.scalanative\.libc\.stdlib)\b"
+            r"|zone[ \t]*\{|alloc\[[^\]]{1,200}\]"
+        ),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics (Structured logs).
+        "telemetry": re.compile(
+            r"\b(?:logger|log|ZIO\.log|LoggerFactory|log4cats|slf4j)\.(?:info|error|warn|debug|trace)\b|@Slf4j"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(println|print|Console\.println)\b"),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit type coercion.
+        "explicit_casts": re.compile(r"\basInstanceOf\[[^\]]*\]|\.(?:toInt|toLong|toFloat|toDouble|toByte|toShort)\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting context.
+        "panics_and_aborts": re.compile(r"\b(throw|panic|abort|sys\.error|exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits/sleep).
+        "thread_sleeps": re.compile(r"\b(Thread\.sleep|delay|setTimeout|setInterval)\s*\("),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability) Coordinated threading.
+        "sync_locks": re.compile(r"\b(synchronized|volatile|Semaphore|Mutex|lock|unlock)\b"),
+        # 45. immutability_locks (Immutability Constraints) Immutability.
+        "immutability_locks": re.compile(r"\b(val|final|sealed|readonly|Object\.freeze|immutable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown) Resource release.
+        "cleanup": re.compile(r"\b(dispose|close|cleanup|cancel|free|bracket|finally|onException)\b"),
+        # 47. encapsulation (Encapsulation / Access Modifiers)
+        "encapsulation": re.compile(r"\b(private|protected)\b|private\[[^\]]+\]"),
+        # 48. listeners (Event Listeners / Observers) Waiting for state broadcasts.
+        # BUG FIX: `on\(` ends on `(` (non-word), so the shared
+        # trailing \b could never fire -- never true for the common
+        # real call shape `on('event', ...)`, where a quote follows.
+        "listeners": re.compile(r"\bon\(|\b(?:addEventListener|subscribe|watch|useEffect|listen)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(ignore|pending|skip|xit|xdescribe)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Scala Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(io\.circe|decode\[|asJson|Json\.parse|Json\.toJson|upickle\.default)\b"
+        ),
+        "regex_execution": re.compile(r'"[^"]+"\.r\b|\bRegex\s*\(|\.(findAllIn|findFirstIn|replaceAllIn)\b'),
+        # BUG FIX: `Duration\s*\(` ends on `(` (non-word), so the
+        # shared trailing \b only fired for the non-empty-argument form
+        # (`Duration(5, SECONDS)`, where a digit follows the paren),
+        # not the empty-argument form (`Duration()`).
+        "time_date_logic": re.compile(
+            r"\b(?:FiniteDuration|System\.currentTimeMillis|LocalDate\.now)\b|\bDuration\s*\("
+        ),
+        # BUG FIX: `Process\s*\(` ends on `(` -- same bug. Never
+        # matched the common `Process("cmd")` form (a quote follows).
+        "ipc_rpc_bridges": re.compile(r"\b(?:ActorSystem|ActorRef|sys\.process\._|Future\.apply)\b|\bProcess\s*\("),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/scheme.py b/gitgalaxy/standards/language_standards/languages/scheme.py
new file mode 100644
index 000000000..b9535c565
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/scheme.py
@@ -0,0 +1,274 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "R5RS / R6RS / Guile (GnuPG gpgscm)",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Scheme, legacy PLT/Chez suffixes, and Racket sources.
+    "extensions": [".scm", ".ss", ".rkt", ".sch", ".sld", ".sls", ".sps"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Scheme rarely uses extensionless configurations.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Guile build definitions, Racket manifests, and Lisp package formats.
+    "discriminators": [".scm", ".rkt", "info.rkt", "guix.scm"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for shell wrappers invoking Scheme/Guile/Racket.
+    "shebangs": ["guile", "scheme", "csi", "racket", "racketsh"],
+    # BUG FIX (#770): this comment always described a genuine nested
+    # block-comment family ("Perfectly captures the Lisp ecosystem's
+    # reliance on ';' for line-level comments and `#| |#` for nested
+    # block-level Commented / Non-Executable Text"), but the field itself
+    # was left at "line_exclusive" -- which has NO cross-line state at
+    # all (per how_to_add_a_language.md: "no native multi-line block
+    # syntax; the engine ignores closing tags"), the literal opposite of
+    # what this comment claims. Confirmed empirically: a real multi-line
+    # `#| ... |#` block only had its first line recognized as a comment;
+    # every subsequent line up to and including the closing `|#` leaked
+    # into code_stream as live code. Fixed by actually creating the
+    # dedicated family (recursive_block_lisp), reusing the same
+    # iterative-peel algorithm recursive_block_haskell already uses for
+    # {- -}, just with Scheme's own ; / #| / |# tokens.
+    "lexical_family": "recursive_block_lisp",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Lisp control flow branches. Uses custom S-expression boundaries.
+        "branch": re.compile(r"(?<![^ \t\n\r(\[])(if|cond|case|and|or|when|unless)(?![^ \t)\]\n\r])"),
+        # 2. args (Parameters / Coupling)
+        # Captures the parameter list inside a standard function definition: (define (func arg1 arg2) ...)
+        "args": re.compile(
+            # =====================================================================
+            # [ THE S-EXPRESSION ARGS SHIELD (SCHEME) ]
+            # Scheme arguments are inside the same parenthesis as the function name.
+            # FIX 1 (Pathological): Upgraded horizontal spaces to `[ \t\n]*` for vertical layouts.
+            # FIX 2 (Positive): The previous regex strictly required a space and arguments.
+            # Made the argument capture group `(?:[ \t\n]+[^)]*)?` optional so
+            # parameter-less functions like `(define (func))` cleanly pass.
+            # =====================================================================
+            # #1209: name and parameter-list span split into their own
+            # capture groups (was only reachable via group(0), the whole
+            # "(define (name arg1 arg2)" match including the "(define"
+            # prefix and function name) so detector.py's counter isolates
+            # just the space-separated parameter text -- the whole-match
+            # fallback whitespace-split "(define" and the name as
+            # spurious extra args on top of the real ones (the same
+            # overcount shape #1199 fixed for Python, just off by 2 here
+            # instead of 1 since Scheme has two prefix tokens, not one).
+            # REDOS FIX (found verifying #1209, pre-existing -- not
+            # introduced by the groups above): the name class
+            # `[^ \t\n()]+` and the trailing `[^)]*` are adjacent
+            # unbounded quantifiers over near-identical character
+            # classes (the second is a superset of the first), so an
+            # unterminated `(define (xxxx...` with no closing `)`
+            # anywhere made the engine give back the name one char at a
+            # time and re-scan the whole remaining run as the args span
+            # at each step -- O(n^2) confirmed via scaling sweep (247x
+            # time for 16x input). Bounding the name to a realistic
+            # identifier length caps the number of give-back steps to a
+            # constant, restoring linear behavior.
+            r"^[ \t\n]*\([ \t\n]*define[ \t\n]+\([ \t\n]*([^ \t\n()]{1,100})([^)]*)\)",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries defining scope and sequential execution.
+        "structural_boundaries": re.compile(r"(?<![^ \t\n\r(\[])(let|let\*|letrec|letrec\*|begin|do)(?![^ \t)\]\n\r])"),
+        # 4. func_start (Executable Logic Anchors)
+        # Anchors logic blocks. Captures the function name immediately following the parenthesis.
+        # BUG FIX: the identifier capture class `[a-zA-Z0-9_!?-]+` excluded
+        # `> < = * + / . ~ $ % ^ &` -- but real Scheme identifiers are
+        # extremely permissive (R7RS special-initial/special-subsequent
+        # chars), and the "X->Y" type-conversion naming convention
+        # (`list->vector`, `string->number`, ...) is idiomatic in the
+        # standard library itself. The truncated capture broke the
+        # following lookahead entirely, so func_start silently failed to
+        # match ANY such definition (`1+`, `foo*`, `list->vector`, etc.),
+        # not just a partial-name capture. Widened to the realistic set.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE S-EXPRESSION SHIELD (SCHEME/LISP) ]
+            # S-expressions format heavily around parentheses, often pushing the
+            # `define`, the inner parenthesis `(`, and the identifier onto separate lines.
+            # FIX: Replaced `\s+` and `\s*` with `[ \t\n]+` and `[ \t\n]*` inside
+            # the S-expression structure to ensure the parser can track the
+            # identifier no matter how deeply it is vertically nested.
+            # =====================================================================
+            r"^[ \t\n]*\([ \t\n]*define[ \t\n]+\([ \t\n]*([a-zA-Z0-9_!?*+/<>=.~$%^&:-]+)(?![^ \t\n)\]\r])",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Scheme lacks traditional objects; SRFI-9 Records serve as structural entities.
+        # BUG FIX: same identifier-capture defect as func_start above --
+        # missed the extremely common `<TypeName>` angle-bracket naming
+        # convention for record types (SRFI-9/R6RS idiom, e.g. `<point>`).
+        "class_start": re.compile(
+            r"^[ \t\n]*\([ \t\n]*define-record-type[ \t\n]+(?:\([ \t\n]*)?([a-zA-Z0-9_!?*+/<>=.~$%^&:-]+)(?![^ \t\n)\]\r])",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Continuations, exception guards, and dynamic-wind state protectors.
+        "safety": re.compile(
+            r"(?<![^ \t\n\r(\[])(guard|dynamic-wind|with-exception-handler|call-with-current-continuation|call/cc|assert|check)(?![^ \t)\]\n\r])"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Explicit, raw manipulation of cons cells or unrestricted environments.
+        "safety_bypasses": re.compile(
+            r"(?<![^ \t\n\r(\[])(set-car!|set-cdr!|interaction-environment)(?![^ \t)\]\n\r])"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Dynamic code execution and emergency system exits.
+        "high_risk_execution": re.compile(r"(?<![^ \t\n\r(\[])(eval|exit|emergency-exit|quit)(?![^ \t)\]\n\r])"),
+        # 9. io (I/O & Network Boundaries)
+        # File operations and output ports.
+        "io": re.compile(
+            r"(?<![^ \t\n\r(\[])(open-input-file|open-output-file|read|read-char|write|display|newline|call-with-input-file|call-with-output-file|load|format)(?![^ \t)\]\n\r])"
+        ),
+        # 10. api (Public Surface Area)
+        # Module exports defining the public surface.
+        "api": re.compile(r"^[ \t]*\([ \t]*(?:export|define-public)(?![^ \t)\]\n\r])", re.M),
+        # 11. flux (State Mutation)
+        # Mutation of state. In Scheme, all mutating functions end with a bang (!).
+        "state_mutation": re.compile(
+            r"(?<![^ \t\n\r(\[])(set!|vector-set!|string-set!|hash-table-set!|bytevector-u8-set!)(?![^ \t)\]\n\r])"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented out S-expressions.
+        "dead_code": re.compile(
+            r"^[ \t]*;+[ \t]*\([ \t]*(?:define|let|if|cond|lambda)(?![^ \t)\]\n\r])",
+            re.M,
+        ),
+        # 13. doc (Structured Documentation)
+        # Scheme documentation standards (triple semicolons or texinfo).
+        "doc": re.compile(r"^[ \t]*;;;|^[ \t]*;[ \t]*@(?:param|return|author)", re.M),
+        # 14. test (Testing & Assertions)
+        # SRFI-64 and Guile testing frameworks (essential for mapping gpgscm tests).
+        "test": re.compile(
+            r"(?<=\()(test-begin|test-end|test-assert|test-eqv|test-equal|test-eq|check-equal\?|check-true|test)(?![^ \t)\]\n\r])"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # SRFI-18 Multithreading primitives.
+        "concurrency": re.compile(
+            r"(?<![^ \t\n\r(\[])(make-thread|thread-start!|thread-yield!|mutex-lock!|mutex-unlock!|condition-variable-signal!)(?![^ \t)\]\n\r])"
+        ),
+        # 16. ui_framework
+        "ui_framework": None,
+        # 17. closures (Closures / Anonymous Functions)
+        # Anonymous function depth.
+        "closures": re.compile(r"(?<![^ \t\n\r(\[])lambda(?![^ \t)\]\n\r])"),
+        # 18. globals (Global / Shared State)
+        # Top-level state bindings (defines that are NOT functions).
+        # BUG FIX: same identifier-class defect as func_start/class_start --
+        # a top-level binding using the "X->Y" convention (e.g.
+        # `default->value`) failed to match at all.
+        "globals": re.compile(r"^[ \t]*\([ \t]*define\s+[a-zA-Z0-9_!?*+/<>=.~$%^&:-]+\s+[^(\s]", re.M),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Functional list operations (SRFI-1).
+        "comprehensions": re.compile(
+            r"(?<![^ \t\n\r(\[])(map|for-each|filter|fold|reduce|fold-right|fold-left)(?![^ \t)\]\n\r])"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        # Scheme's native mathematical tower.
+        "scientific": re.compile(
+            r"(?<![^ \t\n\r(\[])(sin|cos|tan|asin|acos|atan|exp|log|sqrt|expt|abs|gcd|lcm|numerator|denominator|floor|ceiling|truncate|round|exact->inexact)(?![^ \t)\]\n\r])"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Metaprogramming and syntactic abstractions.
+        "reflection_metaprogramming": re.compile(
+            r"(?<![^ \t\n\r(\[])(define-macro|define-syntax|syntax-rules|syntax-case|let-syntax|letrec-syntax)(?![^ \t)\]\n\r])"
+        ),
+        # 24. import (Dependency Inclusions)
+        # Scheme module resolution dependencies.
+        "import": re.compile(r"^[ \t]*\([ \t]*(?:import|use-modules|require)(?![^ \t)\]\n\r])", re.M),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"^[ \t]*;+\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)",
+            re.I | re.M,
+        ),
+        # --- 🌌 PHASE 4: EXTENDED DIMENSIONS (Specialized Sub-Equations) ---
+        # 26. planned_debt
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure
+        # BUG FIX: adjacent unbounded quantifiers with overlapping character
+        # sets (`\d+` immediately followed by `[^\]]*`, which also matches
+        # digits) -- the same ReDoS shape already found and fixed
+        # independently in embedded_python, css, tcl, and matlab earlier in
+        # this epic. Confirmed via scaling sweep (~4x per doubling before,
+        # ~linear after bounding both quantifiers).
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Hook paradigms common in Guile/Emacs environments.
+        "events": re.compile(r"(?<![^ \t\n\r(\[])(hook|add-hook!|run-hooks)(?![^ \t)\]\n\r])"),
+        # 33. dependency_injection
+        "dependency_injection": None,
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"(?<![^ \t\n\r(\[])(define-syntax|define-macro|syntax-rules|syntax-case)(?![^ \t)\]\n\r])"
+        ),
+        # 35. pointers
+        "pointers": None,
+        # 36. memory_alloc
+        # Explicit heap instantiations.
+        "memory_alloc": re.compile(
+            r"(?<![^ \t\n\r(\[])(make-vector|make-string|make-bytevector|make-hash-table|cons|list)(?![^ \t)\]\n\r])"
+        ),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(r"(?<![^ \t\n\r(\[])(log-info|log-error|log-warn|log-debug|syslog)(?![^ \t)\]\n\r])"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"(?<![^ \t\n\r(\[])(display|write|newline|format\s+#t)(?![^ \t)\]\n\r])"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        # Type coercions crossing memory boundaries.
+        "explicit_casts": re.compile(
+            r"(?<![^ \t\n\r(\[])(number->string|string->number|symbol->string|string->symbol|list->vector|vector->list|char->integer|integer->char)(?![^ \t)\]\n\r])"
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"(?<![^ \t\n\r(\[])(error|abort|exit|emergency-exit)(?![^ \t)\]\n\r])"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"(?<![^ \t\n\r(\[])(sleep|usleep|thread-sleep!)(?![^ \t)\]\n\r])"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(
+            r"(?<![^ \t\n\r(\[])(bitwise-and|bitwise-ior|bitwise-xor|bitwise-not|arithmetic-shift|ash)(?![^ \t)\]\n\r])"
+        ),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"(?<![^ \t\n\r(\[])(mutex-lock!|make-mutex)(?![^ \t)\]\n\r])"),
+        # 45. immutability_locks (Immutability Constraints)
+        # Immutable strings and explicit quotations (meaning the list cannot be mutated safely).
+        "immutability_locks": re.compile(
+            r"(?<![^ \t\n\r(\[])(quote|string->immutable-string)(?![^ \t)\]\n\r])|\'(?=\()"
+        ),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"(?<![^ \t\n\r(\[])(close-input-port|close-output-port|close-port)(?![^ \t)\]\n\r])"),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Module-internal definitions.
+        "encapsulation": re.compile(r"^[ \t]*\([ \t]*define-private(?![^ \t)\]\n\r])", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"(?<![^ \t\n\r(\[])(add-hook!)(?![^ \t)\]\n\r])"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"(?<![^ \t\n\r(\[])(test-skip|test-expect-fail)(?![^ \t)\]\n\r])"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/shell.py b/gitgalaxy/standards/language_standards/languages/shell.py
new file mode 100644
index 000000000..c998b46f9
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/shell.py
@@ -0,0 +1,339 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Bash 5.2 / Zsh 5.9 / Modern DevOps Scripts",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    "extensions": [
+        ".sh",
+        ".bash",
+        ".zsh",
+        ".ksh",
+        ".dash",
+        ".command",
+        ".csh",
+        ".tcsh",
+        ".fish",
+        ".bats",
+    ],
+    # Thorough Exact Match List: Captures hidden configuration and profile scripts.
+    "exact_matches": [
+        ".bashrc",
+        ".zshrc",
+        ".profile",
+        ".bash_profile",
+        ".bash_logout",
+        ".inputrc",
+        "bash_completion",
+        "PKGBUILD",
+    ],
+    # Thorough Shebang mapping: Essential for identifying extensionless scripts.
+    "shebangs": ["bash", "sh", "zsh", "ksh", "dash", "ash", "rbash"],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Relies strictly on '#' for line-level Commented / Non-Executable Text; no native block delimiters.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logic jumps. Includes test constructs [[ ]] and [ ].
+        # CRITICAL: Excluded bare '((' and '))' to prevent ReDoS on massive subshell nesting.
+        "branch": re.compile(
+            r"\b(if|then|else|elif|fi|case|esac|for|while|do|done|until|select|break|continue)\b|&&|\|\||\[\[|\]\]|(?:^|(?<=\s|;|\||&))\[(?=\s)|(?<=\s)\](?=\s|;|\||&|$)"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Positional parameters and expansion markers.
+        # BUG FIX (epic #813/#835): the braced form only matched a bare
+        # `${1}`/`${10}` -- it had no allowance for the extremely common
+        # bash default-value/error-message expansion operators (`:-`,
+        # `:=`, `:?`, `:+`), so `${1:-default}` (arguably the single most
+        # common way positional params actually appear in real scripts)
+        # was entirely invisible to this rule. Added an optional
+        # `:[-=?+]...` suffix using the same one-level-nesting-safe idiom
+        # already established elsewhere in this file's `safety` rule
+        # (`(?:[^{}]|\{[^{}]*\})*`), so a nested default like
+        # `${1:-${DEFAULT:-x}}` is captured in full instead of truncating
+        # at the inner `}`. Confirmed linear-time (no ReDoS) up to a
+        # 200k-char adversarial input before landing.
+        # #1518: whole rule wrapped in one outer capture group so
+        # detector.py's counter can name it in `_args_findall_max_groups`
+        # below -- bash has no formal parameter list at all (a function's
+        # own `()` are always empty, permanently, by grammar), so a
+        # single match only ever sees the FIRST positional-parameter
+        # reference in the block and silently drops every one after it
+        # (`readlink "$1"` ... later `"$2"` measured got=1, not 2). This
+        # tells the shared counter to re-scan the WHOLE block and take
+        # the highest $N seen instead of trusting the first hit.
+        "args": re.compile(r'(\$(?:[1-9]|\{#?[1-9][0-9]*(?:[:#%^,/~-](?:[^{}]|\{[^{}]*\})*)?\}|@|\*|#)|"\$@"|"\$\*")'),
+        "_args_findall_max_groups": {1},
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries and straight-line execution verbs.
+        # BOUNDARY FIX: `.` (the dot-source operator) is a non-word char, so it
+        # can never satisfy a shared leading `\b` -- the same trap documented on
+        # `_dependency_capture` below. Pulled out into its own statement-boundary
+        # anchored alternative instead of sitting inside the `\b(...)\b` group.
+        "structural_boundaries": re.compile(
+            r"\b(local|readonly|export|declare|typeset|return|exit|source|read|cd|pwd|ls|cp|mv|rm|mkdir|touch)\b|(?<!\|)\|(?!\s*\|)|(?:^|[ \t;|&])\.(?=[ \t])",
+            re.M,
+        ),
+        # Anchors executable logic blocks. Captures `function foo` or `foo()`.
+        # Handled by Mode D (Semantic Handshake) in detector.py.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL FUNCTION SHIELD (SHELL) ]
+            # Bash/Zsh allow extreme spacing and newlines between the `function`
+            # keyword and the identifier name.
+            # FIX: Upgraded horizontal spaces `[ \t]+` to `[ \t\n]+` for the
+            # `function` keyword path, allowing it to easily consume weird formatting.
+            #
+            # BUG FIX (epic #813/#835): the POSIX `name()` branch's keyword
+            # exclusion only listed 5 of bash's ~17 word-based reserved words
+            # (if/while/for/case/until) -- `done() {`, `elif() {`, `select() {`,
+            # `function() {`, etc. all falsely matched as function definitions.
+            # None of these are ever valid bash (a reserved word can't be used
+            # as a POSIX function name -- the real parser errors on it), but
+            # this is a regex-only engine scanning arbitrary/malformed text, so
+            # the same defensive intent that motivated the original 5-word list
+            # applies equally to the rest. Widened to the full reserved-word set.
