diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index aacc42f..8ff757a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -64,3 +64,61 @@ jobs:
       # Keep engine failures isolated so a browser-specific regression is immediately visible.
       - name: Run rendered browser matrix
         run: npm run test:demo:${{ matrix.browser }}
+
+  release-preflight:
+    name: PR-safe ecosystem release preflight
+    if: github.event_name == 'pull_request'
+    needs: validate
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Check out Layout candidate
+        uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install candidate dependencies
+        run: npm ci
+
+      - name: Resolve immutable UI release fixture
+        id: ui_fixture
+        run: node scripts/release-fixture-contract.mjs --write-github-outputs
+
+      - name: Check out reviewed UI release fixture
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ steps.ui_fixture.outputs.ui_repository }}
+          ref: ${{ steps.ui_fixture.outputs.ui_revision }}
+          path: _ecosystem/ui-style-kit-css
+
+      - name: Install UI fixture dependencies
+        working-directory: _ecosystem/ui-style-kit-css
+        run: npm ci
+
+      - name: Resolve immutable Interactive companion
+        id: ecosystem_sources
+        working-directory: _ecosystem/ui-style-kit-css
+        run: node scripts/write-ecosystem-workflow-outputs.mjs
+
+      - name: Check out reviewed Interactive companion
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ steps.ecosystem_sources.outputs.interactive_repository }}
+          ref: ${{ steps.ecosystem_sources.outputs.interactive_revision }}
+          path: _ecosystem/Interactive-Surface-CSS
+
+      - name: Install Interactive companion dependencies
+        working-directory: _ecosystem/Interactive-Surface-CSS
+        run: npm ci
+
+      - name: Install clean-consumer Chromium
+        working-directory: _ecosystem/ui-style-kit-css
+        run: npx playwright install --with-deps chromium
+
+      # Candidate override is an npm-pack tarball; the other two sources stay at reviewed immutable commits.
+      - name: Run read-only release preflight
+        run: npm run release:preflight -- --fixture-root $GITHUB_WORKSPACE/_ecosystem/ui-style-kit-css --interactive-repo $GITHUB_WORKSPACE/_ecosystem/Interactive-Surface-CSS --interactive-docs-repo $GITHUB_WORKSPACE/_ecosystem/Interactive-Surface-CSS --layout-docs-repo $GITHUB_WORKSPACE
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index e84a2b9..2d8d95d 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
     inputs:
       release_tag:
-        description: "Release tag to publish, for example v3.0.0"
+        description: "Release tag to publish, for example v3.0.1"
         required: true
         type: string
 
@@ -79,10 +79,60 @@ jobs:
       - name: Install Playwright browsers
         run: npx --no-install playwright install --with-deps chromium firefox webkit
 
-      - name: Verify release package
-        run: npm run release:verify
+      # These checks are deliberately local-only. release:verify includes the
+      # ecosystem preflight, which cannot run until immutable fixtures are staged.
+      - name: Run non-ecosystem release checks
+        run: npm run check:full
+
+      - name: Audit release dependencies
+        run: npm audit --audit-level=moderate
+
+      - name: Inspect package tarball
+        run: npm run pack:dry-run
+
+      - name: Exercise publish packaging without lifecycle scripts
+        run: npm run publish:dry-run
+
+      - name: Resolve immutable UI release fixture
+        id: ui_fixture
+        run: node scripts/release-fixture-contract.mjs --write-github-outputs
+
+      - name: Check out reviewed UI release fixture
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ steps.ui_fixture.outputs.ui_repository }}
+          ref: ${{ steps.ui_fixture.outputs.ui_revision }}
+          path: _ecosystem/ui-style-kit-css
+
+      - name: Install UI fixture dependencies
+        working-directory: _ecosystem/ui-style-kit-css
+        run: npm ci
+
+      - name: Resolve immutable Interactive companion
+        id: ecosystem_sources
+        working-directory: _ecosystem/ui-style-kit-css
+        run: node scripts/write-ecosystem-workflow-outputs.mjs
+
+      - name: Check out reviewed Interactive companion
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ steps.ecosystem_sources.outputs.interactive_repository }}
+          ref: ${{ steps.ecosystem_sources.outputs.interactive_revision }}
+          path: _ecosystem/Interactive-Surface-CSS
+
+      - name: Install Interactive companion dependencies
+        working-directory: _ecosystem/Interactive-Surface-CSS
+        run: npm ci
+
+      - name: Install clean-consumer Chromium
+        working-directory: _ecosystem/ui-style-kit-css
+        run: npx playwright install --with-deps chromium
+
+      # Release mutation remains downstream of the same read-only gate used by pull requests.
+      - name: Run ecosystem release preflight
+        run: npm run release:preflight -- --fixture-root $GITHUB_WORKSPACE/_ecosystem/ui-style-kit-css --interactive-repo $GITHUB_WORKSPACE/_ecosystem/Interactive-Surface-CSS --interactive-docs-repo $GITHUB_WORKSPACE/_ecosystem/Interactive-Surface-CSS --layout-docs-repo $GITHUB_WORKSPACE
 
       - name: Publish package to npm
-        run: npm publish --access public --provenance
+        run: npm publish --access public --provenance --ignore-scripts
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index f50fadb..fb5bf96 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,21 @@
 
 All notable changes to `layout-style-css` are documented here. This project follows semantic versioning.
 
+## [3.0.1] - 2026-08-09
+
+### Changed
+
+- Corrected the GitHub Pages homepage used by npm, kept readable package defaults alongside explicit minified CDN metadata, and included the maintained packaged documentation.
+- Synchronized the package, lockfile, public manifest, demo metadata, Pages sitemap, release guidance, and current ecosystem contract while preserving the complete 13-export API and existing CSS behavior.
+
+### Security
+
+- Retained the audited dependency overrides and secure release tooling used by the protected publication workflow without adding runtime or peer dependencies.
+
+### Tests
+
+- Added version-sensitive package, manifest, layout, documentation, demo, Pages, release, packed-export, clean-install, and ecosystem checks for the patch candidate.
+
 ## [3.0.0] - 2026-07-29
 
 ### Breaking
diff --git a/README.md b/README.md
index e533a72..3f53a47 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 Zero-configuration, dependency-free structural CSS that responds to the width and height a layout actually receives.
 
-`layout-style-css@3.0.0` is a clean-break release. It provides intrinsic wrappers, composition primitives, seven semantic recipes, and sixteen spatial personalities. Layout owns structure; UI Style Kit owns paint; Interactive Surface owns interaction styling.
+`layout-style-css@3.0.1` is the current v3 patch release and preserves the clean-break structural contract introduced in 3.0.0. It provides intrinsic wrappers, composition primitives, seven semantic recipes, and sixteen spatial personalities. Layout owns structure; UI Style Kit owns paint; Interactive Surface owns interaction styling.
 
 ## Requirements
 
@@ -13,7 +13,7 @@ Zero-configuration, dependency-free structural CSS that responds to the width an
 ## Install
 
 ```bash
-npm install layout-style-css@3.0.0
+npm install layout-style-css@3.0.1
 ```
 
 Most applications need one import:
@@ -24,6 +24,8 @@ import "layout-style-css";
 
 The full bundle includes the core modules and all personality profiles. No breakpoint configuration, wrapper, JavaScript, or companion library is required.
 
+Package and bundler defaults (`main`, `style`, and the root export) resolve to the readable `dist/layout-style-css.css` bundle for straightforward inspection and debugging. The `unpkg` and `jsdelivr` convenience fields remain minified, and `layout-style-css/min.css` is the explicit minified package import.
+
 ## Zero-Configuration Start
 
 Use `.ly-root` as the responsive boundary and keep the mobile DOM order authoritative:
@@ -151,6 +153,7 @@ Each personality is a token/topology profile consumed by the shared recipe engin
 | `layout-style-css/utilities.css` | Small structural utility set |
 | `layout-style-css/personalities.css` | All sixteen profiles |
 | `layout-style-css/personalities/minimal-saas.css` | One profile; substitute any public personality name |
+| `layout-style-css/personalities.json` | Public layout-to-visual pairing recommendations |
 | `layout-style-css/package.json` | Package metadata |
 
 The cascade order is `ly.reset`, `ly.tokens`, `ly.wrappers`, `ly.primitives`, `ly.recipes`, `ly.utilities`, and `ly.personalities`.
@@ -168,11 +171,13 @@ import "layout-style-css";
 
 This order lets UI Style Kit establish paint and theme roles, Interactive Surface add interaction states, and Layout apply structure.
 
+`data-ly-layout`, `data-ui`, `data-theme`, and `data-mode` are independently selectable. See [Layout Styles](docs/wiki/Layout-Styles.md#visual-pairing-guidance) for the full recommendation matrix; pairings are never dependencies.
+
 ## CDN
 
 ```html
-<link rel="stylesheet" href="https://unpkg.com/layout-style-css@3.0.0/dist/layout-style-css.min.css">
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/layout-style-css@3.0.0/dist/layout-style-css.min.css">
+<link rel="stylesheet" href="https://unpkg.com/layout-style-css@3.0.1/dist/layout-style-css.min.css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/layout-style-css@3.0.1/dist/layout-style-css.min.css">
 ```
 
 ## Clean-Break Migration
diff --git a/demo/demo.js b/demo/demo.js
index 7cf42be..4f3d3a4 100644
--- a/demo/demo.js
+++ b/demo/demo.js
@@ -1,5 +1,6 @@
 const UI_STYLE_KIT_VERSION = "2.1.0";
 const UI_STYLE_KIT_MANIFEST_URL = `https://unpkg.com/ui-style-kit-css@${UI_STYLE_KIT_VERSION}/manifest.json`;
+const PERSONALITY_METADATA_URL = document.querySelector("script[data-personalities-url]")?.dataset.personalitiesUrl;
 const UI_STYLE_KIT_MANIFEST_FALLBACK = Object.freeze({
   version: UI_STYLE_KIT_VERSION,
   presets: Object.freeze([
@@ -77,6 +78,79 @@ async function loadUiStyleKitManifest() {
 }
 
 const UI_STYLE_KIT_MANIFEST = await loadUiStyleKitManifest();
+function normalizePersonalityMetadata(metadata) {
+  const personalities = Array.isArray(metadata?.personalities) ? metadata.personalities : [];
+  const validCompatibility = new Set(["native", "any", "recommended"]);
+  const normalized = personalities.map((personality) => ({
+    id: String(personality?.id ?? ""),
+    label: String(personality?.label ?? personality?.id ?? ""),
+    visualCompatibility: String(personality?.visualCompatibility ?? ""),
+    recommendedVisualPresets: Array.isArray(personality?.recommendedVisualPresets)
+      ? personality.recommendedVisualPresets.map(String)
+      : []
+  }));
+
+  if (
+    metadata?.schemaVersion !== 1 ||
+    normalized.length === 0 ||
+    normalized.some(({ id, label, visualCompatibility }) =>
+      !id || !label || !validCompatibility.has(visualCompatibility)
+    )
+  ) {
+    throw new Error("Layout personality metadata is missing a valid public pairing contract.");
+  }
+
+  return Object.freeze({
+    schemaVersion: metadata.schemaVersion,
+    personalities: Object.freeze(normalized.map((personality) => Object.freeze(personality)))
+  });
+}
+
+function minimalPersonalityFallback() {
+  return Object.freeze({
+    schemaVersion: 1,
+    personalities: Object.freeze([
+      Object.freeze({
+        id: "minimal-saas",
+        label: "Minimal SaaS",
+        visualCompatibility: "any",
+        recommendedVisualPresets: []
+      })
+    ])
+  });
+}
+
+async function loadPersonalityMetadata() {
+  try {
+    if (!PERSONALITY_METADATA_URL) {
+      throw new Error("The demo requires a local layout personality metadata URL.");
+    }
+
+    const response = await fetch(PERSONALITY_METADATA_URL, { cache: "force-cache" });
+
+    if (!response.ok) {
+      throw new Error(`Layout personality metadata request failed with HTTP ${response.status}.`);
+    }
+
+    return { metadata: normalizePersonalityMetadata(await response.json()), status: "" };
+  } catch (error) {
+    try {
+      return {
+        metadata: normalizePersonalityMetadata(window.LAYOUT_STYLE_PERSONALITY_METADATA),
+        status: "Layout pairing metadata is unavailable; using packaged fallback."
+      };
+    } catch {
+      console.error("Layout personality metadata and packaged fallback are unavailable.", error);
+      return {
+        metadata: minimalPersonalityFallback(),
+        status: "Layout pairing metadata is unavailable; Minimal SaaS remains available."
+      };
+    }
+  }
+}
+
+const PERSONALITY_METADATA_LOAD = await loadPersonalityMetadata();
+const PERSONALITY_METADATA = PERSONALITY_METADATA_LOAD.metadata;
 const ALLOWLISTS = Object.freeze({
   device: Object.freeze([
     "custom",
@@ -97,24 +171,7 @@ const ALLOWLISTS = Object.freeze({
     "gallery",
     "card-grid"
   ]),
-  personality: Object.freeze([
-    "minimal-saas",
-    "bauhaus",
-    "tactile",
-    "cyberpunk",
-    "f-pattern",
-    "brutalism",
-    "neumorphism",
-    "y2k",
-    "retro-glass",
-    "z-pattern",
-    "retrofuturism",
-    "mondrian",
-    "synthwave",
-    "bento",
-    "maximalist",
-    "split-screen"
-  ]),
+  personality: Object.freeze(PERSONALITY_METADATA.personalities.map(({ id }) => id)),
   container: Object.freeze([
     "auto",
     "20rem",
@@ -240,6 +297,7 @@ const recipePreview = document.querySelector("#recipePreview");
 const importsSnippet = document.querySelector("#importsSnippet");
 const markupSnippet = document.querySelector("#markupSnippet");
 const copyStatus = document.querySelector("#copyStatus");
+const personalityMetadataStatus = document.querySelector("#personalityMetadataStatus");
 const ecosystemStatus = document.querySelector("#ecosystemStatus");
 const containerReadout = document.querySelector("#containerReadout");
 const topologyReadout = document.querySelector("#topologyReadout");
@@ -255,6 +313,11 @@ const stateToggle = document.querySelector("#stateToggle");
 const mobileControlsQuery = window.matchMedia("(max-width: 63.999rem)");
 
 body.dataset.uiManifestVersion = UI_STYLE_KIT_MANIFEST.version;
+body.dataset.personalityMetadataVersion = String(PERSONALITY_METADATA.schemaVersion);
+syncPersonalityMetadataSelectOptions();
+if (personalityMetadataStatus) {
+  personalityMetadataStatus.textContent = PERSONALITY_METADATA_LOAD.status;
+}
 syncUiManifestSelectOptions();
 
 let state = readStateFromQuery();
@@ -439,6 +502,25 @@ function syncUiManifestSelectOptions() {
   }
 }
 
+function syncPersonalityMetadataSelectOptions() {
+  const select = controls.personality;
+
+  if (!select) {
+    return;
+  }
+
+  select.replaceChildren(
+    ...PERSONALITY_METADATA.personalities.map(({ id, label, visualCompatibility }) => {
+      const option = document.createElement("option");
+      option.value = id;
+      option.textContent = label;
+      option.dataset.visualCompatibility = visualCompatibility;
+      return option;
+    })
+  );
+  select.setAttribute("aria-busy", "false");
+}
+
 function syncUiKitClasses() {
   const prefix = UI_CLASS_PREFIXES[state.ui];
 
diff --git a/demo/index.html b/demo/index.html
index 3b0bf72..cad59f9 100644
--- a/demo/index.html
+++ b/demo/index.html
@@ -6,7 +6,7 @@
     <meta http-equiv="content-language" content="en-US">
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
     <meta name="title" content="Layout Style CSS v3 Intrinsic Responsive Demo">
-    <meta name="version" content="3.0.0">
+    <meta name="version" content="3.0.1">
     <meta name="description" content="Explore zero-configuration intrinsic wrappers, responsive recipes, vertical adaptations, and sixteen layout personalities in Layout Style CSS v3.">
     <meta name="keywords" content="CSS layout library, container queries, layout recipes, UI Style Kit CSS, Interactive Surface CSS, responsive CSS">
     <meta name="author" content="Foscat">
@@ -47,7 +47,7 @@
     <meta property="og:image:height" content="630">
     <meta property="og:url" content="https://foscat.github.io/Layout-Style-CSS/">
     <meta property="og:site_name" content="layout-style-css">
-    <meta property="og:updated_time" content="2026-07-29T00:00:00-05:00">
+    <meta property="og:updated_time" content="2026-08-09T00:00:00-05:00">
     <meta name="twitter:card" content="summary_large_image">
     <meta name="twitter:title" content="Layout Style CSS v3 Intrinsic Responsive Demo">
     <meta name="twitter:description" content="Intrinsic responsive layouts that adapt to available width and height and pair cleanly with paint and interaction libraries.">
@@ -71,27 +71,28 @@
     <link id="uiKitStylesheet" rel="stylesheet" href="https://unpkg.com/ui-style-kit-css@2.1.0/dist/ui-style-kit.visual.min.css" integrity="sha384-DUhB5MkNLJffjy7NRg13prdEcPTUR6zdPtameCyfq3tId/cM8o3ojpyvU/xdxZ8t" crossorigin="anonymous">
     <link id="uiKitInteractiveThemeStylesheet" rel="stylesheet" href="https://unpkg.com/ui-style-kit-css@2.1.0/styles/interactive-surface-theme.css" integrity="sha384-t7ZuirMM/Qoeoz+/5+S4JxIGXs076pqlgMxv6FymZW3tGj7snT8J2ZlV2+sH6++j" crossorigin="anonymous">
     <link id="interactiveSurfaceStylesheet" rel="stylesheet" href="https://unpkg.com/interactive-surface-css@1.5.0/state-core.css" integrity="sha384-v2NwNOzOcQ5ed7W7OHahaKHXspqfD0p8XO+kueqrsyfEcuBO2izsAQb/J/PxF0eX" crossorigin="anonymous">
-    <link id="layoutCoreStylesheet" rel="stylesheet" href="../dist/layout-style-css.css?v=3.0.0">
-    <link rel="stylesheet" href="./demo.css?v=3.0.0">
+    <link id="layoutCoreStylesheet" rel="stylesheet" href="../dist/layout-style-css.css?v=3.0.1">
+    <link rel="stylesheet" href="./demo.css?v=3.0.1">
 
