/* wf-supplement: generic fixes container (Phase 4 adds targeted rules here) */