+            # =====================================================================
+            r"^[ \t]*(?:function[ \t\n]+([a-zA-Z_][a-zA-Z0-9_.:-]*)|"
+            r"(?!(?:if|then|elif|else|fi|case|esac|while|until|for|in|do|done|function|select|time|coproc)\b)"
+            r"([a-zA-Z_][a-zA-Z0-9_.:-]*)[ \t\n]*\(\))",
+            re.M,
+        ),
+        # 5. class_start
+        # Shell is strictly procedural.
+        "class_start": None,
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Shell hardening: strict modes, traps, and robust quoting.
+        # QUADRATIC BLOWUP + NESTING FIX: the trap clause's `[^\n]*` and both
+        # `${...}` clauses' flat `[^}]+`/`[^}]*` were unbounded and unanchored --
+        # O(n^2) on a long run of unclosed traps/expansions (confirmed ~4x
+        # slowdown per input-size doubling). The trap clause is bounded to
+        # {0,300}; the `${...}` clauses use the one-level-nesting form so a
+        # realistic nested default like `${LOG_LEVEL:-${DEFAULT:-info}}` is
+        # captured in full instead of truncating at the inner `}`.
+        "safety": re.compile(
+            r'\b(set\s+-(?:[a-zA-Z]*e[a-zA-Z]*|u|o\s+pipefail)|trap\s+[^\n]{0,300}(?:ERR|EXIT|INT|TERM))\b|"\$[@*]"|"\$\{(?:[^{}]|\{[^{}]*\})+\}"|\bcommand\s+-v\b|\$\{[a-zA-Z0-9_]+:[-=?](?:[^{}]|\{[^{}]*\})*\}'
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Unquoted variables, dynamic evaluation, and blind network-to-shell piping.
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Unquoted variables, dynamic evaluation, and blind network-to-shell piping.
+        "safety_bypasses": re.compile(
+            r'\b(eval)\b(?!\s*\()|(?<!")\$(?![\(?])\w+(?!")|\|\|\s*true\b|>\s*/dev/null(?:\s*2>&1)?|\bcurl\s+[^|\n]{1,200}\|[ \t]*(?:bash|sh|zsh)\b'
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Destructive commands and privilege elevation. EXCLUDES echo (Phase 5).
+        "high_risk_execution": re.compile(
+            r"\b(rm\s+-[rR]f|sudo|chmod\s+(?:-R[ \t]+)?777|chown\s+(?:-R[ \t]+)?root|mkfs|dd|kill(?:all)?)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        # Redirections, pipes, and network clients.
+        "io": re.compile(r">|>>|<|\|(?:&)?|\b(curl|wget|nc|ssh|scp|ftp|rsync|cat|tail|grep|find|xargs|jq)\b"),
+        # 10. api (Public Surface Area)
+        # Exported variables and identifiers modifying the global environment.
+        "api": re.compile(r"^[ \t]*export\s+[a-zA-Z_]\w*", re.M),
+        # 11. flux (State Mutation)
+        # Mutation of state via assignment or arithmetic.
+        # QUADRATIC BLOWUP FIX: the arithmetic-expansion branch's two
+        # `[^)]*` quantifiers were unbounded -- on a long run of unclosed
+        # `(` characters, each opening pair is a candidate match start
+        # scanning to the end looking for the required operator + `))`,
+        # for O(n^2) total. Bounded to {0,200} each; real `(( ... ))`
+        # arithmetic expressions don't get remotely that long.
+        "state_mutation": re.compile(
+            r"^[ \t]*[a-zA-Z_]\w*(?:\[[^\]]+\])?\+?=(?![=~])|\b(?:let|declare)\s+[a-zA-Z_]\w*\+?=|\(\([^)]{0,200}(?:\+\+|--|[-+*/%]=)[^)]{0,200}\)\)",
+            re.M,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented-out execution logic indicating dead features.
+        "dead_code": re.compile(r"#[ \t]*(?:if|for|while|function|export|echo|printf|cd|rm|sudo|ls)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(
+            r"^[ \t]*#\s*(?:@param|@return|Usage:|Description:|Examples:|Options:)|#\s*shellcheck\s+disable",
+            re.M | re.I,
+        ),
+        # 14. test (Testing & Assertions)
+        # Triggers indicating internal verification. Anchored to shell-specific testing framework commands.
+        "test": re.compile(
+            r"\b(assert_?eq|assertTrue|assertFalse|assert_?match|bats|shunit2)\b|^@test\s+|\brun\s+[a-zA-Z0-9_-]+",
+            re.M,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # QUADRATIC BLOWUP + NESTING FIX: the process-substitution clauses'
+        # flat `[^)]*` were unbounded and unanchored -- O(n^2) on a long run
+        # of unclosed `<(`/`>(` (confirmed ~4x slowdown per input-size
+        # doubling). Upgraded to the one-level-nesting form so a realistic
+        # nested process substitution (e.g. `diff <(sort <(cat a)) <(sort b)`)
+        # is captured in full instead of truncating at the inner `)`.
+        "concurrency": re.compile(
+            r"&[ \t]*$|\b(wait(?:\s+-n)?|coproc|nohup|parallel|jobs|fg|bg|disown|xargs\s+-P)\b|&\s*\|\||<\((?:[^()]|\([^()]*\))*\)|>\((?:[^()]|\([^()]*\))*\)",
+            re.M,
+        ),
+        # 16. ui_framework (UI / View Components)
+        # Terminal UI builders and ANSI sequences.
+        "ui_framework": re.compile(
+            r"\b(dialog|whiptail|zenity|kdialog|notify-send|tput|gum|tmux)\b|\\033\[[0-9;]+m|\\e\[[0-9;]+m"
+        ),
+        # 17. closures
+        "closures": None,  # Shell lacks native anonymous lambdas.
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"\b(PATH|HOME|USER|SHELL|EDITOR|PWD|OLDPWD|TERM|LANG|OSTYPE|MACHTYPE|UID|EUID|GROUPS)\b"
+        ),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions (Iterators / Comprehensions)
+        # Brace expansions acting as inline loops.
+        "comprehensions": re.compile(r"\{[0-9]+(?:\.\.|,)[0-9]+(?:\.\.[0-9]+)?\}|\{[a-zA-Z]\.\.[a-zA-Z]\}"),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(bc|awk|dc|expr|jq|RANDOM|SRANDOM)\b|\$\(\("),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Sub-languages and indirect expansion. (ReDoS Shielded)
+        # QUADRATIC BLOWUP + NESTING FIX: `$(...)`'s flat `[^)]+` was
+        # unbounded and unanchored -- O(n^2) on a long run of unclosed
+        # `$(` (confirmed ~4x slowdown per input-size doubling). Upgraded
+        # to the one-level-nesting form so the common nested command
+        # substitution idiom (e.g. `DIR=$(cd "$(dirname "$0")" && pwd)`)
+        # is captured in full instead of truncating at the inner `)`.
+        "reflection_metaprogramming": re.compile(
+            r'\$\((?:[^()]|\([^()]*\))+\)|`[^`]+`|\b(?:awk|sed|perl|python[23]?|ruby)\s+[\'"][^\'"]{0,500}|\beval\s+\$|\$\{!?[a-zA-Z0-9_]+\}'
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"(?:^|[ \t;|&])(?:source\b|\.(?=[ \t]))[ \t]+[^\s;]+", re.M),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (SHELL) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
+            #
+            # HISTORICAL BUG: Originally, this regex was anchored to the start of the
+            # line `^[ \t]*`. This blinded the firewall to dynamic or conditional shell
+            # execution. Shell scripts frequently source environment files inside `if`
+            # blocks (e.g., `if [ -f .env ]; then source .env; fi`) or after logical
+            # operators (e.g., `test -f lib.sh && . lib.sh`). The anchored regex missed
+            # these entirely.
+            #
+            # THE FIX: The `^` anchor has been replaced with a Shell Statement Boundary:
+            # `(?:^|[ \t;|&])`. This allows the engine to recognize a `source` or `.`
+            # command immediately following a pipe `|`, a background task `&`, a logic
+            # gate `&&`, a command separator `;`, or standard whitespace, without
+            # triggering false positives on prose in echo statements.
+            #
+            # [ THE DOT-OPERATOR WORD BOUNDARY TRAP ]
+            # We CANNOT use a standard `\b` word boundary for the entire group because
+            # the dot operator (`.`) is a non-word character. `\b\.` will fail.
+            # Therefore, we explicitly branch: `source` gets a word boundary `\b`,
+            # and `.` gets a positive lookahead for whitespace `(?=[ \t])`.
+            # =====================================================================
+            r"(?:^|[ \t;|&])(?:source\b|\.(?=[ \t]))[ \t]+['\"]?([^'\"\s;]+)['\"]?",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"^[ \t]*#\s*(?:Author|Created by|Maintainer|Copyright):?\s+(.*)",
+            re.M | re.I,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # QUADRATIC BLOWUP FIX: the trailing `[^\]]*` was unbounded and
+        # unanchored -- O(n^2) on a long run of unclosed `#[SPEC-...` tags
+        # (confirmed ~4x slowdown per input-size doubling). Bounded to
+        # {0,300}; real spec/audit tags don't get remotely that long.
+        "spec_exposure": re.compile(r"#\s*\[(?:\s*SPEC\s*-\s*\d+|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        # Legacy CGI shell environments.
+        "ssr_boundaries": re.compile(
+            r'\b(?:CONTENT_TYPE|QUERY_STRING|HTTP_USER_AGENT)\b|echo\s+"Content-type:\s*text/(?:html|plain|json)'
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # Named pipes and OS signal handlers.
+        "events": re.compile(
+            r"\b(mkfifo|mknod|inotifywait|inotifywatch|fswatch|tail\s+-f|kill\s+-(?:SIG)?(?:USR1|USR2|HUP|TERM))\b"
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(r"\$\{1:-\w+\}|\$\{2:-\w+\}|\b(?:command\s+-v|type\s+-p)\b"),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(r"^[ \t]*(?:alias|shopt)\b", re.M),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        # Raw memory addressing. Shell uses namerefs and indirect expansion.
+        "pointers": re.compile(r"\b(?:declare\s+-n|typeset\s+-n)\b|\$\{\!"),
+        # 36. memory_alloc
+        "memory_alloc": None,
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:logger|syslog|log_info|log_err|log_warn|log_debug)\b|>\s*/dev/(?:stderr|console)"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(echo|printf|print|read)\b"),
+        # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": None,
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(exit|kill|abort|halt|return\s+[1-9][0-9]*)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(sleep|read\s+-t)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": None,
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(flock|mkdir|mkfifo|lockfile|sem)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(readonly|declare\s+-r|typeset\s+-r)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        # QUADRATIC BLOWUP FIX: same class of bug as `safety`'s trap clause
+        # above -- the unbounded `.*` before the required `EXIT` literal was
+        # unanchored, O(n^2) on a long run of `trap ` occurrences that never
+        # resolve to EXIT (confirmed ~4x slowdown per input-size doubling).
+        # Bounded to {0,300}, matching the fix already applied to `safety`.
+        "cleanup": re.compile(r"\b(rm\s+-f|trap\s+.{0,300}EXIT|unset|exit|logout)\b"),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Physical Reality: local variables represent internal state scope.
+        "encapsulation": re.compile(r"\b(local|typeset|declare)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(read|inotifywait|nc\s+-l|while\s+read)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BOUNDARY FIX: `#\s*SKIP` starts with `#` (non-word), so it could
+        # never satisfy the shared leading `\b` -- real comment markers are
+        # always preceded by whitespace or line start (also non-word), so a
+        # `# SKIP: ...` comment never matched at all. Pulled out of the
+        # group with the leading `\b` dropped (the `#` is self-delimiting).
+        "test_skip": re.compile(r"\b(test\.skip|bats_skip|mock|stub)\b|#\s*SKIP\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Shell Specifics) ---
+        "serialization_parsing": re.compile(r"\b(jq|yq|awk|sed|xmlstarlet)\b"),
+        "regex_execution": re.compile(r"\b(grep|egrep|sed|awk)\b|=~"),
+        # BOUNDARY FIX: the trailing `\s+` before the shared closing `\b`
+        # required a word char to immediately follow the whitespace --
+        # never true for how `date`/`sleep` are actually invoked (almost
+        # always followed by a `-flag` or `+FORMAT`, both non-word). The
+        # single most common real-world form of `date` (`date +%Y-%m-%d`)
+        # never matched at all. The `\s+` was redundant anyway -- `\b`
+        # alone already prevents partial-word matches like "update".
+        "time_date_logic": re.compile(r"\b(date|sleep|uptime|times)\b"),
+        "ipc_rpc_bridges": re.compile(r"\b(curl|wget|nc|netcat|ssh|scp|xargs|socat)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/solidity.py b/gitgalaxy/standards/language_standards/languages/solidity.py
new file mode 100644
index 000000000..b17de0c9b
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/solidity.py
@@ -0,0 +1,219 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Solidity 0.8.20+ (Smart Contracts / Foundry / Hardhat)",
+        "last_updated": "2026-04-01",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard Solidity contracts and library files.
+    "extensions": [".sol"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Solidity compiles to EVM bytecode; no extensionless scripts exist.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Hardhat, Truffle, and Foundry configurations acting as gravitational anchors.
+    "discriminators": [
+        "hardhat.config.js",
+        "hardhat.config.ts",
+        "truffle-config.js",
+        "foundry.toml",
+        "remappings.txt",
+    ],
+    # EXECUTION SIGNATURES: Smart contracts are compiled; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: Solidity strictly adheres to C-style line (//) and block (/* */) comments.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: Decisions that split flow. Includes Solidity 0.6+ try/catch.
+        "branch": re.compile(r"\b(if|else|for|while|do|break|continue|return|try|catch)\b|\?"),
+        # 2. args: Parameters / Coupling. Captures parameters for functions, errors, events, and modifiers.
+        # Bounded `{0,50}` to prevent ReDoS on massive tuple returns or complex signatures.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # both alternatives (was only reachable via group(0), the whole
+        # match including the "function"/"modifier"/name prefix) so
+        # detector.py's counter isolates just "(...)" -- the whole-match
+        # fallback overcounted every zero/one-arg signature by +1 the same
+        # way Python's did (#1199). Name group added to the first
+        # alternative too, purely so existing extraction tests keep
+        # passing.
+        "args": re.compile(
+            r"\b(?:function|modifier|error|event)\s+([a-zA-Z_]\w*\s*)?(\([^)]{0,500}\))|\b(?:constructor|fallback|receive)\s*(\([^)]{0,500}\))"
+        ),
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries defining scope and data definitions.
+        "structural_boundaries": re.compile(
+            r"\b(pragma|import|contract|interface|library|struct|enum|type|mapping|address|uint\d*|int\d*|bytes\d*|bool|string)\b"
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors executable logic (Functions, Modifiers, Custom Errors, Events).
+        # LOOKAHEAD MANDATE APPLIED: Stops exactly at the identifier name before the parenthesis.
+        "func_start": re.compile(
+            r"^[ \t]*(?:function|modifier|error|event)\s+([a-zA-Z_]\w*)(?=\s*\()|^[ \t]*(constructor|fallback|receive)(?=\s*\()",
+            re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines structural entities (Contracts, Interfaces, Libraries).
+        "class_start": re.compile(
+            r"^[ \t]*(?:abstract\s+)?(?:contract|interface|library)\s+([a-zA-Z_]\w*)(?=\s*(?:is|\{))",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. State reversion, assertions, and defensive modifier usage.
+        "safety": re.compile(r"\b(require|assert|revert|modifier|nonReentrant|onlyOwner)\b"),
+        # 7. safety_neg: Safety Bypasses. Bypassing overflow checks (0.8+) or dangerous delegation.
+        "safety_bypasses": re.compile(r"\b(unchecked|assembly|delegatecall)\b"),
+        # 8. danger: High-Risk Execution. Contract destruction and absolute value termination.
+        "high_risk_execution": re.compile(r"\b(selfdestruct|suicide)\b"),
+        # 9. io: I/O & Network Boundaries. EVM blockchains are closed systems. (Cross-contract calls are mapped as API/Generics).
+        "io": None,
+        # 10. api: Public Surface Area. Exposed boundaries to external wallets or contracts.
+        "api": re.compile(r"\b(external|public)\b"),
+        # 11. flux: State Mutation. State mutation. Captures array mutators, payable states, and explicit assignment.
+        "state_mutation": re.compile(r"\b(payable|push|pop)\b|(?<![=<>!])=(?![=])|\+\+|--|\+=|-=|\*=|/="),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out execution flow or structural definitions.
+        "dead_code": re.compile(r"//[ \t]*(?:function|contract|if|require|uint|address)\b"),
+        # 13. doc: Structured Documentation. NatSpec (Ethereum Natural Specification Format).
+        "doc": re.compile(r"///|/\*\*|@(?:param|return|dev|notice|custom|title|author)"),
+        # 14. test: Testing & Assertions. Foundry/Forge testing hooks and assertions.
+        "test": re.compile(
+            r"\b(?:setUp|test[A-Za-z0-9_]*|assertEq|assertTrue|assertFalse|assertGt|assertLt|vm\.expectRevert)\b"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. EVM execution is strictly synchronous per transaction.
+        "concurrency": None,
+        # 16. ui_framework: UI / View Components. Solidity has no UI rendering capacity.
+        "ui_framework": None,
+        # 17. closures: Closures / Anonymous Functions. Solidity lacks native closures/lambdas.
+        "closures": None,
+        # 18. globals: Global / Shared State. Global transaction, block, and message state context variables.
+        "globals": re.compile(
+            r"\b(msg\.(?:sender|value|data|sig)|block\.(?:timestamp|number|chainid|coinbase|difficulty)|tx\.(?:gasprice|origin))\b"
+        ),
+        # 19. decorators: Decorators / Annotations. Modifiers act structurally similar to decorators.
+        "decorators": None,  # Modifiers are inline in Solidity, not on preceding lines.
+        # 20. generics: Generics / Type Parameters. Parameterized K/V associations.
+        # Deeply supports nested mapping structures across vertical lines.
+        # BUG FIX (ReDoS): the nested `[^)]+` was unbounded. Confirmed
+        # quadratic scaling (0.18s/0.72s/2.86s/11.4s for n=5k/10k/20k/40k
+        # -- ~4x per doubling) against a malformed/adversarial run of
+        # `mapping(mapping(uint => ` tokens with no closing paren: at
+        # each of the ~n candidate start positions where the outer
+        # `mapping(` matches, the inner alternative's unbounded
+        # `[^)]+` scans to the end of the string and fails, backtracking
+        # across the whole remaining length -- O(n) work at each of
+        # O(n) positions. Bounded to `{1,200}`, matching this same fix
+        # shape used elsewhere in the sweep (fortran/php/shell/apex/
+        # embedded_python) for "unbounded class immediately followed by
+        # an often-absent literal suffix" ReDoS.
+        "generics": re.compile(
+            r"\bmapping\s*\([ \t\n]*[a-zA-Z0-9_]+\s*=>\s*(?:mapping\s*\([^)]{1,200}\)|[a-zA-Z0-9_]+)[ \t\n]*\)"
+        ),
+        # 21. comprehensions: Iterators / Comprehensions. Solidity lacks native comprehensions.
+        "comprehensions": None,
+        # 22. scientific: Numerical / Compute Libraries. Cryptographic hashing and elliptic curve recovery.
+        "scientific": re.compile(r"\b(keccak256|sha256|ripemd160|ecrecover|addmod|mulmod)\b"),
+        # 23. heat_triggers: Metaprogramming & Reflection. Low-level assembly injections and fallback routers.
+        "reflection_metaprogramming": re.compile(r"\b(fallback|receive|assembly|delegatecall|call|staticcall)\b"),
+        # 24. import: Dependency Inclusions. Resolving dependencies across files.
+        "import": re.compile(
+            r"^[ \t]*import\s+(?:(?:\{[^}]+\}|\*\s+as\s+[a-zA-Z_]\w*)\s+from\s+)?[\"'][^\"']+[\"'](?:\s+as\s+[a-zA-Z_]\w*)?;",
+            re.M,
+        ),
+        # 24b. _dependency_capture: Graph resolution extracting exactly ONE path string.
+        "_dependency_capture": re.compile(
+            r"^[ \t]*import\s+(?:(?:\{[^}]+\}|\*\s+as\s+[a-zA-Z_]\w*)\s+from\s+)?[\"']([^\"']+)[\"'](?:\s+as\s+[a-zA-Z_]\w*)?;",
+            re.M,
+        ),
+        # 25. ownership: Authorship indicators. Strictly targets SPDX license tags and authorship notes.
+        "ownership": re.compile(r"//[ \t]*SPDX-License-Identifier:|(?:@author|Created by):\s+(.*)", re.I),
+        # --- 🌌 PHASE 4: EXTENDED DIMENSIONS (Specialized Sub-Equations) ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 28. private_info: Hardcoded credentials or private keys. Requires assignment.
+        "hardcoded_secrets": re.compile(r"\b(private_key|secret|mnemonic|api_key)\b[ \t]*[:=]", re.I),
+        # 29. spec_exposure: Map vs. Territory. ERC/EIP standards and audit tags.
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|audit)[^\]]{0,300}\]|\b(ERC-\d+|EIP-\d+)\b", re.I),
+        # 31. ssr_boundaries: View Horizon.
+        "ssr_boundaries": None,
+        # 32. events: Pub/Sub Network. Logging state to the blockchain EVM logs.
+        "events": re.compile(r"\b(emit|event)\b"),
+        # 33. dependency_injection: Inversion of Control.
+        "dependency_injection": None,
+        # 34. macros: Preprocessor Hooks. (Solidity lacks macros).