     <script type="application/ld+json">
       {
         "@context": "https://schema.org",
         "@type": "SoftwareSourceCode",
         "name": "layout-style-css",
-        "version": "3.0.0",
+        "version": "3.0.1",
         "description": "A dependency-free CSS layout library for intrinsic wrappers, composition primitives, width and height responsive recipes, and spatial personalities.",
         "programmingLanguage": "CSS",
         "applicationCategory": "DeveloperApplication",
         "url": "https://foscat.github.io/Layout-Style-CSS/",
         "image": "https://foscat.github.io/Layout-Style-CSS/assets/social-card.png",
         "datePublished": "2026-07-29",
-        "dateModified": "2026-07-29",
+        "dateModified": "2026-08-09",
         "author": { "@type": "Organization", "name": "Foscat" },
         "publisher": { "@type": "Organization", "name": "Foscat" }
       }
     </script>
-    <script type="module" src="./demo.js?v=3.0.0"></script>
+    <script src="./personality-metadata.js?v=3.0.1"></script>
+    <script type="module" src="./demo.js?v=3.0.1" data-personalities-url="../personalities.json?v=3.0.1"></script>
   </head>
   <body class="ly-root" data-ui="minimal-saas" data-theme="arctic-indigo" data-mode="light" data-ly-layout="minimal-saas" data-density="comfortable" data-ecosystem="all-three">
     <a class="demo-skip-link" href="#layoutLab">Skip to the layout lab</a>
@@ -161,25 +162,11 @@ <h2 id="controlsTitle">Layout controls</h2>
           </label>
 
           <label for="personalitySelect">Personality
-            <select id="personalitySelect" data-query-key="personality" data-ui-kit="select">
-              <option value="minimal-saas">Minimal SaaS</option>
-              <option value="bauhaus">Bauhaus</option>
-              <option value="tactile">Tactile</option>
-              <option value="cyberpunk">Cyberpunk</option>
-              <option value="f-pattern">F-pattern</option>
-              <option value="brutalism">Brutalism</option>
-              <option value="neumorphism">Neumorphism</option>
-              <option value="y2k">Y2K</option>
-              <option value="retro-glass">Retro Glass</option>
-              <option value="z-pattern">Z-pattern</option>
-              <option value="retrofuturism">Retrofuturism</option>
-              <option value="mondrian">Mondrian</option>
-              <option value="synthwave">Synthwave</option>
-              <option value="bento">Bento</option>
-              <option value="maximalist">Maximalist</option>
-              <option value="split-screen">Split Screen</option>
+            <select id="personalitySelect" data-query-key="personality" data-ui-kit="select" aria-busy="true">
+              <option value="" disabled selected>Loading layout personalities</option>
             </select>
           </label>
+          <p id="personalityMetadataStatus" class="demo-copy-status" role="status" aria-live="polite"></p>
 
           <label for="containerSelect">Preview width
             <select id="containerSelect" data-query-key="container" data-ui-kit="select">
diff --git a/demo/personality-metadata.js b/demo/personality-metadata.js
new file mode 100644
index 0000000..c0d522c
--- /dev/null
+++ b/demo/personality-metadata.js
@@ -0,0 +1,2 @@
+/* Generated from manifest.json by scripts/build.mjs. */
+window.LAYOUT_STYLE_PERSONALITY_METADATA = {"schemaVersion":1,"generatedFrom":"manifest.json","selector":"data-ly-layout","independentSelectors":["data-ly-layout","data-ui","data-theme","data-mode"],"personalities":[{"id":"minimal-saas","label":"Minimal SaaS","visualCompatibility":"native","recommendedVisualPresets":["minimal-saas"]},{"id":"bento","label":"Bento","visualCompatibility":"native","recommendedVisualPresets":["bento"]},{"id":"maximalist","label":"Maximalist","visualCompatibility":"native","recommendedVisualPresets":["maximalist"]},{"id":"bauhaus","label":"Bauhaus","visualCompatibility":"native","recommendedVisualPresets":["bauhaus"]},{"id":"tactile","label":"Tactile","visualCompatibility":"native","recommendedVisualPresets":["tactile"]},{"id":"neumorphism","label":"Neumorphism","visualCompatibility":"native","recommendedVisualPresets":["neumorphism"]},{"id":"retrofuturism","label":"Retrofuturism","visualCompatibility":"native","recommendedVisualPresets":["retrofuturism"]},{"id":"brutalism","label":"Brutalism","visualCompatibility":"native","recommendedVisualPresets":["brutalism"]},{"id":"cyberpunk","label":"Cyberpunk","visualCompatibility":"native","recommendedVisualPresets":["cyberpunk"]},{"id":"y2k","label":"Y2K","visualCompatibility":"native","recommendedVisualPresets":["y2k"]},{"id":"retro-glass","label":"Retro Glass","visualCompatibility":"native","recommendedVisualPresets":["retro-glass"]},{"id":"f-pattern","label":"F-pattern","visualCompatibility":"any","recommendedVisualPresets":[]},{"id":"z-pattern","label":"Z-pattern","visualCompatibility":"any","recommendedVisualPresets":[]},{"id":"split-screen","label":"Split Screen","visualCompatibility":"any","recommendedVisualPresets":[]},{"id":"mondrian","label":"Mondrian","visualCompatibility":"any","recommendedVisualPresets":[]},{"id":"synthwave","label":"Synthwave","visualCompatibility":"recommended","recommendedVisualPresets":["cyberpunk","retrofuturism"],"visualVerification":{"method":"rendered-computed-style","test":"test/demo-smoke.test.mjs","computedProperties":{"cyberpunk":{"boxShadow":"0px 0px 18px"},"retrofuturism":{"boxShadow":"0px 10px 30px"}},"assertion":"A visible browser contract fixture renders each preset's distinct article box-shadow while data-ly-layout remains synthwave."}}]};
diff --git a/demo/sitemap.xml b/demo/sitemap.xml
index b4200f0..9be6915 100644
--- a/demo/sitemap.xml
+++ b/demo/sitemap.xml
@@ -2,7 +2,7 @@
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
   <url>
     <loc>https://foscat.github.io/Layout-Style-CSS/</loc>
-    <lastmod>2026-07-29</lastmod>
+    <lastmod>2026-08-09</lastmod>
     <changefreq>weekly</changefreq>
     <priority>0.8</priority>
   </url>
diff --git a/docs/wiki/Getting-Started.md b/docs/wiki/Getting-Started.md
index d9fc0af..a5964e5 100644
--- a/docs/wiki/Getting-Started.md
+++ b/docs/wiki/Getting-Started.md
@@ -1,9 +1,9 @@
 # Getting Started
 
-Install `layout-style-css@3.0.0` and import the root bundle:
+Install `layout-style-css@3.0.1` and import the root bundle:
 
 ```bash
-npm install layout-style-css@3.0.0
+npm install layout-style-css@3.0.1
 ```
 
 ```js
diff --git a/docs/wiki/Home.md b/docs/wiki/Home.md
index bc3e492..b5af437 100644
--- a/docs/wiki/Home.md
+++ b/docs/wiki/Home.md
@@ -1,6 +1,6 @@
 # Layout Style CSS v3
 
-`layout-style-css@3.0.0` is a dependency-free, CSS-only structural system for layouts that adapt to available width and height.
+`layout-style-css@3.0.1` is a dependency-free, CSS-only structural system for layouts that adapt to available width and height.
 
 ## Contract
 
diff --git a/docs/wiki/Installation-And-CDN.md b/docs/wiki/Installation-And-CDN.md
index f72c840..ed762e5 100644
--- a/docs/wiki/Installation-And-CDN.md
+++ b/docs/wiki/Installation-And-CDN.md
@@ -9,7 +9,7 @@
 ## Package
 
 ```bash
-npm install layout-style-css@3.0.0
+npm install layout-style-css@3.0.1
 ```
 
 ```js
@@ -18,6 +18,8 @@ import "layout-style-css";
 
 The root import is the zero-configuration full bundle. Focused exports are:
 
+Package and bundler defaults (`main`, `style`, and the root export) use the readable `dist/layout-style-css.css` file. The `unpkg` and `jsdelivr` convenience fields use `dist/layout-style-css.min.css`; package consumers can select the same minified output explicitly with `layout-style-css/min.css`.
+
 - `layout-style-css/min.css`
 - `layout-style-css/core.css`
 - `layout-style-css/foundation.css`
@@ -34,11 +36,11 @@ The root import is the zero-configuration full bundle. Focused exports are:
 ## CDN
 
 ```html
-<link rel="stylesheet" href="https://unpkg.com/layout-style-css@3.0.0/dist/layout-style-css.min.css">
+<link rel="stylesheet" href="https://unpkg.com/layout-style-css@3.0.1/dist/layout-style-css.min.css">
 ```
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/layout-style-css@3.0.0/dist/layout-style-css.min.css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/layout-style-css@3.0.1/dist/layout-style-css.min.css">
 ```
 
 The CDN paths include `/dist/` because CDN clients address files in the published tarball, while package import maps use the public exports.
diff --git a/docs/wiki/Layout-Styles.md b/docs/wiki/Layout-Styles.md
index 50d68e8..8def1de 100644
--- a/docs/wiki/Layout-Styles.md
+++ b/docs/wiki/Layout-Styles.md
@@ -29,6 +29,29 @@ Layout owns structure. UI Style Kit owns paint. Interactive Surface owns interac
 
 The personality name does not promise colors, typography, borders, shadows, or interaction states. Pair the same name across libraries when desired, but import each library explicitly and let it own its layer.
 
+## Visual Pairing Guidance
+
+[`layout-style-css/personalities.json`](../../personalities.json) is the public, machine-readable pairing source used by the demo. Its entries are recommendations, never dependencies: `data-ly-layout`, `data-ui`, `data-theme`, and `data-mode` are independently selectable on the same document.
+
+| Layout personality | Visual pairing guidance |
+| --- | --- |
+| Minimal SaaS | Native match: `minimal-saas` |
+| Bento | Native match: `bento` |
+| Maximalist | Native match: `maximalist` |
+| Bauhaus | Native match: `bauhaus` |
+| Tactile | Native match: `tactile` |
+| Neumorphism | Native match: `neumorphism` |
+| Retrofuturism | Native match: `retrofuturism` |
+| Brutalism | Native match: `brutalism` |
+| Cyberpunk | Native match: `cyberpunk` |
+| Y2K | Native match: `y2k` |
+| Retro Glass | Native match: `retro-glass` |
+| F-pattern | Any visual preset; this is structure only |
+| Z-pattern | Any visual preset; this is structure only |
+| Split Screen | Any visual preset; this is structure only |
+| Mondrian | Any visual preset; this is structure only |
+| Synthwave | Recommended: `cyberpunk` or `retrofuturism`; the browser contract verifies each preset's distinct rendered article shadow while retaining `data-ly-layout="synthwave"` |
+
 ## Customization
 
 Override public tokens at `.ly-root` or a narrower scope:
diff --git a/docs/wiki/Migrating-To-3.0.md b/docs/wiki/Migrating-To-3.0.md
index ac98c61..7b93bf1 100644
--- a/docs/wiki/Migrating-To-3.0.md
+++ b/docs/wiki/Migrating-To-3.0.md
@@ -8,6 +8,7 @@
 | --- | --- |
 | `layout-style-css/legacy.css` | Canonical v3 hooks; `legacy.css` is not shipped |
 | `layout-style-css/integrations/ui-style-kit.css` | Import UI Style Kit paint explicitly; `integrations/ui-style-kit.css` is not shipped |
+| `layout-style-css/bridge.css` | Removed; compose UI Style Kit paint explicitly because `bridge.css` is not shipped |
 | `layout-style-css/css` (`./css`) | `layout-style-css` |
 | `layout-style-css/css.css` (`./css.css`) | `layout-style-css` |
 | `layout-style-css/min` (`./min`) | `layout-style-css/min.css` |
diff --git a/docs/wiki/Release-And-Publishing.md b/docs/wiki/Release-And-Publishing.md
index 21da097..14e416a 100644
--- a/docs/wiki/Release-And-Publishing.md
+++ b/docs/wiki/Release-And-Publishing.md
@@ -1,6 +1,6 @@
 # Release And Publishing
 
-This guide describes the release gate for `layout-style-css@3.0.0`. Running verification does not publish, tag, push, create a GitHub Release, or change the npm registry.
+This guide describes the release gate for `layout-style-css@3.0.1`. Running verification does not publish, tag, push, create a GitHub Release, or change the npm registry.
 
 ## Local Candidate Gate
 
@@ -13,16 +13,30 @@ npm run release:verify
 git diff --check
 ```
 
-`npm run release:verify` includes `npm audit --audit-level=moderate`, the cross-engine browser matrix, Pages verification, tarball dry-run, and publish dry-run. It does not publish.
+`npm run release:verify` includes `npm audit --audit-level=moderate`, the cross-engine browser matrix, Pages verification, tarball dry-run, publish dry-run, and `npm run release:preflight`. It does not publish.
+
+The read-only ecosystem preflight uses the immutable UI fixture in `ecosystem-release-fixture.json`, overrides Layout Style with the candidate tarball, queries npm for every exact documented minimum/current version, resolves all packed exports (including personality modules), validates maintained documentation, and runs the reviewed clean-install matrices. Pull requests execute this same gate without enabling publish, tag, release, or deployment mutations.
 
 The package's `prepublishOnly` script runs `npm run release:verify`, so a direct npm publish uses the same full gate.
 
+## Coordinated Bootstrap Sequence
+
+The immutable cross-repository pins require this exact remote sequence:
+
+1. Push a stable UI bootstrap ref containing `bdbb6a7e432f30b92de206cac6a00fe85394190c`.
+2. Push and merge Interactive Surface CSS and Layout Style CSS with merge commits so their reviewed commit SHAs remain reachable.
+3. Update and verify the final UI companion pins against those merged companion commits.
+4. Push the final UI branch, rerun its ecosystem preflight, and merge UI with a merge commit.
+5. Do not squash, rebase, or delete the only remote refs until every pinned commit is reachable through merged ancestry.
+
+The bootstrap SHA is deliberately stable: companion workflows use it to load the reviewed preflight implementation before the final UI commit can reference the companion heads.
+
 ## Candidate Inspection
 
 Confirm:
 
