fix(design): Aside dump script stays single-quoted; redaction gate sized to the dump cap; doctrine made consistent

- The DOM-dump Aside block was the only double-quoted `aside repl` script in
  the tree (to splice the function text), which put the agent-filled <url>
  inside a double-quoted bash string: a same-origin href carrying $(...) would
  run in the reviewer's shell when Phase 3 opened that page. The script is
  single-quoted like every other Aside script and the function text enters
  through a closed-quote segment ('"$_DUMP"'); the fallback line is
  `$B js '('"$_DUMP"')()'`. A free test pins that no rendered Aside script
  opens with a double quote.
- The persist block capped dumps at 10 MiB but ran gstack-redact with its
  1 MiB default, so every real page between the two was deleted as
  DOM_DUMP_REDACTION_BLOCKED; the gate passes --max-bytes at the dump cap and
  blocks on any exit other than clean (0) or MEDIUM (2), so a redaction tool
  that fails to run can no longer fall through to "persist".
- Dump hygiene removes <template> and <noscript> subtrees (invisible to the
  attribute walk), inline on* handlers, and the cross-origin <link> nodes
  already named in the note, so the file handed to the engine references no
  remote stylesheet.
- Doctrine: the Codex design-voice prompts said "2-3 intentional motions"
  against the one-authored-moment rule; the overused-display heading scoped
  its ban to Persuade/Experience while the catalog and hard rules ban it
  everywhere; design-consultation's Important Rule 4 still said "as primary";
  design-html's blacklist header is now "Never include by default" with the
  mockup/DESIGN.md/user-ask override the catalog grants; the slop gate honors
  Decisions Log and Do's and Don'ts blessings like /review does; the landing
  "poster" line says poster in stance, not type size; the design binary's
  variant dials no longer flip light/dark for variety; gstack's DESIGN.md
  rows name data labels (UI labels stay the DM Sans token) and call the
  skill-bar fill and hovers functional transitions.
- design-review names how the base branch is found (gh pr view, then the
  repo default; never main) for the source-mode scan and the diff-aware mode.
- frontend-scope matches the config globs at the repo root only, like the
  bash arm; the parity test carries nested samples.
- Cleanups: renderCatalog's stale style option, an unused import, the
  identity-map bannedFontNames, the checklist header's "same entries" claim,
  the catalog header's consumer list, the orphaned main() docstring, the
  plan doc's IIFE bullet. design-html's skeleton ceiling is re-measured
  (54,184) for the two doctrine sentences.

Tests: AUTO-FIX rendering from the catalog, the E2E slice markers checked in
the free suite, the hygiene cases for templates/noscript/handlers/remote
links, and the review E2E counting detector rows separately from the seven
checklist plants.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

lib/design-catalog.ts

@@ -7,8 +7,9 @@
 //
 //   lib/design-catalog.ts
 //     ├─ scripts/resolvers/constants.ts          AI_SLOP_BLACKLIST: the 11 legacy lines, verbatim, in order
-//     ├─ scripts/resolvers/design.ts             DESIGN_METHODOLOGY cat 9, DESIGN_HARD_RULES,
-//     │                                          DESIGN_REVIEW_LITE, OVERUSED_FONTS, DESIGN_SLOP_BULLETS
+//     ├─ scripts/resolvers/design.ts             DESIGN_METHODOLOGY cat 9, DESIGN_HARD_RULES, DESIGN_DETECTOR
+//     │                                          (handoffs), OVERUSED_FONTS, DESIGN_SLOP_BULLETS, and the
+//     │                                          design-html anti-slop line (catalogEntries)
 //     ├─ scripts/resolvers/design-checklist.ts   review/design-checklist.md (generated)
 //     ├─ bin/gstack-design-detect.ts             normalizes engine findings by impeccableId
 //     └─ design/src/brief.ts                     MOCKUP_NEVER_NAMES in the image-generation prompt
@@ -65,7 +66,7 @@ export interface DesignSlopEntry {
   mockupNever?: true;
 }
 
-/** Training-data defaults: never the display voice on a Persuade or Experience surface. */
+/** Training-data defaults: never the display voice on any surface (body/UI on Operate/Read is the one exception, FONTS_BODY_UI_OK). */
 const OVERUSED_DISPLAY = [
   'Inter', 'Roboto', 'Arial', 'Helvetica', 'Open Sans', 'Lato', 'Montserrat', 'Poppins',
   'Space Grotesk', 'Space Mono', 'Fraunces', 'Playfair Display', 'Cormorant', 'Lora', 'Crimson',
@@ -657,7 +658,7 @@ export const MOCKUP_NEVER_NAMES: readonly string[] = [
 
 // ── Fonts ──
 
-/** Never the display voice on Persuade/Experience; the detector flags several as `overused-font`. */
+/** Never the display voice; the detector flags several as `overused-font`. */
 export const OVERUSED_FONTS_DISPLAY: readonly string[] = OVERUSED_DISPLAY;
 