+        "macros": None,
+        # 35. pointers: Memory Map. Explicit storage vs memory pointer semantics.
+        "pointers": re.compile(r"\b(memory|storage|calldata)\b"),
+        # 36. memory_alloc: Explicit heap generation inside arrays or structs.
+        "memory_alloc": re.compile(r"\b(new)\b"),
+        # 37. inline_asm: Bare Metal Yul integration.
+        "inline_asm": re.compile(r"\bassembly\s*\{"),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics. (Hardhat console logging).
+        "telemetry": re.compile(r"\b(console\.log[a-zA-Z0-9_]*)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output. (Solidity lacks native printing outside Hardhat).
+        "debug_prints": None,
+        # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\b(address|uint\d*|int\d*|bytes\d*|uint|int|bytes)\s*\("),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting transaction state.
+        "panics_and_aborts": re.compile(r"\b(revert)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (EVM cannot sleep).
+        "thread_sleeps": None,
+        # 43. bitwise_ops (Bitwise Operations) Bitwise operations for gas optimization.
+        "bitwise_ops": re.compile(r"<<|>>|\^|~|(?<!&)&(?!&)|(?<!\|)\|(?!\|)"),
+        # 44. sync_locks (Resource Management & Stability) Native Reentrancy guards.
+        "sync_locks": re.compile(r"\b(nonReentrant)\b"),
+        # 45. immutability_locks (Immutability Constraints) Gas-saving immutability constraints.
+        "immutability_locks": re.compile(r"\b(constant|immutable|view|pure)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown) Deleting state variables to claim gas refunds.
+        "cleanup": re.compile(r"\b(delete)\b"),
+        # 47. encapsulation Access limitation to prevent external calls.
+        "encapsulation": re.compile(r"\b(private|internal)\b"),
+        # 48. listeners (Event Listeners / Observers) (Contracts cannot actively listen asynchronously).
+        "listeners": None,
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": None,
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Solidity Specifics) ---
+        "serialization_parsing": re.compile(r"\b(abi\.encode|abi\.encodePacked|abi\.decode)\b"),
+        "regex_execution": re.compile(
+            r"\b(keccak256\s*\(\s*abi\.encodePacked)\b"
+        ),  # Hashes are used instead of regex for complex string matching
+        "time_date_logic": re.compile(r"\b(block\.timestamp|now|\d+\s+(?:days|weeks|years|hours|minutes))\b"),
+        # BUG FIX: `.call{value:` and `emit\s+[A-Z]` were both inside the
+        # shared \b(...)\b wrapper.
+        # - `.call{value:` ends on `:` (non-word), so the trailing \b
+        #   could only fire when a word char immediately followed --
+        #   never true for the idiomatic spaced form
+        #   `target.call{value: amount}(...)`, which is how this is
+        #   always written in real Solidity.
+        # - `emit\s+[A-Z]` only ever consumed a SINGLE uppercase letter
+        #   (the char class has no `+`/`*`), so for any real
+        #   multi-character event name (`emit Transfer(...)`) the char
+        #   right after the matched letter is another word char --
+        #   word-to-word is not a \b transition, so the trailing \b
+        #   failed for every event name longer than one letter, which
+        #   is effectively all of them.
+        "ipc_rpc_bridges": re.compile(
+            r"\b(?:delegatecall|staticcall|selfdestruct)\b|\.call\{value:|\bemit\s+[A-Z]\w*\b"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/sqlite.py b/gitgalaxy/standards/language_standards/languages/sqlite.py
new file mode 100644
index 000000000..4ec4dd87c
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/sqlite.py
@@ -0,0 +1,366 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "SQLite 3.51.2+ (STRICT Tables, JSONB, RETURNING, Math & CTEs)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard SQL scripts, data definition, and data manipulation files.
+    "extensions": [".sql", ".ddl", ".dml"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Standard SQLite configuration and history files that consist of CLI commands/SQL.
+    "exact_matches": [".sqliterc"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Binary database files acting as gravitational anchors to prove a .sql file is SQLite and not Postgres/MySQL.
+    "discriminators": [
+        ".sql",
+        ".db",
+        ".sqlite",
+        ".sqlite3",
+        ".db3",
+        ".s3db",
+        ".sl3",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["sqlite3", "sqlite"],
+    # Maps to Family 5 (Hybrid Dash) -- #621: this comment always said
+    # "Family 5 (Hybrid Dash)" but the value below was "standard_block"
+    # until now, so sqlite shared a regex with C-style languages and got
+    # zero comment stripping (standard_block never used the `--` token).
+    # "multi_style_dash" is the real family for this shape.
+    # Rationale: Uses '--' for line-level and '/*' '*/' for block-level Commented / Non-Executable Text.
+    "lexical_family": "multi_style_dash",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical filters. Includes case logic and modern IIF().
+        "branch": re.compile(
+            r"\b(CASE|WHEN|THEN|ELSE|END|IFNULL|NULLIF|COALESCE|IIF|FILTER|WHERE|HAVING)\b",
+            re.I,
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks and input coupling. Bounded to prevent ReDoS on massive IN clauses.
+        # Now explicitly captures CTE scoped arguments: cte_name (col1, col2)
+        # BUG FIX (epic #813/#836), two findings:
+        # 1. Rule 11 shape: the VALUES/IN clause's `\([^)]{0,2000}\)` was a
+        #    flat, unnested paren match -- a nested subquery (`IN (SELECT
+        #    id FROM (SELECT id FROM other))`, common real SQL) truncated
+        #    at the FIRST closing paren (the inner subquery's own),
+        #    silently ending the match one paren early instead of
+        #    covering the whole clause. Widened to the established
+        #    one-level-nesting-safe idiom, bounded on both the inner and
+        #    outer repetition to stay ReDoS-safe.
+        # 2. The CTE alternative required the CTE name to be at TRUE line
+        #    start (`^[ \t]*`) -- but the single most common way to
+        #    actually write a CTE is inline, right after the `WITH`
+        #    keyword on the same line (`WITH cte_name (col1, col2) AS
+        #    (...)`), which this pattern never matched at all. Added an
+        #    alternative anchor: immediately after `WITH` or `WITH
+        #    RECURSIVE`, in addition to (not instead of) true line start
+        #    (multi-CTE statements formatted one-per-line still hit the
+        #    original anchor). Kept as a non-capturing addition -- this
+        #    rule has zero capture groups by design (every alternative is
+        #    checked via whole-match substring, not a captured group), so
+        #    adding a real group here would have changed that convention
+        #    for every OTHER alternative too.
+        "args": re.compile(
+            r"\?[0-9]*|[:@$][a-zA-Z_]\w*|\b(?:VALUES|IN)\s*\((?:[^()]|\([^()]{0,2000}\)){0,2000}\)|"
+            r"(?:^[ \t]*|\bWITH(?:[ \t\n]+RECURSIVE)?[ \t\n]+)[a-zA-Z_]\w*[ \t\n]*\([^)]{0,2000}\)[ \t\n]*AS[ \t\n]*\(",
+            re.I | re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries defining query execution flow.
+        "structural_boundaries": re.compile(
+            r"\b(SELECT|FROM|JOIN|(?:INNER|LEFT|RIGHT|FULL|CROSS|NATURAL)(?:\s+OUTER)?\s+JOIN|GROUP\s+BY|ORDER\s+BY|LIMIT|OFFSET|UNION|INTERSECT|EXCEPT|RETURNING|AS|INTO|WINDOW|STRICT|WITHOUT\s+ROWID|PARTITION\s+BY|PRECEDING|FOLLOWING|UNBOUNDED|CURRENT\s+ROW)\b",
+            re.I,
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Executable logic wrappers. EXCLUDES tables to avoid False Positives.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL MODIFIER SHIELD (SQLITE) ]
+            # SQL developers frequently format DDL statements across multiple lines,
+            # stacking `CREATE`, `TEMPORARY TRIGGER`, and `IF NOT EXISTS` vertically.
+            # FIX: Upgraded the `\s+` and `[ \t]+` modifier bounds to `[ \t\n]+`.
+            # Critically, the `IF NOT EXISTS` block previously failed to capture
+            # the vertical gap, causing the engine to capture `IF` as the target name.
+            #
+            # BUG FIX (epic #813/#836), two findings:
+            # 1. No allowance for a schema-qualified name (`CREATE
+            #    TRIGGER main.my_trigger ...`) -- standard, common SQLite
+            #    syntax when working with ATTACHed databases or
+            #    explicitly targeting `temp.`. Since `\w` never spans a
+            #    literal `.`, the old pattern couldn't capture "main.my_
+            #    trigger" as one token and had no fallback to skip the
+            #    schema prefix and capture just the real name -- the
+            #    whole match failed outright. Added an optional
+            #    `(?:[a-zA-Z_]\w*\.)?` schema-prefix skip before the
+            #    capture.
+            # 2. No allowance for any of SQLite's three quoted-identifier
+            #    styles (`"name"`, `` `name` ``, `[name]`) -- so even a
+            #    plain quoted name with no special characters at all
+            #    (`CREATE VIEW "group" AS ...`, quoting a name that
+            #    happens to collide with a reserved word -- the single
+            #    most common real reason to quote an identifier) failed
+            #    outright. Added the three quoted forms as alternatives
+            #    inside the SAME capture group (quotes included in the
+            #    captured text) rather than as separate numbered groups,
+            #    since detector.py reserves capture group 2 specifically
+            #    for class_start's inheritance-parent extraction on other
+            #    languages -- adding new numbered groups here would have
+            #    silently shifted that convention.
+            # =====================================================================
+            r"^[ \t]*CREATE[ \t\n]+(?:(?:TEMP|TEMPORARY)[ \t\n]+)?(?:UNIQUE[ \t\n]+)?(?:TRIGGER|VIEW|INDEX)[ \t\n]+"
+            r"(?:IF[ \t\n]+NOT[ \t\n]+EXISTS[ \t\n]+)?(?:[a-zA-Z_]\w*\.)?"
+            r"((?:\"[^\"]+\"|`[^`]+`|\[[^\]]+\]|[a-zA-Z_]\w*))(?=[ \t\(\n;]|$)",
+            re.I | re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Physical entity instantiation (Tables).
+        # BUG FIX (epic #813/#836), three findings:
+        # 1/2. Same schema-qualifier and quoted-identifier gaps as
+        #    func_start above -- `CREATE TABLE main.users (...)` and
+        #    `CREATE TABLE "my table" (...)` were both entirely
+        #    invisible. Same fix, same single-group approach.
+        # 3. Pre-existing (not introduced by the above): the "IF NOT
+        #    EXISTS" clause's own trailing gap used `[ \t]+` -- unlike
+        #    its internal `NOT`/`EXISTS` gaps (`\s+`, which already
+        #    included newlines), the FINAL gap before the table name
+        #    didn't allow a newline. func_start's own "VERTICAL MODIFIER
+        #    SHIELD" fix (see its comment above) already covers this
+        #    exact shape for TRIGGER/VIEW/INDEX, but was never applied to
+        #    class_start's parallel TABLE clause -- so `CREATE TABLE IF
+        #    NOT EXISTS\n    users (...)` (a real, common vertical
+        #    formatting style) silently captured "IF" as the table name
+        #    instead of "users". Widened to `[ \t\n]+`, matching
+        #    func_start's existing idiom.
+        "class_start": re.compile(
+            r"^[ \t]*CREATE\s+(?:(?:TEMP|TEMPORARY)\s+)?(?:VIRTUAL[ \t]+)?TABLE\s+"
+            r"(?:IF\s+NOT\s+EXISTS[ \t\n]+)?(?:[a-zA-Z_]\w*\.)?"
+            r"((?:\"[^\"]+\"|`[^`]+`|\[[^\]]+\]|[a-zA-Z_]\w*))(?=[ \t\(\n;]|$)",
+            re.I | re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(TRANSACTION|COMMIT|ROLLBACK|SAVEPOINT|RELEASE|CONSTRAINT|CHECK|UNIQUE|PRIMARY\s+KEY|FOREIGN\s+KEY|STRICT|IF\s+NOT\s+EXISTS|ON\s+DELETE\s+CASCADE|PRAGMA\s+foreign_keys[ \t]*=\s*(?:1|ON))\b",
+            re.I,
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Bypassing safety checks and structural removals.
+        "safety_bypasses": re.compile(
+            r"\b(DROP\s+TABLE|DROP\s+VIEW|DROP\s+INDEX|PRAGMA\s+foreign_keys[ \t]*=\s*(?:0|OFF)|PRAGMA\s+writable_schema[ \t]*=\s*(?:1|ON)|PRAGMA\s+ignore_check_constraints[ \t]*=\s*(?:1|ON)|IF\s+EXISTS)\b",
+            re.I,
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Destructive schema actions and system bypasses.
+        "high_risk_execution": re.compile(
+            r"\b(PRAGMA\s+legacy_alter_table|DROP\s+DATABASE)\b|^[ \t]*\.(?:shell|system|exit|quit)\b",
+            re.I | re.M,
+        ),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(SELECT|INSERT|UPDATE|DELETE|REPLACE|ATTACH\s+DATABASE|DETACH\s+DATABASE|readfile|writefile)\b|^[ \t]*\.(?:import|output|dump|read)\b",
+            re.I | re.M,
+        ),
+        # 10. api (Public Surface Area)
+        # Exposed surface area (Views and Virtual Tables).
+        "api": re.compile(
+            r"^[ \t]*CREATE\s+(?:TEMP|TEMPORARY)?\s*(?:VIEW|VIRTUAL\s+TABLE)\s+",
+            re.I | re.M,
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. Includes UPSERT.
+        "state_mutation": re.compile(
+            r"\b(UPDATE|SET|ALTER\s+TABLE|ADD\s+COLUMN|DROP\s+COLUMN|RENAME\s+TO|UPSERT|ON\s+CONFLICT\s+DO\s+UPDATE|ON\s+CONFLICT\s+DO\s+NOTHING|REPLACE\s+INTO|EXCLUDED\.[a-zA-Z_]\w*|jsonb?_(?:insert|replace|set|remove|patch))\b",
+            re.I,
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(
+            r"(?:--|/\*)[ \t]*(?:SELECT|INSERT|UPDATE|DELETE|CREATE|DROP|ALTER|PRAGMA)\b",
+            re.I,
+        ),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"--\s*@(?:param|return|brief|table|column)|/\*\*|--\s*Description:"),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r"\b(?:EXPLAIN[ \t]+QUERY[ \t]+PLAN|PRAGMA[ \t]+integrity_check|PRAGMA[ \t]+foreign_key_check)\b|^[ \t]*\.(?:testcase|lint)\b",
+            re.I | re.M,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(BEGIN\s+EXCLUSIVE|BEGIN\s+IMMEDIATE|PRAGMA\s+journal_mode[ \t]*=\s*WAL|PRAGMA\s+busy_timeout|PRAGMA\s+synchronous|PRAGMA\s+wal_checkpoint)\b",
+            re.I,
+        ),
+        # 16. ui_framework
+        "ui_framework": None,
+        # 17. closures (Closures / Anonymous Functions)
+        # SQLite does not support functional closures/lambdas. (CTEs are structural boundaries/loops).
+        "closures": None,
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"\b(sqlite_master|sqlite_schema|sqlite_sequence|sqlite_temp_schema|sqlite_stat\d+|PRAGMA\s+global_)\b",
+            re.I,
+        ),
+        # 19. decorators (Decorators / Annotations)
+        # Optimizer hints.
+        "decorators": re.compile(
+            r"\b(?:INDEXED\s+BY|NOT\s+INDEXED|MATERIALIZED|NOT\s+MATERIALIZED)\b",
+            re.I,
+        ),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"\bANY\b|\bCAST\s*\([^)]{0,500}\)", re.I),
+        # 21. comprehensions (Iterators / Comprehensions)
+        # JSON iterations and windowing.
+        "comprehensions": re.compile(
+            r"\b(json_each|json_tree|json_group_array|json_group_object)\b|\bOVER\s*\([^)]{0,500}\)",
+            re.I,
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(
+            r"\b(abs|acos|asin|atan|ceil|cos|degrees|exp|floor|ln|log|pi|pow|radians|sin|sqrt|tan|random|match|bm25|snippet|highlight|rtree|geopoly_[a-z_]+)\b",
+            re.I,
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Recursive logic and JSON paths.
+        "reflection_metaprogramming": re.compile(
+            r"\bWITH\s+RECURSIVE\b|\bGENERATED\s+ALWAYS\s+AS\b[^,;()]{0,20}\([^()]{0,300}\)[ \t]*(?:STORED|VIRTUAL)\b|->>|->|\b(?:json_extract|jsonb_extract)\b",
+            re.I,
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r"\b(ATTACH\s+DATABASE|load_extension)\b|^[ \t]*\.(?:read|load|import)\s+",
+            re.I | re.M,
+        ),
+        # BUG FIX (epic #813/#836): the ATTACH clause's optional-quote-pair
+        # idiom (`['"]?...['"]?`) excluded whitespace from the capture
+        # regardless of whether a quote was actually present -- the same
+        # bug class already confirmed for PowerShell's _dependency_capture
+        # (recurring class 39), but a worse "total failure" variant here:
+        # because the mandatory literal `AS` keyword must immediately
+        # follow the (optional) closing quote, a quoted path containing a
+        # space (a real, common Windows/macOS absolute path shape) didn't
+        # just truncate -- it failed to match AT ALL, since there was no
+        # way to reach "AS" with the space excluded from the capture.
+        # Fixed with real per-quote-style alternatives (single-quoted,
+        # double-quoted, bare), consistent with the PowerShell fix.
+        # BUG FIX (2026-08-30, sqlite tri-comparison validation pass): the
+        # `.import`/`.read`/`.load` alternative captured the FIRST
+        # whitespace-delimited token after the dot-command unconditionally
+        # -- but SQLite CLI's real `.import` accepts leading flags
+        # (`-csv`, `-ascii`, `-colsep ","`, `-skip N`, `-schema NAME`,
+        # `-v`), a documented, common shape (`sqlite_cli_scripts/import01.
+        # sql`'s corpus is full of `.import -csv file1.csv t4`). The old
+        # pattern captured `-csv` itself as the "dependency path" -- a
+        # real false positive polluting the dependency DAG with a garbage
+        # flag-shaped node instead of the actual imported file. There's no
+        # safe, bounded way to know which flags take a value (`-colsep`)
+        # vs. are boolean (`-csv`) without a flag table this regex layer
+        # doesn't have, so guessing past them risks capturing a flag's
+        # OWN value instead (worse: still wrong, now silently so). Given
+        # that choice, requiring the captured token not start with `-`
+        # trades a miss (no dependency edge for a flagged `.import`) for
+        # what this signal already prioritizes elsewhere in this file --
+        # never a wrong path -- consistent with `.import data.csv mytable`
+        # (no flags) staying captured correctly.
+        "_dependency_capture": re.compile(
+            r"\bATTACH\s+(?:DATABASE\s+)?(?:'([^']+)'|\"([^\"]+)\"|([^'\"\s;]+))\s+AS|"
+            r"\bload_extension\s*\(\s*['\"]([^'\"]+)['\"]|^[ \t]*\.(?:read|load|import)\s+['\"]?([^'\"\s-][^'\"\s]*)['\"]?",
+            re.I | re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"--\s*(?:Author|Created by|Maintainer|Copyright):\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        "spec_exposure": re.compile(r"--\s*\[(?:\s*SPEC\s*-\s*\d+|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(
+            r"\b(CREATE\s+TRIGGER|AFTER\s+UPDATE|AFTER\s+INSERT|AFTER\s+DELETE|BEFORE\s+UPDATE|BEFORE\s+INSERT|BEFORE\s+DELETE|INSTEAD\s+OF)\b",
+            re.I,
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(
+            r"\b(?:sqlite3_load_extension|SELECT\s+load_extension)\b|^[ \t]*\.load\b",
+            re.I | re.M,
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"\b(PRAGMA\s+compile_options|sqlite_compileoption_used)\b|^[ \t]*\.parameter\s+(?:set|init)\b",
+            re.I | re.M,
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": None,
+        # 36. memory_alloc (Manual Memory Management)
+        "memory_alloc": re.compile(
+            r"\bPRAGMA\s+(?:mmap_size|cache_size|temp_store|page_size|shrink_memory)\b",
+            re.I,
+        ),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:sqlite_stat1|sqlite_stat4|ANALYZE)\b|^[ \t]*\.(?:trace|log|show|stats|timer)\b",
+            re.I | re.M,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(
+            r"\b(?:disp|warning|fprintf(?![ \t]*\([ \t]*[a-zA-Z_]))\b|^\.print\b|^\.echo\b",
+            re.I | re.M,
+        ),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\bCAST[ \t]*\((?:[^()]{0,500}|\([^()]{0,500}\)){0,500}[ \t]+AS[ \t]+[a-zA-Z_]+\s*\)", re.I
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(ABORT|RAISE|EXIT|QUIT)\b|^[ \t]*\.(?:exit|quit)\b", re.I | re.M),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\bPRAGMA\s+busy_timeout\b|^[ \t]*\.pause\b", re.I | re.M),
+        # 43. bitwise_ops (Bitwise Operations)
+        # (?<!-)>> excludes the `->>` JSON arrow operator (reflection_metaprogramming),
+        # which is not a bitwise right-shift.
+        "bitwise_ops": re.compile(r"<<|(?<!-)>>|\^|~|(?<!\|)\|(?!\|)"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(BEGIN\s+EXCLUSIVE|BEGIN\s+IMMEDIATE|PRAGMA\s+synchronous)\b", re.I),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(STRICT|WITHOUT\s+ROWID|CONSTANT|READONLY)\b", re.I),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(DROP\s+TABLE|VACUUM|DETACH|CLOSE|CLEAR|DELETE\s+FROM)\b", re.I),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Temporary/Local scopes and hidden columns.