-- package version is `3.0.0`
-- intended tag would be `v3.0.0`
+- package version is `3.0.1`
+- intended tag would be `v3.0.1`
 - runtime and peer dependencies are empty
 - exact exports and tarball files match the v3 contract
 - generated CSS matches authored sources
@@ -36,7 +50,7 @@ Only after explicit approval:
 1. Commit the verified candidate.
 2. Push the intended branch.
 3. Merge through the repository's normal review policy.
-4. Create the exact `v3.0.0` tag from the protected release commit.
+4. Create the exact `v3.0.1` tag from the protected release commit.
 5. Publish the GitHub Release.
 6. Let the protected npm workflow verify the tag and publish with provenance.
 7. Confirm the GitHub Release, tag, and npm registry state independently.
diff --git a/ecosystem-release-fixture.json b/ecosystem-release-fixture.json
new file mode 100644
index 0000000..b5efab0
--- /dev/null
+++ b/ecosystem-release-fixture.json
@@ -0,0 +1,4 @@
+{
+  "repository": "Foscat/ui-style-kit-css",
+  "revision": "bdbb6a7e432f30b92de206cac6a00fe85394190c"
+}
diff --git a/manifest.json b/manifest.json
new file mode 100644
index 0000000..d10d80d
--- /dev/null
+++ b/manifest.json
@@ -0,0 +1,98 @@
+{
+  "schemaVersion": 1,
+  "schemaPolicy": {
+    "compatibility": "additive-within-major",
+    "breakingChange": "increment-schemaVersion-before-removing-or-renaming-fields"
+  },
+  "name": "layout-style-css",
+  "version": "3.0.1",
+  "entrypoints": {
+    "default": "./dist/layout-style-css.css",
+    "minified": "./dist/layout-style-css.min.css",
+    "core": "./dist/core.css",
+    "foundation": "./dist/foundation.css",
+    "wrappers": "./dist/wrappers.css",
+    "primitives": "./dist/primitives.css",
+    "recipes": "./dist/recipes.css",
+    "utilities": "./dist/utilities.css",
+    "personalities": "./dist/personalities.css",
+    "personalityModules": "./dist/personalities/*.css",
+    "personalityMetadata": "./personalities.json"
+  },
+  "selectors": {
+    "stable": [".ly-root", ".ly-wrapper"],
+    "deprecated": []
+  },
+  "wrappers": ["compact", "prose", "content", "wide", "full", "breakout"],
+  "primitives": ["page", "header", "footer", "main", "section", "surface", "readable", "stack", "cluster", "center", "cover", "switcher", "sidebar", "grid", "split", "panes", "media", "reel", "frame", "scroll"],
+  "recipes": ["app-shell", "dashboard", "docs", "list-detail", "split-hero", "gallery", "card-grid"],
+  "areas": ["header", "nav", "sidebar", "main", "aside", "footer", "content", "media", "actions", "primary", "secondary"],
+  "personalities": ["minimal-saas", "bento", "maximalist", "bauhaus", "tactile", "neumorphism", "retrofuturism", "brutalism", "cyberpunk", "y2k", "retro-glass", "f-pattern", "z-pattern", "split-screen", "mondrian", "synthwave"],
+  "personalityPairings": [
+    { "id": "minimal-saas", "label": "Minimal SaaS", "visualCompatibility": "native", "recommendedVisualPresets": ["minimal-saas"] },
+    { "id": "bento", "label": "Bento", "visualCompatibility": "native", "recommendedVisualPresets": ["bento"] },
+    { "id": "maximalist", "label": "Maximalist", "visualCompatibility": "native", "recommendedVisualPresets": ["maximalist"] },
+    { "id": "bauhaus", "label": "Bauhaus", "visualCompatibility": "native", "recommendedVisualPresets": ["bauhaus"] },
+    { "id": "tactile", "label": "Tactile", "visualCompatibility": "native", "recommendedVisualPresets": ["tactile"] },
+    { "id": "neumorphism", "label": "Neumorphism", "visualCompatibility": "native", "recommendedVisualPresets": ["neumorphism"] },
+    { "id": "retrofuturism", "label": "Retrofuturism", "visualCompatibility": "native", "recommendedVisualPresets": ["retrofuturism"] },
+    { "id": "brutalism", "label": "Brutalism", "visualCompatibility": "native", "recommendedVisualPresets": ["brutalism"] },
+    { "id": "cyberpunk", "label": "Cyberpunk", "visualCompatibility": "native", "recommendedVisualPresets": ["cyberpunk"] },
+    { "id": "y2k", "label": "Y2K", "visualCompatibility": "native", "recommendedVisualPresets": ["y2k"] },
+    { "id": "retro-glass", "label": "Retro Glass", "visualCompatibility": "native", "recommendedVisualPresets": ["retro-glass"] },
+    { "id": "f-pattern", "label": "F-pattern", "visualCompatibility": "any", "recommendedVisualPresets": [] },
+    { "id": "z-pattern", "label": "Z-pattern", "visualCompatibility": "any", "recommendedVisualPresets": [] },
+    { "id": "split-screen", "label": "Split Screen", "visualCompatibility": "any", "recommendedVisualPresets": [] },
+    { "id": "mondrian", "label": "Mondrian", "visualCompatibility": "any", "recommendedVisualPresets": [] },
+    {
+      "id": "synthwave",
+      "label": "Synthwave",
+      "visualCompatibility": "recommended",
+      "recommendedVisualPresets": ["cyberpunk", "retrofuturism"],
+      "visualVerification": {
+        "method": "rendered-computed-style",
+        "test": "test/demo-smoke.test.mjs",
+        "computedProperties": {
+          "cyberpunk": { "boxShadow": "0px 0px 18px" },
+          "retrofuturism": { "boxShadow": "0px 10px 30px" }
+        },
+        "assertion": "A visible browser contract fixture renders each preset's distinct article box-shadow while data-ly-layout remains synthwave."
+      }
+    }
+  ],
+  "containers": {
+    "names": ["ly-scope"],
+    "type": "inline-size"
+  },
+  "thresholds": {
+    "containerMinWidths": ["42rem", "44rem", "48rem", "52rem", "72rem"],
+    "viewportMaxHeights": ["44rem", "30rem"]
+  },
+  "tokens": {
+    "geometry": [
+      "--ly-space-0", "--ly-space-1", "--ly-space-2", "--ly-space-3", "--ly-space-4",
+      "--ly-space-5", "--ly-space-6", "--ly-space-7", "--ly-space-8", "--ly-space-9",
+      "--ly-wrapper-compact", "--ly-wrapper-prose", "--ly-wrapper-content", "--ly-wrapper-wide",
+      "--ly-page-padding-inline", "--ly-safe-area-inline", "--ly-safe-area-block-start",
+      "--ly-safe-area-block-end", "--ly-wrapper-gutter", "--ly-wrapper-max", "--ly-profile-gap",
+      "--ly-gap", "--ly-grid-gap", "--ly-stack-gap", "--ly-cluster-gap",
+      "--ly-section-padding-block", "--ly-header-height", "--ly-sticky-position", "--ly-cover-min",
+      "--ly-shell-min", "--ly-scroll-max", "--ly-switcher-threshold", "--ly-sidebar-size",
+      "--ly-sidebar-content-min", "--ly-grid-columns", "--ly-grid-min", "--ly-split-min",
+      "--ly-pane-min", "--ly-pane-size", "--ly-media-min", "--ly-media-size", "--ly-reel-item-min",
+      "--ly-reel-item-max", "--ly-frame-ratio", "--ly-split-primary", "--ly-split-secondary",
+      "--ly-recipe-rail", "--ly-recipe-aside", "--ly-gallery-min", "--ly-card-grid-min",
+      "--ly-app-shell-medium-areas", "--ly-app-shell-medium-columns", "--ly-app-shell-wide-areas",
+      "--ly-app-shell-wide-columns", "--ly-dashboard-medium-areas", "--ly-dashboard-medium-columns",
+      "--ly-dashboard-wide-areas", "--ly-dashboard-wide-columns", "--ly-docs-wide-areas",
+      "--ly-docs-wide-columns", "--ly-list-detail-wide-areas", "--ly-list-detail-wide-columns",
+      "--ly-split-hero-wide-areas", "--ly-split-hero-wide-columns", "--ly-center-max",
+      "--ly-cover-padding", "--ly-z-header", "--ly-split-align", "--ly-media-align",
+      "--ly-split-hero-align"
+    ]
+  },
+  "companions": {
+    "ui-style-kit-css": ">=2.1.0 <3.0.0",
+    "interactive-surface-css": ">=1.5.0 <2.0.0"
+  }
+}
diff --git a/ownership-allowlist.json b/ownership-allowlist.json
new file mode 100644
index 0000000..62e1c95
--- /dev/null
+++ b/ownership-allowlist.json
@@ -0,0 +1,3 @@
+{
+  "layout": []
+}
diff --git a/package-lock.json b/package-lock.json
index fe1cf7e..b7a94d6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,15 +1,16 @@
 {
   "name": "layout-style-css",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "layout-style-css",
-      "version": "3.0.0",
+      "version": "3.0.1",
       "license": "MIT",
       "devDependencies": {
         "@playwright/test": "1.61.1",
+        "css-tree": "3.2.1",
         "interactive-surface-css": "1.5.0",
         "stylelint": "17.14.0",
         "ui-style-kit-css": "2.1.0"
@@ -581,9 +582,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.4",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
-      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
+      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
       "dev": true,
       "funding": [
         {
@@ -935,9 +936,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {
@@ -1068,9 +1069,9 @@
       "license": "MIT"
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.17",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz",
+      "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==",
       "dev": true,
       "funding": [
         {
diff --git a/package.json b/package.json
index ef69f25..633fa94 100644
--- a/package.json
+++ b/package.json
@@ -1,10 +1,10 @@
 {
   "name": "layout-style-css",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Dependency-free structural CSS for responsive wrappers, composition primitives, recipes, utilities, and layout personalities.",
   "type": "module",
   "license": "MIT",
-  "homepage": "https://github.com/Foscat/layout-style-css#readme",
+  "homepage": "https://foscat.github.io/Layout-Style-CSS/",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Foscat/layout-style-css.git"
@@ -24,7 +24,7 @@
     "shell-layouts"
   ],
   "main": "dist/layout-style-css.css",
-  "style": "dist/layout-style-css.min.css",
+  "style": "dist/layout-style-css.css",
   "unpkg": "dist/layout-style-css.min.css",
   "jsdelivr": "dist/layout-style-css.min.css",
   "scripts": {
@@ -32,7 +32,8 @@
     "pages:build": "node scripts/build-pages.mjs",
     "lint": "stylelint \"styles/**/*.css\" \"demo/**/*.css\"",
     "check:demo-js": "node --check demo/demo.js",
-    "test:static": "node test/layout-css-contract.test.mjs && node test/release-docs-contract.test.mjs",
+    "check:ownership": "node scripts/check-css-ownership.mjs",
+    "test:static": "node --test --test-concurrency=1 test/manifest-contract.test.mjs test/ownership-boundaries.test.mjs test/package-contract.test.mjs test/release-preflight.test.mjs && node test/layout-css-contract.test.mjs && node test/release-docs-contract.test.mjs",
     "test:demo:quick": "node test/demo-smoke.test.mjs --quick --browser=chromium",
     "test:demo:chromium": "node test/demo-smoke.test.mjs --browser=chromium",
     "test:demo:firefox": "node test/demo-smoke.test.mjs --browser=firefox",
@@ -41,11 +42,12 @@
     "test:pages": "node test/pages-artifact.test.mjs",
     "test": "npm run test:static && npm run test:demo:quick && npm run test:pages",
     "test:full": "npm run test:static && npm run test:demo:all && npm run test:pages",
-    "check": "npm run build && npm run lint && npm run check:demo-js && npm test && npm run pack:dry-run",
-    "check:full": "npm run build && npm run lint && npm run check:demo-js && npm run test:full && npm run pack:dry-run",
+    "check": "npm run build && npm run check:ownership && npm run lint && npm run check:demo-js && npm test && npm run pack:dry-run",
+    "check:full": "npm run build && npm run check:ownership && npm run lint && npm run check:demo-js && npm run test:full && npm run pack:dry-run",
     "pack:dry-run": "npm pack --dry-run --ignore-scripts",
     "publish:dry-run": "npm publish --dry-run --access public --ignore-scripts",
-    "release:verify": "npm run check:full && npm audit --audit-level=moderate && npm run publish:dry-run",
+    "release:preflight": "npm run build && node scripts/release-fixture-contract.mjs",
+    "release:verify": "npm run check:full && npm run release:preflight && npm audit --audit-level=moderate && npm run publish:dry-run",
     "prepack": "npm run build && npm run test:static",
     "prepublishOnly": "npm run release:verify"
   },
@@ -54,10 +56,17 @@
   },
   "devDependencies": {
     "@playwright/test": "1.61.1",
+    "css-tree": "3.2.1",
     "interactive-surface-css": "1.5.0",
     "stylelint": "17.14.0",
     "ui-style-kit-css": "2.1.0"
   },
+  "overrides": {
+    "fast-uri": "3.1.5",
+    "js-yaml": "4.3.1",
+    "nanoid": "3.3.17",
+    "postcss": "8.5.23"
+  },
   "exports": {
     ".": "./dist/layout-style-css.css",
     "./min.css": "./dist/layout-style-css.min.css",
@@ -69,6 +78,8 @@
     "./utilities.css": "./dist/utilities.css",
     "./personalities.css": "./dist/personalities.css",
     "./personalities/*.css": "./dist/personalities/*.css",
+    "./personalities.json": "./personalities.json",
+    "./manifest.json": "./manifest.json",
     "./package.json": "./package.json"
   },
   "files": [
@@ -81,6 +92,12 @@
     "dist/recipes.css",
     "dist/utilities.css",
     "dist/personalities.css",
-    "dist/personalities/*.css"
+    "dist/personalities/*.css",
+    "personalities.json",
+    "manifest.json",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md",
+    "docs/wiki"
   ]
 }
diff --git a/personalities.json b/personalities.json
new file mode 100644
index 0000000..6e1d78a
--- /dev/null
+++ b/personalities.json
@@ -0,0 +1,147 @@
+{
+  "schemaVersion": 1,
+  "generatedFrom": "manifest.json",
+  "selector": "data-ly-layout",
+  "independentSelectors": [
+    "data-ly-layout",
+    "data-ui",
+    "data-theme",
+    "data-mode"
+  ],
+  "personalities": [
+    {
+      "id": "minimal-saas",
+      "label": "Minimal SaaS",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "minimal-saas"
+      ]
+    },
+    {
+      "id": "bento",
+      "label": "Bento",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "bento"
+      ]
+    },
+    {
+      "id": "maximalist",
+      "label": "Maximalist",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "maximalist"
+      ]
+    },
+    {
+      "id": "bauhaus",
+      "label": "Bauhaus",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "bauhaus"
+      ]
+    },
+    {
+      "id": "tactile",
+      "label": "Tactile",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "tactile"
+      ]
+    },
+    {
+      "id": "neumorphism",
+      "label": "Neumorphism",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "neumorphism"
+      ]
+    },
+    {
+      "id": "retrofuturism",
+      "label": "Retrofuturism",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "retrofuturism"
+      ]
+    },
+    {
+      "id": "brutalism",
+      "label": "Brutalism",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "brutalism"
+      ]
+    },
+    {
+      "id": "cyberpunk",
+      "label": "Cyberpunk",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "cyberpunk"
+      ]
+    },
+    {
+      "id": "y2k",
+      "label": "Y2K",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "y2k"
+      ]
+    },
+    {
+      "id": "retro-glass",
+      "label": "Retro Glass",
+      "visualCompatibility": "native",
+      "recommendedVisualPresets": [
+        "retro-glass"
+      ]
+    },
+    {
+      "id": "f-pattern",
+      "label": "F-pattern",
+      "visualCompatibility": "any",
+      "recommendedVisualPresets": []
+    },
+    {
+      "id": "z-pattern",
+      "label": "Z-pattern",
+      "visualCompatibility": "any",
+      "recommendedVisualPresets": []
+    },
+    {
+      "id": "split-screen",
+      "label": "Split Screen",
+      "visualCompatibility": "any",
+      "recommendedVisualPresets": []
+    },
+    {
+      "id": "mondrian",
+      "label": "Mondrian",
+      "visualCompatibility": "any",
+      "recommendedVisualPresets": []
+    },
+    {
+      "id": "synthwave",
+      "label": "Synthwave",
+      "visualCompatibility": "recommended",
+      "recommendedVisualPresets": [
+        "cyberpunk",
+        "retrofuturism"
+      ],
+      "visualVerification": {
+        "method": "rendered-computed-style",
+        "test": "test/demo-smoke.test.mjs",
+        "computedProperties": {
+          "cyberpunk": {
+            "boxShadow": "0px 0px 18px"
+          },
+          "retrofuturism": {
+            "boxShadow": "0px 10px 30px"
+          }
+        },
+        "assertion": "A visible browser contract fixture renders each preset's distinct article box-shadow while data-ly-layout remains synthwave."
+      }
+    }
+  ]
+}
diff --git a/scripts/build-pages.mjs b/scripts/build-pages.mjs
index 22bd99e..374d49f 100644
--- a/scripts/build-pages.mjs
+++ b/scripts/build-pages.mjs
@@ -43,6 +43,7 @@ await rm(pagesDir, { recursive: true, force: true });
 await mkdir(pagesDir, { recursive: true });
 await cp(demoDir, pagesDir, { recursive: true });
 await cp(distDir, join(pagesDir, "dist"), { recursive: true });
+await cp(join(root, "personalities.json"), join(pagesDir, "personalities.json"));
 
 const indexPath = join(pagesDir, "index.html");
 const index = await readFile(indexPath, "utf8");
@@ -50,12 +51,13 @@ let pagesIndex = index.replaceAll(
   "../dist/layout-style-css.css",
   "./dist/layout-style-css.css"
 );
+pagesIndex = pagesIndex.replaceAll("../personalities.json", "./personalities.json");
 
 /*
  * Pages receives immutable asset URLs derived from deployed content, so a demo
  * hotfix cannot be hidden by a browser cache that still holds the same version.
  */
-for (const assetPath of ["demo.css", "demo.js", "dist/layout-style-css.css"]) {
+for (const assetPath of ["demo.css", "demo.js", "personality-metadata.js", "dist/layout-style-css.css", "personalities.json"]) {
   const assetContents = await readFile(join(pagesDir, ...assetPath.split("/")));
   pagesIndex = fingerprintVersionedAsset(pagesIndex, assetPath, assetContents);
 }
diff --git a/scripts/build.mjs b/scripts/build.mjs
index 479cfa6..4230af1 100644
--- a/scripts/build.mjs
+++ b/scripts/build.mjs
@@ -5,6 +5,7 @@ import { fileURLToPath } from "node:url";
 const root = fileURLToPath(new URL("..", import.meta.url));
 const sourceDir = join(root, "styles");
 const distDir = join(root, "dist");
+const manifest = JSON.parse(await readFile(join(root, "manifest.json"), "utf8"));
 const cascadeLayerPrelude =
   "@layer ly.reset, ly.tokens, ly.wrappers, ly.primitives, ly.recipes, ly.utilities, ly.personalities;";
 
