fix(parser): reject frame, filter and accept outside their bodies; declare extension libraries non-standard

.agents/skills/testing-pilot-corpora-gate/SKILL.md

@@ -183,8 +183,8 @@ gate's own helpers are package-private but reusable (`pilotCorporaGate.files(t)`
 
 `actionlint`, `shellcheck`, `python3 scripts/check-doc-links.py`, `gofmt`, `go vet`,
 `go run -C tools ./cmd/pilot-diff` (validators pre-downloaded; ~4min, prints e.g.
-the headline the committed baseline holds — `384 file(s), 345 fully agreeing; 49 agreed
-diagnostic(s), 43 only ours, 1640 only the pilot's` at the `2026-08` pin, so read it from
+the headline the committed baseline holds — `384 file(s), 347 fully agreeing; 49 agreed
+diagnostic(s), 43 only ours, 1634 only the pilot's` at the `2026-08` pin, so read it from
 `docs/project/pilot-differential-baseline.json` rather than from this line)
 and `make lint` (staticcheck+gosec, ~2min) all work. There is **no** `yamllint` and **no**
 `circleci` CLI, so `.circleci/config.yml` can only be parsed as YAML, not schema-validated — say so

.agents/skills/testing-pilot-differential/SKILL.md

@@ -23,8 +23,8 @@ GNU-format diagnostics **relative to `--root`**. Consequences for testing:
 - `-validator /nonexistent` now says `run ./scripts/download-pilot-sysml-validator.sh`.
 - Measured at the `2026-08` pin after bare parameters took their effective range `[0..*]`, removing
   the adjudicated `Behaviors.kerml:14` multiplicity warning (the `[1]` `RocketEquation` inputs keep
-  its warning at `delta-v-budget.sysml:93`): `384 file(s), 345 fully agreeing; 49 agreed, 43 only
-  ours, 1640 only the pilot's`, JSON totals `openSysMLDiagnostics 94 / pilotDiagnostics 1691 /
+  its warning at `delta-v-budget.sysml:93`): `384 file(s), 347 fully agreeing; 49 agreed, 43 only
+  ours, 1634 only the pilot's`, JSON totals `openSysMLDiagnostics 94 / pilotDiagnostics 1685 /
   severityMismatch 2`; the two new only-ours rows are the expected `action-step-multiplicity-not-fixed`
   warnings on `training/18. Action Performance/Action Performance Example.sysml:10` and
   `pilot-examples/Camera Example/Camera.sysml:4`. ~2 min wall, byte-identical across runs *and* after a from-scratch rebuild of
@@ -146,8 +146,8 @@ parameters took their effective range `[0..*]` and removed the adjudicated `Beha
 warning (the `[1]` `RocketEquation` inputs still produce the warning at
 `delta-v-budget.sysml:93`), is current: the action-step multiplicity rule adds the two expected
 `action-step-multiplicity-not-fixed` warnings on `takePhoto[*]` in the training corpus and
-`takePicture[*]` in `Camera Example/Camera.sysml`; a live run gives `384 file(s), 345 fully
-agreeing; 49 agreed, 43 only ours, 1640 only the pilot's`, byte-identical to the committed baseline, and
+`takePicture[*]` in `Camera Example/Camera.sysml`; a live run gives `384 file(s), 347 fully
+agreeing; 49 agreed, 43 only ours, 1634 only the pilot's`, byte-identical to the committed baseline, and
 `docs/project/pilot-differential.md`'s "Results" table matches. The prior rebaseline, when the
 Legend of the Red Dragon example left for its own repository, gave
 <!-- doc-count:historical -->`380 file(s), 344 fully agreeing; 38 agreed, 42 only ours, 1614 only the pilot's`.