+        "encapsulation": re.compile(r"\b(TEMP|TEMPORARY|HIDDEN)\b", re.I),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(BEFORE\s+|AFTER\s+|INSTEAD\s+OF)\b", re.I),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"^[ \t]*\.testcase\s+skip\b|\bPRAGMA\s+ignore_check_constraints\b", re.I | re.M),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (SQLite / SQL Specifics) ---
+        "serialization_parsing": re.compile(
+            r"(?i)\b(json_extract|json_tree|json_each|json_object|json_array|json_type)\b"
+        ),
+        "regex_execution": re.compile(r"(?i)\b(REGEXP|GLOB|LIKE|MATCH)\b"),
+        "time_date_logic": re.compile(
+            r"(?i)\b(strftime|datetime|julianday|unixepoch|current_timestamp|current_date|current_time)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"(?i)\b(ATTACH\s+DATABASE|DETACH\s+DATABASE|PRAGMA)\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/swift.py b/gitgalaxy/standards/language_standards/languages/swift.py
new file mode 100644
index 000000000..041005b83
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/swift.py
@@ -0,0 +1,304 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Swift 6.2 / iOS 18+ / Strict Concurrency, Macros & Swift Testing",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources and module interface declarations.
+    "extensions": [".swift", ".swiftinterface"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Tooling configurations that are secretly pure Swift code.
+    "exact_matches": ["Package.swift"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions and package manager lockfiles to resolve ambiguous files in mixed Apple environments.
+    "discriminators": [".swift", "Package.resolved", "project.pbxproj"],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1 for Swift-based scripting and automation.
+    "shebangs": ["swift", "swift-sh"],
+    # UPGRADED: Maps to Family 2 (Nested C)
+    # Rationale: Supports nested block comments (/* /* */ */), necessitating depth-aware stripping
+    # rather than standard C-style early termination.
+    "lexical_family": "recursive_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Decisions and logical jumps. Includes modern typed throws (throws(Error)).
+        # EXCLUDES throw/rethrows (bailout_hits).
+        "branch": re.compile(
+            r"\b(if|else|guard|switch|case|default|for|while|repeat|do|catch|break|continue|defer|try|throws)\b|&&|\|\||\?|\?\?"
+        ),
+        # 2. args (Parameters / Coupling)
+        # Parameter blocks. Bounded negation [^)]* and <[^>]*> to prevent ReDoS.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE ESCAPING CLOSURE SHIELD (SWIFT) ]
+            # Swift functions often take escaping closures `(Result<Void, Error>) -> Void`
+            # as parameters. The inner `()` breaks the `[^)]*` matcher.
+            # FIX: Upgraded horizontal spaces to `[ \t\n]+` to allow vertical jumps,
+            # and injected the 1-Level Nesting Trick `(?:[^)(]+|\([^)]*\))*` to safely
+            # capture the entire parameter block without ReDoS.
+            # =====================================================================
+            # RULE 11 FIX (epic #813/#824): the generic-parameter step-over was the flat
+            # `<[^>]*>`, truncating at the FIRST `>` and breaking any nested generic bound via
+            # a primary associated type constraint (`func foo<T: Collection<Int>>(x: T) {`,
+            # Swift 5.7+, mainstream). Widened to the established one-level-nesting idiom.
+            # #1209: parameter-list span wrapped in its own capture group
+            # in both alternatives (was only reachable via group(0), the
+            # whole match including the "func"/name prefix, or for
+            # trailing-closure syntax the leading "{"/capture-list) so
+            # detector.py's counter isolates just the real parameter text
+            # -- the whole-match fallback overcounted every zero/one-arg
+            # signature by +1 the same way Python's did (#1199). Name
+            # group added to the first alternative too, purely so
+            # existing extraction tests keep passing.
+            r"\b((?:func|init\??|subscript)[ \t\n]*(?:[a-zA-Z_]\w*)?)(?:[ \t\n]*<(?:[^<>]|<[^<>]*(?:<[^<>]*>[^<>]*)*>)*>)?[ \t\n]*(\((?:[^)(]|\([^)(]*(?:\([^)]*\)[^)(]*)*\))*\))|\{[ \t\n]*(?:\[[^\]]*\][ \t\n]*)?(\([^)]*\)|[a-zA-Z_]\w*(?:[ \t\n]*,[ \t\n]*[a-zA-Z_]\w*){0,50})?[ \t\n]*in\b",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (encapsulation) and let (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"\b(func|init|subscript|var|struct|class|enum|protocol|extension|actor|macro|import|typealias|associatedtype|mutating|nonmutating|isolated|nonisolated|return|yield|await|inout)\b|(?<!\blet )(?<!\bvar )(?<!\bfunc )(?<!\bclass )(?<!\bstruct )\b(some|any|consume|borrow|discard)\b|~Copyable"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # ONLY executable logic blocks. EXCLUDES types/classes. Steps over Concurrency modifiers.
+        "func_start": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL ATTRIBUTE & GENERICS SHIELD ]
+            # Swift allows heavy modifier stacking and disconnected generics.
+            # FIX: Upgraded horizontal `[ \t]+` spaces to vertical `[ \t\n]+` across
+            # decorators and modifiers, and safely detached the generic stepper
+            # `(?:[ \t\n]*<[^>]*>)?` from the function name capture.
+            # RULE 11 FIX (epic #813/#824): that generic stepper was flat, truncating at the
+            # FIRST `>` and breaking any nested generic bound via a primary associated type
+            # constraint (`func foo<T: Collection<Int>>(x: T) {`, Swift 5.7+, mainstream) --
+            # same gap as args above. Widened to the established one-level-nesting idiom.
+            # =====================================================================
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t\n]*){0,5}"
+            r"(?:(?:public|private|fileprivate|internal|open|package|override|final|static|class|mutating|nonmutating|isolated|nonisolated(?:\(unsafe\))?|distributed|required|convenience)[ \t\n]+){0,5}"
+            r"(?:func[ \t\n]+([a-zA-Z_]\w*|[=/\-+!*%<>&|^?~]+)(?:[ \t\n]*<(?:[^<>]|<[^<>]*(?:<[^<>]*>[^<>]*)*>)*>)?|(init\??)|(subscript))(?=[ \t\n]*\()",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # #1295: name wrapped in a capture group so the named-entity
+        # extractor (detector.py's _CLASS_START_NAMED_EXTRACTION_LANGS)
+        # can recover real names instead of flooding class_data with one
+        # "Anonymous_Class" phantom per match. Widened to an optional
+        # dotted chain (`\.[a-zA-Z_]\w*`) so nested-type extensions
+        # (`extension AFError.ParameterEncoderFailureReason { ... }`,
+        # mainstream in real Swift error-handling code) capture their
+        # full qualified name instead of truncating at the first dot.
+        "class_start": re.compile(
+            r"^[ \t]*(?:@[\w.]+(?:\([^)]*\))?[ \t]*){0,5}(?:(?:public|private|fileprivate|internal|open|package|final|distributed|indirect)[ \t]+){0,5}(?:class|struct|enum|protocol|actor|extension|macro)\s+([a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # BUG FIX: `try\?`/`as\?` both end on `?` (non-word), so the
+        # shared trailing \b could never fire -- whatever follows
+        # these operators (a space, then the expression) is never a
+        # word character. Neither of Swift's two most common
+        # error-softening operators ever matched.
+        "safety": re.compile(
+            r"\b(?:guard\s+let|if\s+let|guard\s+var|if\s+var|catch|is|Sendable|Result|assert|precondition|Mutex)\b"
+            r"|try\?|as\?|@MainActor|\?\?"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Unsafe pointers and linter bypasses. EXCLUDES forced unwraps (moved to friction).
+        "safety_bypasses": re.compile(
+            r"\bunowned(?:\(unsafe\))?\b|\bnonisolated\(unsafe\)|\bunsafeDowncast\b|//\s*swiftlint:disable"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Fatal traps and process killers. EXCLUDES TODO (debt) and print (print_hits).
+        "high_risk_execution": re.compile(r"\b(fatalError|preconditionFailure|assertionFailure|abort|exit)\b"),
+        # 9. io (I/O & Network Boundaries)
+        # BUG FIX: `Data\(contentsOf:`/`write\(to:` both end on `:`
+        # (non-word), so the shared trailing \b could never fire.
+        # Neither ever matched.
+        "io": re.compile(
+            r"\b(?:URLSession|FileManager|FileHandle|UserDefaults|CoreData|SwiftData|NWConnection)\b"
+            r"|Data\(contentsOf:|write\(to:"
+        ),
+        # 10. api (Public Surface Area)
+        # Exposed surface area. Explicit visibility and Objective-C bridges.
+        # BUG FIX: 7 of the 10 alternatives are `@`-prefixed attributes,
+        # which start with a non-word char -- the shared leading \b
+        # could only fire when a word char immediately preceded the
+        # `@`, never true for how attributes are actually written.
+        # Never matched at all.
+        "api": re.compile(
+            r"\b(?:public|open|package)\b"
+            r"|@usableFromInline|@objc|@objcMembers|@_exported|@IBAction|@IBOutlet|@Published"
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES let (freeze_hits).
+        "state_mutation": re.compile(
+            r"\b(var|inout|mutating|didSet|willSet|_modify)\b|@(?:State|Binding|FocusState|Bindable|Observable)|^[ \t]*(?:self\.)?[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*){0,5}\s*[-+*/]?=|\.(?:append|insert|remove|toggle|updateValue)\("
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        "dead_code": re.compile(r"//[ \t]*(?:let|var|func|class|struct|actor|extension|if|guard|return)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"///|/\*\*|-\s*parameter|-\s*returns:|-\s*throws:|-\s*warning:"),
+        # 14. test (Testing & Assertions)
+        "test": re.compile(
+            r"\b(?:XCTest|XCTestCase|XCTAssert[A-Za-z]*|setUp|tearDown)\b|@(?:Test|Suite)\b|#(?:expect|require)\b"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|actor|Task|TaskGroup|DispatchQueue|OperationQueue|MainActor|Sendable|isolated|nonisolated|continuation)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        # BUG FIX: `@State`/`@Binding`/`@Environment` are `@`-prefixed --
+        # same leading-\b bug as api above.
+        "ui_framework": re.compile(
+            r"\b(?:View|Body|ZStack|VStack|HStack|Text|Image|Button|SwiftUI|UIKit|AppKit|UIView|UIViewController|NSView|NSWindow)\b"
+            r"|@State|@Binding|@Environment"
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(
+            r"completion:[ \t]*\{|\{\s*(?:\[[^\]]*\]\s*)?(?:\([^)]*\)|[a-zA-Z_]\w*(?:[ \t\n]*,[ \t\n]*[a-zA-Z_]\w*){0,50})[ \t\n]+in\b"
+        ),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(
+            r"\b(?:static\s+let|static\s+var|shared|standard|default|NotificationCenter\.default|UserDefaults\.standard|FileManager\.default)\b|@Environment\b"
+        ),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"@[a-zA-Z_]\w*(?:\([^)]*\))?"),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(r"<\s*[A-Z][^>]*>|\bwhere\s+[a-zA-Z_]\w*\s*:|\b(?:some|any|each)\s+[A-Z]\w*"),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(
+            r"\.(?:map|compactMap|flatMap|filter|reduce|forEach|allSatisfy|contains)\s*(?:\(|\{)"
+        ),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(
+            r"\b(simd|Accelerate|Double|Float|Float16|CGFloat|Decimal|CoreML|CreateML|vDSP|sqrt|pow|sin|cos|tan)\b"
+        ),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # Reflection and Dynamic Dispatch.
+        # BUG FIX: `@objc` is `@`-prefixed -- same leading-\b bug.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:dynamic|Mirror\(|unsafeBitCast|withUnsafe\w+|KeyPath|WritableKeyPath)\b|@objc|\\\.[\w.]+"
+        ),
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(r"^[ \t]*(?:@_exported[ \t]+)?import\s+[a-zA-Z_]\w*", re.M),
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:@_exported[ \t]+)?import\s+(?:(?:typealias|struct|class|enum|protocol|let|var|func)\s+)?([a-zA-Z_][\w.]+)",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"//\s*(?:Created by|Author:|Copyright):\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(Vapor|Hummingbird|Request|Response|Route|app\.get|app\.post|EventLoopFuture)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        # BUG FIX: `@Published` is `@`-prefixed -- same leading-\b bug.
+        # (`.sink`/`.assign` are left as-is: a leading `.` is preceded
+        # by an identifier in real method-chain usage, e.g.
+        # `publisher.sink { ... }`, so that leading \b fires correctly.)
+        "events": re.compile(
+            r"\b(?:NotificationCenter|Combine|Publisher|Subscriber|CurrentValueSubject|PassthroughSubject|AnyCancellable|ObservableObject|Observation)\b"
+            r"|\.sink|\.assign|@Published"
+        ),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        # BUG FIX: `@Environment`/`@EnvironmentObject`/`@Inject`/
+        # `@Dependency` are all `@`-prefixed -- same leading-\b bug.
+        "dependency_injection": re.compile(
+            r"\b(?:Swinject|Container|Resolver|Factory)\b|@Environment|@EnvironmentObject|@Inject|@Dependency"
+        ),
+        # 34. macros (Preprocessor Directives / Macros)
+        "macros": re.compile(
+            r"#(?:Preview|Predicate|OptionSet|Rule|warning|error)\b|@(?:freestanding|attached)|#[A-Z]\w*"
+        ),
+        # 35. pointers (Pointer Arithmetic / Memory Addressing)
+        "pointers": re.compile(
+            r"\b(?:Unsafe(?:Mutable)?(?:Raw|Buffer)?Pointer|OpaquePointer|CVaListPointer|Unmanaged)\b|\.pointee\b|(?<=[=\s,(])&\w+"
+        ),
+        # 36. memory_alloc (Manual Memory Management)
+        # BUG FIX: `\.allocate\(capacity:` ends on `:` and
+        # `\.deallocate\(\)` ends on `)` -- both non-word, so the
+        # shared trailing \b could never fire. Neither ever matched.
+        "memory_alloc": re.compile(r"\b(?:malloc|calloc|free|ManagedBuffer)\b|\.allocate\(capacity:|\.deallocate\(\)"),
+        # 37. inline_asm
+        "inline_asm": None,  # Swift delegates ASM to C-headers.
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(?:Logger|OSLog|os_log)\b|\bLogger\([^)]*\)\.(?:info|error|warning|debug|trace|notice|critical|fault)\b",
+            re.I,
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\b(print|debugPrint|dump)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(
+            r"\bas[!?]?\s+[A-Z]\w*|\bis\s+[A-Z]\w*|\b(?:Int|Double|Float|Float16|CGFloat|String|Bool)\s*\("
+        ),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|fatalError|abort|exit|preconditionFailure)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(sleep|delay|Task\.sleep)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|\^|(?<![=!])~|<<=|>>=|\^="),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(
+            r"\b(mutex|lock|synchronized|Semaphore|OSAllocatedUnfairLock|MainActor|distributed)\b",
+            re.I,
+        ),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(let|final|static|readonly|Immutable|Sendable)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(deinit|close|free|dispose|shutdown|removeAll)\b\s*\("),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        "encapsulation": re.compile(r"\b(private|fileprivate|internal)\b"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\.onAppear\(|\.onChange\(|\.sink\(|addObserver|subscribe"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # BUG FIX: `mock\(`/`stub\(`/`fake\(`/`double\(` all end on `(`
+        # (non-word), so the shared trailing \b only fired when a word
+        # char immediately followed the paren -- true for most
+        # single-argument calls, but never for the zero-argument form
+        # (`double()`), where `)` follows instead.
+        "test_skip": re.compile(r"\bXCTSkip\b|\bmock\(|\bstub\(|\bfake\(|\bdouble\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Swift Specifics) ---
+        "serialization_parsing": re.compile(
+            r"\b(JSONDecoder|JSONEncoder|PropertyListSerialization|NSKeyedUnarchiver|XMLParser)\b"
+        ),
+        "regex_execution": re.compile(r"\b(NSRegularExpression|Regex|try\s+Regex|\.range\(of:.*\.regularExpression)\b"),
+        # BUG FIX: `Date\(\)` ends on `)` (non-word), so the shared
+        # trailing \b could never fire. Never matched.
+        "time_date_logic": re.compile(
+            r"\b(?:Calendar\.current|DateFormatter|DispatchTime\.now|Timer\.scheduledTimer)\b|\bDate\(\)"
+        ),
+        # BUG FIX: `Process\(\)` ends on `)` -- same bug. Never matched.
+        "ipc_rpc_bridges": re.compile(
+            r"\b(?:URLSession|NSXPCConnection|NotificationCenter|DispatchQueue)\b|\bProcess\(\)"
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/tcl.py b/gitgalaxy/standards/language_standards/languages/tcl.py
new file mode 100644
index 000000000..7229c7f3e
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/tcl.py
@@ -0,0 +1,200 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Tcl 8.6 / SQLite Test Suite",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard scripts and Tcl modules.
+    "extensions": [".tcl", ".itcl", ".tbc", ".tm"],  # Removed .test
+    # ABSOLUTE IDENTITY & EXACT FILENAMES:
+    "exact_matches": ["tclIndex", "pkgIndex.tcl"],
+    # ECOSYSTEM ANCHORS: Added .test here so it only anchors, but doesn't claim globally.
+    "discriminators": [".tcl", "tclIndex", ".test", "Makefile"],
+    # EXECUTION SIGNATURES: Standard interpreters found on Line 1.
+    "shebangs": ["tclsh", "wish", "bin/expect", "jimsh"],
+    # UPGRADED: Maps to Family 3 (Pure Hash)
+    # Rationale: Tcl natively uses '#' exclusively for line-level comments. It does not
+    # have native block comments (developers sometimes hack `if 0 { ... }`, but `#` is the standard).
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # Tcl control flow keywords.
+        "branch": re.compile(r"\b(?:if|elseif|else|switch|while|for|foreach|catch|try|trap|finally)\b"),
+        # 2. args (Parameters / Coupling)
+        # Safely captures the parameter list `{...}` immediately following a proc name.
+        "args": re.compile(
+            # =====================================================================
+            # [ THE VERTICAL PROC SHIELD (TCL) ]
+            # Tcl developers can break the `proc`, name, and argument brace `{}`
+            # across newlines.
+            # FIX: Upgraded horizontal `[ \t]+` constraints to vertical `[ \t\n]+`.
+            # =====================================================================
+            # BUG FIX: Expanded to support 3 levels of nesting to handle deeply nested default values.
+            # BUG FIX: Expanded name character set to include -, !, ?
+            r"^[ \t]*proc[ \t\n]+[a-zA-Z0-9_:\-!?]+[ \t\n]+\{((?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*)\}",
+            re.M,
+        ),
+        # Tcl default-value argument lists (#1512): opt-in for depth-aware braced parameter parsing.
+        "_args_tcl_pattern_list_groups": {1},
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: global/upvar (globals/heat).
+        "structural_boundaries": re.compile(r"\b(?:proc|return|break|continue|namespace|variable|yield)\b"),
+        # 4. func_start (Executable Logic Anchors)
+        # MUST HAVE EXACTLY ONE CAPTURE GROUP.
+        # Captures standard procs and namespaced procs (e.g., `proc ::my::func`).
+        # BUG FIX: Expanded name character set to include -, !, ?
+        "func_start": re.compile(
+            r"^[ \t]*proc[ \t\n]+([a-zA-Z0-9_:\-!?]+)(?:[ \t\n]+\{(?:[^{}]|\{(?:[^{}]|\{(?:[^{}]|\{[^{}]*\})*\})*\})*\})?(?=[ \t\n]*\{|[ \t\n]|$)",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # Captures TclOO, Snit, and Itcl class definitions.
+        # BUG FIX: Expanded name character set to include -, !, ?
+        "class_start": re.compile(
+            r"^[ \t]*(?:oo::class[ \t\n]+create|snit::type|itcl::class)[ \t\n]+([a-zA-Z0-9_:\-!?]+)(?=[ \t]*\{|[ \t\n]|$)",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        # Safe evaluation and error catching.
+        "safety": re.compile(r"\b(?:catch|try|trap|finally|info[ \t]+exists|assert)\b"),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Unrestricted evaluation and context manipulation.
+        "safety_bypasses": re.compile(r"\b(?:eval|uplevel|upvar)\b"),
+        # 8. danger (High-Risk Execution / System Calls)
+        # OS command execution and process termination.
+        "high_risk_execution": re.compile(r"\b(?:exec|exit)\b|file[ \t]+delete[ \t]+-force"),
+        # 9. io (I/O & Network Boundaries)
+        # File system, sockets, and configuration. (Excludes puts which is mapped to print_hits).
+        "io": re.compile(r"\b(?:open|close|read|gets|socket|fconfigure|file|source|vfs::)\b"),
+        # 10. api (Public Surface Area)
+        # Exposing packages or namespace exports.
+        "api": re.compile(r"^[ \t]*(?:package[ \t]+provide|namespace[ \t]+export)\b", re.M),
+        # 11. flux (State Mutation)
+        # Variable state mutations.
+        "state_mutation": re.compile(
+            r"\b(?:set|lappend|dict[ \t]+set|array[ \t]+set|incr|append)\b[ \t]+[a-zA-Z0-9_:]+"
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # Commented out structural code.
+        "dead_code": re.compile(r"^[ \t]*#[ \t]*(?:proc|set|if|while|foreach|return)\b", re.M),
+        # 13. doc (Structured Documentation)
+        # Tcl doc blocks.