@@ -15,24 +16,34 @@ const coreModuleFiles = [
   "recipes.css",
   "utilities.css"
 ];
-const personalityNames = [
-  "minimal-saas",
-  "bento",
-  "maximalist",
-  "bauhaus",
-  "tactile",
-  "neumorphism",
-  "retrofuturism",
-  "brutalism",
-  "cyberpunk",
-  "y2k",
-  "retro-glass",
-  "f-pattern",
-  "z-pattern",
-  "split-screen",
-  "mondrian",
-  "synthwave"
-];
+function buildPersonalityMetadata(sourceManifest) {
+  const personalities = Array.isArray(sourceManifest.personalities)
+    ? sourceManifest.personalities
+    : [];
+  const pairings = Array.isArray(sourceManifest.personalityPairings)
+    ? sourceManifest.personalityPairings
+    : [];
+
+  if (
+    personalities.length === 0 ||
+    pairings.length !== personalities.length ||
+    pairings.some(({ id }) => !personalities.includes(id))
+  ) {
+    throw new Error("manifest.json must provide one pairing record for every layout personality.");
+  }
+
+  return {
+    schemaVersion: 1,
+    generatedFrom: "manifest.json",
+    selector: "data-ly-layout",
+    independentSelectors: ["data-ly-layout", "data-ui", "data-theme", "data-mode"],
+    personalities: pairings
+  };
+}
+
+/* Manifest pairing records drive profile assets and generated demo fallbacks. */
+const personalityMetadata = buildPersonalityMetadata(manifest);
+const personalityNames = personalityMetadata.personalities.map(({ id }) => id);
 const personalityFiles = personalityNames.map((name) => `personalities/${name}.css`);
 const authoredEntryFiles = [
   "core.css",
@@ -81,6 +92,15 @@ async function writeDist(file, css) {
 assertInsideRoot(sourceDir);
 assertInsideRoot(distDir);
 
+await writeFile(
+  join(root, "personalities.json"),
+  `${JSON.stringify(personalityMetadata, null, 2)}\n`
+);
+await writeFile(
+  join(root, "demo", "personality-metadata.js"),
+  `/* Generated from manifest.json by scripts/build.mjs. */\nwindow.LAYOUT_STYLE_PERSONALITY_METADATA = ${JSON.stringify(personalityMetadata)};\n`
+);
+
 await rm(distDir, { recursive: true, force: true });
 await mkdir(distDir, { recursive: true });
 
diff --git a/scripts/check-css-ownership.mjs b/scripts/check-css-ownership.mjs
new file mode 100644
index 0000000..f86250c
--- /dev/null
+++ b/scripts/check-css-ownership.mjs
@@ -0,0 +1,379 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { generate, parse, property as describeProperty, walk } from "css-tree";
+
+const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const allowlistFields = ["owner", "property", "reason", "reviewDate", "selector"];
+const visualPaintProperties = new Set([
+  "background",
+  "background-color",
+  "background-image",
+  "backdrop-filter",
+  "box-shadow",
+  "color",
+  "fill",
+  "filter",
+  "font",
+  "font-family",
+  "stroke",
+  "text-shadow",
+]);
+const transformProperties = new Set(["rotate", "scale", "transform", "translate"]);
+const nativeStatePseudos = new Set([
+  "active",
+  "any-link",
+  "checked",
+  "disabled",
+  "enabled",
+  "focus",
+  "focus-visible",
+  "focus-within",
+  "hover",
+  "indeterminate",
+  "invalid",
+  "open",
+  "optional",
+  "placeholder-shown",
+  "popover-open",
+  "read-only",
+  "read-write",
+  "required",
+  "target",
+  "user-invalid",
+  "valid",
+  "visited",
+]);
+const commonStateClasses = new Set([
+  "is-active",
+  "is-busy",
+  "is-checked",
+  "is-disabled",
+  "is-loading",
+  "is-open",
+  "is-pressed",
+  "is-selected",
+]);
+const commonStateSuffixes = new Set(
+  [...commonStateClasses].map((name) => name.replace(/^is-/, "")),
+);
+// Reflected native attributes are state selectors even when no pseudo-class is used.
+const stateAttributes = new Set([
+  "checked",
+  "disabled",
+  "hidden",
+  "open",
+  "readonly",
+  "required",
+  "selected",
+  "aria-busy",
+  "aria-checked",
+  "aria-current",
+  "aria-disabled",
+  "aria-expanded",
+  "aria-hidden",
+  "aria-invalid",
+  "aria-pressed",
+  "aria-selected",
+  "data-active",
+  "data-checked",
+  "data-disabled",
+  "data-loading",
+  "data-pressed",
+  "data-selected",
+  "data-state",
+]);
+const sharedStateClassVocabulary = new Set([
+  "active",
+  "any-link",
+  "busy",
+  "busy-loading",
+  "checked",
+  "current",
+  "disabled",
+  "enabled",
+  "expanded",
+  "focus",
+  "focus-visible",
+  "focus-within",
+  "hidden",
+  "hover",
+  "indeterminate",
+  "invalid",
+  "loading",
+  "open",
+  "optional",
+  "persistent",
+  "placeholder-shown",
+  "popover-open",
+  "pressed",
+  "read-only",
+  "read-write",
+  "readonly",
+  "required",
+  "selected",
+  "target",
+  "user-invalid",
+  "valid",
+  "visited",
+]);
+
+function propertyContract(propertyName) {
+  const described = describeProperty(propertyName);
+  return {
+    custom: described.custom,
+    name: described.custom ? propertyName : described.basename,
+  };
+}
+
+function entryKey({ selector, property }) {
+  return `${selector}\u0000${property}`;
+}
+
+function isIsoDate(value) {
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(value)) return false;
+
+  const parsed = new Date(`${value}T00:00:00Z`);
+  return !Number.isNaN(parsed.valueOf()) && parsed.toISOString().startsWith(value);
+}
+
+export function validateAllowlist({ entries, now = new Date() }) {
+  if (!Array.isArray(entries)) throw new Error("layout allowlist must be an array.");
+
+  // Strict metadata keeps any future exception narrow, attributable, and time-bounded.
+  const seen = new Set();
+  for (const entry of entries) {
+    if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+      throw new Error("layout allowlist entries must be objects.");
+    }
+
+    const fields = Object.keys(entry).sort();
+    if (fields.join("\u0000") !== allowlistFields.join("\u0000")) {
+      throw new Error(
+        `layout allowlist entries must contain exactly ${allowlistFields.join(", ")}.`,
+      );
+    }
+    if (allowlistFields.some((field) => typeof entry[field] !== "string")) {
+      throw new Error("layout allowlist entries must use string fields.");
+    }
+    if (entry.selector.includes("*") || entry.property.includes("*")) {
+      throw new Error("layout allowlist entries must not contain wildcards.");
+    }
+    if (!entry.selector.trim() || !entry.property.trim()) {
+      throw new Error("layout selector and property must be exact non-empty values.");
+    }
+    if (entry.owner !== "layout-style-css") {
+      throw new Error("layout allowlist owner must be layout-style-css.");
+    }
+    if (entry.reason.trim().length < 24) {
+      throw new Error("layout allowlist entries require a professional reason.");
+    }
+    if (!isIsoDate(entry.reviewDate)) {
+      throw new Error("layout allowlist reviewDate must be an ISO date.");
+    }
+
+    const reviewTime = new Date(`${entry.reviewDate}T00:00:00Z`).valueOf();
+    const ageDays = (now.valueOf() - reviewTime) / 86_400_000;
+    if (ageDays < 0 || ageDays > 366) {
+      throw new Error(`layout allowlist entry has a stale reviewDate: ${entry.reviewDate}.`);
+    }
+
+    const key = entryKey(entry);
+    if (seen.has(key)) {
+      throw new Error(
+        `layout allowlist has a duplicate selector and property: ${entry.selector} ${entry.property}.`,
+      );
+    }
+    seen.add(key);
+  }
+}
+
+function isVisualPaintProperty(property) {
+  if (visualPaintProperties.has(property)) return true;
+  if (property === "color-scheme" || property.endsWith("-color")) return true;
+  if (/^border(?:$|-(?!collapse$|radius(?:-|$)|spacing$))/.test(property)) {
+    return true;
+  }
+  if (/^outline(?:$|-(?!offset$))/.test(property)) return true;
+  return /^text-decoration(?:-|$)/.test(property);
+}
+
+function manifestStateClasses(manifest) {
+  const manifestClasses = new Set([
+    ...(manifest.selectors?.stateClasses ?? []),
+    ...(manifest.classApi?.stateClasses ?? []),
+  ].map((selector) => selector.replace(/^\./, "").toLowerCase()));
+
+  for (const preset of manifest.presets ?? []) {
+    const suffixes = [
+      ...(manifest.classApi?.universalVisualSuffixes ?? []),
+      ...(manifest.classApi?.presetExtras?.[preset.id] ?? []),
+    ];
+    for (const suffix of suffixes) {
+      if (
+        commonStateSuffixes.has(suffix) ||
+        [...commonStateSuffixes].some((state) => suffix.endsWith(`-${state}`))
+      ) {
+        manifestClasses.add(`${preset.prefix}-${suffix}`.toLowerCase());
+      }
+    }
+  }
+
+  return manifestClasses;
+}
+
+function selectorHasState(rule, manifest) {
+  const manifestClasses = manifestStateClasses(manifest);
+  const exactStateClasses = new Set([
+    ...commonStateClasses,
+    ...sharedStateClassVocabulary,
+    ...manifestClasses,
+  ]);
+  const stateVocabulary = new Set([
+    ...sharedStateClassVocabulary,
+    ...manifestClasses,
+  ]);
+  let stateful = false;
+
+  // Walking the selector AST catches states nested in functional pseudo-classes.
+  walk(rule.prelude, {
+    enter(node) {
+      if (
+        node.type === "PseudoClassSelector" &&
+        nativeStatePseudos.has(node.name.toLowerCase())
+      ) {
+        stateful = true;
+      }
+      if (node.type === "ClassSelector") {
+        const className = node.name.toLowerCase();
+        const hasBoundarySuffix = [...stateVocabulary].some(
+          (state) =>
+            className.endsWith(`-${state}`) || className.endsWith(`_${state}`),
+        );
+        if (exactStateClasses.has(className) || hasBoundarySuffix) stateful = true;
+      }
+      if (
+        node.type === "AttributeSelector" &&
+        stateAttributes.has(node.name.name.toLowerCase())
+      ) {
+        stateful = true;
+      }
+    },
+  });
+
+  return stateful;
+}
+
+function isInteractionMechanics(property) {
+  return (
+    transformProperties.has(property) ||
+    /^(?:animation|transition)(?:-|$)/.test(property)
+  );
+}
+
+function violationRule({ property, rule, manifest }) {
+  if (isVisualPaintProperty(property)) return "layout-visual-paint";
+  if (isInteractionMechanics(property) && selectorHasState(rule, manifest)) {
+    return "layout-interaction-transform";
+  }
+  return null;
+}
+
+export function auditOwnership({ css, allowlist, manifest = {}, now = new Date() }) {
+  validateAllowlist({ entries: allowlist, now });
+
+  const ast = parse(css, { filename: "layout", positions: true });
+  const allowlistByKey = new Map(allowlist.map((entry) => [entryKey(entry), entry]));
+  const matchedKeys = new Set();
+  const violations = [];
+  let declarationCount = 0;
+
+  walk(ast, {
+    visit: "Rule",
+    enter(rule) {
+      const selector = generate(rule.prelude);
+      rule.block.children.forEach((node) => {
+        if (node.type !== "Declaration") return;
+        declarationCount += 1;
+
+        const property = propertyContract(node.property);
+        if (property.custom) return;
+
+        const ruleName = violationRule({
+          property: property.name,
+          rule,
+          manifest,
+        });
+        if (!ruleName) return;
+
+        const key = entryKey({ selector, property: property.name });
+        if (allowlistByKey.has(key)) {
+          matchedKeys.add(key);
+          return;
+        }
+
+        violations.push({
+          target: "layout",
+          selector,
+          property: property.name,
+          line: node.loc.start.line,
+          rule: ruleName,
+        });
+      });
+    },
+  });
+
+  for (const entry of allowlist) {
+    if (!matchedKeys.has(entryKey(entry))) {
+      throw new Error(
+        `layout allowlist entry does not match a forbidden declaration: ${entry.selector} ${entry.property}.`,
+      );
+    }
+  }
+
+  return {
+    declarationCount,
+    matchedAllowlistCount: matchedKeys.size,
+    violations,
+  };
+}
+
+function run() {
+  const startedAt = performance.now();
+  const manifest = JSON.parse(
+    fs.readFileSync(path.join(packageRoot, "manifest.json"), "utf8"),
+  );
+  const allowlist = JSON.parse(
+    fs.readFileSync(path.join(packageRoot, "ownership-allowlist.json"), "utf8"),
+  );
+  const result = auditOwnership({
+    css: fs.readFileSync(path.join(packageRoot, "dist", "layout-style-css.css"), "utf8"),
+    allowlist: allowlist.layout,
+    manifest,
+  });
+
+  if (result.violations.length > 0) {
+    const details = result.violations
+      .map(
+        ({ selector, property, line, rule }) =>
+          `dist/layout-style-css.css:${line} ${selector} ${property} (${rule})`,
+      )
+      .join("\n");
+    throw new Error(`CSS ownership violations:\n${details}`);
+  }
+
+  const duration = Math.round(performance.now() - startedAt);
+  console.log(
+    `CSS ownership passed for ${result.declarationCount} declarations with ${result.matchedAllowlistCount} reviewed exceptions in ${duration}ms.`,
+  );
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try {
+    run();
+  } catch (error) {
+    console.error(error.message);
+    process.exitCode = 1;
+  }
+}
diff --git a/scripts/release-fixture-contract.mjs b/scripts/release-fixture-contract.mjs
new file mode 100644
index 0000000..12464cb
--- /dev/null
+++ b/scripts/release-fixture-contract.mjs
@@ -0,0 +1,226 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const rootDir = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "..",
+);
+
+export function readFixtureDescriptor(repositoryRoot) {
+  const descriptor = JSON.parse(
+    fs.readFileSync(
+      path.join(repositoryRoot, "ecosystem-release-fixture.json"),
+      "utf8",
+    ),
+  );
+  assert.match(
+    descriptor.repository,
+    /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/,
+    "Fixture repository must be owner/name.",
+  );
+  assert.match(
+    descriptor.revision,
+    /^[0-9a-f]{40}$/,
+    "Fixture revision must be an immutable 40-character commit SHA.",
+  );
+  return descriptor;
+}
+
+export function writeGithubOutputs(descriptor, outputPath) {
+  assert.ok(
+    outputPath,
+    "GITHUB_OUTPUT is required for workflow source resolution.",
+  );
+  fs.appendFileSync(
+    outputPath,
+    `ui_repository=${descriptor.repository}\nui_revision=${descriptor.revision}\n`,
+  );
+}
+
+export function validateWorkflowSources(workflows) {
+  const mutationPatterns = [
+    {
+      label: "npm publish",
+      pattern: /^(?!\s*(?:name:|#)).*\bnpm\s+publish\b/m,
+    },
+    {
+      label: "npm version",
+      pattern: /^(?!\s*(?:name:|#)).*\bnpm\s+version(?:\s|$)/m,
+    },
+    {
+      label: "git tag",
+      pattern: /^(?!\s*(?:name:|#)).*\bgit\s+tag(?:\s|$)/m,
+    },
+    {
+      label: "git push",
+      pattern: /^(?!\s*(?:name:|#)).*\bgit\s+push(?:\s|$)/m,
+    },
+    {
+      label: "GitHub release",
+      pattern:
+        /(?:^\s*(?:-\s*)?uses:\s*(?:softprops\/action-gh-release|ncipollo\/release-action|actions\/create-release)@|^(?!\s*(?:name:|#)).*\bgh\s+release\b)/m,
+    },
+    {
+      label: "deployment",
+      pattern:
+        /(?:^\s*(?:-\s*)?uses:\s*(?:actions\/(?:deploy-pages|upload-pages-artifact)|peaceiris\/actions-gh-pages|cloudflare\/wrangler-action|azure\/webapps-deploy)@|^(?!\s*(?:name:|#)).*\b(?:wrangler\s+(?:deploy|publish)|netlify\s+deploy|firebase\s+deploy|vercel(?:\s+deploy)?)\b)/m,
+    },
+  ];
+  const pullRequestWorkflows = workflows.filter(({ source }) =>
+    /^\s*pull_request\s*:/m.test(source),
+  );
+  assert.ok(
+    pullRequestWorkflows.some(({ source }) =>
+      /\bnpm\s+run\s+release:preflight\b/.test(source),
+    ),
+    "A pull-request workflow must execute npm run release:preflight.",
+  );
+  for (const workflow of pullRequestWorkflows) {
+    for (const mutation of mutationPatterns) {
+      if (mutation.pattern.test(workflow.source)) {
+        throw new Error(
+          `pull-request workflow ${workflow.name} enables forbidden mutation: ${mutation.label}`,
+        );
+      }
+    }
+  }
+
+  const publishWorkflow = workflows.find(
+    ({ name }) => name === "npm-publish.yml",
+  );
+  assert.ok(publishWorkflow, "npm-publish.yml must exist.");
+  const preflightIndex = publishWorkflow.source.search(
+    /\bnpm\s+run\s+release:preflight\b/,
+  );
+  const publishIndex = publishWorkflow.source.search(
+    /^(?!\s*(?:name:|#)).*\bnpm\s+publish\b/m,
+  );
+  assert.ok(
+    publishIndex >= 0,
+    "npm-publish.yml must retain the package publish step.",
+  );
+  assert.ok(
+    preflightIndex >= 0 && preflightIndex < publishIndex,
+    "npm-publish.yml must run preflight before npm publish.",
+  );
+  assert.match(
+    publishWorkflow.source,
+    /^(?!\s*(?:name:|#)).*\bnpm\s+publish\b[^\r\n]*--ignore-scripts(?:\s|$)/m,
+    "npm-publish.yml must suppress lifecycle re-entry after explicit preflight.",
+  );
+}
+
+export function validateRepositoryWorkflows(repositoryRoot) {
+  const workflowRoot = path.join(repositoryRoot, ".github", "workflows");
+  const workflows = fs
+    .readdirSync(workflowRoot)
+    .filter((name) => /\.ya?ml$/i.test(name))
+    .map((name) => ({
+      name,
+      source: fs.readFileSync(path.join(workflowRoot, name), "utf8"),
+    }));
+  validateWorkflowSources(workflows);
+}
+
+async function runCli(args) {
+  const descriptor = readFixtureDescriptor(rootDir);
+  if (args.includes("--write-github-outputs")) {
+    writeGithubOutputs(descriptor, process.env.GITHUB_OUTPUT);
+    return;
+  }
+
+  const { fixtureRoot, forwardedArgs } = parseFixtureRoot(args);
+  const resolvedFixtureRoot = path.resolve(
+    fixtureRoot ??
+      process.env.CSS_ECOSYSTEM_FIXTURE_ROOT ??
+      path.join(rootDir, "..", "ui-style-kit-css"),
+  );
+  const preflightModule = path.join(
+    resolvedFixtureRoot,
+    "scripts",
+    "release-preflight.mjs",
+  );
+  assert.ok(
+    fs.existsSync(preflightModule),
+    `Reviewed UI release fixture is missing ${preflightModule}.`,
+  );
+  assertReviewedRevision(resolvedFixtureRoot, descriptor.revision);
+
+  const packageName = JSON.parse(
+    fs.readFileSync(path.join(rootDir, "package.json"), "utf8"),
+  ).name;
+  const siblingInteractive = path.resolve(
+    rootDir,
+    "..",
+    "Interactive-Surface-CSS",
+  );
+  const commandArgs = [
+    preflightModule,
+    "--fixture-root",
+    resolvedFixtureRoot,
+    "--candidate-root",
+    rootDir,
+    "--candidate-package",
+    packageName,
+    "--interactive-repo",
+    siblingInteractive,
+    "--interactive-docs-repo",
+    siblingInteractive,
+    "--layout-docs-repo",
+    rootDir,
+    ...forwardedArgs,
+  ];
+  run(process.execPath, commandArgs, { cwd: rootDir });
+}
+
+function parseFixtureRoot(args) {
+  const forwardedArgs = [];
+  let fixtureRoot;
+  for (let index = 0; index < args.length; index += 1) {
+    if (args[index] === "--fixture-root") {
+      fixtureRoot = args[(index += 1)];
+      assert.ok(fixtureRoot, "--fixture-root requires a value.");
+    } else {
+      forwardedArgs.push(args[index]);
+    }
+  }
+  return { fixtureRoot, forwardedArgs };
+}
+
+function assertReviewedRevision(fixtureRoot, revision) {
+  const result = spawnSync(
+    "git",
+    ["-C", fixtureRoot, "merge-base", "--is-ancestor", revision, "HEAD"],
+    {
+      encoding: "utf8",
+    },
+  );
+  assert.equal(
+    result.status,
+    0,
+    `UI fixture checkout must contain reviewed revision ${revision}; got ${result.stderr || result.stdout || "unknown git error"}.`,
+  );
+}
+
+function run(command, args, { cwd }) {
+  const result = spawnSync(command, args, {
+    cwd,
+    encoding: "utf8",
+    stdio: "inherit",
+  });
+  if (result.status !== 0) {
+    throw new Error(
+      `Command failed (${result.status}): ${command} ${args.join(" ")}`,
+    );
+  }
+}
+
+if (
+  process.argv[1] &&
+  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
+) {
+  await runCli(process.argv.slice(2));
+}
diff --git a/test/demo-smoke.test.mjs b/test/demo-smoke.test.mjs
index d3d9f7e..074e1b4 100644
--- a/test/demo-smoke.test.mjs
+++ b/test/demo-smoke.test.mjs
@@ -12,6 +12,7 @@ const demoJs = readFileSync(join(root, "demo", "demo.js"), "utf8");
 const uiManifest = JSON.parse(
   readFileSync(join(root, "node_modules", "ui-style-kit-css", "manifest.json"), "utf8")
 );
+const personalityMetadata = JSON.parse(readFileSync(join(root, "personalities.json"), "utf8"));
 const companionCssFixtures = Object.freeze({
   "ui-style-kit.visual.min.css": readFileSync(
     join(root, "node_modules", "ui-style-kit-css", "dist", "ui-style-kit.visual.min.css")
@@ -30,6 +31,8 @@ const browserName =
 const quick = process.argv.includes("--quick");
 const browserTypes = { chromium, firefox, webkit };
 const browserType = browserTypes[browserName];
+// A bounded recovery wait accommodates cold WebKit startup while retaining failure detection.
+const METADATA_FAILURE_RECOVERY_READINESS_TIMEOUT_MS = 10_000;
 