.agents/skills/testing-pilot-execution-referee/SKILL.md

@@ -148,8 +148,8 @@ pilot answers the representation's own. See
   `pilot-exec-diff: <file>:<line>: model no/such/model.sysml: stat <abs>: no
   such file or directory`.
 - **Additivity.** `go run -C tools ./cmd/pilot-diff` must still print the headline the
-  committed baseline holds (`384 file(s), 345 fully agreeing; 49 agreed
-  diagnostic(s), 43 only ours, 1640 only the pilot's` at the `2026-08` pin — read it from the baseline JSON, not from this line, since each
+  committed baseline holds (`384 file(s), 347 fully agreeing; 49 agreed
+  diagnostic(s), 43 only ours, 1634 only the pilot's` at the `2026-08` pin — read it from the baseline JSON, not from this line, since each
   fix round moves it) and `jq -S` diff clean against
   `docs/project/pilot-differential-baseline.json`; `git status --porcelain`
   empty at the end.

.agents/skills/testing-pilot-rejection/SKILL.md

@@ -9,7 +9,7 @@ Sibling of `testing-pilot-differential` and `testing-pilot-xpect` (same pin
 `scripts/pilot-pin.sh`, same committed-baseline shape), but pointed the other way: the
 differential measures what the reference accepts and we reject; this oracle measures what the
 reference **rejects and we accept** — permissiveness gaps. Its corpus is committed under
-`tools/referee/reject/testdata/negative/` (312 hand-written invalid models, one violated rule + citation
+`tools/referee/reject/testdata/negative/` (317 hand-written invalid models, one violated rule + citation
 in each file's mandatory `// Invalid: ...` first line), so no corpus download exists. Method and
 findings: `docs/project/pilot-rejection.md`.
 
@@ -36,7 +36,7 @@ succession rules, the feature-value overriding rule, the enumeration-variation r
 the metadata typing, annotated-element and body rules, the trigger-argument typing rules, the owning-body member rules, the cross-subsetting rules, the variant port rule, the association arity, binary-link end
 count and multiplicity-bound typing rules, the result-expression ownership rules, and the annotation-ownership, binding-arity, feature-chain conformance,
 conjugated typing and end-feature rules, the end-multiplicity, return-owner and single-conjugator rules, the keyword-first relationship end kinds, the prefix and body-context cases, the redefinition name-resolution cases, the transition accept usage-typing rule, and the connector-end accessibility of a qualified definition feature), with a fresh library cache:
-`312 case(s): 303 both reject, 0 only the pilot rejects, 9 only we reject, 0 both accept`,
+`317 case(s): 308 both reject, 0 only the pilot rejects, 9 only we reject, 0 both accept`,
 byte-identical to the committed baseline. Any `both accept` case is a bug in the corpus (the case
 is not actually invalid under the loaded standard library) — fix the case, never ignore it. A
 candidate the pilot accepts because it does not enforce the named constraint is not a case either:

.agents/skills/testing-pilot-xpect/SKILL.md

@@ -423,8 +423,8 @@ census in `w5c_census_test.go` is live two ways: perturb one pinned triple (e.g.
 ## Regression neighbour
 
 `go run -C tools ./cmd/pilot-diff` (~1m12s) must still print the headline the *committed* baseline holds —
-at the `2026-08` pin that is `384 file(s), 345 fully agreeing; 49 agreed diagnostic(s), 43
-only ours, 1640 only the pilot's`. Read the number out of
+at the `2026-08` pin that is `384 file(s), 347 fully agreeing; 49 agreed diagnostic(s), 43
+only ours, 1634 only the pilot's`. Read the number out of
 `docs/project/pilot-differential-baseline.json` rather than trusting this line, since a landing fix
 round moves it. When the baseline is itself stale (it was at `19a3ce03`, holding 273 / 281 / 317), a
 failing `cmp` against it is *not* evidence of an Xpect regression — compare the summary line, and see

.agents/skills/testing-sysml-repl/SKILL.md

@@ -4223,7 +4223,7 @@ Read-only printer of the session buffer or one element:
 
 `%view Demo::report` prints `exposes` then `viewpoint conformance` with
 `satisfy structure (from Demo::StructureView): violated` and one line per concern
-(`conforms` / `violated (framed by the viewpoint but not by the view)` / `unevaluable` + reason).
+(`conforms` / `violated` / `unevaluable`, each with its reason where it has one).
 A satisfy target that is a `requirementUsage` is diagnosed at load *and* reported as
 `unevaluable (satisfy target spec is a requirementUsage, not a viewpoint)` — never a silent pass.
 `%view` registers no object: `%instances` afterwards says none created, a repeat is identical, and a