+        "doc": re.compile(r"^[ \t]*#[ \t]*@(?:param|return|brief|author)", re.M),
+        # 14. test (Testing & Assertions)
+        # *THE SQLITE MEGA-SENSOR*: Accurately maps the SQLite custom test harnesses alongside standard tcltest.
+        "test": re.compile(
+            r"\b(?:do_test|do_execsql_test|do_catchsql_test|do_eqp_test|do_ioerr_test|do_faultsim_test|test\s+[a-zA-Z0-9_-]+|tcltest::|finish_test)\b"
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency (Asynchronous Execution)
+        # Event loops, delays, and threads.
+        "concurrency": re.compile(r"\b(?:vwait|after|thread::|coroutine|yield)\b"),
+        # 16. ui_framework (UI / View Components)
+        # Tkinter/Tk graphical elements.
+        "ui_framework": re.compile(r"\b(?:button|pack|grid|place|canvas|frame|label|ttk::)\b"),
+        # 17. closures (Closures / Anonymous Functions)
+        # Tcl 8.6 anonymous functions.
+        "closures": re.compile(r"\bapply[ \t]+\{"),
+        # 18. globals (Global / Shared State)
+        # Tcl relies heavily on global imports and environment arrays.
+        # BUG FIX: `::env` starts with `::` (non-word) inside the
+        # shared `\b(...)\b` group. Real usage (`$::env(HOME)`) always
+        # precedes it with `$`, also non-word -- `\b` between two
+        # non-word chars can never fire, so `::env` never matched.
+        # Pulled out with no leading `\b` (self-delimiting on `::`).
+        "globals": re.compile(r"\bglobal\b|::env\b|upvar[ \t]+#0"),
+        # 19. decorators
+        "decorators": None,
+        # 20. generics
+        "generics": None,
+        # 21. comprehensions
+        # Tcl 8.6 list map.
+        "comprehensions": re.compile(r"\blmap\b"),
+        # 22. scientific (Numerical / Compute Libraries)
+        # Explicit math invocations via expr.
+        "scientific": re.compile(r"\b(?:expr|math::)\b|\b(?:sin|cos|tan|sqrt|exp|log|pow)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # High Cognitive Load: Intercepting variables, tracking execution, and runtime aliasing.
+        "reflection_metaprogramming": re.compile(r"\b(?:trace[ \t]+add|rename|interp[ \t]+create|interp[ \t]+alias)\b"),
+        # 24. import (Dependency Inclusions)
+        # Package and module loading.
+        "import": re.compile(r"^[ \t]*(?:package[ \t]+require|source|load)\b", re.M),
+        "dependency_injection": None,
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:package[ \t\n]+require|source|load)[ \t\n]+(?:-exact[ \t\n]+)?(?:\{?[\"']?)([^\"'\s#{}]+)",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(
+            r"^[ \t]*#[ \t]*(?:Author|Created by|Maintainer|Copyright):\s+(.*)",
+            re.I | re.M,
+        ),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # BUG FIX: confirmed O(n^2) ReDoS -- the SPEC alternative's
+        # unbounded `\d+` sits directly adjacent to the also-unbounded
+        # `[^\]]*`, whose charset fully overlaps digits. Same bug shape
+        # already found and fixed in embedded_python's and css's
+        # independent copies of this pattern. Measured ~4x runtime per
+        # doubling. Bounded `\d+` to `\d{1,10}` and `[^\]]*` to
+        # `{0,300}`.
+        "spec_exposure": re.compile(r"\[(?:[ \t]*SPEC[ \t]*-[ \t]*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        "ssr_boundaries": None,
+        # 32. events (Event Emitters / Pub-Sub)
+        # Tcl event bindings and file event handlers.
+        "events": re.compile(r"\b(?:bind|fileevent|vwait|trace[ \t]+add)\b"),
+        "macros": None,
+        "pointers": None,
+        "memory_alloc": None,
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(r"\b(?:log::log|logger::|syslog)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs) (Standard Output / Debug Prints)
+        "debug_prints": re.compile(r"\bputs\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\bexpr[ \t]+(?:int|double|wide)\("),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(?:error|exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\bafter[ \t]+[0-9]+\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~|<<|>>"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(r"\b(?:thread::mutex|thread::rwmutex|thread::cond)\b"),
+        # 45. immutability_locks (Immutability Constraints)
+        # Tcl lacks `const`, but setting a trace to prevent writes is the Tcl idiom for freezing.
+        "immutability_locks": re.compile(r"\btrace[ \t]+add[ \t]+variable[ \t]+[a-zA-Z0-9_:]+[ \t]+write\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r'\b(?:close|unset)\b|rename[ \t]+[a-zA-Z0-9_:]+[ \t]+""'),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # Internal namespaces and private `_` prefixed procs.
+        "encapsulation": re.compile(r"\bnamespace[ \t]+eval\b|^[ \t]*proc[ \t]+_[a-zA-Z0-9_:]+", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(?:bind|fileevent)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        # Using TclTest constraints to silently skip tests on certain OS environments.
+        "test_skip": re.compile(r"-constraints[ \t]+[a-zA-Z0-9_]+\b|\btestConstraint\b"),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/td.py b/gitgalaxy/standards/language_standards/languages/td.py
new file mode 100644
index 000000000..2dede961b
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/td.py
@@ -0,0 +1,39 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "LLVM TableGen",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "1.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard LLVM TableGen record definition files.
+    "extensions": [".td"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: TableGen relies entirely on its extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: LLVM/Clang core C++ source files, generated includes (.inc), and CMake configs anchoring the compiler backend.
+    "discriminators": [
+        ".td",
+        ".cpp",
+        ".h",
+        ".inc",
+        "CMakeLists.txt",
+        "LLVMBuild.txt",
+    ],
+    # EXECUTION SIGNATURES: TableGen is processed by the llvm-tblgen backend during build time; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: TableGen was built to integrate seamlessly into LLVM's C++ codebase, natively supporting '//' and '/* */' comments.
+    "lexical_family": "standard_block",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/typescript.py b/gitgalaxy/standards/language_standards/languages/typescript.py
new file mode 100644
index 000000000..30d94b12e
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/typescript.py
@@ -0,0 +1,694 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import (
+    GLOBAL_DL_FRAMEWORKS,
+    GLOBAL_FRAGILE_DEBT,
+    GLOBAL_LLM_API,
+    GLOBAL_LLM_ORCHESTRATOR,
+    GLOBAL_LLM_VECTOR_STORE,
+    GLOBAL_ML_TRADITIONAL,
+    GLOBAL_PLANNED_DEBT,
+)
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "TypeScript 6.0 / ES2026",
+        "last_updated": "2026-03-12",
+        "blueprint_version": "",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard modern suffixes, JSX variants, and ambient declaration boundaries.
+    "extensions": [
+        ".ts",
+        ".tsx",
+        ".mts",
+        ".cts",
+        ".d.ts",
+        ".d.mts",
+        ".d.cts",  # Ambient declarations
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Extensionless build/config scripts and tooling configs that are secretly pure code.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions, package manifests, and lockfiles to resolve ambiguous files.
+    "discriminators": [
+        ".ts",
+        "tsconfig.json",
+        "tslint.json",
+        "package.json",
+        "yarn.lock",
+        "pnpm-lock.yaml",
+        "deno.json",
+    ],
+    # EXECUTION SIGNATURES: Interpreters found on Line 1.
+    "shebangs": ["ts-node", "deno", "bun", "tsx"],
+    # UPGRADED: Maps to Family 1 (Standard C)
+    # Rationale: Uses '//' for line-level literature; multi-line literature
+    # (/* */) is handled by the Section 2.3.C.3 Heuristic Pass.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch (Control Flow / Branching)
+        # EXCLUDES: Exceptions (throw). Includes control flow and logical short-circuits.
+        "branch": re.compile(
+            r"\b(if|else|switch|case|default|for|while|do|catch|finally|continue|break|try)\b|&&|\|\||\?|\?\?"
+        ),
+        # 2. args (Parameters / Coupling)
+        # CRITICAL FIX: Added negative lookahead for control flow, and `[^=;{]*` to support TypeScript return types.
+        # QUADRATIC BLOWUP FIX: the bare-identifier-before-arrow branch's
+        # `[\w$]*` was unbounded. On a long line with no `=>` at all, the
+        # engine retried the greedy-then-backtrack identifier match at
+        # every starting position -- O(n^2) (same bug found and fixed in
+        # javascript's near-identical args rule). Bounded to {0,100};
+        # real identifiers never get remotely that long.
+        # #1209: parameter-list span wrapped in its own capture group in
+        # all four branches (was only reachable via group(0), the whole
+        # match including the "function"/modifier/name prefix, or for
+        # arrow functions nothing at all) so detector.py's counter
+        # isolates just the real parameter text -- the whole-match
+        # fallback overcounted every zero/one-arg signature by +1 the
+        # same way Python's did (#1199). Name groups added to branches
+        # 1/4 too, purely so existing extraction tests keep passing.
+        "args": re.compile(
+            r"function\s+(\w*)(?:[ \t\n]{0,50}<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))|"
+            r"(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))[^=;{]*=>|"
+            r"([a-zA-Z_$][\w$]{0,100})[ \t]*=>|"
+            r"^[ \t]*(?:(?:public|private|protected|static|override|abstract|readonly)[ \t]+){0,4}(?:async[ \t]+)?(?:\*[ \t]*)?(?:get\s+|set[ \t]+)?(?!(?:if|for|while|switch|catch|return|throw|new|typeof|yield|await|void)\b)(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?:[ \t\n]{0,50}<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}(\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))",
+            re.M,
+        ),
+        # 3. linear (Sequential Boundaries)
+        # Structural boundaries. EXCLUDES: Access modifiers (public/private) and Immutability (const).
+        "structural_boundaries": re.compile(
+            r"\b(var|return|class|interface|type|enum|import|export|await|satisfies|using|namespace|module|implements|extends|declare)\b|=>"
+        ),
+        # 4. func_start (Executable Logic Anchors)
+        # Captures standard functions, assignments, object properties, and class methods.
+        # Safely steps over TypeScript Generics <T> and explicit return types in the lookaheads.
+        # BUG FIX (severe ReDoS, ~4x/doubling confirmed via scaling sweep,
+        # ~1.9s at n=32000): the trailing lookahead `\s*(?:<[^>]*>)?\s*\(`
+        # (shared by the `function` branch and the class-member branch)
+        # has two adjacent unbounded `\s*` quantifiers separated by an
+        # optional group -- on a long run of pure whitespace with no `(`
+        # ever appearing (e.g. a truncated/malformed source file), the
+        # engine can partition that whitespace between the two `\s*`
+        # instances in exponentially many ways before failing. Bounded
+        # both to `[ \t\n]{0,50}` (generous for real code). Also fixed a
+        # separate, unrelated pre-existing gap found while in here: the
+        # `function` branch's `\s*\*?\s+` required a whitespace char
+        # *after* the generator `*` even when one preceded it instead
+        # (`function *gen()`, less common than `function* gen()` but
+        # valid), and rejected the zero-space `function*gen()` form
+        # entirely. Replaced with `[ \t\n*]+` (one or more of
+        # whitespace-or-star), which still requires *some* separator so
+        # it can't false-positive-match an unrelated identifier like
+        # `functionFoo()`.
+        # BUG FIX (Rule 11, nested-delimiter coverage -- this is the
+        # issue's own flagged "func_start vs generics" known ambiguity
+        # pattern, already found in C#): the flat `[^>]*` generic
+        # step-over broke on even one level of nested angle brackets in
+        # a generic constraint (`function foo<T extends Array<number>>`),
+        # a common realistic TypeScript pattern -- func_start silently
+        # failed to match the WHOLE function, not just the generic part.
+        # Widened to tolerate one level of self-nesting (non-overlapping
+        # alternatives, so no new ReDoS risk per the doc's own Rule 11
+        # example).
+        # BUG FIX (epic #813/#815): the assignment-style alternative
+        # (2nd branch below) has no way to distinguish a real arrow-
+        # function assignment (`const Foo = (a: T): T => a;`) from a
+        # function-shaped TYPE ALIAS (`type Foo = (a: T) => R;`) --
+        # both share the identical `IDENT = (...) => ...` surface shape.
+        # A type alias only *describes* a function signature; it isn't
+        # one. Fixed with a fixed-width negative lookbehind for the
+        # single-space `type ` prefix (Python's `re` doesn't support
+        # variable-width lookbehind, and real-world/formatter-produced
+        # TypeScript uses exactly one space here in the overwhelming
+        # majority of cases -- same "practical reality over perfect
+        # accuracy" tradeoff used throughout this file).
+        # BUG FIX (epic #813/#815): the same alternative also required
+        # the identifier to be followed *directly* by `=`, missing the
+        "func_start": re.compile(
+            r"(?:"
+            # =====================================================================
+            # [ THE FLOATING GENERIC SHIELD ] (Hard-learned lesson from Pathological Fuzzer)
+            # PURPOSE: In TypeScript, a function name and its generic type `<T>`
+            # can be separated by a vertical newline (e.g., `function TargetFunc \n <T>`).
+            # THE FIX: Injected `\s*` immediately before the generic step-over `(?:<[^>]*>)?`
+            # across all branches. This explicitly permits vertical spacing between
+            # the isolated function name and the generic parameters.
+            # Note: We also migrated the JS Vertical Assignment fixes here (`[ \t\n]*`).
+            # =====================================================================
+            r"\b(?:async\s+)?function[ \t\n*]+(\[[^\]]+\]|[a-zA-Z_$][\w$]*)(?=[ \t\n]{0,50}(?:<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}\()|"
+            # BUG FIX (issue #1838, P2): a constructor parameter property
+            # (`constructor(private readonly interval: number, private
+            # readonly nowFn = () => Date.now())`) puts an
+            # `IDENT = arrow` default-value shape INSIDE the enclosing,
+            # still-open parameter list -- textually indistinguishable
+            # from a real top-level/class-field `IDENT = arrow`
+            # assignment without paren-depth tracking, which this
+            # single-pass regex doesn't have. `public`/`private`/
+            # `protected`/`readonly` immediately after `,` or `(` is
+            # UNIQUE to this TS parameter-property syntax though: no
+            # other valid TypeScript construct puts one of those four
+            # contextual keywords directly after a bare `,` or `(`
+            # (they're otherwise only legal as class-member modifiers,
+            # which are never comma/paren-adjacent). Python's `re`
+            # requires fixed-width lookbehind, so this enumerates the
+            # 7 valid modifier/modifier-pair combinations x 2 preceding
+            # delimiters as 14 separate fixed-width negative lookbehinds
+            # (each individually fixed-width; stdlib `re` rejects a
+            # single lookbehind with internally-variable-length
+            # alternation) rather than one general "are we inside an
+            # unclosed paren" check.
+            r"(?:^|(?<=[^<>(,\s]))[ \t\n]*(?<!\.\.\.)\b(?<!type )"
+            r"(?<!,\spublic\s)(?<!,\sprivate\s)(?<!,\sprotected\s)(?<!,\sreadonly\s)"
+            r"(?<!,\spublic\sreadonly\s)(?<!,\sprivate\sreadonly\s)(?<!,\sprotected\sreadonly\s)"
+            r"(?<!\(public\s)(?<!\(private\s)(?<!\(protected\s)(?<!\(readonly\s)"
+            r"(?<!\(public\sreadonly\s)(?<!\(private\sreadonly\s)(?<!\(protected\sreadonly\s)"
+            r"(\[[^\]]+\]|[a-zA-Z_$][\w$]*)(?:[ \t\n]*:[ \t\n]{0,50}(?:(?!\b(?:const|let|var|return|export|import|class|private|public|protected|readonly)\b)[^=;{}]|=>){0,200})?"
+            # BUG FIX (issue #1838, R2): the arrow-body terminator only
+            # accepted a body starting with `{`/`<`/`(`/end-of-line --
+            # missed the common point-free/FP-style shape where the body
+            # is a bare call or bare identifier reference (`=>
+            # pipe(fab, ap(fa))`, `=> scheduled`, `=> this.foo()`).
+            # Widened with two more alternatives: an identifier
+            # immediately followed by `(` (an unambiguous call shape --
+            # types never call anything, so this can't collide with a
+            # function-TYPE signature's return type), and a bare
+            # lowercase-leading identifier. The bare-identifier
+            # alternative is deliberately restricted to `[a-z_]` (never
+            # `[A-Z]`) since real custom TypeScript type names are
+            # conventionally PascalCase by community/compiler-team
+            # convention -- but TS's own BUILT-IN primitive/utility type
+            # keywords (`void`, `string`, `number`, ...) are lowercase
+            # too, so a member-signature's return type (`c: (x: T) =>
+            # void;`) would otherwise false-positive as if `void` were a
+            # real function value. Blacklisted the closed, small set of
+            # TS primitive/utility type keywords to close that gap
+            # without losing the general lowercase-identifier case.
+            #
+            # BUG FIX (issue #1840): the gap between a param-list's
+            # closing `)` and the eventual `=>` (`[^=;{]*`) was unbounded
+            # in WHAT it could contain, only in how much of it -- so it
+            # happily skipped straight over an entirely unrelated,
+            # already-closed method-chain call sitting between the two,
+            # landing on a LATER arrow that has nothing to do with the
+            # assigned identifier. Real example: `const deps = (await
+            # Promise.all([...])).flatMap(o => o);` -- the outer
+            # `(await Promise.all([...]))` is a real, fully-closed
+            # parenthesized expression (not `deps`'s own parameter
+            # list), but `[^=;{]*` cheerfully consumed `.flatMap(o `
+            # -- including its OWN unrelated open paren -- to reach the
+            # `flatMap` callback's `=>`, false-matching `deps` as if it
+            # were an arrow function. A real arrow's param-list-to-`=>`
+            # gap is just an optional return-type annotation, which
+            # never legitimately contains a bare, unbalanced `(` or `)`
+            # of its own -- excluding both from the gap (`[^=;{()]*`)
+            # closes this without narrowing any genuine case (return
+            # types use `<...>` for generics, not `(...)`).
+            # BUG FIX (issue #2231): the body-start alternation had no
+            # allowance for a bare unary `!` (`const predicate = (e: T) =>
+            # !e.newDocument;`), a common negation-shorthand arrow body --
+            # rejected outright since `!` isn't `{`/`<`/`(`/end-of-line nor
+            # an identifier. Added as its own literal alternative: `!` can
+            # never start a return-type annotation, so this can't collide
+            # with the function-TYPE-signature case the rest of this
+            # alternation is busy disambiguating against.
+            # #2464: in the `IDENT = arrow` (assignment) shape, the arrow's
+            # body is always a VALUE, never a type annotation -- so `undefined`
+            # / `null` (both legal bare-value bodies, `x = () => null`, common
+            # in conditional-reassignment blocks) are NOT blacklisted here,
+            # unlike the `:`-annotated branch below where they can be a real
+            # member-signature return type. The type keywords (`void`,
+            # `string`, ...) stay excluded: they are never valid bare arrow
+            # bodies in JS/TS in either context.
+            r"(?=[ \t\n]*=[ \t\n]*(?:async\s*)?(?:<(?:[^<>]|<[^<>]*>)*>\s*)?(?:function(?:\s*\*)?\b|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)(?:[^=;{()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint)\b)[a-z_][\w$]*)|[a-zA-Z_$][\w$]*[ \t\n]*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint)\b)[a-z_][\w$]*)))|"
+            r"(?:^[ \t]*|(?<=[,{])[ \t\n]*)(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?=[ \t\n]*:[ \t\n]*(?:async\s*)?(?:<(?:[^<>]|<[^<>]*>)*>\s*)?(?:function(?:\s*\*)?\b|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)(?:[^=;{()]|\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\))*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint|undefined|null)\b)[a-z_][\w$]*)|[a-zA-Z_$][\w$]*[ \t\n]*=>[ \t\n]*(?:[{<]|\(|!|$|[a-zA-Z_$][\w$]*(?=[ \t\n]*\()|(?!(?:void|string|number|boolean|any|unknown|never|object|symbol|bigint|undefined|null)\b)[a-z_][\w$]*)))|"
+            # #1221: the trailing lookahead used to be just
+            # `(?=[ \t\n]{0,50}(?:<...>)?[ \t\n]{0,50}\()` -- proof a
+            # `(` follows, nothing more -- so any bare call statement
+            # starting a line (`next();`) false-positive-matched as a
+            # method definition, mirroring the identical javascript gap
+            # (see that file's own #1221 fix comment for the full
+            # writeup). A real call statement never carries a modifier
+            # (public/private/.../readonly), `async`, a generator `*`,
+            # or a `get`/`set` accessor keyword -- only a real
+            # signature can -- so this now splits into two mutually
+            # exclusive alternatives, mirroring java's/dart's/groovy's
+            # own #1221 fixes: (A) at least one of those prefix tokens
+            # is present -- keeps the ORIGINAL lenient bare-`(`
+            # lookahead unchanged (still needed: a legacy monolithic
+            # gauntlet, tests/extraction/test_function_extraction.py,
+            # has truncated-signature payloads like `public get
+            # TargetFunc()` that never reach a real terminator at all,
+            # the same leniency csharp/apex/groovy/dart's own
+            # zero-prefix branches still need); (B) no prefix token at
+            # all -- must fully close its (non-nested, same bound as
+            # `args`) parameter list and reach either an optional `:
+            # ReturnType` then an optional `=>` (kept only to preserve
+            # the ALREADY-documented, deliberately-NOT-fixed
+            # `describe('x', () => {` known-limitation ambiguity --
+            # see the test right below) then `{`, or a MANDATORY `:
+            # ReturnType` then `;` (interface/abstract method stubs,
+            # `TargetFunc(): void;`) -- `next();` has neither a prefix
+            # nor a reachable terminator, so it satisfies neither
+            # branch. A stub with NO explicit return type (`bar();` in
+            # an interface, valid but rarer/atypical TS style) is a
+            # known, accepted gap of this same trade-off --
+            # indistinguishable from `next();` without scope-awareness
+            # this engine doesn't have.