 assert(browserType, `Unsupported browser "${browserName}".`);
 
@@ -42,24 +45,7 @@ const recipes = [
   "gallery",
   "card-grid"
 ];
-const personalities = [
-  "minimal-saas",
-  "bauhaus",
-  "tactile",
-  "cyberpunk",
-  "f-pattern",
-  "brutalism",
-  "neumorphism",
-  "y2k",
-  "retro-glass",
-  "z-pattern",
-  "retrofuturism",
-  "mondrian",
-  "synthwave",
-  "bento",
-  "maximalist",
-  "split-screen"
-];
+const personalities = personalityMetadata.personalities.map(({ id }) => id);
 const wrappers = ["default", "compact", "prose", "content", "wide", "full", "breakout"];
 const devices = {
   "phone-portrait": { width: 360, height: 800 },
@@ -144,7 +130,7 @@ const topologyEdges = [
 
 const assertStaticDemoContract = () => {
   assert.match(demoHtml, /Layout Style CSS v3/);
-  assert.match(demoHtml, /content="3\.0\.0"/);
+  assert.match(demoHtml, /content="3\.0\.1"/);
   assert.match(demoHtml, /id="deviceSelect"/);
   assert.match(demoHtml, /id="containerSelect"/);
   assert.match(demoHtml, /id="heightSelect"/);
@@ -152,17 +138,17 @@ const assertStaticDemoContract = () => {
   assert.match(demoHtml, /id="topologyReadout"/);
   assert.match(
     demoHtml,
-    /href="\.\.\/dist\/layout-style-css\.css\?v=3\.0\.0"/,
+    /href="\.\.\/dist\/layout-style-css\.css\?v=3\.0\.1"/,
     "The demo should cache-bust its v3 layout bundle."
   );
   assert.match(
     demoHtml,
-    /href="\.\/demo\.css\?v=3\.0\.0"/,
+    /href="\.\/demo\.css\?v=3\.0\.1"/,
     "The demo should cache-bust its v3 presentation styles."
   );
   assert.match(
     demoHtml,
-    /src="\.\/demo\.js\?v=3\.0\.0"/,
+    /src="\.\/demo\.js\?v=3\.0\.1"/,
     "The demo should cache-bust its v3 controller."
   );
   assert.doesNotMatch(demoHtml, /integrations\/ui-style-kit\.css/);
@@ -460,6 +446,124 @@ const verifyIdentityAndControls = async (page, baseUrl) => {
   assert.equal(await page.locator("[data-ly-recipe]").getAttribute("data-ly-responsive"), "manual");
 };
 
+const verifyPersonalityOptionsUsePairingMetadata = async (page, baseUrl) => {
+  const metadataUrl = new URL("../personalities.json?v=3.0.1", baseUrl).toString();
+  const pairingFixture = {
+    schemaVersion: 1,
+    personalities: [
+      {
+        id: "minimal-saas",
+        label: "Minimal SaaS",
+        visualCompatibility: "native",
+        recommendedVisualPresets: ["minimal-saas"]
+      },
+      {
+        id: "synthwave",
+        label: "Synthwave",
+        visualCompatibility: "recommended",
+        recommendedVisualPresets: ["cyberpunk", "retrofuturism"]
+      }
+    ]
+  };
+
+  await page.route(metadataUrl, (route) =>
+    route.fulfill({
+      body: JSON.stringify(pairingFixture),
+      contentType: "application/json",
+      status: 200
+    })
+  );
+  await page.goto(`${baseUrl}?ecosystem=layout-only`, { waitUntil: "domcontentloaded" });
+  await page.waitForFunction(() => document.body.dataset.demoReady === "true");
+
+  assert.deepEqual(
+    await page.locator("#personalitySelect option").evaluateAll((options) =>
+      options.map((option) => ({
+        value: option.value,
+        label: option.textContent,
+        compatibility: option.dataset.visualCompatibility
+      }))
+    ),
+    [
+      { value: "minimal-saas", label: "Minimal SaaS", compatibility: "native" },
+      { value: "synthwave", label: "Synthwave", compatibility: "recommended" }
+    ],
+    "The personality switcher must render the layout pairing metadata it loads."
+  );
+
+  await page.unroute(metadataUrl);
+};
+
+const verifySynthwaveVisualRecommendations = async (page, baseUrl) => {
+  const synthwave = personalityMetadata.personalities.find(({ id }) => id === "synthwave");
+
+  assert.deepEqual(synthwave?.recommendedVisualPresets, ["cyberpunk", "retrofuturism"]);
+  assert.deepEqual(synthwave?.visualVerification?.computedProperties, {
+    cyberpunk: { boxShadow: "0px 0px 18px" },
+    retrofuturism: { boxShadow: "0px 10px 30px" }
+  });
+  for (const ui of synthwave.recommendedVisualPresets) {
+    await page.goto(
+      `${baseUrl}?ecosystem=layout-ui&personality=synthwave&ui=${ui}&theme=cyber-lime&mode=dark`,
+      { waitUntil: "domcontentloaded" }
+    );
+    await page.waitForFunction(() => document.body.dataset.demoReady === "true");
+
+    const rendered = await page.evaluate(() => {
+      /* A dedicated visible article isolates UI paint from the layout demo's own chrome. */
+      const pairingFixture = document.createElement("article");
+      pairingFixture.id = "pairingVisualFixture";
+      pairingFixture.textContent = "Visual pairing verification";
+      pairingFixture.style.position = "fixed";
+      pairingFixture.style.inset = "1rem 1rem auto auto";
+      pairingFixture.style.zIndex = "1000";
+      document.body.append(pairingFixture);
+
+      return {
+        layout: document.querySelector("#previewRoot")?.dataset.lyLayout,
+        ui: document.body.dataset.ui,
+        fixtureVisible: pairingFixture.getClientRects().length > 0,
+        pairingFixtureShadow: getComputedStyle(pairingFixture).boxShadow
+      };
+    });
+
+    assert.equal(rendered.layout, "synthwave", `${ui} must not override the independent layout selector.`);
+    assert.equal(rendered.ui, ui);
+    assert.equal(rendered.fixtureVisible, true, "The visual pairing fixture must participate in rendering.");
+    assert.match(
+      rendered.pairingFixtureShadow,
+      new RegExp(synthwave.visualVerification.computedProperties[ui].boxShadow),
+      `${ui} must retain its distinct rendered article shadow treatment.`
+    );
+  }
+};
+
+const verifyPersonalityMetadataFailureRecovery = async (page, baseUrl) => {
+  const metadataUrl = new URL("../personalities.json?v=3.0.1", baseUrl).toString();
+  const recoveryContext = await page.context().browser().newContext();
+  const recoveryPage = await recoveryContext.newPage();
+
+  await recoveryPage.route(metadataUrl, (route) => route.fulfill({ status: 503, body: "Unavailable" }));
+  await recoveryPage.goto(`${baseUrl}?ecosystem=layout-only`, { waitUntil: "domcontentloaded" });
+  await recoveryPage.waitForFunction(
+    () => document.body.dataset.demoReady === "true",
+    undefined,
+    { timeout: METADATA_FAILURE_RECOVERY_READINESS_TIMEOUT_MS }
+  );
+
+  const recovered = await recoveryPage.evaluate(() => ({
+    fallback: window.LAYOUT_STYLE_PERSONALITY_METADATA?.personalities ?? [],
+    options: [...document.querySelectorAll("#personalitySelect option")].map((option) => option.value),
+    busy: document.querySelector("#personalitySelect")?.getAttribute("aria-busy"),
+    status: document.querySelector("#personalityMetadataStatus")?.textContent
+  }));
+
+  assert.deepEqual(recovered.options, recovered.fallback.map(({ id }) => id));
+  assert.equal(recovered.busy, "false");
+  assert.match(recovered.status ?? "", /using packaged fallback/i);
+  await recoveryContext.close();
+};
+
 const verifyTopologyEdges = async (page, baseUrl) => {
   await page.setViewportSize({ width: 1920, height: 1080 });
   await page.goto(`${baseUrl}?ecosystem=layout-only&wrapper=full`, {
@@ -993,6 +1097,9 @@ page.on("console", (message) => {
 
 try {
   await installExternalFixtures(page);
+  await verifyPersonalityOptionsUsePairingMetadata(page, server.baseUrl);
+  await verifyPersonalityMetadataFailureRecovery(page, server.baseUrl);
+  await verifySynthwaveVisualRecommendations(page, server.baseUrl);
   await verifyIdentityAndControls(page, server.baseUrl);
   await verifyTopologyEdges(page, server.baseUrl);
   await verifyManualAndNearestContainer(page, server.baseUrl);
diff --git a/test/layout-css-contract.test.mjs b/test/layout-css-contract.test.mjs
index 2891cf3..1007323 100644
--- a/test/layout-css-contract.test.mjs
+++ b/test/layout-css-contract.test.mjs
@@ -8,6 +8,7 @@ const root = fileURLToPath(new URL("..", import.meta.url));
 const styles = join(root, "styles");
 const dist = join(root, "dist");
 const packageJson = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
+const manifest = JSON.parse(readFileSync(join(root, "manifest.json"), "utf8"));
 
 const layerPrelude =
   "@layer ly.reset, ly.tokens, ly.wrappers, ly.primitives, ly.recipes, ly.utilities, ly.personalities;";
@@ -19,24 +20,7 @@ const focusedFiles = [
   "utilities.css",
   "personalities.css"
 ];
-const personalityNames = [
-  "minimal-saas",
-  "bento",
-  "maximalist",
-  "bauhaus",
-  "tactile",
-  "neumorphism",
-  "retrofuturism",
-  "brutalism",
-  "cyberpunk",
-  "y2k",
-  "retro-glass",
-  "f-pattern",
-  "z-pattern",
-  "split-screen",
-  "mondrian",
-  "synthwave"
-];
+const personalityNames = manifest.personalities;
 const recipeNames = [
   "app-shell",
   "dashboard",
@@ -70,6 +54,8 @@ const expectedExports = {
   "./utilities.css": "./dist/utilities.css",
   "./personalities.css": "./dist/personalities.css",
   "./personalities/*.css": "./dist/personalities/*.css",
+  "./personalities.json": "./personalities.json",
+  "./manifest.json": "./manifest.json",
   "./package.json": "./package.json"
 };
 const expectedPublishedFiles = [
@@ -82,7 +68,13 @@ const expectedPublishedFiles = [
   "dist/recipes.css",
   "dist/utilities.css",
   "dist/personalities.css",
-  "dist/personalities/*.css"
+  "dist/personalities/*.css",
+  "personalities.json",
+  "manifest.json",
+  "README.md",
+  "LICENSE",
+  "CHANGELOG.md",
+  "docs/wiki"
 ];
 const flattenedSourceFiles = [
   "foundation.css",
@@ -114,7 +106,7 @@ function minifyCss(css) {
     .trim();
 }
 
