Skip to content

DocFence 0.26.0

Choose a tag to compare

@SybilGambleyyu SybilGambleyyu released this 01 Aug 14:35

Direct Word embedded-control anchors

DocFence 0.26.0 adds a privacy-safe, first-class inventory for direct
WordprocessingML w:control markers in the two standardized embedded-control
positions: w:object/w:control and w:pict/w:control.

The inventory distinguishes object and pict parents, covered Word stories,
standard control relationships with internal or external target modes,
unsupported relationships, and markers without r:id. It retains direct
marker semantics privately, so meaningful same-count rewrites remain visible
while relationship-ID renumbering stays quiet.

Two policy rules are available:

  • require_no_word_embedded_controls (DFP065) blocks a candidate that
    contains a direct embedded-control anchor.
  • no_word_embedded_control_changes (DFP066) protects an approved anchor
    baseline.

This is a stored-markup review boundary. It does not retrieve, instantiate,
load, activate, render, execute, or establish client support for a control.

See the README, policy guide, threat model, and validation notes for exact
scope, privacy guarantees, and the evidence behind the boundary.