+            # NOT FIXED (issue #1838, P1 -- ruled out, left as-is on
+            # purpose): `protected abstract createReferencedObject(...): T;`
+            # has no implementation by TypeScript's own grammar (abstract
+            # methods can never carry a body), and tree-sitter itself
+            # parses it as a distinct `abstract_method_signature` node --
+            # not `method_definition`/`method_signature` -- so the
+            # tree-sitter-accuracy audit never counts it as ground truth,
+            # making this branch's match look like a false positive there.
+            # An earlier attempt excluded `abstract`-prefixed signatures
+            # from this branch entirely to chase that number, but
+            # `tests/extraction/languages/test_typescript.py`'s own
+            # `func_start` gauntlet has an explicit, intentional valid
+            # case for exactly this shape (`abstract TargetFunc(): void;`
+            # inside `abstract class Foo`) -- GitGalaxy's structural-
+            # signature counting is deliberately broader than tree-sitter's
+            # AST node taxonomy here (an abstract method declaration is
+            # still a real structural unit worth a branch/io/complexity
+            # signal, even with no body of its own), and the gauntlet is
+            # this file's authoritative correctness spec, not the
+            # tree-sitter diff. Fixing "for tree-sitter" would have broken
+            # a real, already-agreed-on test. Left unmatched-by-design;
+            # the audit's own extra_functions number for this case is a
+            # known, accepted tool-methodology mismatch, not a GitGalaxy bug.
+            # BUG FIX (Rule 14, ReDoS -- confirmed ~O(n^2), 4.1s at
+            # n=16000 pure trailing-whitespace payload): branch B's two
+            # `[ \t\n]*` after `\)` and after the optional `:Type`
+            # annotation are adjacent unbounded quantifiers separated
+            # only by an optional group that can match zero-width (the
+            # exact Rule 14 shape this file's own comment elsewhere
+            # warns about), so a payload with a huge trailing
+            # whitespace run and no real terminator lets the engine
+            # partition it between the two quantifiers in O(n^2) ways
+            # before failing. Bounded both (and the `=>`-tolerance
+            # group's own trailing run) to `{0,50}`, matching this
+            # same regex's existing bound for the generic-skip
+            # whitespace immediately to their left.
+            r"^[ \t]*(?:"
+            r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){1,4}(?:async[ \t\n]+)?(?:\*[ \t\n]*)?(?:get\s+|set\s+)?"
+            r"|"
+            r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){0,4}async[ \t\n]+(?:\*[ \t\n]*)?(?:get\s+|set\s+)?"
+            r"|"
+            r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){0,4}(?:async[ \t\n]+)?\*[ \t\n]*(?:get\s+|set\s+)?"
+            r"|"
+            r"(?:(?:public|private|protected|static|override|abstract|readonly)[ \t\n]+){0,4}(?:async[ \t\n]+)?(?:\*[ \t\n]*)?(?:get\s+|set\s+)"
+            r")"
+            # BUG FIX (issue #2232): no allowance for TypeScript's optional-
+            # member `?` (`copy?(source: Uri): void;`) between the name and
+            # the parameter list -- `\??` inserted as the very first token
+            # of the lookahead, directly against the name capture with zero
+            # whitespace tolerance before it, so it only fires for the real
+            # zero-space `name?(` adjacency the syntax requires (a spaced
+            # ternary like `isEnabled ? (a + b)` can't satisfy it: the `?`
+            # isn't immediately adjacent to the name, so `\??` matches
+            # zero-width here and the mandatory `\(` lookahead then fails
+            # against the literal `?` still sitting in the way).
+            # BUG FIX (issue #2276): `catch`/`return`/`throw` used to be
+            # unconditionally excluded here to stop `} catch (e) {`
+            # control-flow blocks (and ordinary `return`/`throw`
+            # statements) from being misidentified as method
+            # definitions -- but that also permanently hid a REAL method
+            # or property legitimately named `catch`/`return`/`throw`
+            # (a Promise-like thenable's `catch<T>()`, an AsyncIterator
+            # protocol's `return()`). Moved to a CONDITIONAL exclusion:
+            # only excluded when immediately followed by whitespace then
+            # `(`/`<` -- idiomatic control-flow/statement syntax always
+            # has that shape (`catch (e)`, `return <expr`), while a real
+            # method/property definition never does (`catch<T>(...)`,
+            # `catch(...)`, `return: () => {...}`). Confirmed via direct
+            # testing that `} catch (e) {` still correctly does NOT
+            # match, while `catch<TResult = never>(...)` and
+            # `return: () => {...}` now do.
+            r"(?!(?:class|interface|enum|if|for|while|switch|new|typeof|jQuery|function|yield|await|void)\b|type\b(?![ \t\n]*\()|\$|(?:catch|return|throw)\b[ \t\n]+(?:\(|<))(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?=\??[ \t\n]{0,50}(?:<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}\()"
+            r"|"
+            # BUG FIX (R3): The arrow-value (Branch 5 / standalone value) branch
+            # is known to fail on mid-statement function values (e.g. `const a = b || () => {}`)
+            # because the `^[ \t]*` anchor enforces it must be the start of a line. We cannot
+            # easily fix this without massive ReDoS or losing precision.
+            # Mid-statement function values cannot be reliably matched without a full AST.
+            # BUG FIX (epic #1261 / issue #1630): the zero-prefix branch's
+            # parameter-list terminator used a FLAT `\([^)]*\)` character class,
+            # which cannot represent even one level of nested parens. Any
+            # callback-typed parameter (`onDisconnect: () => void`, `handler:
+            # (...args: any[]) => void`) has an inner `()`, so the class stopped
+            # at the first inner `)`, the terminator lookahead then failed to find
+            # its `{`/`;`/`:` anchor, and the WHOLE signature -- constructor or
+            # method -- silently stopped matching (regex-level non-match, not just a
+            # misrecord). Replaced with the bounded one-level-nesting form
+            # `\((?:[^()]|\([^()]*\))*\)` -- same Rule 11 shape the generic
+            # step-over already uses (`(?:[^<>]|<[^<>]*>)*`), linear because the
+            # two alternatives never match overlapping text.
+            # BUG FIX (issue #1838, R1): one level of nesting still wasn't
+            # enough -- a callback-typed parameter can itself contain a
+            # parenthesized sub-expression (nesting depth 2 from the outer
+            # list-paren), e.g. `appendPlaceholder(value: string | ((snippet:
+            # SnippetString) => any), number?: number): SnippetString;`
+            # (`vscode/vscode.d.ts:4180`). Recursed the same non-overlapping
+            # idiom one level deeper: `\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)`.
+            # Still linear (each level's alternatives don't overlap the level
+            # above it), same Rule 11 reasoning, just applied twice.
+            #
+            # NOTE: an earlier version of this fix ALSO added a `constructor`-
+            # specific bare-`;` terminator alternative here, on the theory that
+            # bodyless ambient/overload constructors (`constructor(...);` with
+            # no return-type annotation) were a real recall gap. That was
+            # wrong: `tests/tools/tree_sitter_accuracy_audit.py`'s own ground
+            # truth (search "Intentional drop of bodyless constructors")
+            # deliberately excludes exactly this node shape (`method_signature`/
+            # `function_signature` named "constructor") from what counts as a
+            # real function -- so matching it only manufactured new false
+            # positives across every `.d.ts`-style declaration file in the
+            # corpus (confirmed: reverting this addition alone dropped
+            # `extra_functions` by dozens on the pinned corpus). Left
+            # unmatched, on purpose -- see issue #1838's discussion for the
+            # full trace.
+            # BUG FIX (issue #2232): same `\??` insertion as Branch A above
+            # -- this zero-prefix branch is exactly where GitGalaxy misses
+            # `.d.ts`-style optional interface method signatures like
+            # `copy?(source: Uri): void;`, since interface members carry no
+            # public/private/etc. modifier to route them through Branch A
+            # instead. Same zero-whitespace-before-`?` placement, same
+            # ternary-collision reasoning.
+            # BUG FIX (issue #2279): Split the zero-prefix branch to safely
+            # allow bodyless constructors. If we make the return type
+            # optional for ALL identifiers here, it falsely matches bare
+            # function calls (like `next();`) because they also end in
+            # `;`. By strictly requiring `constructor` for the
+            # optional-return-type case, we match ambient
+            # `constructor(x: number);` without breaking function calls.
+            r"(?:^[ \t]*|(?<=[,{])[ \t\n]*)(\bconstructor\b)(?=\??[ \t\n]{0,50}(?:<(?:[^<>]|<[^<>]*>)*>)?[ \t\n]{0,50}\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)[ \t\n]{0,50}(?:(?::[^{;]{0,200})?[ \t\n]{0,50}(?:=>[ \t\n]{0,50})?\{|[ \t\n]{0,50};))"
+            r"|"
+            # BUG FIX (issue #2276): same conditional-exclusion fix as
+            # Branch A above, mirrored here since this branch carries
+            # its own copy of the same reserved-keyword shield -- see
+            # that branch's comment for the full rationale. Combined
+            # with #2277's widened anchor and #2279's `constructor`
+            # split (above) during merge conflicts between all three --
+            # every change applies to the same branch, independently of
+            # the others, so `constructor` is added to this branch's own
+            # exclusion list (it's handled by its own alternative above)
+            # alongside the catch/return/throw conditional exclusion.
+            # #2464: the generic step-over here is `=>`-tolerant (`=>` and a
+            # lone `=` are explicit tokens, `>` closes only when not part of
+            # `=>`) so a bodyless overload signature whose type-parameter list
+            # itself contains a function type -- `createInstance<Ctor extends
+            # new (...args: any[]) => unknown, R extends InstanceType<Ctor>>
+            # (...): R;` (vscode/instantiationService.ts:117) -- is matched
+            # rather than truncated at the `>` of `=>`. Alternatives stay
+            # mutually exclusive on their first char (`=>` vs `=(?!>)` vs
+            # `[^<>=]` vs `<`), so still linear (Rule 11). The mandatory
+            # `:Type;` / `{` terminator below keeps a bare generic call
+            # statement (`useCallback<() => void>(cb);`) from matching.
+            r"(?:^[ \t]*|(?<=[,{])[ \t\n]*)(?!(?:class|interface|enum|if|for|while|switch|new|typeof|jQuery|function|yield|await|void|constructor)\b|type\b(?![ \t\n]*\()|\$|(?:catch|return|throw)\b[ \t\n]+(?:\(|<))(\[[^\]]+\]|[#]?[a-zA-Z_$][\w$]*)(?=\??[ \t\n]{0,50}(?:<(?:=>|=(?!>)|[^<>=]|<(?:=>|=(?!>)|[^<>=])*>)*>)?[ \t\n]{0,50}\((?:[^()]|\((?:[^()]|\([^()]*\))*\))*\)[ \t\n]{0,50}(?:(?::[^{;]{0,200})?[ \t\n]{0,50}(?:=>[ \t\n]{0,50})?\{|:[^{;]{0,200}[ \t\n]{0,50};))"
+            r")",
+            re.M,
+        ),
+        # 5. class_start (Object / Entity Declarations)
+        # =====================================================================
+        # [ THE VERTICAL MODIFIER SHIELD (TYPESCRIPT) ]
+        # TypeScript allows modifiers like `export`, `default`, and `abstract`
+        # to appear in various orders and across multiple lines.
+        # FIX: Grouped the modifiers into a flexible, bounded set `(?:(?:export|default|abstract|declare)[ \t\n]+){0,4}`.
+        # Upgraded all internal spaces to `[ \t\n]+` to seamlessly leap over vertical gaps.
+        # =====================================================================
+        # BUG FIX: the extends/implements capture required whitespace
+        # immediately after the class-name capture, but a generic class
+        # declaration (`class Foo<T> extends Bar<T>`) has `<T>` there
+        # instead -- the optional extends/implements group silently never
+        # fired for any generic class, a very common TypeScript pattern.
+        # Added an optional `<...>` step-over between the name and the
+        # extends/implements check.
+        # BUG FIX (Rule 11, epic #813/#815): that step-over was flat
+        # (`<[^>]*>`), which truncates at the FIRST `>` -- a one-level-
+        # nested generic bound (`class Foo<T extends Comparable<T>>
+        # extends Bar {`, a common realistic pattern) left a stray `>`
+        # unconsumed right before the real `extends` clause, silently
+        # losing the entire extends/implements capture (group 2) even
+        # though the class NAME itself still matched fine. Widened to
+        # the established one-level-nesting idiom used elsewhere in
+        # this file.
+        # BUG FIX (#1348): the modifier group was missing `const`, so
+        # TypeScript's compile-time-only `const enum Foo {` / `export
+        # const enum Foo {` form (common in vscode/assemblyscript/the
+        # typescript compiler itself) never matched at all -- `const`
+        # isn't a recognized modifier and isn't the mandatory
+        # `class|enum|interface` keyword either, so the whole rule
+        # failed to fire. Adding `const` here can't introduce new false
+        # matches on unrelated `const x = ...` statements: the entity
+        # keyword is still mandatory immediately after the modifier
+        # run, so a plain `const` declaration (no literal `class`/
+        # `enum`/`interface` token following) still doesn't match.
+        "class_start": re.compile(
+            r"^[ \t]*(?:(?:export|default|abstract|declare|const)[ \t\n]+){0,4}(?:class|enum|interface)[ \t\n]+([a-zA-Z_$][\w$]*)(?:[ \t\n]*<(?:[^<>]|<[^<>]*>)*>)?(?:[ \t\n]+(?:extends|implements)[ \t\n]+([a-zA-Z_$][\w_$, \t\n]*))?",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety (Defensive Programming / Validation)
+        "safety": re.compile(
+            r"\b(try|catch|finally|satisfies|unknown|never|void|Object\.freeze|z\.(?:string|object|parse)|v\.(?:string|parse))\b|\?\?|\?\.|\b(?:is|asserts)\s+\w+\b"
+        ),
+        # 7. safety_neg (Safety Bypasses / Unchecked Types)
+        # Force unwrapping, any, and linter bypasses.
+        "safety_bypasses": re.compile(
+            r"\b(any)\b|as\s+any|!\s*[;,\n)\]\.]|!\.|@ts-ignore|@ts-expect-error|@ts-nocheck|eslint-disable|as\s+unknown\s+as|<any>"
+        ),
+        # 8. danger (High-Risk Execution / System Calls)
+        # Process killers and catastrophic vulnerabilities. EXCLUDES TODO (debt) and console.log (print).
+        "high_risk_execution": re.compile(
+            r"\b(eval|document\.write|innerHTML|outerHTML|dangerouslySetInnerHTML|debugger|alert|process\.exit)\b"
+        ),
+        # 9. io (I/O & Network Boundaries)
+        "io": re.compile(
+            r"\b(fetch|axios|http|https|fs|path|database|sql|localStorage|sessionStorage|indexedDB|document\.cookie|XMLHttpRequest|child_process|fs/promises)\b"
+        ),
+        # 10. api (Public Surface Area)
+        # Captures explicit exports and public visibility.
+        "api": re.compile(
+            r"\b(export|public|module\.exports|exports\.)\b|@(Controller|Resolver|Get|Post|Put|Delete)\b"
+        ),
+        # 11. flux (State Mutation)
+        # Mutation of state. EXCLUDES const (freeze_hits).
+        # BUG FIX: `.current =`, `.set(`, `.delete(`, and `.add(` shared a
+        # trailing `\b` with word-ending siblings (push/pop/...), but all
+        # four end in `(` or `=` (non-word) -- `\b` right after can only
+        # fire if the next char happens to be a word character, never true
+        # for the realistic forms (`myRef.current = value` -- space after
+        # `=`; `myMap.set('key', v)` -- quote after `(`). These four are
+        # already self-delimited by their leading `.`, so pulled out of
+        # the shared boundary group entirely.
+        "state_mutation": re.compile(
+            r"\b(?:let|var|this\.|setState|push|pop|shift|unshift|splice|sort|reverse)\b"
+            r"|\.current[ \t]*=|\.set\(|\.delete\(|\.add\("
+        ),
+        # 12. dead_code (Commented Logic / Deprecated Trails)
+        # BUG FIX (Engine Rule 12, Comment-Style Completeness): typescript
+        # is `standard_block` (both `//` and `/* */` are real comment
+        # styles), but this only ever checked `//` -- a block-commented-out
+        # function/class (`/* function foo() {} */`) was invisible.
+        "dead_code": re.compile(r"(?://|/\*)[ \t]*(?:if|for|while|function|class|return|export|import)\b"),
+        # 13. doc (Structured Documentation)
+        "doc": re.compile(r"/\*\*|@param|@return|@throws|@deprecated|@typedef|@type|@template|@callback"),
+        # 14. test (Testing & Assertions)
+        # CRITICAL FIX: Negative lookbehind (?<!\.) prevents matching 'regex.test()' as an assertion.
+        "test": re.compile(
+            r"\b(?:describe|expect|beforeEach|afterEach|jest|vitest|playwright)\s*\(|(?<!\.)\b(?:it|test|assert)\s*\("
+        ),
+        # --- PHASE 3: SPECIALIZED SENSORS (Architecture & Hidden Complexity) ---
+        # 15. concurrency (Asynchronous Execution)
+        "concurrency": re.compile(
+            r"\b(async|await|Promise|requestAnimationFrame|setImmediate|setTimeout|setInterval|Worker|postMessage|Observable|Subject|Subscription)\b"
+        ),
+        # 16. ui_framework (UI / View Components)
+        "ui_framework": re.compile(
+            r'<[A-Z]\w+|className=|use(?:State|Effect|Context|Reducer|Ref|Memo|Callback|Transition|Id)|props\.|this\.state|@Component|@Injectable|document\.(?:getElementById|querySelector)|["\']use\s+(?:client|server)["\']'
+        ),
+        # 17. closures (Closures / Anonymous Functions)
+        "closures": re.compile(r"=>[ \t]*\{|\(\)[ \t]*=>|function\s*\([^)]*\)[ \t]*\{"),
+        # 18. globals (Global / Shared State)
+        "globals": re.compile(r"\b(window\.|global\.|process\.env|document\.|navigator\.|self\.|globalThis\.)\b"),
+        # 19. decorators (Decorators / Annotations)
+        "decorators": re.compile(r"@\w+(?:\([^)]*\))?"),
+        # 20. generics (Generics / Type Parameters)
+        "generics": re.compile(
+            r"<\s*[A-Z][^>]*>|\b(?:keyof|infer|extends|Omit|Pick|Partial|Record|Required|Awaited|ReturnType|Parameters|NonNullable)\b"
+        ),
+        # 21. comprehensions (Iterators / Comprehensions)
+        "comprehensions": re.compile(r"\.(?:map|filter|reduce|flatMap|some|every|find|forEach|groupBy)\s*\("),
+        # 22. scientific (Numerical / Compute Libraries)
+        "scientific": re.compile(r"\b(Math\.|tf\.|THREE\.|d3\.|gl-matrix|random)\b"),
+        # 23. heat_triggers (Metaprogramming & Reflection)
+        # BUG FIX: `.bind(`, `.call(`, `.apply(` shared a trailing `\b`
+        # with word-ending siblings, but end in a literal `(` -- broke
+        # on the truly-empty-argument call form (`foo.bind()`), where
+        # the next char after `(` is `)`, not a word char. Already
+        # self-delimited by their leading `.`; pulled out of the group.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:arguments\.|prototype|__proto__|Object\.assign|Reflect|Proxy|Object\.defineProperty)\b"
+            r"|\.bind\(|\.call\(|\.apply\("
+        ),
+        # --- AI & LLM SDK SENSORS (GLOBAL_, see #322) ---
+        "llm_api": GLOBAL_LLM_API,
+        "llm_orchestrator": GLOBAL_LLM_ORCHESTRATOR,
+        "llm_vector_store": GLOBAL_LLM_VECTOR_STORE,
+        "ml_traditional": GLOBAL_ML_TRADITIONAL,
+        "dl_frameworks": GLOBAL_DL_FRAMEWORKS,
+        # 24. import (Dependency Inclusions)
+        "import": re.compile(
+            r"\b(?:import(?:\s+type)?|export(?:\s+type)?)\b[^;]*?\bfrom\b|\brequire\s*\(|\bimport\s*\(",
+            re.M,
+        ),
+        "_dependency_capture": re.compile(
+            # =====================================================================
+            # [ FUTURE LLM CONTEXT: THE DYNAMIC EXECUTION SHIFT (TYPESCRIPT) ]
+            # PURPOSE: Extracts external dependencies for the Network Graph and Supply Chain Firewall.
+            #
+            # HISTORICAL BUG: Originally, this regex was anchored to the start of the
+            # line `^[ \t]*`. While this perfectly prevented the engine from hallucinating
+            # commented-out imports (`// import { x }`), it completely blinded the firewall
+            # to dynamic/inline execution. If an attacker tucked an import inside a function
+            # (e.g., `const payload = require('malware')` or `await import('trojan')`),
+            # it sailed right past the sensors.
+            #
+            # THE FIX: The `^` anchor has been stripped. We now rely on the `\b` word
+            # boundary to find the keywords anywhere in the file. (Note: The engine's
+            # optical comment-stripper runs BEFORE this regex, naturally preventing the
+            # commented-out hallucination issue without needing strict line anchors).
+            #
+            # [ THE VERTICAL DESTRUCTURING SHIELD ]
+            # We retain `[ \t\n]+` to safely leap across massive vertical multi-line
+            # destructured imports: `import type \n { \n ASTNode \n } \n from`
+            #
+            # BUG FIX (epic #813/#815): side-effect-only imports
+            # (`import "./styles.css";`, extremely common for CSS/
+            # polyfill imports) have no `from` keyword and no parens at
+            # all -- neither of the two alternatives above matched them.
