DocFence 0.26.0
Direct Word embedded-control anchors
DocFence 0.26.0 adds a privacy-safe, first-class inventory for direct
WordprocessingML w:control markers in the two standardized embedded-control
positions: w:object/w:control and w:pict/w:control.
The inventory distinguishes object and pict parents, covered Word stories,
standard control relationships with internal or external target modes,
unsupported relationships, and markers without r:id. It retains direct
marker semantics privately, so meaningful same-count rewrites remain visible
while relationship-ID renumbering stays quiet.
Two policy rules are available:
require_no_word_embedded_controls(DFP065) blocks a candidate that
contains a direct embedded-control anchor.no_word_embedded_control_changes(DFP066) protects an approved anchor
baseline.
This is a stored-markup review boundary. It does not retrieve, instantiate,
load, activate, render, execute, or establish client support for a control.
See the README, policy guide, threat model, and validation notes for exact
scope, privacy guarantees, and the evidence behind the boundary.