 /** Never, in any role. */

lib/dom-dump-script.ts

@@ -34,7 +34,10 @@
 //     the inlined CSS, and in existing <style> nodes.
 //   - The trailing comment names what the dump cannot contain (shadow DOM,
 //     constructed stylesheets, runtime-injected styles when scripts were
-//     stripped) so the report can say so once.
+//     stripped) so the report can say so once. <template> and <noscript>
+//     subtrees (invisible to the querySelectorAll walk) and inline on*
+//     handlers are removed; cross-origin <link> nodes leave the clone too,
+//     so the file handed to the engine names no remote stylesheet.
 export const DOM_DUMP_SCRIPT = String.raw`() => {
   const root = document.documentElement.cloneNode(true);
   const head = root.querySelector("head") || root;
@@ -51,6 +54,7 @@ export const DOM_DUMP_SCRIPT = String.raw`() => {
       if (cloneLinks[i]) cloneLinks[i].remove();
     } catch (err) {
       crossOrigin.push(sheet.href || "(unknown)");
+      if (cloneLinks[i]) cloneLinks[i].remove();
     }
   });
   const dataUrl = new RegExp("url\\((\"?)data:[^)]{1024,}\\)", "g");
@@ -74,11 +78,13 @@ export const DOM_DUMP_SCRIPT = String.raw`() => {
     if (el.textContent) { el.textContent = ""; scripts += 1; }
   }
   for (const el of Array.from(root.querySelectorAll("textarea"))) el.textContent = "";
+  for (const el of Array.from(root.querySelectorAll("template, noscript"))) el.remove();
   for (const el of Array.from(root.querySelectorAll("*"))) {
     for (const attr of Array.from(el.attributes)) {
       const name = attr.name;
       const value = attr.value;
-      if (name === "value" && (el.nodeName === "INPUT" || el.nodeName === "TEXTAREA")) el.setAttribute(name, "");
+      if (name.indexOf("on") === 0) el.removeAttribute(name);
+      else if (name === "value" && (el.nodeName === "INPUT" || el.nodeName === "TEXTAREA")) el.setAttribute(name, "");
       else if ((name === "value" || name.indexOf("data-") === 0) && value.length > 32) el.setAttribute(name, "");
       else if (name === "content" && el.nodeName === "META" && el.getAttribute("name") !== "viewport") el.setAttribute(name, "");
       else if (name === "srcset") el.setAttribute(name, value.split(",").map((c) => { const parts = c.trim().split(/\s+/); parts[0] = cutQuery(parts[0] || ""); return parts.join(" "); }).join(", "));

lib/dom-dump.js

@@ -14,6 +14,7 @@
       if (cloneLinks[i]) cloneLinks[i].remove();
     } catch (err) {
       crossOrigin.push(sheet.href || "(unknown)");
+      if (cloneLinks[i]) cloneLinks[i].remove();
     }
   });
   const dataUrl = new RegExp("url\\((\"?)data:[^)]{1024,}\\)", "g");
@@ -37,11 +38,13 @@
     if (el.textContent) { el.textContent = ""; scripts += 1; }
   }
   for (const el of Array.from(root.querySelectorAll("textarea"))) el.textContent = "";
+  for (const el of Array.from(root.querySelectorAll("template, noscript"))) el.remove();
   for (const el of Array.from(root.querySelectorAll("*"))) {
     for (const attr of Array.from(el.attributes)) {
       const name = attr.name;
       const value = attr.value;
-      if (name === "value" && (el.nodeName === "INPUT" || el.nodeName === "TEXTAREA")) el.setAttribute(name, "");
+      if (name.indexOf("on") === 0) el.removeAttribute(name);
+      else if (name === "value" && (el.nodeName === "INPUT" || el.nodeName === "TEXTAREA")) el.setAttribute(name, "");
       else if ((name === "value" || name.indexOf("data-") === 0) && value.length > 32) el.setAttribute(name, "");
       else if (name === "content" && el.nodeName === "META" && el.getAttribute("name") !== "viewport") el.setAttribute(name, "");
       else if (name === "srcset") el.setAttribute(name, value.split(",").map((c) => { const parts = c.trim().split(/\s+/); parts[0] = cutQuery(parts[0] || ""); return parts.join(" "); }).join(", "));

lib/frontend-scope.ts

@@ -13,7 +13,9 @@ const EXTENSIONS = new Set([
   '.html',
 ]);
 
-const BASENAME_PREFIXES = ['tailwind.config.', 'postcss.config.'];
+// Root-level only: the bash arm's glob (`tailwind.config.*`) is matched against the
+// whole repo-relative path, so a nested `apps/web/tailwind.config.js` is not frontend there.
+const ROOT_CONFIG_PREFIXES = ['tailwind.config.', 'postcss.config.'];
 
 /** Repo-relative path (forward slashes) → is it a frontend file per gstack-diff-scope? */
 export function isFrontendPath(relPath: string): boolean {
@@ -22,7 +24,7 @@ export function isFrontendPath(relPath: string): boolean {
   const dot = base.lastIndexOf('.');
   const ext = dot >= 0 ? base.slice(dot) : ''; // case-sensitive, exactly like gstack-diff-scope's globs
   if (EXTENSIONS.has(ext)) return true;
-  if (BASENAME_PREFIXES.some(p => base.startsWith(p))) return true;
+  if (!rel.includes('/') && ROOT_CONFIG_PREFIXES.some(p => base.startsWith(p))) return true;
   if (rel.startsWith('app/views/')) return true;
   if (rel.includes('/components/')) return true;
   if (rel.startsWith('styles/') || rel.startsWith('css/')) return true;