+            # Added a third alternative for bare `import "path";`.
+            # =====================================================================
+            r"\b(?:import(?:[ \t\n]+type)?|export(?:[ \t\n]+type)?)\b[^;]*?\bfrom[ \t\n]*['\"]([^'\"]+)['\"]|\b(?:require|import)[ \t\n]*\([ \t\n]*['\"]([^'\"]+)['\"]|\bimport[ \t\n]*['\"]([^'\"]+)['\"]",
+            re.M,
+        ),
+        "_named_token_capture": re.compile(
+            r"(?:import(?:[ \t\n]+type)?|export(?:[ \t\n]+type)?)\s+\{([^}]+)\}",
+            re.M,
+        ),
+        # 25. ownership (Authorship Metadata)
+        "ownership": re.compile(r"(?:@author|Created by)\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure (Spec / Audit Traceability)
+        # BUG FIX: adjacent unbounded quantifiers with overlapping
+        # character sets (`\d+` next to `[^\]]*`) -- the same ReDoS
+        # shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, and scheme earlier in this
+        # epic. Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        # 31. ssr_boundaries (Server-Side Rendering)
+        "ssr_boundaries": re.compile(
+            r"\b(getServerSideProps|getStaticProps|generateStaticParams|LoaderFunction|ActionFunction)\b"
+        ),
+        # 32. events (Event Emitters / Pub-Sub)
+        "events": re.compile(r"\b(emit|on|once|off|dispatchEvent|EventEmitter|EventTarget)\b"),
+        # 33. dependency_injection (Dependency Injection / IoC)
+        "dependency_injection": re.compile(r"\b(Inject|Injectable|Container|resolve|register|tsyringe|inversify)\b"),
+        # 34. macros
+        "macros": None,  # TypeScript uses transformer plugins/pre-processors, not standard inline macros.
+        # 35. pointers
+        "pointers": None,  # Managed memory environment.
+        # 36. memory_alloc
+        "memory_alloc": re.compile(r"\bnew\s+[A-Z]\w*"),
+        # 37. inline_asm
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry (Structured Logging / Telemetry)
+        "telemetry": re.compile(
+            r"\b(logger|winston|pino|morgan|datadog|prometheus|newrelic|sentry)\.(?:info|error|warn|debug|trace|log)\b"
+        ),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs)
+        "debug_prints": re.compile(r"\bconsole\.(?:log|warn|error|dir|trace|info|table|time)\b"),
+        # # 40. explicit_casts (Explicit Type Casting)
+        "explicit_casts": re.compile(r"\bas\s+[A-Z]\w*|<\s*[A-Z]\w*\s*>\s*[a-zA-Z_]"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts)
+        "panics_and_aborts": re.compile(r"\b(throw|fatalError|abort|process\.exit)\b"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses)
+        "thread_sleeps": re.compile(r"\b(sleep|delay|setTimeout|setInterval|Atomics\.wait)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability)
+        "sync_locks": re.compile(
+            r"\b(mutex|lock|synchronized|Semaphore|Atomics\.lock|Atomics\.wait)\b",
+            re.I,
+        ),
+        # 45. immutability_locks (Immutability Constraints)
+        "immutability_locks": re.compile(r"\b(const|readonly|final|Object\.freeze|Object\.seal)\b"),
+        # 46. cleanup (Resource Cleanup / Teardown)
+        "cleanup": re.compile(r"\b(dispose|close|destroy|clearTimeout|clearInterval|removeEventListener|delete)\b"),
+        # 47. encapsulation (Access Modifiers / Encapsulation)
+        # `#` needed its own un-bounded branch: \b#\b can only match when
+        # `#` is directly sandwiched between two word characters with no
+        # separator (e.g. "x#y"), which never happens in real private-
+        # field syntax (`#foo` is always preceded by `{`, whitespace, or
+        # `.` -- never a bare word char) -- so the `#` alternative was
+        # completely unreachable, same bug as javascript's copy of this.
+        "encapsulation": re.compile(r"\b(private|protected|internal)\b|#[a-zA-Z_$]"),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": re.compile(r"\b(on|addEventListener|subscribe|watch|effect)\b"),
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(test\.skip|it\.skip|describe\.skip|xit|xdescribe|mock|stub)\b"),
+        # --- NEW: ADVANCED ALGORITHMIC SENSORS ---
+        # BUG FIX: `function\s*\*` shared a trailing `\b` with word-ending
+        # siblings, but ends in a literal `*` -- `\b` right after can only
+        # fire if the next char is a word character, never true for the
+        # canonical `function* foo()` generator syntax (space after the
+        # `*`). Unlike the co-located `yield\s*\*` (silently shadowed by
+        # the bare `yield` alternative earlier in the same group, so it
+        # happened to still "work"), nothing else in this pattern covers
+        # bare `function*` generator declarations -- a genuine, unmasked
+        # false negative. Pulled both out of the shared boundary group.
+        "lazy_evaluation": re.compile(
+            r"\byield\b|yield\s*\*|function\s*\*|\b(?:Generator|AsyncGenerator|Iterable|AsyncIterable)\b"
+        ),
+        "vectorized_math": re.compile(r"\b(matmul|dot|cross|multiply)\s*\("),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (JS/TS Specifics) ---
+        "serialization_parsing": re.compile(r"\b(JSON\.parse|JSON\.stringify)\b"),
+        "regex_execution": re.compile(r"\bnew\s+RegExp\b|\.(match|replace|search|split)\s*\("),
+        "time_date_logic": re.compile(
+            r"\b(Date\.now|new\s+Date|setTimeout|setInterval|clearTimeout|clearInterval|performance\.now)\b"
+        ),
+        "ipc_rpc_bridges": re.compile(r"\b(postMessage|Worker|MessageChannel|child_process|worker_threads|cluster)\b"),
+        # --- PHASE 4: APPSEC & AI SENSORS (Zero-Trust Pipelines) ---
+        "rce_funnel": re.compile(r"child_process\.(?:spawn|exec|execSync)\s*\(\s*['\"](?:python|bash|sh|bun|node)\b"),
+        # BUG FIX (Rule 11, nested-delimiter coverage): the flat `[^)]*`
+        # broke on one level of nested parens before the camouflage
+        # keyword -- e.g. a URL built via a helper call
+        # (`fetch(buildUrl("x"), {telemetry: payload})`), a realistic
+        # evasion shape for exactly the kind of disguised-exfiltration
+        # traffic this security-relevant rule exists to catch. Widened
+        # to tolerate one level of self-nesting.
+        "exfiltration_camouflage": re.compile(
+            r"\b(fetch|axios\.post|https\.request)\s*\((?:[^()]|\([^()]*\))*(?:checkmarx|telemetry|metrics|audit|log)\b",
+            re.I,
+        ),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/xml.py b/gitgalaxy/standards/language_standards/languages/xml.py
new file mode 100644
index 000000000..f6139f200
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/xml.py
@@ -0,0 +1,43 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+from typing import Any
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Standard XML 1.0 / UI Layouts",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard data, schemas, stylesheets, vector graphics, Apple UI, and config files.
+    "extensions": [
+        ".xml",
+        ".xsd",
+        ".xsl",
+        ".xslt",
+        ".svg",
+        ".storyboard",
+        ".xib",
+        ".plist",
+        ".wsdl",
+        ".config",
+        ".jelly",
+    ],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Universally recognized XML architectural and build manifests.
+    "exact_matches": ["pom.xml", "build.xml", "AndroidManifest.xml", "phpunit.xml"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Primary sibling extensions to anchor standard data serialization and frameworks.
+    "discriminators": [".xml", ".xsd", ".xsl", "pom.xml", "build.xml"],
+    # EXECUTION SIGNATURES: XML is declarative data/markup; no shebangs exist.
+    "shebangs": [],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: (CORRECTION) Consolidated 'xml_angle' into 'singular'. Like HTML, XML
+    # exclusively uses SGML-style block delimiters () for its Commented / Non-Executable Text.
+    "lexical_family": "block_exclusive",
+    "rules": {},
+}
diff --git a/gitgalaxy/standards/language_standards/languages/yacc.py b/gitgalaxy/standards/language_standards/languages/yacc.py
new file mode 100644
index 000000000..e113a232b
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/yacc.py
@@ -0,0 +1,129 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "GNU Bison / Yacc / Flex",
+        "last_updated": "2026-03-11",
+        "blueprint_version": "v5.1",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Yacc/Bison parser grammars (.y) and Lex/Flex tokenizers (.l), plus their C++ variants (.ypp, .lpp).
+    "extensions": [".y", ".yy", ".ypp", ".l", ".ll", ".lpp"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: Parser generators rely strictly on extensions.
+    "exact_matches": [],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: The generated C/C++ outputs and standard build systems acting as disambiguation anchors.
+    "discriminators": [
+        ".c",
+        ".cpp",
+        ".h",
+        "Makefile",
+        "CMakeLists.txt",
+        "configure.ac",
+    ],
+    # EXECUTION SIGNATURES: Grammars are compiled into C/C++ state machines; no shebangs exist.
+    "shebangs": [],
+    # INTERNAL DISCRIMINATOR (Collision Resolution Only): `.y`/`.yy`/`.ypp` (and the lex
+    # `.l` family) collide with C -- the C-action blocks in a real grammar routinely
+    # out-mass the grammar itself, so a plain lexical density scan misclassifies
+    # action-heavy grammars as `c` (confirmed: freebsd's config.y). These line-start
+    # markers are definitive yacc/bison/lex syntax that no plain C file ever contains:
+    # the `%{`/`%}` prologue delimiters, the `%%` section separator, and the `%token`/
+    # `%union`/... declaration keywords. Matches the same collision-resolution role
+    # objective-c/matlab already use for `.m`.
+    "internal_discriminator": re.compile(
+        r"^%\{|^%\}|^%%[ \t]*(?:$|/[/*])"
+        r"|^%(?:token|type|union|left|right|nonassoc|precedence|start|prec|expect(?:-rr)?"
+        r"|define|code|option|name-prefix|pure-parser|glr-parser|parse-param|lex-param"
+        r"|require|language|locations|destructor|printer|initial-action|empty)\b",
+        re.M,
+    ),
+    # UPGRADED: Maps to Family 1 (Standard C-Style)
+    # Rationale: Yacc and Lex files interleave grammar definitions with pure C/C++ code
+    # blocks (enclosed in %{ %}), relying entirely on standard '/* */' and '//' comments.
+    "lexical_family": "standard_block",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        "branch": re.compile(r"\b(if|else|switch|case|for|while|do)\b|\|"),
+        "args": re.compile(r"(?<!\$)\$(?:<[a-zA-Z_]\w*>)?(?:-?\d+|\$)(?!\$|\w)"),
+        "structural_boundaries": re.compile(
+            r"\b(return|goto|break|continue)\b|%token\b|%type\b|%left\b|%right\b|%nonassoc\b"
+        ),
+        # Executable Logic Anchor: Anchors specifically onto Grammar Rules
+        # Matches "rule_name :" or "rule_name:" at the start of a line.
+        # Excludes C/C++ constructs that share the identical "identifier:" shape
+        # (switch-case default labels, C++ access specifiers in embedded .ypp code).
+        "func_start": re.compile(
+            r"^[ \t]*(?!(?:case|default|public|private|protected)\b)([a-zA-Z_]\w*)(?=(?:[ \t\n]|/\*(?:[^*]|\*[^/])*\*/|//[^\n]*)*:)",
+            re.M,
+        ),
+        "class_start": None,
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        "safety": re.compile(r"\b(assert|YYABORT|YYACCEPT|YYERROR)\b"),
+        "safety_bypasses": re.compile(r"\bgoto\b|\bvoid\s*\*"),
+        "high_risk_execution": re.compile(r"\b(abort|exit|YYNOMEM)\b"),
+        "io": re.compile(r"\b(fopen|fclose|fread|fwrite|yyin|yyout|fprintf)\b"),
+        "api": re.compile(r"%define\b|%code\b|%provides\b|%requires\b"),
+        "state_mutation": re.compile(r"(?<![=!<>])=(?![=])|\+\+|--"),
+        "dead_code": re.compile(r"//[ \t]*(?:if|for|while|return|%token)\b|/\*[ \t]*(?:if|for|while|return|%token)"),
+        "doc": re.compile(r"/\*\*|@param|@return"),
+        "test": None,
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        "concurrency": None,
+        "ui_framework": None,
+        "closures": None,
+        "globals": re.compile(r"\b(yylval|yylloc|yynerrs|yydebug)\b"),
+        "decorators": None,
+        "generics": re.compile(r"<[a-zA-Z_][a-zA-Z0-9_]*>"),  # Captures %type <val>
+        "comprehensions": None,
+        "scientific": None,
+        "reflection_metaprogramming": re.compile(r"%\{|%\}|%%"),
+        "import": re.compile(r'^[ \t]*#(?:include)\s*[<"][^>"]+[>"]', re.M),
+        "ownership": re.compile(r"(?:@author|Author:|Created by:|Copyright)\s+(.*)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # BUG FIX (Rule 14, #713): adjacent unbounded quantifiers with
+        # overlapping character sets (`\d+` next to `[^\]]*`) -- the
+        # same ReDoS shape already found and fixed independently in
+        # embedded_python, css, tcl, matlab, scheme, typescript, rust, c,
+        # cpp, csharp, groovy, shell, and sqlite earlier in this epic.
+        # Bounded both quantifiers.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d{1,10}|spec|audit)[^\]]{0,300}\]", re.I),
+        "ssr_boundaries": None,
+        "events": None,
+        "dependency_injection": None,
+        "macros": re.compile(r"^[ \t]*#(?:define|undef|if|elif|else|endif|pragma)\b", re.M),
+        "pointers": re.compile(r"->|&\w+|(?<=[=(,])[ \t]*\*(?:\s*const\s*)?[a-zA-Z_]\w*"),
+        "memory_alloc": re.compile(r"\b(malloc|calloc|realloc|free|YYMALLOC|YYFREE)\b"),
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        "telemetry": re.compile(r"\b(?:syslog|openlog|log_info|YYDPRINTF)\b"),
+        "debug_prints": re.compile(r"\b(printf|fprintf|vprintf|puts|yyerror)\b"),
+        "explicit_casts": re.compile(
+            r"\([ \t]{0,20}(?:int|char|short|long|float|double|void|unsigned|signed|[A-Z]\w*)"
+            r"[ \t]{0,20}\*?[ \t]{0,20}\)[ \t]{0,20}[a-zA-Z_$]"
+        ),
+        "panics_and_aborts": re.compile(r"\b(abort|exit|YYABORT)\b"),
+        "thread_sleeps": None,
+        "bitwise_ops": re.compile(r"<<|>>|(?<!&)&(?!&)|(?<!\|)\|(?!\|)|\^|~"),
+        "sync_locks": None,
+        "immutability_locks": re.compile(r"\bconst\b"),
+        "cleanup": re.compile(r"\b(free|YYFREE|fclose|destroy)\b\s*\("),
+        "encapsulation": re.compile(r"^[ \t]*static\b", re.M),
+        "listeners": None,
+        "test_skip": None,
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/yaml.py b/gitgalaxy/standards/language_standards/languages/yaml.py
new file mode 100644
index 000000000..9747b8abc
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/yaml.py
@@ -0,0 +1,173 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "YAML CI/CD (GitHub Actions / GitLab CI)",
+        "status": "production",
+    },
+    "extensions": [".yml", ".yaml", ".yamllint"],
+    "exact_matches": [
+        ".prettierrc",
+        ".stylelintrc",
+        "clang-format",
+        ".clang-format",
+    ],
+    "discriminators": [
+        "docker-compose.yml",
+        ".gitlab-ci.yml",
+        "kubernetes.yaml",
+        "openapi.yaml",
+        ".github/workflows",
+    ],
+    "shebangs": [],
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        "branch": re.compile(r"\b(?:if|else|elif|fi|case|esac|for|while|do|done)\b|&&|\|\|", re.I),
+        # BUG FIX (epic #813/#843): required `with:` to be immediately followed by a newline,
+        # so a trailing same-line comment (`with: # inputs for this action`, a real authoring
+        # style) broke the match entirely -- the block's own header line has to tolerate a
+        # comment the same way a job/step name line would.
+        "args": re.compile(
+            r"^[ \t]*with:[ \t]*(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]+[a-zA-Z0-9_-]+:[ \t]*.*", re.M | re.I
+        ),
+        "structural_boundaries": re.compile(r"^[ \t]*(?:env|needs|runs-on|steps|strategy|matrix):", re.M | re.I),
+        # Executable Logic Anchors: Explicit execution blocks
+        "func_start": re.compile(
+            r"^[ \t]*(?:-?[ \t]*run:|script:|before_script:|after_script:)[ \t]*[|>]*",
+            re.M | re.I,
+        ),
+        # MISSING-DECLARATION-SHAPE FIX (epic #813/#843): the reusable-workflow-call/
+        # container-job detection required `uses:`/`image:` to be the LITERAL FIRST line
+        # after the job name -- but real jobs of this shape routinely have other keys
+        # (`needs:`, `if:`, `permissions:`, etc.) before `uses:`/`image:`, e.g.
+        # `call-workflow:\n  needs: [build]\n  uses: ./reusable.yml`. Added a bounded
+        # (max 10, to stay safely linear -- real jobs never have anywhere near that many
+        # top-level keys before uses:/image:) step-over for intervening key:value lines.
+        "class_start": re.compile(
+            r"^[ \t]*(?:jobs:|workflow_call:"
+            r"|[a-zA-Z0-9_-]+:[ \t]*(?:#.*)?\n(?:(?:[ \t]+[a-zA-Z0-9_-]+:[ \t]*.*|[ \t]*(?:#.*)?)\n){0,10}[ \t]+(?:uses|image):)",
+            re.M | re.I,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        "safety": re.compile(
+            r"^[ \t]*continue-on-error:[ \t]*false|^[ \t]*permissions:[ \t]*\n(?:[ \t]+(?:contents|id-token|actions|security-events):[ \t]*read)",
+            re.M | re.I,
+        ),
+        # Catches the classic curl-to-bash supply chain dropper inside a run block
+        "safety_bypasses": re.compile(
+            r"^[ \t]*continue-on-error:[ \t]*true|chmod[ \t]+777|\b(?:curl|wget)[ \t]+[^|\n]{1,200}\|[ \t]*(?:bash|sh|zsh)\b",
+            re.M | re.I,
+        ),
+        "high_risk_execution": re.compile(r"\brm[ \t]+-rf[ \t]+/(?![A-Za-z])|\beval\b|\bexec\b", re.M | re.I),
+        "io": re.compile(
+            r"\b(?:wget|curl|apt-get|apk|yum|git[ \t]+clone|npm[ \t]+install|pip[ \t]+install)\b",
+            re.M | re.I,
+        ),
+        # Webhook/Workflow triggers
+        "api": re.compile(
+            r"^[ \t]*on:[ \t]*(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]+(?:push|pull_request|workflow_dispatch|issues):",
+            re.M | re.I,
+        ),
+        "state_mutation": re.compile(
+            r"^[ \t]*env:[ \t]*(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]+[a-zA-Z0-9_-]+:[ \t]*.*|export[ \t]+[a-zA-Z0-9_]+[ \t]*=",
+            re.M | re.I,
+        ),
+        "dead_code": re.compile(
+            r"^[ \t]*#[ \t]*(?:-?[ \t]*run:|uses:|jobs:|steps:|script:)",
+            re.M | re.I,
+        ),
+        "doc": re.compile(r"^[ \t]*name:[ \t]+.*|^[ \t]*description:[ \t]+.*", re.M | re.I),
+        "test": re.compile(
+            r"\b(?:npm[ \t]+test|pytest|make[ \t]+test|cargo[ \t]+test|go[ \t]+test)\b",
+            re.M | re.I,
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        "concurrency": re.compile(
+            r"^[ \t]*strategy:[ \t]*\n[ \t]+matrix:|^[ \t]*concurrency:",
+            re.M | re.I,
+        ),
+        "ui_framework": None,
+        "closures": None,
+        "globals": re.compile(
+            r"\$\{\{[ \t]*(?:github|env|runner|secrets)\.[a-zA-Z0-9_]+[ \t]*\}\}|\$[A-Z_]+",
+            re.M,
+        ),
+        "decorators": None,
+        "generics": None,
+        "comprehensions": None,
+        "scientific": None,
+        # Catching complex GitHub Expression injection logic
+        "reflection_metaprogramming": re.compile(r"\$\{\{[ \t]*fromJson\(|to[A-Z][a-zA-Z]{0,40}\(", re.M),
+        # The Gravity Links: External dependencies
+        "import": re.compile(
+            r"^[ \t]*(?:-?[ \t]*uses:|image:)[ \t]*(?:(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]*)?(?:[\'\"]?[a-zA-Z0-9_./@:-]+[\'\"]?)",
+            re.M | re.I,
+        ),
+        # BUG FIX (epic #813/#843): the bare capture class required the value to start
+        # immediately with an identifier character, so a quoted `uses:`/`image:` value
+        # (`uses: "actions/checkout@v4"`, a real -- if less common -- authoring style, e.g.
+        # for YAML-lint rules that require consistent scalar quoting) never matched at all,
+        # since the leading quote character isn't in the class. Added quoted alternatives
+        # (permitting the same identifier charset inside real quotes) alongside the original
+        # bare form.
+        "_dependency_capture": re.compile(
+            r"^[ \t]*(?:-?[ \t]*uses:|image:)[ \t]*(?:(?:#.*)?\n(?:[ \t]*(?:#.*)?\n){0,10}[ \t]*)?"
