Safe DOCX posture
Endnote reference integrity
The compiled Lean checker selects the Transitional endnotes relationship from
word/_rels/document.xml.rels and requires each namespace-resolved user
w:endnoteReference ID to have exactly one user definition in that selected
part. References inside either selected note-definition story are rejected.
CT_FtnEdnRef note-reference schema
Namespace-resolved note references use the required decimal w:id shape
declared by CT_FtnEdnRef; malformed and missing IDs are retained as failures.
Schema declarations
Bounded evidence
- formal verification
verification/lean/Tier2/NoteReferenceIntegrity.lean - test
packages/docx-compare/src/baselines/atomizer/leanXmlVerifier.test.ts - formal verification
verification/lean/LeanDocxChecker.lean