-assert.equal(packageJson.version, "3.0.0", "The v3 branch must expose version 3.0.0");
+assert.equal(packageJson.version, "3.0.1", "The v3 branch must expose version 3.0.1");
 assert.equal(packageJson.engines?.node, ">=20", "Development must retain the Node 20 floor");
 assert.deepEqual(packageJson.exports, expectedExports, "Package exports must match the clean v3 API");
 assert.deepEqual(
@@ -140,6 +132,23 @@ const [packReport] = JSON.parse(packResult.stdout);
 const expectedTarballFiles = [
   "LICENSE",
   "README.md",
+  "CHANGELOG.md",
+  "docs/wiki/Contributing.md",
+  "docs/wiki/Demo-And-GitHub-Pages.md",
+  "docs/wiki/Getting-Started.md",
+  "docs/wiki/Home.md",
+  "docs/wiki/Installation-And-CDN.md",
+  "docs/wiki/Layout-Primitives.md",
+  "docs/wiki/Layout-Recipes.md",
+  "docs/wiki/Layout-Styles.md",
+  "docs/wiki/Migrating-To-2.0.md",
+  "docs/wiki/Migrating-To-3.0.md",
+  "docs/wiki/Release-And-Publishing.md",
+  "docs/wiki/Security-And-Support.md",
+  "docs/wiki/UI-Style-Kit-Compatibility.md",
+  "docs/wiki/_Sidebar.md",
+  "personalities.json",
+  "manifest.json",
   "package.json",
   "dist/layout-style-css.css",
   "dist/layout-style-css.min.css",
diff --git a/test/manifest-contract.test.mjs b/test/manifest-contract.test.mjs
new file mode 100644
index 0000000..9aec7b1
--- /dev/null
+++ b/test/manifest-contract.test.mjs
@@ -0,0 +1,227 @@
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+
+const root = fileURLToPath(new URL("..", import.meta.url));
+const packageJson = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
+const manifest = JSON.parse(readFileSync(join(root, "manifest.json"), "utf8"));
+const personalityMetadata = JSON.parse(readFileSync(join(root, "personalities.json"), "utf8"));
+const publicDocumentation = [
+  "README.md",
+  "docs/wiki/Layout-Primitives.md",
+  "docs/wiki/Layout-Styles.md",
+  "docs/wiki/Migrating-To-2.0.md",
+  "docs/wiki/Migrating-To-3.0.md"
+].map((file) => readFileSync(join(root, file), "utf8")).join("\n");
+
+const entrypoints = {
+  default: "./dist/layout-style-css.css",
+  minified: "./dist/layout-style-css.min.css",
+  core: "./dist/core.css",
+  foundation: "./dist/foundation.css",
+  wrappers: "./dist/wrappers.css",
+  primitives: "./dist/primitives.css",
+  recipes: "./dist/recipes.css",
+  utilities: "./dist/utilities.css",
+  personalities: "./dist/personalities.css",
+  personalityModules: "./dist/personalities/*.css",
+  personalityMetadata: "./personalities.json"
+};
+const entrypointExports = {
+  default: ".",
+  minified: "./min.css",
+  core: "./core.css",
+  foundation: "./foundation.css",
+  wrappers: "./wrappers.css",
+  primitives: "./primitives.css",
+  recipes: "./recipes.css",
+  utilities: "./utilities.css",
+  personalities: "./personalities.css",
+  personalityModules: "./personalities/*.css",
+  personalityMetadata: "./personalities.json"
+};
+const personalities = manifest.personalities;
+// These are stable consumer overrides; wrapper calculation variables remain implementation details below.
+const geometryTokens = [
+  "--ly-space-0", "--ly-space-1", "--ly-space-2", "--ly-space-3", "--ly-space-4",
+  "--ly-space-5", "--ly-space-6", "--ly-space-7", "--ly-space-8", "--ly-space-9",
+  "--ly-wrapper-compact", "--ly-wrapper-prose", "--ly-wrapper-content", "--ly-wrapper-wide",
+  "--ly-page-padding-inline", "--ly-safe-area-inline", "--ly-safe-area-block-start",
+  "--ly-safe-area-block-end", "--ly-wrapper-gutter", "--ly-wrapper-max", "--ly-profile-gap",
+  "--ly-gap", "--ly-grid-gap", "--ly-stack-gap", "--ly-cluster-gap",
+  "--ly-section-padding-block", "--ly-header-height", "--ly-sticky-position", "--ly-cover-min",
+  "--ly-shell-min", "--ly-scroll-max", "--ly-switcher-threshold", "--ly-sidebar-size",
+  "--ly-sidebar-content-min", "--ly-grid-columns", "--ly-grid-min", "--ly-split-min",
+  "--ly-pane-min", "--ly-pane-size", "--ly-media-min", "--ly-media-size", "--ly-reel-item-min",
+  "--ly-reel-item-max", "--ly-frame-ratio", "--ly-split-primary", "--ly-split-secondary",
+  "--ly-recipe-rail", "--ly-recipe-aside", "--ly-gallery-min", "--ly-card-grid-min",
+  "--ly-app-shell-medium-areas", "--ly-app-shell-medium-columns", "--ly-app-shell-wide-areas",
+  "--ly-app-shell-wide-columns", "--ly-dashboard-medium-areas", "--ly-dashboard-medium-columns",
+  "--ly-dashboard-wide-areas", "--ly-dashboard-wide-columns", "--ly-docs-wide-areas",
+  "--ly-docs-wide-columns", "--ly-list-detail-wide-areas", "--ly-list-detail-wide-columns",
+  "--ly-split-hero-wide-areas", "--ly-split-hero-wide-columns", "--ly-center-max",
+  "--ly-cover-padding", "--ly-z-header", "--ly-split-align", "--ly-media-align",
+  "--ly-split-hero-align"
+];
+const internalLayoutTokens = [
+  "--ly-breakout-content-size",
+  "--ly-breakout-feature-size",
+  "--ly-personality-wrapper-max",
+  "--ly-wrapper-fluid-gutter",
+  "--ly-wrapper-local-gutter"
+];
+
+test("ecosystem manifest publishes the structural API and package export", () => {
+  assert.equal(manifest.schemaVersion, 1);
+  assert.equal(manifest.name, packageJson.name);
+  assert.equal(manifest.version, "3.0.1");
+  assert.equal(manifest.version, packageJson.version);
+  assert.equal(manifest.schemaPolicy.compatibility, "additive-within-major");
+  assert.equal(
+    manifest.schemaPolicy.breakingChange,
+    "increment-schemaVersion-before-removing-or-renaming-fields"
+  );
+  assert.deepEqual(manifest.entrypoints, entrypoints);
+
+  for (const [name, entrypoint] of Object.entries(entrypoints)) {
+    assert.equal(
+      packageJson.exports[entrypointExports[name]],
+      entrypoint,
+      `${entrypoint} must resolve through package exports`
+    );
+  }
+  assert.equal(packageJson.exports["./manifest.json"], "./manifest.json");
+  assert(packageJson.files.includes("manifest.json"));
+  assert.equal(packageJson.exports["./personalities.json"], "./personalities.json");
+  assert(packageJson.files.includes("personalities.json"));
+});
+
+test("public personality pairings inventory every exported layout profile without coupling selectors", () => {
+  assert.equal(personalityMetadata.schemaVersion, 1);
+  assert.equal(personalityMetadata.generatedFrom, "manifest.json");
+  assert.equal(personalityMetadata.selector, "data-ly-layout");
+  assert.deepEqual(
+    personalityMetadata.independentSelectors,
+    ["data-ly-layout", "data-ui", "data-theme", "data-mode"]
+  );
+  assert.deepEqual(personalityMetadata.personalities, manifest.personalityPairings);
+  assert.deepEqual(personalityMetadata.personalities.map(({ id }) => id), personalities);
+
+  const pairings = new Map(personalityMetadata.personalities.map((pairing) => [pairing.id, pairing]));
+  for (const id of [
+    "minimal-saas", "bento", "maximalist", "bauhaus", "tactile", "neumorphism",
+    "retrofuturism", "brutalism", "cyberpunk", "y2k", "retro-glass"
+  ]) {
+    assert.equal(pairings.get(id)?.visualCompatibility, "native", `${id} needs its verified native visual match.`);
+    assert.deepEqual(pairings.get(id)?.recommendedVisualPresets, [id]);
+  }
+  for (const id of ["f-pattern", "z-pattern", "split-screen", "mondrian"]) {
+    assert.equal(pairings.get(id)?.visualCompatibility, "any", `${id} must remain visual-preset agnostic.`);
+    assert.deepEqual(pairings.get(id)?.recommendedVisualPresets, []);
+  }
+  assert.deepEqual(pairings.get("synthwave")?.recommendedVisualPresets, ["cyberpunk", "retrofuturism"]);
+  assert.equal(pairings.get("synthwave")?.visualCompatibility, "recommended");
+  assert.equal(pairings.get("synthwave")?.visualVerification?.method, "rendered-computed-style");
+  assert.deepEqual(pairings.get("synthwave")?.visualVerification?.computedProperties, {
+    cyberpunk: { boxShadow: "0px 0px 18px" },
+    retrofuturism: { boxShadow: "0px 10px 30px" }
+  });
+});
+
+test("build regenerates public pairing metadata from manifest records", () => {
+  const metadataPath = join(root, "personalities.json");
+  const originalMetadata = readFileSync(metadataPath, "utf8");
+  let generated = false;
+
+  try {
+    writeFileSync(metadataPath, '{"stale":true}\n', "utf8");
+    execFileSync(process.execPath, ["scripts/build.mjs"], { cwd: root, stdio: "pipe" });
+    generated = true;
+    const rebuiltMetadata = JSON.parse(readFileSync(metadataPath, "utf8"));
+    const fallbackScript = readFileSync(join(root, "demo", "personality-metadata.js"), "utf8");
+    const fallbackMatch = fallbackScript.match(
+      /window\.LAYOUT_STYLE_PERSONALITY_METADATA = (\{[\s\S]+\});\s*$/
+    );
+
+    assert.equal(rebuiltMetadata.generatedFrom, "manifest.json");
+    assert.deepEqual(rebuiltMetadata.personalities, manifest.personalityPairings);
+    assert.match(fallbackScript, /Generated from manifest\.json by scripts\/build\.mjs/);
+    assert.ok(fallbackMatch, "The generated demo fallback must embed public pairing metadata.");
+    assert.deepEqual(JSON.parse(fallbackMatch[1]), rebuiltMetadata);
+  } finally {
+    if (!generated) {
+      writeFileSync(metadataPath, originalMetadata, "utf8");
+    }
+  }
+});
+
+test("ecosystem manifest describes real structural selectors, thresholds, and tokens", () => {
+  assert.deepEqual(manifest.selectors.stable, [".ly-root", ".ly-wrapper"]);
+  assert.deepEqual(manifest.selectors.deprecated, []);
+  assert.deepEqual(manifest.wrappers, ["compact", "prose", "content", "wide", "full", "breakout"]);
+  assert.deepEqual(manifest.primitives, [
+    "page", "header", "footer", "main", "section", "surface", "readable", "stack", "cluster",
+    "center", "cover", "switcher", "sidebar", "grid", "split", "panes", "media", "reel", "frame", "scroll"
+  ]);
+  assert.deepEqual(manifest.recipes, [
+    "app-shell", "dashboard", "docs", "list-detail", "split-hero", "gallery", "card-grid"
+  ]);
+  assert.deepEqual(manifest.areas, [
+    "header", "nav", "sidebar", "main", "aside", "footer", "content", "media", "actions", "primary", "secondary"
+  ]);
+  assert.deepEqual(manifest.personalities, personalities);
+  assert.deepEqual(manifest.containers, { names: ["ly-scope"], type: "inline-size" });
+  assert.deepEqual(manifest.thresholds, {
+    containerMinWidths: ["42rem", "44rem", "48rem", "52rem", "72rem"],
+    viewportMaxHeights: ["44rem", "30rem"]
+  });
+  assert.deepEqual(manifest.tokens.geometry, geometryTokens);
+  assert.deepEqual(manifest.companions, {
+    "ui-style-kit-css": ">=2.1.0 <3.0.0",
+    "interactive-surface-css": ">=1.5.0 <2.0.0"
+  });
+
+  const css = Object.values(entrypoints)
+    .flatMap((entrypoint) => {
+      if (!entrypoint.includes("*")) return [entrypoint];
+      return personalities.map((personality) => entrypoint.replace("*", personality));
+    })
+    .map((entrypoint) => readFileSync(join(root, entrypoint), "utf8"))
+    .join("\n");
+  for (const selector of manifest.selectors.stable) {
+    assert(css.includes(selector), `${selector} must remain in public CSS`);
+  }
+  for (const recipe of manifest.recipes) {
+    assert(css.includes(`[data-ly-recipe=\"${recipe}\"]`), `${recipe} must remain a recipe hook`);
+  }
+  for (const token of manifest.tokens.geometry) {
+    assert(css.includes(token), `${token} must remain a public geometry token`);
+  }
+});
+
+test("geometry manifest inventories documented and implemented public controls bidirectionally", () => {
+  const coreSources = [
+    "styles/foundation.css",
+    "styles/wrappers.css",
+    "styles/primitives.css",
+    "styles/recipes.css",
+    "styles/utilities.css"
+  ].map((file) => readFileSync(join(root, file), "utf8")).join("\n");
+  const documentedTokens = [
+    ...new Set(publicDocumentation.match(/--ly-[a-z0-9-]+/g) ?? [])
+  ];
+
+  assert.deepEqual(manifest.tokens.geometry, geometryTokens);
+  for (const token of documentedTokens) {
+    assert(manifest.tokens.geometry.includes(token), `${token} must remain in the public manifest`);
+  }
+  for (const token of geometryTokens) {
+    assert(coreSources.includes(token), `${token} must remain implemented by the core CSS`);
+  }
+  for (const token of internalLayoutTokens) {
+    assert(!manifest.tokens.geometry.includes(token), `${token} must remain implementation-only`);
+  }
+});
diff --git a/test/ownership-boundaries.test.mjs b/test/ownership-boundaries.test.mjs
new file mode 100644
index 0000000..d871697
--- /dev/null
+++ b/test/ownership-boundaries.test.mjs
@@ -0,0 +1,448 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import test from "node:test";
+
+import {
+  auditOwnership,
+  validateAllowlist,
+} from "../scripts/check-css-ownership.mjs";
+
+const reviewedAt = new Date("2026-08-08T12:00:00Z");
+
+function exception(overrides = {}) {
+  return {
+    selector: ".ly-stack",
+    property: "color",
+    reason: "Documents a narrowly reviewed declaration owned by the layout package.",
+    owner: "layout-style-css",
+    reviewDate: "2026-08-08",
+    ...overrides,
+  };
+}
+
+test("layout rejects visual paint while permitting structural declarations", () => {
+  const css = `
+    .ly-stack { display: flex; color: #ff00aa; }
+    .ly-wrapper { font-family: system-ui; box-shadow: 0 2px 8px #0008; }
+    .ly-wrapper { border-top: 1px solid red; }
+    .ly-wrapper { filter: drop-shadow(0 2px 4px red); }
+    .ly-wrapper { text-decoration-color: red; }
+    .x {
+      border-image: url("frame.svg") 30;
+      border-radius: 1rem;
+      border-spacing: 1rem;
+      border-collapse: collapse;
+    }
+  `;
+  const result = auditOwnership({ css, allowlist: [], now: reviewedAt });
+
+  assert.deepEqual(result.violations, [
+    {
+      target: "layout",
+      selector: ".ly-stack",
+      property: "color",
+      line: 2,
+      rule: "layout-visual-paint",
+    },
+    {
+      target: "layout",
+      selector: ".ly-wrapper",
+      property: "font-family",
+      line: 3,
+      rule: "layout-visual-paint",
+    },
+    {
+      target: "layout",
+      selector: ".ly-wrapper",
+      property: "box-shadow",
+      line: 3,
+      rule: "layout-visual-paint",
+    },
+    {
+      target: "layout",
+      selector: ".ly-wrapper",
+      property: "border-top",
+      line: 4,
+      rule: "layout-visual-paint",
+    },
+    {
+      target: "layout",
+      selector: ".ly-wrapper",
+      property: "filter",
+      line: 5,
+      rule: "layout-visual-paint",
+    },
+    {
+      target: "layout",
+      selector: ".ly-wrapper",
+      property: "text-decoration-color",
+      line: 6,
+      rule: "layout-visual-paint",
+    },
+    {
+      target: "layout",
+      selector: ".x",
+      property: "border-image",
+      line: 8,
+      rule: "layout-visual-paint",
+    },
+  ]);
+});
+
+test("layout rejects every color-bearing property family", () => {
+  const literals = [
+    ["accent-color", "#ff0066"],
+    ["caret-color", "red"],
+    ["column-rule-color", "blue"],
+    ["color", "red"],
+    ["color-scheme", "dark"],
+    ["fill", "red"],
+    ["stroke", "blue"],
+    ["flood-color", "red"],
+    ["lighting-color", "blue"],
+    ["stop-color", "red"],
+    ["scrollbar-color", "red blue"],
+  ];
+
+  for (const [property, value] of literals) {
+    const result = auditOwnership({
+      css: `.ly-wrapper { ${property}: ${value}; }`,
+      allowlist: [],
+      now: reviewedAt,
+    });
+    assert.equal(result.violations.length, 1, property);
+    assert.equal(result.violations[0].rule, "layout-visual-paint", property);
+  }
+});
+
+test("layout rejects native, data, and hover mechanics but permits static transforms", () => {
+  const css = `
+    .ly-offset { transform: translateX(1rem); }
+    input:checked { -WEBKIT-TRANSFORM: translateY(-2px); }
+    [data-state="active"] { animation: pulse 1s; }
+    .ly-offset:hover { animation-name: pulse; }
+    :is(.ly-offset, .custom-state) { transition: opacity 150ms; }
+    :where(button:not(:disabled)) { translate: 0 -1px; }
+    :is(a:visited, button:popover-open) { transition-property: transform; }
+    :where(button[disabled], .saas-disabled) { animation: pulse 1s; }
+    :is(a:any-link, details[open]) { transition: opacity 100ms; }
+    :where(input[checked], input[required]) { animation: pulse 1s; }
+    :is(option[selected], textarea[readonly], [hidden]) { transform: scale(.98); }
+  `;
+  const result = auditOwnership({
+    css,
+    allowlist: [],
+    manifest: {
+      selectors: { stateClasses: [".custom-state"] },
+      presets: [{ id: "minimal-saas", prefix: "saas" }],
+      classApi: {
+        universalVisualSuffixes: ["disabled"],
+        presetExtras: { "minimal-saas": [] },
+      },
+    },
+    now: reviewedAt,
+  });
+
+  assert.deepEqual(result.violations, [
+    {
+      target: "layout",
+      selector: "input:checked",
+      property: "transform",
+      line: 3,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: "[data-state=\"active\"]",
+      property: "animation",
+      line: 4,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ".ly-offset:hover",
+      property: "animation-name",
+      line: 5,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":is(.ly-offset,.custom-state)",
+      property: "transition",
+      line: 6,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":where(button:not(:disabled))",
+      property: "translate",
+      line: 7,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":is(a:visited,button:popover-open)",
+      property: "transition-property",
+      line: 8,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":where(button[disabled],.saas-disabled)",
+      property: "animation",
+      line: 9,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":is(a:any-link,details[open])",
+      property: "transition",
+      line: 10,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":where(input[checked],input[required])",
+      property: "animation",
+      line: 11,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ":is(option[selected],textarea[readonly],[hidden])",
+      property: "transform",
+      line: 12,
+      rule: "layout-interaction-transform",
+    },
+  ]);
+});
+
+test("layout recognizes common state suffixes with its real manifest", () => {
+  const manifest = JSON.parse(
+    fs.readFileSync(new URL("../manifest.json", import.meta.url), "utf8"),
+  );
+  const css = `
+    .saas-disabled { transform: scale(.98); }
+    .result-selected { animation: pulse 1s; }
+    .navigation-active { transition: opacity 100ms; }
+    .card-static { transform: translateY(0); }
+  `;
+  const result = auditOwnership({ css, allowlist: [], manifest, now: reviewedAt });
+
+  assert.deepEqual(result.violations, [
+    {
+      target: "layout",
+      selector: ".saas-disabled",
+      property: "transform",
+      line: 2,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ".result-selected",
+      property: "animation",
+      line: 3,
+      rule: "layout-interaction-transform",
+    },
+    {
+      target: "layout",
+      selector: ".navigation-active",
+      property: "transition",
+      line: 4,
+      rule: "layout-interaction-transform",
+    },
+  ]);
+});
+
+test("layout recognizes every reflected native state inside functional selectors", () => {
+  const selectors = [
+    ":is(.surface,a:any-link)",
+    ":where(.surface,details[open])",
+    ":not(input[checked])",
+    ":is(.surface,input[required])",
+    ":where(.surface,option[selected])",
+    ":is(.surface,textarea[readonly])",
+    ":where(.surface,[hidden])",
+    ':is(.surface,[aria-busy="true"])',
+    ':is(.surface,[aria-checked="true"])',
+    ':is(.surface,[aria-current="true"])',
+    ':is(.surface,[aria-disabled="true"])',
+    ':is(.surface,[aria-expanded="true"])',
+    ':is(.surface,[aria-hidden="true"])',
+    ':is(.surface,[aria-invalid="true"])',
+    ':is(.surface,[aria-pressed="true"])',
+    ':is(.surface,[aria-selected="true"])',
+  ];
+
+  for (const selector of selectors) {
+    const result = auditOwnership({
+      css: `${selector} { transform: scale(.98); }`,
+      allowlist: [],
+      now: reviewedAt,
+    });
+
+    assert.equal(result.violations.length, 1, selector);
+    assert.equal(result.violations[0].selector, selector);
+  }
+});
+
+test("layout recognizes exact and boundary-delimited state class vocabulary", () => {
+  const commonStates = [
+    "active",
+    "any-link",
+    "busy",
+    "busy-loading",
+    "checked",
+    "current",
+    "disabled",
+    "enabled",
+    "expanded",
+    "focus",
+    "focus-visible",
+    "focus-within",
+    "hidden",
+    "hover",
+    "indeterminate",
+    "invalid",
+    "loading",
+    "open",
+    "optional",
+    "persistent",
+    "placeholder-shown",
+    "popover-open",
+    "pressed",
+    "read-only",
+    "read-write",
+    "readonly",
+    "required",
+    "selected",
+    "target",
+    "user-invalid",
+    "valid",
+    "visited",
+  ];
+
+  for (const state of commonStates) {
+    for (const selector of [`.${state}`, `.navigation-${state}`, `.navigation_${state}`]) {
+      const result = auditOwnership({
+        css: `${selector} { transform: scale(.98); }`,
+        allowlist: [],
+        now: reviewedAt,
+      });
+
+      assert.equal(result.violations.length, 1, selector);
+      assert.equal(result.violations[0].property, "transform", selector);
+    }
+  }
+
+  for (const selector of [".custom-state", ".navigation-custom-state", ".navigation_custom-state"]) {
+    const result = auditOwnership({
+      css: `${selector} { animation: pulse 1s; }`,
+      allowlist: [],
+      manifest: { selectors: { stateClasses: [".custom-state"] } },
+      now: reviewedAt,
+    });
+    assert.equal(result.violations.length, 1, selector);
+  }
+
+  const controls = auditOwnership({
+    css: ".card-static { transform: scale(.98); } .proactive { transform: scale(.98); } .undisabled { transform: scale(.98); } .selectedness { transform: scale(.98); }",
+    allowlist: [],
+    now: reviewedAt,
+  });
+  assert.deepEqual(controls.violations, []);
+});
+
+test("allowlist rejects every malformed, stale, broad, duplicate, and unmatched mutation", () => {
+  const missingReason = exception();
+  delete missingReason.reason;
+  const cases = [
+    {
+      name: "stale",
+      entries: [exception({ reviewDate: "2025-01-01" })],
+      message: /stale reviewDate/,
+    },
+    {
+      name: "future",
+      entries: [exception({ reviewDate: "2026-08-09" })],
+      message: /stale reviewDate/,
+    },
+    {
+      name: "invalid date",
+      entries: [exception({ reviewDate: "2026-02-30" })],
+      message: /ISO date/,
+    },
+    {
+      name: "duplicate",
+      entries: [exception(), exception()],
+      message: /duplicate selector and property/,
+    },
+    {
+      name: "selector wildcard",
+      entries: [exception({ selector: ".ly-*" })],
+      message: /must not contain wildcards/,
+    },
+    {
+      name: "property wildcard",
+      entries: [exception({ property: "border-*" })],
+      message: /must not contain wildcards/,
+    },
+    {
+      name: "unexplained",
+      entries: [exception({ reason: "Needed." })],
+      message: /professional reason/,
+    },
+    {
+      name: "wrong owner",
+      entries: [exception({ owner: "ui-style-kit-css" })],
+      message: /owner must be layout-style-css/,
+    },
+    {
+      name: "missing field",
+      entries: [missingReason],
+      message: /contain exactly/,
+    },
+    {
+      name: "extra field",
+      entries: [exception({ ticket: "LY-42" })],
+      message: /contain exactly/,
+    },
+    {
+      name: "non-string field",
+      entries: [exception({ reason: null })],
+      message: /string fields/,
+    },
+  ];
+
+  for (const fixture of cases) {
+    assert.throws(
+      () => validateAllowlist({ entries: fixture.entries, now: reviewedAt }),
+      fixture.message,
+      fixture.name,
+    );
+  }
+
+  assert.throws(
+    () =>
+      auditOwnership({
+        css: ".ly-stack { display: flex; }",
+        allowlist: [exception()],
+        now: reviewedAt,
+      }),
+    /does not match a forbidden declaration/,
+  );
+});
+
+test("reviewed built layout bundle satisfies its ownership contract", () => {
+  const allowlist = JSON.parse(
+    fs.readFileSync(new URL("../ownership-allowlist.json", import.meta.url), "utf8"),
+  );
+  const result = auditOwnership({
+    css: fs.readFileSync(new URL("../dist/layout-style-css.css", import.meta.url), "utf8"),
+    allowlist: allowlist.layout,
+    now: reviewedAt,
+  });
+
+  assert.deepEqual(result.violations, []);
+  assert.equal(result.matchedAllowlistCount, 0);
+});
diff --git a/test/package-contract.test.mjs b/test/package-contract.test.mjs
new file mode 100644
index 0000000..fa002b2
--- /dev/null
+++ b/test/package-contract.test.mjs
@@ -0,0 +1,239 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import test from "node:test";
+import { fileURLToPath } from "node:url";
+
+const repositoryRoot = fileURLToPath(new URL("..", import.meta.url));
+const manifest = JSON.parse(
+  await readFile(join(repositoryRoot, "package.json"), "utf8"),
+);
+const packageLock = JSON.parse(
+  await readFile(join(repositoryRoot, "package-lock.json"), "utf8"),
+);
+const ecosystemManifest = JSON.parse(
+  await readFile(join(repositoryRoot, "manifest.json"), "utf8"),
+);
+// Exact overrides keep the release audit deterministic without promoting transitive tooling to direct dependencies.
+const expectedSecurityOverrides = {
+  "fast-uri": "3.1.5",
+  "js-yaml": "4.3.1",
+  nanoid: "3.3.17",
+  postcss: "8.5.23",
+};
+const expectedExports = {
+  ".": "./dist/layout-style-css.css",
+  "./min.css": "./dist/layout-style-css.min.css",
+  "./core.css": "./dist/core.css",
+  "./foundation.css": "./dist/foundation.css",
+  "./wrappers.css": "./dist/wrappers.css",
+  "./primitives.css": "./dist/primitives.css",
+  "./recipes.css": "./dist/recipes.css",
+  "./utilities.css": "./dist/utilities.css",
+  "./personalities.css": "./dist/personalities.css",
+  "./personalities/*.css": "./dist/personalities/*.css",
+  "./personalities.json": "./personalities.json",
+  "./manifest.json": "./manifest.json",
+  "./package.json": "./package.json",
+};
+const requiredManifestFiles = [
+  "README.md",
+  "LICENSE",
+  "CHANGELOG.md",
+  "docs/wiki",
+];
+const requiredPackagedDocuments = [
+  "CHANGELOG.md",
+  "LICENSE",
+  "README.md",
+  "docs/wiki/Contributing.md",
+  "docs/wiki/Demo-And-GitHub-Pages.md",
+  "docs/wiki/Getting-Started.md",
+  "docs/wiki/Home.md",
+  "docs/wiki/Installation-And-CDN.md",
+  "docs/wiki/Layout-Primitives.md",
+  "docs/wiki/Layout-Recipes.md",
+  "docs/wiki/Layout-Styles.md",
+  "docs/wiki/Migrating-To-2.0.md",
+  "docs/wiki/Migrating-To-3.0.md",
+  "docs/wiki/Release-And-Publishing.md",
+  "docs/wiki/Security-And-Support.md",
+  "docs/wiki/UI-Style-Kit-Compatibility.md",
+  "docs/wiki/_Sidebar.md",
+];
+
+function locateNpmCli() {
+  const executableDirectory = dirname(process.execPath);
+  const candidates = [
+    process.env.npm_execpath,
+    join(executableDirectory, "node_modules", "npm", "bin", "npm-cli.js"),
+    resolve(
+      executableDirectory,
+      "..",
+      "lib",
+      "node_modules",
+      "npm",
+      "bin",
+      "npm-cli.js",
+    ),
+  ].filter(Boolean);
+  const npmCli = candidates.find((candidate) => existsSync(candidate));
+
+  assert.ok(
+    npmCli,
+    `Unable to locate npm's JavaScript CLI. Checked: ${candidates.join(", ")}`,
+  );
+  return npmCli;
+}
+
+function runNode(args, options, label) {
+  const result = spawnSync(process.execPath, args, {
+    encoding: "utf8",
+    maxBuffer: 10 * 1024 * 1024,
+    ...options,
+  });
+
+  assert.ifError(result.error);
+  assert.equal(
+    result.status,
+    0,
+    `${label} exited with ${result.status}.\nstdout:\n${result.stdout}\nstderr:\n${result.stderr}`,
+  );
+  return result.stdout;
+}
+
+function runNpm(args, options, label) {
+  return runNode([locateNpmCli(), ...args], options, label);
+}
+
+test("package defaults and homepage expose the intended distribution contract", () => {
+  assert.equal(
+    manifest.homepage,
+    "https://foscat.github.io/Layout-Style-CSS/",
+    "The npm homepage must open the live GitHub Pages demo",
+  );
+  assert.equal(manifest.main, "dist/layout-style-css.css");
+  assert.equal(manifest.style, "dist/layout-style-css.css");
+  assert.equal(manifest.unpkg, "dist/layout-style-css.min.css");
+  assert.equal(manifest.jsdelivr, "dist/layout-style-css.min.css");
+  assert.deepEqual(manifest.exports, expectedExports);
+
+  for (const requiredFile of requiredManifestFiles) {
+    assert.ok(
+      manifest.files.includes(requiredFile),
+      `package.json files[] must include ${requiredFile}`,
+    );
+  }
+});
+
+test("release metadata stays synchronized for the 3.0.1 patch", () => {
+  assert.equal(manifest.version, "3.0.1");
+  assert.equal(packageLock.version, "3.0.1");
+  assert.equal(packageLock.packages[""].version, "3.0.1");
+  assert.equal(ecosystemManifest.version, "3.0.1");
+  assert.equal(Object.keys(manifest.exports).length, 13);
+});
+
+test("release security overrides resolve audited transitive tooling", () => {
+  assert.deepEqual(manifest.overrides, expectedSecurityOverrides);
+  assert.deepEqual(manifest.dependencies ?? {}, {});
+  assert.deepEqual(packageLock.packages[""].dependencies ?? {}, {});
+
+  for (const [packageName, expectedVersion] of Object.entries(
+    expectedSecurityOverrides,
+  )) {
+    assert.equal(
+      packageLock.packages[`node_modules/${packageName}`]?.version,
+      expectedVersion,
+      `Expected ${packageName}@${expectedVersion} in the release lockfile`,
+    );
+  }
+});
+
+test("a real packed package resolves every export and includes public documentation", async (t) => {
+  const packDirectory = await mkdtemp(join(tmpdir(), "layout-style-pack-"));
+  const consumerDirectory = await mkdtemp(
+    join(tmpdir(), "layout-style-consumer-"),
+  );
+  const cacheDirectory = join(consumerDirectory, ".npm-cache");
+
+  t.after(async () => {
+    await Promise.all([
+      rm(packDirectory, { force: true, recursive: true }),
+      rm(consumerDirectory, { force: true, recursive: true }),
+    ]);
+  });
+
+  const packOutput = runNpm(
+    [
+      "pack",
+      "--json",
+      "--ignore-scripts",
+      "--pack-destination",
+      packDirectory,
+      "--cache",
+      cacheDirectory,
+    ],
+    { cwd: repositoryRoot },
+    "npm pack",
+  );
+  const [packReport] = JSON.parse(packOutput);
+  assert.ok(packReport, "npm pack must report one package");
+
+  const packedFiles = packReport.files.map(({ path }) => path.replaceAll("\\", "/"));
+  for (const requiredDocument of requiredPackagedDocuments) {
+    assert.ok(
+      packedFiles.includes(requiredDocument),
+      `Packed package must include ${requiredDocument}`,
+    );
+  }
+
+  await writeFile(
+    join(consumerDirectory, "package.json"),
+    `${JSON.stringify({ name: "layout-style-contract-consumer", private: true, type: "module" }, null, 2)}\n`,
+  );
+  const tarballPath = join(packDirectory, packReport.filename);
+  runNpm(
+    [
+      "install",
+      tarballPath,
+      "--ignore-scripts",
+      "--no-audit",
+      "--no-fund",
+      "--no-package-lock",
+      "--cache",
+      cacheDirectory,
+    ],
+    { cwd: consumerDirectory },
+    "clean consumer install",
+  );
+
+  const publicSpecifiers = Object.keys(expectedExports).map((subpath) => {
+    if (subpath === ".") return manifest.name;
+    // Resolve one real personality through the wildcard export without weakening the exact export-map assertion above.
+    return `${manifest.name}${subpath.slice(1).replace("*", "minimal-saas")}`;
+  });
+  const resolverPath = join(consumerDirectory, "resolve-exports.mjs");
+  await writeFile(
+    resolverPath,
+    `import { createRequire } from "node:module";\n` +
+      `const require = createRequire(import.meta.url);\n` +
+      `const specifiers = ${JSON.stringify(publicSpecifiers)};\n` +
+      `process.stdout.write(JSON.stringify(specifiers.map((specifier) => require.resolve(specifier))));\n`,
+  );
+  const resolvedExports = JSON.parse(
+    runNode([resolverPath], { cwd: consumerDirectory }, "export resolver"),
+  );
+  assert.equal(resolvedExports.length, Object.keys(expectedExports).length);
+
+  const installedRoot = join(consumerDirectory, "node_modules", manifest.name);
+  for (const requiredDocument of requiredPackagedDocuments) {
+    assert.ok(
+      existsSync(join(installedRoot, requiredDocument)),
+      `Installed package must include ${requiredDocument}`,
+    );
+  }
+});
diff --git a/test/pages-artifact.test.mjs b/test/pages-artifact.test.mjs
index 90fba13..ce22d9d 100644
--- a/test/pages-artifact.test.mjs
+++ b/test/pages-artifact.test.mjs
@@ -27,10 +27,12 @@ const requiredArtifactFiles = [
   "index.html",
   "demo.css",
   "demo.js",
+  "personality-metadata.js",
   "browserconfig.xml",
   "robots.txt",
   "sitemap.xml",
   "site.webmanifest",
+  "personalities.json",
   "assets/favicon.svg",
   "assets/apple-touch-icon.svg",
   "assets/social-card.png",
@@ -72,12 +74,14 @@ assert(
 for (const { attribute, path } of [
   { attribute: "href", path: "demo.css" },
   { attribute: "src", path: "demo.js" },
-  { attribute: "href", path: "dist/layout-style-css.css" }
+  { attribute: "src", path: "personality-metadata.js" },
+  { attribute: "href", path: "dist/layout-style-css.css" },
+  { attribute: "data-personalities-url", path: "personalities.json" }
 ]) {
   const contents = readFileSync(join(outputDir, ...path.split("/")));
   const fingerprint = createHash("sha256").update(contents).digest("hex").slice(0, 12);
   assert(
-    index.includes(`${attribute}="./${path}?v=3.0.0-${fingerprint}"`),
+    index.includes(`${attribute}="./${path}?v=3.0.1-${fingerprint}"`),
     `Pages should fingerprint ${path} from its deployed contents.`
   );
 }
@@ -97,7 +101,7 @@ assert(
   "Pages demo should preserve the source demo canonical URL"
 );
 assert(
-  index.includes('"version": "3.0.0"') && index.includes("Layout Style CSS v3"),
+  index.includes('"version": "3.0.1"') && index.includes("Layout Style CSS v3"),
   "Pages metadata should identify the v3 intrinsic responsive lab"
 );
 assert(
@@ -120,7 +124,7 @@ assert(
   sitemap.includes(`<loc>${expectedPagesBaseUrl}</loc>`),
   "The sitemap must use the case-sensitive Pages canonical URL."
 );
-assert(sitemap.includes("<lastmod>2026-07-29</lastmod>"), "Pages sitemap should carry v3 metadata");
+assert(sitemap.includes("<lastmod>2026-08-09</lastmod>"), "Pages sitemap should carry 3.0.1 metadata");
 
 const pagesWorkflow = readFileSync(pagesWorkflowPath, "utf8");
 const pagesPreflightStep = pagesWorkflow.indexOf("- name: Verify Pages configuration");
diff --git a/test/release-docs-contract.test.mjs b/test/release-docs-contract.test.mjs
index 177a06f..6769ed0 100644
--- a/test/release-docs-contract.test.mjs
+++ b/test/release-docs-contract.test.mjs
@@ -23,6 +23,7 @@ const recipesGuide = read("docs", "wiki", "Layout-Recipes.md");
 const stylesGuide = read("docs", "wiki", "Layout-Styles.md");
 const demoGuide = read("docs", "wiki", "Demo-And-GitHub-Pages.md");
 const release = read("docs", "wiki", "Release-And-Publishing.md");
+const releaseFixture = JSON.parse(read("ecosystem-release-fixture.json"));
 const support = read("docs", "wiki", "Security-And-Support.md");
 const sidebar = read("docs", "wiki", "_Sidebar.md");
 const v2Surface = JSON.parse(read("test", "fixtures", "v2-public-selectors.json"));
@@ -67,15 +68,24 @@ const currentGuidanceCorpus = [
     "Layout-Primitives.md",
     "Layout-Recipes.md",
     "Layout-Styles.md",
-    "Migrating-To-3.0.md",
     "Release-And-Publishing.md",
     "Security-And-Support.md",
     "UI-Style-Kit-Compatibility.md"
   ].map((file) => read("docs", "wiki", file))
 ].join("\n");
 
+assert(
+  !currentGuidanceCorpus.includes("layout-style-css/bridge.css"),
+  "Current v3 setup documentation must not require the removed bridge.css export."
+);
+assert(
+  migration.includes("layout-style-css/bridge.css") &&
+    /bridge\.css[^\n]*(?:removed|not shipped)/i.test(migration),
+  "Migration documentation must identify layout-style-css/bridge.css as removed from v3."
+);
+
 for (const requiredText of [
-  "3.0.0",
+  "3.0.1",
   "Node.js 20",
   "dependency-free",
   "zero-configuration",
@@ -226,15 +236,57 @@ assert(
     changelog.includes("### Tests"),
   "Changelog must identify the dated v3 breaking release and verification work."
 );
+const patchReleaseHeadings = changelog.match(/^## \[3\.0\.1\] - 2026-08-09$/gm) ?? [];
+assert.equal(
+  patchReleaseHeadings.length,
+  1,
+  "Changelog must contain exactly one dated 3.0.1 release section."
+);
+const patchReleaseStart = changelog.indexOf(patchReleaseHeadings[0]);
+const patchReleaseEnd = changelog.indexOf("\n## [", patchReleaseStart + patchReleaseHeadings[0].length);
+const patchRelease = changelog.slice(
+  patchReleaseStart,
+  patchReleaseEnd === -1 ? changelog.length : patchReleaseEnd
+);
+for (const releaseTopic of [
+  /GitHub Pages homepage/i,
+  /readable package defaults/i,
+  /minified CDN metadata/i,
+  /packaged documentation/i,
+  /manifest/i,
+  /ecosystem/i,
+  /13-export API/i,
+  /tests/i,
+  /secure release tooling/i
+]) {
+  assert.match(patchRelease, releaseTopic, `The 3.0.1 changelog must cover ${releaseTopic}.`);
+}
 assert(
-  release.includes("layout-style-css@3.0.0") &&
-    release.includes("v3.0.0") &&
+  release.includes("layout-style-css@3.0.1") &&
+    release.includes("v3.0.1") &&
     release.includes("does not publish"),
   "Release documentation must distinguish verification from publication."
 );
+assert.deepEqual(
+  releaseFixture,
+  {
+    repository: "Foscat/ui-style-kit-css",
+    revision: "bdbb6a7e432f30b92de206cac6a00fe85394190c"
+  },
+  "Release automation must pin the reviewed UI Layout 3.0.1 bootstrap commit."
+);
+assert(
+  release.includes(releaseFixture.revision),
+  "Release documentation must name the exact reviewed UI fixture revision."
+);
 assert(support.includes("`3.x` | Yes"), "Support table must identify the supported v3 line.");
 assert(sidebar.includes("Migrating To 3.0"), "Wiki navigation must link the v3 migration guide.");
 
+// The manifest contract rebuilds dist, so built-artifact ownership tests must not overlap it.
+assert(
+  packageJson.scripts["test:static"].includes("--test-concurrency=1"),
+  "Static contract files must run sequentially to keep generated dist reads deterministic."
+);
 assert.equal(packageJson.scripts["test:demo:quick"], "node test/demo-smoke.test.mjs --quick --browser=chromium");
 for (const browser of ["chromium", "firefox", "webkit"]) {
   assert.equal(
@@ -268,9 +320,34 @@ for (const browser of ["chromium", "firefox", "webkit"]) {
 }
 
 const publishWorkflow = read(".github", "workflows", "npm-publish.yml");
-assert(publishWorkflow.includes("for example v3.0.0"));
+const demoSmoke = read("test", "demo-smoke.test.mjs");
+assert(publishWorkflow.includes("for example v3.0.1"));
 assert(publishWorkflow.includes("playwright install --with-deps chromium firefox webkit"));
-assert(publishWorkflow.includes("npm run release:verify"));
+assert(
+  !/^\s*run:\s+npm\s+run\s+release:verify\s*$/m.test(publishWorkflow) &&
+    publishWorkflow.includes("npm run check:full") &&
+    publishWorkflow.includes("npm audit --audit-level=moderate") &&
+    publishWorkflow.includes("npm run pack:dry-run"),
+  "Publish workflow must run non-ecosystem checks before staging immutable fixtures."
+);
+
+const recoveryTimeoutMatch = demoSmoke.match(
+  /const\s+(METADATA_FAILURE_RECOVERY_READINESS_TIMEOUT_MS)\s*=\s*([\d_]+)\s*;/
+);
+assert(
+  recoveryTimeoutMatch,
+  "Metadata failure recovery must use a named readiness timeout instead of a one-second literal."
+);
+const recoveryTimeoutMs = Number(recoveryTimeoutMatch?.[2].replaceAll("_", ""));
+assert(
+  recoveryTimeoutMs >= 10_000,
+  "Metadata failure recovery readiness must allow at least ten seconds on cold WebKit runners."
+);
+assert.match(
+  demoSmoke,
+  /verifyPersonalityMetadataFailureRecovery[\s\S]*?\{ timeout: METADATA_FAILURE_RECOVERY_READINESS_TIMEOUT_MS \}/,
+  "Metadata failure recovery must use its named bounded readiness timeout."
+);
 assert(
   publishWorkflow.includes("environment:") && publishWorkflow.includes("name: npm"),
   "Publish job must use the protected npm GitHub Environment."
diff --git a/test/release-preflight.test.mjs b/test/release-preflight.test.mjs
new file mode 100644
index 0000000..95f8a83
--- /dev/null
+++ b/test/release-preflight.test.mjs
@@ -0,0 +1,250 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+import { fileURLToPath } from "node:url";
+
+const rootDir = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  "..",
+);
+const reviewedUiFixtureRevision =
+  "bdbb6a7e432f30b92de206cac6a00fe85394190c";
+let releaseContract;
+try {
+  releaseContract = await import("../scripts/release-fixture-contract.mjs");
+} catch {
+  // RED remains an assertion failure until the companion fixture contract exists.
+}
+
+test("pins an immutable reviewed UI release fixture and writes exact checkout outputs", () => {
+  assert.ok(
+    releaseContract,
+    "scripts/release-fixture-contract.mjs must implement the fixture contract",
+  );
+
+  const descriptor = releaseContract.readFixtureDescriptor(rootDir);
+  assert.deepEqual(descriptor, {
+    repository: "Foscat/ui-style-kit-css",
+    revision: reviewedUiFixtureRevision,
+  });
+
+  const tempRoot = fs.mkdtempSync(
+    path.join(os.tmpdir(), "layout-release-fixture-"),
+  );
+  const outputPath = path.join(tempRoot, "github-output.txt");
+  try {
+    releaseContract.writeGithubOutputs(descriptor, outputPath);
+    assert.equal(
+      fs.readFileSync(outputPath, "utf8"),
+      `ui_repository=Foscat/ui-style-kit-css\nui_revision=${reviewedUiFixtureRevision}\n`,
+    );
+  } finally {
+    fs.rmSync(tempRoot, { recursive: true, force: true });
+  }
+});
+
+test("pull requests execute read-only preflight and npm publish stays downstream", () => {
+  assert.ok(
+    releaseContract,
+    "scripts/release-fixture-contract.mjs must implement the fixture contract",
+  );
+
+  assert.doesNotThrow(() =>
+    releaseContract.validateRepositoryWorkflows(rootDir),
+  );
+
+  for (const workflowName of ["ci.yml", "npm-publish.yml"]) {
+    const workflow = fs.readFileSync(
+      path.join(rootDir, ".github", "workflows", workflowName),
+      "utf8",
+    );
+    assert.match(
+      workflow,
+      /node scripts\/release-fixture-contract\.mjs --write-github-outputs/,
+      `${workflowName} must resolve the reviewed UI descriptor.`,
+    );
+    assert.match(
+      workflow,
+      /ref: \$\{\{ steps\.ui_fixture\.outputs\.ui_revision \}\}/,
+      `${workflowName} must check out the exact descriptor revision.`,
+    );
+  }
+});
+
+test("workflow policy rejects every release or deployment mutation from pull requests", () => {
+  assert.ok(
+    releaseContract,
+    "scripts/release-fixture-contract.mjs must implement the fixture contract",
+  );
+
+  const forbiddenMutations = [
+    ["npm publish", "      - run: npm publish"],
+    ["npm version", "      - run: npm version patch"],
+    ["git tag", "      - run: git tag v3.0.1"],
+    ["git push", "      - run: git push origin HEAD"],
+    ["GitHub release", "      - uses: softprops/action-gh-release@v2"],
+    ["GitHub release", "      - run: gh release create v3.0.1"],
+    ["deployment", "      - uses: actions/deploy-pages@v4"],
+    ["deployment", "      - run: npx wrangler deploy"],
+  ];
+  const safeRelease =
+    "on:\n  release:\njobs:\n  publish:\n    steps:\n      - run: npm run release:preflight\n      - run: npm publish --access public --provenance --ignore-scripts\n";
+
+  for (const [label, mutation] of forbiddenMutations) {
+    assert.throws(
+      () =>
+        releaseContract.validateWorkflowSources([
+          {
+            name: "ci.yml",
+            source:
+              "on:\n  pull_request:\njobs:\n  verify:\n    steps:\n      - run: npm run release:preflight\n" +
+              `${mutation}\n`,
+          },
+          { name: "npm-publish.yml", source: safeRelease },
+        ]),
+      new RegExp(
+        `pull-request workflow ci\\.yml enables forbidden mutation: ${label}`,
+      ),
+    );
+  }
+});
+
+test("publish workflow stages safe local checks and fixtures before one explicit lifecycle boundary", () => {
+  const workflow = fs.readFileSync(
+    path.join(rootDir, ".github", "workflows", "npm-publish.yml"),
+    "utf8",
+  );
+  const manifest = JSON.parse(
+    fs.readFileSync(path.join(rootDir, "package.json"), "utf8"),
+  );
+  const safeChecksIndex = workflow.indexOf("run: npm run check:full");
+  const auditIndex = workflow.indexOf("run: npm audit --audit-level=moderate");
+  const dryPackIndex = workflow.indexOf("run: npm run pack:dry-run");
+  const fixtureIndex = workflow.indexOf(
+    "name: Check out reviewed UI release fixture",
+  );
+  const companionIndex = workflow.indexOf(
+    "name: Check out reviewed Interactive companion",
+  );
+  const preflightIndex = workflow.indexOf("run: npm run release:preflight");
+  const publishIndex = workflow.indexOf(
+    "run: npm publish --access public --provenance --ignore-scripts",
+  );
+
+  assert.ok(
+    0 <= safeChecksIndex &&
+      safeChecksIndex < auditIndex &&
+      auditIndex < dryPackIndex &&
+      dryPackIndex < fixtureIndex &&
+      fixtureIndex < companionIndex &&
+      companionIndex < preflightIndex &&
+      preflightIndex < publishIndex,
+    "Safe local checks, immutable fixtures, explicit preflight, and publish must retain their reviewed order.",
+  );
+  assert.equal(
+    /^\s*run:\s+npm\s+run\s+release:verify\s*$/m.test(
+      workflow.slice(0, fixtureIndex),
+    ),
+    false,
+    "release:verify would invoke ecosystem preflight before immutable fixtures exist.",
+  );
+  assert.equal(manifest.scripts.prepublishOnly, "npm run release:verify");
+  assertPublishIgnoreScriptsSkipsLifecycle();
+});
+
+test("publishing guide records the immutable bootstrap and merge sequence", () => {
+  const guide = fs.readFileSync(
+    path.join(rootDir, "docs", "wiki", "Release-And-Publishing.md"),
+    "utf8",
+  );
+  const uiFixture = JSON.parse(
+    fs.readFileSync(
+      path.join(rootDir, "ecosystem-release-fixture.json"),
+      "utf8",
+    ),
+  );
+
+  // The operator guide must follow the same immutable revision used by release automation.
+  assert.match(guide, new RegExp(uiFixture.revision, "i"));
+  assert.equal(uiFixture.revision, reviewedUiFixtureRevision);
+  assert.match(guide, new RegExp(reviewedUiFixtureRevision, "i"));
+
+  for (const phrase of [
+    "Push a stable UI bootstrap ref",
+    "merge commits",
+    "Update and verify the final UI companion pins",
+    "Do not squash, rebase, or delete the only remote refs",
+  ]) {
+    assert.match(guide, new RegExp(phrase, "i"));
+  }
+});
+
+function assertPublishIgnoreScriptsSkipsLifecycle() {
+  const fixtureRoot = fs.mkdtempSync(
+    path.join(os.tmpdir(), "layout-release-lifecycle-"),
+  );
+  const lifecycleMarker = path.join(fixtureRoot, "prepublish-only-ran");
+  fs.writeFileSync(
+    path.join(fixtureRoot, "package.json"),
+    `${JSON.stringify(
+      {
+        name: "layout-release-lifecycle-contract",
+        version: "1.0.0",
+        private: false,
+        files: ["index.css"],
+        scripts: { prepublishOnly: "node lifecycle-guard.mjs" },
+      },
+      null,
+      2,
+    )}\n`,
+  );
+  fs.writeFileSync(
+    path.join(fixtureRoot, "index.css"),
+    ".layout-release-lifecycle { display: block; }\n",
+  );
+  fs.writeFileSync(
+    path.join(fixtureRoot, "lifecycle-guard.mjs"),
+    `import fs from "node:fs";\nfs.writeFileSync(${JSON.stringify(lifecycleMarker)}, "ran");\nprocess.exit(23);\n`,
+  );
+
+  try {
+    const npmExecPath = process.env.npm_execpath;
+    const command =
+      npmExecPath && fs.existsSync(npmExecPath)
+        ? process.execPath
+        : process.platform === "win32"
+          ? "npm.cmd"
+          : "npm";
+    const baseArgs =
+      npmExecPath && fs.existsSync(npmExecPath) ? [npmExecPath] : [];
+    const result = spawnSync(
+      command,
+      [
+        ...baseArgs,
+        "publish",
+        "--dry-run",
+        "--access",
+        "public",
+        "--ignore-scripts",
+        "--loglevel",
+        "error",
+      ],
+      {
+        cwd: fixtureRoot,
+        encoding: "utf8",
+        shell: process.platform === "win32" && baseArgs.length === 0,
+      },
+    );
+    assert.equal(result.status, 0, result.stderr || result.stdout);
+    assert.equal(
+      fs.existsSync(lifecycleMarker),
+      false,
+      "prepublishOnly must not run after the staged preflight.",
+    );
+  } finally {
+    fs.rmSync(fixtureRoot, { recursive: true, force: true });
+  }
+}