+            r"(?:'([a-zA-Z0-9_./@:-]+)'|\"([a-zA-Z0-9_./@:-]+)\"|([a-zA-Z0-9_./@:-]+))",
+            re.M | re.I,
+        ),
+        "ownership": None,
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt (Annotated Debt / TODOs)
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt (Acknowledged Hacks / FIXMEs)
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        "hardcoded_secrets": re.compile(
+            r"\b(?:password|secret|token|api[_-]?key|client[_-]?secret|private[_-]?key)[ \t]*:[ \t]*[\"'][A-Za-z0-9\-_+/=]{16,}[\"']",
+            re.I,
+        ),
+        "spec_exposure": None,
+        "ssr_boundaries": None,
+        "events": re.compile(
+            r"^[ \t]*repository_dispatch:|^[ \t]*schedule:|^[ \t]*-?[ \t]*cron:",
+            re.M | re.I,
+        ),
+        # Secrets injection
+        "dependency_injection": re.compile(r"\$\{\{[ \t]*secrets\.[a-zA-Z0-9_]+[ \t]*\}\}", re.M),
+        "macros": None,
+        "pointers": None,
+        "memory_alloc": None,
+        "inline_asm": None,
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        "telemetry": re.compile(r"::(?:debug|warning|error)(?:[ \t]|::)", re.M),
+        "debug_prints": re.compile(r"\b(?:echo|printf)\b", re.I),
+        "explicit_casts": None,
+        # GitHub action specific bailout outputs
+        "panics_and_aborts": re.compile(
+            r"\b(?:exit[ \t]+[1-9]|kill[ \t]+-[0-9]+)\b|^[ \t]*::error::",
+            re.M | re.I,
+        ),
+        "thread_sleeps": re.compile(r"\bsleep[ \t]+[0-9]+\b", re.I),
+        "bitwise_ops": None,
+        "sync_locks": None,
+        # Strict SHA-1 pinning for immutable security
+        "immutability_locks": re.compile(r"@[a-f0-9]{40}\b", re.I),
+        "cleanup": None,
+        "encapsulation": None,
+        "listeners": re.compile(r"^[ \t]*webhook:", re.M | re.I),
+        "test_skip": re.compile(r"\|\|[ \t]*true\b|--passWithNoTests\b|\bskipTests\b|--no-audit\b", re.I),
+    },
+}
diff --git a/gitgalaxy/standards/language_standards/languages/zig.py b/gitgalaxy/standards/language_standards/languages/zig.py
new file mode 100644
index 000000000..7b65a9fe6
--- /dev/null
+++ b/gitgalaxy/standards/language_standards/languages/zig.py
@@ -0,0 +1,221 @@
+# ==============================================================================
+# GitGalaxy
+# Copyright (c) 2026 Joe Esquibel
+#
+# This source code is licensed under the PolyForm Noncommercial License 1.0.0.
+# You may not use this file except in compliance with the License.
+# A copy of the license can be found in the LICENSE file in the root directory
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
+# ==============================================================================
+
+import re
+from typing import Any
+
+from .._shared_patterns import GLOBAL_FRAGILE_DEBT, GLOBAL_PLANNED_DEBT
+
+DEFINITION: dict[str, Any] = {
+    "_meta": {
+        "target_version": "Zig 0.15.2 (Modern Comptime, Explicit Allocators, Error Sets)",
+        "last_updated": "2026-02-18",
+        "blueprint_version": "v5.0",
+        "status": "production",
+    },
+    # COMPREHENSIVE SURFACE AREA: Standard sources and Zig Object Notation (ZON) files which are structurally Zig AST.
+    "extensions": [".zig", ".zon"],
+    # ABSOLUTE IDENTITY & EXACT FILENAMES: The pure-code build scripts that act as the architectural anchors of a Zig project.
+    "exact_matches": ["build.zig", "build.zig.zon"],
+    # ECOSYSTEM ANCHORS & DISAMBIGUATION: Zig's build system files ensure that ambiguous contexts are locked in perfectly.
+    "discriminators": [".zig", "build.zig", "build.zig.zon"],
+    # EXECUTION SIGNATURES: Zig is compiled, but `zig run` can be invoked via shebang in scripting scenarios.
+    "shebangs": ["zig"],
+    # UPGRADED: Maps to Family 8 (Singular/Unique)
+    # Rationale: Zig intentionally omits multi-line block comments to keep parsing simple, exclusively using '//'.
+    "lexical_family": "line_exclusive",
+    "rules": {
+        # --- PHASE 1: LOGIC TOPOLOGY & STRUCTURE ---
+        # 1. branch: decisions that split flow. Includes unique 'orelse' and 'catch' patterns.
+        "branch": re.compile(
+            r"(?<!@\")\b(if|else|switch|while|for|try|catch|orelse|break|continue|return)\b(?!\")|&&|\|\|"
+        ),
+        # 2. args: Parameters / Coupling. Captures parameters in function signatures.
+        "args": re.compile(
+            r"\bfn[ \t\n]*(?:@\"[^\"]+\"|[a-zA-Z_]\w*[ \t\n]*)?\(((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*)\)"
+        ),
+        # #1645: group 1 above captures ONLY the bare inner parameter-list
+        # text -- never a self-wrapped "(...)" pair of its own (unlike
+        # python's args group, this one never shares group(0) with a
+        # "fn name(...)" prefix). Tells detector.py's args-counting to
+        # depth-count top-level commas directly over the whole captured
+        # string instead of either the naive whitespace-split fallback
+        # (which miscounts a single typed param like `self: Default` as 2
+        # tokens) or `_count_top_level_args`'s default wrapper-detection
+        # (which mistakes a param TYPE's own parens -- `ctx: @This()`,
+        # function-pointer params -- for the signature's outer wrapper and
+        # truncates/zeroes the count). See `_args_bare_body_groups` in
+        # detector.py's `_calculate_block_metrics` for the full story.
+        "_args_bare_body_groups": {1},
+        # 3. linear: Sequential I/O & Network Boundaries. Structural boundaries. EXCLUDES access modifiers and const (freeze_hits).
+        "structural_boundaries": re.compile(
+            r"(?<!@\")\b(var|return|defer|errdefer|unreachable|resume|suspend|await|nosuspend|usingnamespace)\b(?!\")"
+        ),
+        # 4. func_start: Executable Logic Anchors. Anchors logic blocks (fn). EXCLUDES struct/enum/union headers.
+        "func_start": re.compile(
+            r"^[ \t]*(?:(?:pub|export(?:[ \t]+\"(?:[^\"\\]|\\.)*\")?|extern(?:[ \t]+\"(?:[^\"\\]|\\.)*\")?|inline|noinline|callconv\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*\)|linksection\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*\)|align\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\((?:[^)(]|\([^)(]*\))*\))*\))*\))*\))[ \t\n]+)*fn[ \t\n]+(@\"(?:[^\"\\]|\\.)*\"|[a-zA-Z_]\w*)(?=[ \t\n]*\()",
+            re.M,
+        ),
+        # 5. class_start: Object / Entity Declarations. Defines structural entities (struct, enum, union, error, opaque).
+        # #1295: an optional `\(` and/or `\*` step-over added between `=`
+        # and the packed/extern modifier so two real corpus-confirmed
+        # idioms aren't missed: a parenthesized-wrapped anonymous struct
+        # (`const lenAsc = (struct { ... }).lenAsc;`, common for a
+        # struct-as-namespace immediately projecting one declaration out
+        # of itself) and a pointer-to-opaque handle type (`const HMONITOR
+        # = *opaque {};`, the standard idiom for an opaque OS handle).
+        "class_start": re.compile(
+            r"^[ \t]*(?:pub[ \t\n]+)?(?:const|var)[ \t\n]+(@\"[^\"]+\"|[a-zA-Z_]\w*)(?:(?!\b(?:const|var)\b)[^=;]){0,150}=[ \t\n]*(?:List\([ \t\n]*|\[_\][ \t\n]*|if[ \t]*\([^)]*\)[ \t\n]*|(?:[A-Za-z0-9_. \t\n]+\|\|[ \t\n]*)+|(?:\(|\*)[ \t\n]*|(?:packed|extern|inline)[ \t\n]+|align\([^)]*\)[ \t\n]+)*(?:struct|enum|union|error|opaque)(?=[ \t\n]*[{(])",
+            re.M,
+        ),
+        # --- PHASE 2: RISK & STRUCTURAL INTEGRITY ---
+        # 6. safety: Defensive Programming. Error handling, payload capturing (|val|), and debug assertions.
+        "safety": re.compile(r"\b(try|catch|orelse|errdefer|std\.debug\.assert)\b|\|[ \t]*[a-zA-Z_]\w*[ \t]*\|"),
+        # 7. safety_neg: Safety Bypasses. Bypassing safety (undefined, unreachable, raw ptr casting).
+        # BUG FIX: the 6 `@`-prefixed builtins (Zig's cast/truncate
+        # operations are all `@builtin` forms) start with a non-word
+        # char, so the shared leading \b could only fire when a word
+        # char immediately preceded the `@` -- never true for how
+        # builtins are actually written. None of the 6 ever matched.
+        "safety_bypasses": re.compile(
+            r"\b(?:undefined|unreachable)\b"
+            r"|@ptrCast|@intCast|@alignCast|@bitCast|@truncate|@enumFromInt"
+        ),
+        # 8. danger: High-Risk Execution. Forceful panics and process terminations.
+        # BUG FIX: `@panic` is `@`-prefixed -- same leading-\b bug.
+        "high_risk_execution": re.compile(r"\b(?:panic|std\.process\.exit)\b|@panic"),
+        # 9. io: I/O & Network Boundaries. Standard library IO, Network, and Filesystem interactions.
+        "io": re.compile(r"\b(std\.fs|std\.net|std\.io(?!\.getStdOut)|std\.ChildProcess|std\.posix|std\.os)\b"),
+        # 10. api: Public Surface Area. Exposed boundaries via 'pub' and 'export' (C ABI).
+        "api": re.compile(r"\b(pub|export)\b"),
+        # 11. flux: State Mutation. State mutation (var) and pointer dereference assignments (.* =).
+        "state_mutation": re.compile(r"\bvar\b|\.\*[ \t]*=[^=]"),
+        # 12. dead_code (Commented Logic / Deprecated Trails) Commented out structural code.
+        "dead_code": re.compile(r"//[ \t]*(?:fn|const|var|pub|if|for|while|try|catch)\b"),
+        # 13. doc: Structured Documentation. Structured documentation (/// and //!).
+        "doc": re.compile(r"///|//!"),
+        # 14. test: Testing & Assertions. Native test framework blocks.
+        # BUG FIX: `test\s+"[^"]*"` ended on `"`, inside the shared
+        # trailing `\b` group. The char after a closing quote (space,
+        # then `{`) is also non-word, so `\b` between two non-word
+        # chars never fired -- the quoted-test-name form (`test "basic"
+        # {`), Zig's dominant real-world test declaration shape, never
+        # matched at all. Pulled out with no trailing `\b`
+        # (self-delimiting on the closing quote).
+        "test": re.compile(
+            r'test\s+"[^"]*"|\b(?:test\s+[a-zA-Z_]\w*|std\.testing\.expect|std\.testing\.expectEqual)\b'
+        ),
+        # --- PHASE 3: ARCHITECTURE & DOMAIN SENSORS ---
+        # 15. concurrency: Temporal Static. Suspend/resume and thread primitives.
+        # BUG FIX: `@atomicLoad`/`@atomicStore`/`@atomicRmw` are
+        # `@`-prefixed builtins -- same leading-\b bug.
+        "concurrency": re.compile(
+            r"\b(?:std\.Thread|std\.Thread\.Mutex|std\.Thread\.RwLock|std\.atomic|suspend|resume|await)\b"
+            r"|@atomicLoad|@atomicStore|@atomicRmw"
+        ),
+        # 16. ui_framework: UI / View Components. (Zig lacks native UI; targets common bindings like Mach/zgui).
+        "ui_framework": re.compile(r"\b(mach\.|zgui\.|zopengl\.|capy\.|vaxis\.|raylib\.)\b"),
+        # 17. closures: Closures / Anonymous Functions. (Zig lacks traditional anonymous closures).
+        "closures": None,
+        # 18. globals: Global / Shared State. Top-level file-scoped state.
+        "globals": re.compile(
+            r"^[ \t]*(?:pub[ \t]+)?(?:threadlocal[ \t]+)?(?:comptime[ \t]+)?(?:const|var)\s+[a-zA-Z_]\w*\s*(?::[^=]+)?=",
+            re.M,
+        ),
+        # 19. decorators: Decorators / Annotations. (Zig uses @builtins instead).
+        "decorators": None,
+        # 20. generics: Generics / Type Parameters. Comptime parameters and 'anytype' duck typing.
+        "generics": re.compile(r"\b(anytype|type)\b|\bcomptime\s+[a-zA-Z_]\w*\s*:\s*type\b"),
+        # 21. comprehensions: Iterators / Comprehensions. (Not native to Zig).
+        "comprehensions": None,
+        # 22. scientific: Numerical / Compute Libraries. Math intrinsics and SIMD @Vector support.
+        # BUG FIX: `@Vector`/`@sqrt`/`@sin`/`@cos`/`@splat`/`@reduce`
+        # are `@`-prefixed builtins -- same leading-\b bug.
+        "scientific": re.compile(r"\b(?:std\.math|f16|f32|f64|f80|f128)\b|@Vector|@sqrt|@sin|@cos|@splat|@reduce"),
+        # 23. heat_triggers: Metaprogramming & Reflection. Comptime metaprogramming and reflection.
+        # BUG FIX: `@Type`/`@typeInfo`/`@compileLog`/`@hasDecl`/
+        # `@hasField` are `@`-prefixed builtins -- same leading-\b bug.
+        "reflection_metaprogramming": re.compile(
+            r"\b(?:comptime[ \t]*\{|inline\s+for|inline\s+while)\b|@Type|@typeInfo|@compileLog|@hasDecl|@hasField"
+        ),
+        # 24. import: Dependency Inclusions. Module and C-header bridges.
+        # BUG FIX: all 3 are `@`-prefixed builtins -- same leading-\b
+        # bug. None ever matched.
+        "import": re.compile(r"@import\b|@cImport\b|@cInclude\b"),
+        "_dependency_capture": re.compile(
+            r"(?:^[ \t]*(?:(?:pub[ \t]+)?const[ \t]+(?:@\"[^\"]+\"|[a-zA-Z_]\w*)[ \t]*=[ \t]*|_[ \t]*=[ \t]*)?@import|(?:^[ \t]*(?:const[ \t]+(?:@\"[^\"]+\"|[a-zA-Z_]\w*)[ \t]*=[ \t]*)?@cImport[ \t\n]*\{[ \t\n]*)?@cInclude|[ \t]*@cInclude)[ \t\n]*\([ \t\n]*['\"]([^'\"]+)['\"]",
+            re.M,
+        ),
+        # 25. ownership: Authorship indicators in comments.
+        "ownership": re.compile(r"//\s*(?:Author|Created by|Maintainer|Copyright):\s+([^\n]+)", re.I),
+        # --- PHASE 4: SPECIALIZED SUB-SYSTEMS ---
+        # 26. planned_debt: The Promise. Future work markers.
+        "planned_debt": GLOBAL_PLANNED_DEBT,
+        # 27. fragile_debt: The Fracture. Admitted fragility or hacks.
+        "fragile_debt": GLOBAL_FRAGILE_DEBT,
+        # 29. spec_exposure: Map vs. Territory. Audit tags.
+        "spec_exposure": re.compile(r"\[(?:\s*SPEC\s*-\s*\d+|spec|audit)\]", re.I),
+        # 31. ssr_boundaries: View Horizon. Zap/httpz response handlers.
+        "ssr_boundaries": re.compile(r"\b(zap\.Endpoint|zap\.Request|httpz\.Request|std\.http\.Server\.Request)\b"),
+        # 32. events: Pub/Sub Network. OS-level event loops.
+        "events": re.compile(r"\b(std\.posix\.epoll_wait|std\.posix\.kevent|xev\.Loop)\b"),
+        # 33. dependency_injection: Inversion of Control.
+        "dependency_injection": None,
+        # 34. macros: Preprocessor Hooks. (Zig lacks macros).
+        "macros": None,
+        # 35. pointers: Memory Map. Explicit pointer tracking.
+        "pointers": re.compile(
+            r"(?<=[=\s,(])\*(?:const\s+|volatile\s+|allowzero[ \t]+)?[a-zA-Z_]\w*|\[\*c?\][a-zA-Z_]\w*|\.\*"
+        ),
+        # 36. memory_alloc: Manual Memory Management. Allocators bypassing the GC.
+        "memory_alloc": re.compile(
+            r"\b(std\.mem\.Allocator|allocator\.alloc|allocator\.free|allocator\.create|ArenaAllocator|c_allocator|page_allocator)\b"
+        ),
+        # 37. inline_asm: Bare Metal.
+        "inline_asm": re.compile(r"\basm\b(?:\s+volatile)?\s*\([^)]+\)"),
+        # --- PHASE 5: RESOURCE MANAGEMENT & STABILITY ---
+        # 38. telemetry: Professional diagnostics.
+        "telemetry": re.compile(r"\b(?:std\.log\.(?:info|err|warn|debug)|std\.log\.scoped)\b"),
+        # 39. debug_prints (Debug Artifacts / Unstructured Outputs): Standard output.
+        "debug_prints": re.compile(r"\b(std\.debug\.print)\b"),
+        # 40. explicit_casts (Explicit Type Casting): "Trust Me" Tax. Explicit casting.
+        # BUG FIX: all 5 are `@`-prefixed builtins -- same leading-\b
+        # bug. None ever matched.
+        "explicit_casts": re.compile(r"@ptrCast\b|@intCast\b|@alignCast\b|@bitCast\b|@as\b"),
+        # 41. panics_and_aborts (Execution Interrupts / Fatal Aborts) Aborting context.
+        # BUG FIX: `@panic` is `@`-prefixed -- same leading-\b bug.
+        "panics_and_aborts": re.compile(r"\b(?:unreachable|return)\b|@panic"),
+        # 42. thread_sleeps (Thread Blocking / Synchronous Pauses) (Forced waits/sleep).
+        "thread_sleeps": re.compile(r"\b(std\.time\.sleep)\b"),
+        # 43. bitwise_ops (Bitwise Operations)
+        "bitwise_ops": re.compile(r"(?<!&)&(?!&)|(?<!\|)\|(?!\|)|<<|>>|\^|~"),
+        # 44. sync_locks (Resource Management & Stability) Coordinated threading.
+        "sync_locks": re.compile(r"\b(Mutex|RwLock|Semaphore|lock|unlock)\b"),
+        # 45. immutability_locks (Immutability Constraints) Immutability.
+        "immutability_locks": re.compile(r"\bconst\b"),
+        # 46. cleanup (Resource Cleanup / Teardown) Resource release.
+        "cleanup": re.compile(r"\b(deinit|free|destroy|allocator\.free)\b"),
+        # 47. encapsulation Scope hiding (Lack of pub).
+        "encapsulation": re.compile(r"^[ \t]*(?!(?:pub|export|extern)\b)(?:const|var|fn)\s+", re.M),
+        # 48. listeners (Event Listeners / Observers)
+        "listeners": None,
+        # 49. test_skip (Bypassed Tests / Ignored Specs)
+        "test_skip": re.compile(r"\b(std\.testing\.expect|assume|expectError)\b"),
+        # --- PHASE 3: HYBRID DOMAIN SENSORS (Zig Specifics) ---
+        "serialization_parsing": re.compile(r"\b(std\.json\.parseFrom(?:Slice|TokenSource)|std\.json\.stringify)\b"),
+        "regex_execution": re.compile(
+            r"\b(std\.mem\.(?:indexOf|tokenize(?:Any)?|split(?:Sequence|Any)?|replace))\b"
+        ),  # Zig has no native regex!
+        "time_date_logic": re.compile(r"\b(std\.time\.(?:nanoTimestamp|milliTimestamp|Timer|sleep))\b"),
+        "ipc_rpc_bridges": re.compile(
+            r"\b(std\.process\.Child|std\.net\.tcpConnectToHost|std\.Thread\.spawn|std\.posix|std\.os\.execve)\b"
+        ),
+    },
+}
diff --git a/tests/tools/tree_sitter_accuracy_audit.py b/tests/tools/tree_sitter_accuracy_audit.py
index 05172a51c..7e6fa955d 100755
--- a/tests/tools/tree_sitter_accuracy_audit.py
+++ b/tests/tools/tree_sitter_accuracy_audit.py
@@ -22,7 +22,7 @@
     python tests/tools/tree_sitter_accuracy_audit.py --summary-table
         Regenerates the Markdown table between the
         <!-- TREE_SITTER_ACCURACY_TABLE:BEGIN/END --> markers in
-        gitgalaxy/standards/language_standards.py's module docstring from the
+        gitgalaxy/standards/language_standards/__init__.py's module docstring from the
         COMMITTED baselines (no live scan, no corpus needed). Languages with
         no committed baseline are simply absent from the table -- it never
         fabricates a row.
@@ -2954,7 +2954,7 @@ def run_all(mode_fn) -> int:
 
 _TABLE_BEGIN = "<!-- TREE_SITTER_ACCURACY_TABLE:BEGIN -->"
 _TABLE_END = "<!-- TREE_SITTER_ACCURACY_TABLE:END -->"
-_LANGUAGE_STANDARDS_PATH = REPO_ROOT / "gitgalaxy" / "standards" / "language_standards.py"
+_LANGUAGE_STANDARDS_PATH = REPO_ROOT / "gitgalaxy" / "standards" / "language_standards" / "__init__.py"
 
 
 def _ratio_pct(numerator: int, denominator: int) -> Optional[float]: