diff --git a/CHANGELOG.md b/CHANGELOG.md
index 380ab44a..3491ced5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ once it reaches a published 0.1.0 release.
 
 ### Fixed
 
+- [S-155] A value spec written as one delimited alternation of literal values (`--compression=(xz|none|auto)`, `--crate-type <bin|lib|...>`, argparse's own `{c,java,ruby,tcl}`) now attaches as that flag's choices, instead of rendering as one opaque placeholder (`mandible grub-mkimage`, `mandible rustc`, `mandible tclobjnew-bpfcc`).
 - `xtask sweep-diff` now reports subcommand-count gains and losses per tool, separately from flags, so an invented subcommand row no longer passes as a clean sweep.
 - `xtask detector calibrate` now prints `NOT EVALUABLE` instead of `DOES NOT PASS` for a detector whose family has zero labelled members in the audit seed, so a legitimate gap in the sample is no longer reported as a failing detector.
 - [S-149] A bare-word block opening on a centered ALL-CAPS group label no longer ends before reading a single real row beneath it (`mandible fail2ban-client`).
@@ -40,6 +41,9 @@ once it reaches a published 0.1.0 release.
 - [S-151] A usage form whose leading word names another program now renders under the tool's own name, so `mandible gcc-ranlib-13` shows `gcc-ranlib-13 [options] archive` instead of repeating `/usr/bin/ranlib`, and `mandible perlthanks` gains the usage section it had none of.
 - [S-142] A `SYNTAX:` label glued straight to the program name, and a usage continuation carrying an open `[` to column zero, are both read now, so `mandible mksquashfs` and `mandible sqfstar` show a real usage line and their `FILESYSTEM` positional instead of the whole synopsis as description prose (#143).
 - [S-171] A numbered `source1 source2 ...` pair ahead of a later required operand no longer drops, so `mandible mksquashfs` shows its `source` positional alongside `FILESYSTEM`.
+- [S-157] A single-dash long option's bare-word value name inside a no-double-dash table now survives instead of reading as the first word of the description, so `mandible Xvfb` shows `-audit int` and `-fp string`, and `mandible mksquashfs`/`mandible sqfstar` show `-Xstrategy` and `-Xbcj` with their comma-separated value lists.
+- [S-158] A value spec that glues a bracket-optional group directly onto a required angle placeholder now keeps the whole run, so `mandible rustc` shows `-L`'s `[<KIND>=]<PATH>` and `--emit`'s `<TYPE>[=<FILE>]` in full instead of losing the half that doesn't open the run.
+- [S-160] A value spec that swallowed its own alias run's trailing comma no longer hides the spelling behind it, so `mandible biolatpcts-bpfcc` shows `-p, --pcts` instead of a lone `-p`.
 
 ## [0.7.0] - 2026-09-05
 
diff --git a/corpus/Xvfb/audit-seed10/expected.snap b/corpus/Xvfb/audit-seed10/expected.snap
new file mode 100644
index 00000000..68dd3d81
--- /dev/null
+++ b/corpus/Xvfb/audit-seed10/expected.snap
@@ -0,0 +1,494 @@
+name: Xvfb
+description: 'Unrecognized option: --help use: X [:<display>] [option] -a # default pointer acceleration (factor) -ac disable access control restrictions -audit int set audit trail level -auth file select authorization file -br create root window with black background +bs enable any backing store support -bs disable any backing store support +byteswappedclients Allow clients with endianess different to that of the server -byteswappedclients Prohibit clients with endianess different to that of the server -c turns off key-click c # key-click volume (0-100) -cc int default color visual class -nocursor disable the cursor -core generate core dump on fatal error -displayfd fd file descriptor to write display number to when ready to connect -dpi int screen resolution in dots per inch -dpms disables VESA DPMS monitor control -deferglyphs [none|all|16] defer loading of [no|all|16-bit] glyphs -f # bell base (0-100) -fakescreenfps # fake screen default fps (1-600) -fp string default font path -help prints message with these options +iglx Allow creating indirect GLX contexts -iglx Prohibit creating indirect GLX contexts (default) -I ignore all remaining arguments -ld int limit data space to N Kb -lf int limit number of open files to N -ls int limit stack space to N Kb -nolock disable the locking mechanism -maxclients n set maximum number of clients (power of two) -nolisten string don''t listen on protocol -listen string listen on protocol -noreset don''t reset after last client exists -background [none] create root window with no background -reset reset after last client exists -p # screen-saver pattern duration (minutes) -pn accept failure to listen on all ports -nopn reject failure to listen on all ports -r turns off auto-repeat r turns on auto-repeat -render [default|mono|gray|color] set render color alloc policy -retro start with classic stipple and cursor -s # screen-saver timeout (minutes) -seat string seat to run on -t # default pointer threshold (pixels/t) -terminate [delay] terminate at server reset (optional delay in sec) -tst disable testing extensions ttyxx server started from init on /dev/ttyxx v video blanking for screen-saver -v screen-saver without video blanking -wr create root window with white background -maxbigreqsize set maximal bigrequest size +xinerama Enable XINERAMA extension -xinerama Disable XINERAMA extension -dumbSched Disable smart scheduling and threaded input, enable old behavior -schedInterval int Set scheduler interval in msec -sigstop Enable SIGSTOP based startup +extension name Enable extension -extension name Disable extension -query host-name contact named host for XDMCP -broadcast broadcast for XDMCP -multicast [addr [hops]] IPv6 multicast for XDMCP -indirect host-name contact named host for indirect XDMCP -port port-num UDP port number to send messages to -from local-address specify the local address to connect from -once Terminate server after one session -class display-class specify display class to send in manage -cookie xdm-auth-bits specify the magic cookie for XDMCP -displayID display-id manufacturer display ID for request [+-]accessx [ timeout [ timeout_mask [ feedback [ options_mask] ] ] ] -ardelay set XKB autorepeat delay -arinterval set XKB autorepeat interval -screen scrn WxHxD set screen''s width, height, depth -pixdepths list-of-int support given pixmap depths +/-render turn on/off RENDER extension support(default on) -linebias n adjust thin line pixelization -blackpixel n pixel value for black -whitepixel n pixel value for white -fbdir directory put framebuffers in mmap''ed files in directory -shmem put framebuffers in shared memory (EE) Fatal server error: (EE) Unrecognized option: --help (EE)'
+flags:
+- spellings:
+  - -a
+  value_name: '#'
+  value_kind: Required
+  group: 'use: X [:<display>] [option]'
+  description: default pointer acceleration (factor)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -ac
+  group: 'use: X [:<display>] [option]'
+  description: disable access control restrictions
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -audit
+  value_name: int
+  value_kind: Required
+  group: 'use: X [:<display>] [option]'
+  description: set audit trail level
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -auth
+  value_name: file
+  value_kind: Required
+  group: 'use: X [:<display>] [option]'
+  description: select authorization file
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -br
+  group: 'use: X [:<display>] [option]'
+  description: create root window with black background
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -bs
+  description: disable any backing store support
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -byteswappedclients
+  description: Prohibit clients with endianess different to that of the server
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -c
+  description: turns off key-click
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -cc
+  description: default color visual class
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -nocursor
+  description: disable the cursor
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -core
+  description: generate core dump on fatal error
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -displayfd
+  value_name: fd
+  value_kind: Required
+  description: file descriptor to write display number to when ready to connect
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -dpi
+  value_name: int
+  value_kind: Required
+  description: screen resolution in dots per inch
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -dpms
+  description: disables VESA DPMS monitor control
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -deferglyphs
+  description: defer loading of [no|all|16-bit] glyphs
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -f
+  value_name: '#'
+  value_kind: Required
+  description: bell base (0-100)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -fakescreenfps
+  description: fake screen default fps (1-600)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -fp
+  value_name: string
+  value_kind: Required
+  description: default font path
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -help
+  description: prints message with these options
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -iglx
+  description: Prohibit creating indirect GLX contexts (default)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -I
+  description: ignore all remaining arguments
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -ld
+  value_name: int
+  value_kind: Required
+  description: limit data space to N Kb
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -lf
+  value_name: int
+  value_kind: Required
+  description: limit number of open files to N
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -ls
+  value_name: int
+  value_kind: Required
+  description: limit stack space to N Kb
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -nolock
+  description: disable the locking mechanism
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -maxclients
+  value_name: n
+  value_kind: Required
+  description: set maximum number of clients (power of two)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -nolisten
+  value_name: string
+  value_kind: Required
+  description: don't listen on protocol
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -listen
+  value_name: string
+  value_kind: Required
+  description: listen on protocol
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -noreset
+  description: don't reset after last client exists
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -background
+  value_name: '[none]'
+  value_kind: Optional
+  description: create root window with no background
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -reset
+  description: reset after last client exists
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -p
+  value_name: '#'
+  value_kind: Required
+  description: screen-saver pattern duration (minutes)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -pn
+  description: accept failure to listen on all ports
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -nopn
+  description: reject failure to listen on all ports
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -r
+  description: turns off auto-repeat
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -render
+  description: set render color alloc policy
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -retro
+  description: start with classic stipple and cursor
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -s
+  value_name: '#'
+  value_kind: Required
+  description: screen-saver timeout (minutes)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -seat
+  value_name: string
+  value_kind: Required
+  description: seat to run on
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -t
+  value_name: '#'
+  value_kind: Required
+  description: default pointer threshold (pixels/t)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -terminate
+  value_name: '[delay]'
+  value_kind: Optional
+  description: terminate at server reset (optional delay in sec)
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -tst
+  description: disable testing extensions
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -v
+  description: screen-saver without video blanking
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -wr
+  description: create root window with white background
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -maxbigreqsize
+  description: set maximal bigrequest size
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -xinerama
+  description: Disable XINERAMA extension
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -dumbSched
+  description: Disable smart scheduling and threaded input, enable old behavior
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -schedInterval
+  value_name: int
+  value_kind: Required
+  description: Set scheduler interval in msec
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -sigstop
+  description: Enable SIGSTOP based startup
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -extension
+  value_name: name
+  value_kind: Required
+  description: 'Disable extension Only the following extensions can be run-time enabled/disabled: Generic Event Extension MIT-SHM XTEST SECURITY XINERAMA XFIXES RENDER RANDR COMPOSITE DAMAGE MIT-SCREEN-SAVER DOUBLE-BUFFER RECORD DPMS X-Resource XVideo XVideo-MotionCompensation SELinux GLX'
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -query
+  value_name: host-name
+  value_kind: Required
+  description: contact named host for XDMCP
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -broadcast
+  description: broadcast for XDMCP
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -multicast
+  description: IPv6 multicast for XDMCP
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -indirect
+  value_name: host-name
+  value_kind: Required
+  description: contact named host for indirect XDMCP
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -port
+  value_name: port-num
+  value_kind: Required
+  description: UDP port number to send messages to
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -from
+  value_name: local-address
+  value_kind: Required
+  description: specify the local address to connect from
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -once
+  description: Terminate server after one session
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -class
+  value_name: display-class
+  value_kind: Required
+  description: specify display class to send in manage
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -cookie
+  value_name: xdm-auth-bits
+  value_kind: Required
+  description: specify the magic cookie for XDMCP
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -displayID
+  value_name: display-id
+  value_kind: Required
+  description: manufacturer display ID for request
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -ardelay
+  group: enable/disable accessx key sequences
+  description: set XKB autorepeat delay
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -arinterval
+  group: enable/disable accessx key sequences
+  description: set XKB autorepeat interval
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -screen
+  group: enable/disable accessx key sequences
+  description: set screen's width, height, depth
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -pixdepths
+  group: enable/disable accessx key sequences
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -linebias
+  value_name: n
+  value_kind: Required
+  description: adjust thin line pixelization
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -blackpixel
+  value_name: n
+  value_kind: Required
+  description: pixel value for black
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -whitepixel
+  value_name: n
+  value_kind: Required
+  description: pixel value for white
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -fbdir
+  value_name: directory
+  value_kind: Required
+  description: put framebuffers in mmap'ed files in directory
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -shmem
+  description: put framebuffers in shared memory
+  provenance:
+    sources:
+    - help-text
+provenance:
+  sources:
+  - help-text
+  confidence: 0.5
+children_filled: true
diff --git a/corpus/Xvfb/audit-seed10/help.stderr.txt b/corpus/Xvfb/audit-seed10/help.stderr.txt
new file mode 100644
index 00000000..a93cedc5
--- /dev/null
+++ b/corpus/Xvfb/audit-seed10/help.stderr.txt
@@ -0,0 +1,107 @@
+Unrecognized option: --help
+use: X [:<display>] [option]
+-a #                   default pointer acceleration (factor)
+-ac                    disable access control restrictions
+-audit int             set audit trail level
+-auth file             select authorization file
+-br                    create root window with black background
++bs                    enable any backing store support
+-bs                    disable any backing store support
++byteswappedclients    Allow clients with endianess different to that of the server
+-byteswappedclients    Prohibit clients with endianess different to that of the server
+-c                     turns off key-click
+c #                    key-click volume (0-100)
+-cc int                default color visual class
+-nocursor              disable the cursor
+-core                  generate core dump on fatal error
+-displayfd fd          file descriptor to write display number to when ready to connect
+-dpi int               screen resolution in dots per inch
+-dpms                  disables VESA DPMS monitor control
+-deferglyphs [none|all|16] defer loading of [no|all|16-bit] glyphs
+-f #                   bell base (0-100)
+-fakescreenfps #       fake screen default fps (1-600)
+-fp string             default font path
+-help                  prints message with these options
++iglx                  Allow creating indirect GLX contexts
+-iglx                  Prohibit creating indirect GLX contexts (default)
+-I                     ignore all remaining arguments
+-ld int                limit data space to N Kb
+-lf int                limit number of open files to N
+-ls int                limit stack space to N Kb
+-nolock                disable the locking mechanism
+-maxclients n          set maximum number of clients (power of two)
+-nolisten string       don't listen on protocol
+-listen string         listen on protocol
+-noreset               don't reset after last client exists
+-background [none]     create root window with no background
+-reset                 reset after last client exists
+-p #                   screen-saver pattern duration (minutes)
+-pn                    accept failure to listen on all ports
+-nopn                  reject failure to listen on all ports
+-r                     turns off auto-repeat
+r                      turns on auto-repeat 
+-render [default|mono|gray|color] set render color alloc policy
+-retro                 start with classic stipple and cursor
+-s #                   screen-saver timeout (minutes)
+-seat string           seat to run on
+-t #                   default pointer threshold (pixels/t)
+-terminate [delay]     terminate at server reset (optional delay in sec)
+-tst                   disable testing extensions
+ttyxx                  server started from init on /dev/ttyxx
+v                      video blanking for screen-saver
+-v                     screen-saver without video blanking
+-wr                    create root window with white background
+-maxbigreqsize         set maximal bigrequest size 
++xinerama              Enable XINERAMA extension
+-xinerama              Disable XINERAMA extension
+-dumbSched             Disable smart scheduling and threaded input, enable old behavior
+-schedInterval int     Set scheduler interval in msec
+-sigstop               Enable SIGSTOP based startup
++extension name        Enable extension
+-extension name        Disable extension
+ Only the following extensions can be run-time enabled/disabled:
+	Generic Event Extension
+	MIT-SHM
+	XTEST
+	SECURITY
+	XINERAMA
+	XFIXES
+	RENDER
+	RANDR
+	COMPOSITE
+	DAMAGE
+	MIT-SCREEN-SAVER
+	DOUBLE-BUFFER
+	RECORD
+	DPMS
+	X-Resource
+	XVideo
+	XVideo-MotionCompensation
+	SELinux
+	GLX
+-query host-name       contact named host for XDMCP
+-broadcast             broadcast for XDMCP
+-multicast [addr [hops]] IPv6 multicast for XDMCP
+-indirect host-name    contact named host for indirect XDMCP
+-port port-num         UDP port number to send messages to
+-from local-address    specify the local address to connect from
+-once                  Terminate server after one session
+-class display-class   specify display class to send in manage
+-cookie xdm-auth-bits  specify the magic cookie for XDMCP
+-displayID display-id  manufacturer display ID for request
+[+-]accessx [ timeout [ timeout_mask [ feedback [ options_mask] ] ] ]
+                       enable/disable accessx key sequences
+-ardelay               set XKB autorepeat delay
+-arinterval            set XKB autorepeat interval
+-screen scrn WxHxD     set screen's width, height, depth
+-pixdepths list-of-int support given pixmap depths
++/-render		   turn on/off RENDER extension support(default on)
+-linebias n            adjust thin line pixelization
+-blackpixel n          pixel value for black
+-whitepixel n          pixel value for white
+-fbdir directory       put framebuffers in mmap'ed files in directory
+-shmem                 put framebuffers in shared memory
+(EE) 
+Fatal server error:
+(EE) Unrecognized option: --help
+(EE) 
diff --git a/corpus/Xvfb/audit-seed10/help.txt b/corpus/Xvfb/audit-seed10/help.txt
new file mode 100644
index 00000000..e69de29b
diff --git a/corpus/Xvfb/audit-seed10/meta.toml b/corpus/Xvfb/audit-seed10/meta.toml
new file mode 100644
index 00000000..3ffd978c
--- /dev/null
+++ b/corpus/Xvfb/audit-seed10/meta.toml
@@ -0,0 +1,45 @@
+[bless]
+provenance = "agent"
+
+[tool]
+name = "Xvfb"
+version = "audit-seed10"
+platform = "ubuntu-24.04"
+captured_with = "manual capture per corpus/README.md step 2 (TERM=dumb NO_COLOR=1 COLUMNS=100 LC_ALL=C.UTF-8); xvfb 2:21.1.12-1ubuntu1.6"
+
+# Xvfb rejects --help and writes its whole response to stderr; stdout is
+# empty. `help.txt` is committed empty, the shape `corpus/jinfo/17.0.20`
+# uses, since `[[capture]].stdout` is a required field.
+[[capture]]
+argv = ["Xvfb", "--help"]
+stdout = "help.txt"
+stderr = "help.stderr.txt"
+exit_code = 1
+
+[contract]
+expected_framework = "generic"
+must_contain_flags = ["-audit", "-auth", "-fp", "-help"]
+
+# `[+-]accessx`'s own description must never name a flag group. It does
+# today, which is what keeps this fixture `[xfail]`; S-163 and S-165 on the
+# document-shape branch are the fix.
+must_not_contain_flag_group_prefixes = ["enable/disable accessx"]
+
+# Bare-word single-dash-long-table values (docs/shapes.md S-157): each
+# used to read as a boolean, its value name silently dropped, absorbed
+# into the row's own description column.
+[contract.must_value_name]
+"-audit" = "int"
+"-auth" = "file"
+"-fp" = "string"
+
+[xfail]
+broken = true
+reason = """
+S-157 recovers the bare-word value names this contract asserts (`-audit int`,
+`-auth file`, `-fp string`), and the tree is still wrong in two ways this rule
+does not reach. `[+-]accessx`'s own description becomes a fabricated flag group,
+and the `+word` rows reach nothing. Both need S-163 and S-165, which live on the
+document-shape branch. The contract fields above already state what must hold
+once all three land.
+"""
diff --git a/corpus/cargo-clippy/0.1.97/help.txt b/corpus/cargo-clippy/0.1.97/help.txt
new file mode 100644
index 00000000..2c35777d
--- /dev/null
+++ b/corpus/cargo-clippy/0.1.97/help.txt
@@ -0,0 +1,33 @@
+Checks a package to catch common mistakes and improve your Rust code.
+
+Usage:
+    cargo clippy [OPTIONS] [--] [<ARGS>...]
+
+Common options:
+    --no-deps                Run Clippy only on the given crate, without linting the dependencies
+    --fix                    Automatically apply lint suggestions. This flag implies --no-deps and --all-targets
+    -h, --help               Print this message
+    -V, --version            Print version info and exit
+    --explain [LINT]         Print the documentation for a given lint
+
+See all options with cargo check --help.
+
+Allowing / Denying lints
+
+To allow or deny a lint from the command line you can use cargo clippy -- with:
+
+    -W / --warn [LINT]       Set lint warnings
+    -A / --allow [LINT]      Set lint allowed
+    -D / --deny [LINT]       Set lint denied
+    -F / --forbid [LINT]     Set lint forbidden
+
+You can use tool lints to allow or deny lints from your code, e.g.:
+
+    #[allow(clippy::needless_lifetimes)]
+
+Manifest Options:
+    --manifest-path <PATH>  Path to Cargo.toml
+    --frozen                Require Cargo.lock and cache are up to date
+    --locked                Require Cargo.lock is up to date
+    --offline               Run without accessing the network
+
diff --git a/corpus/cargo-clippy/0.1.97/meta.toml b/corpus/cargo-clippy/0.1.97/meta.toml
new file mode 100644
index 00000000..221762bf
--- /dev/null
+++ b/corpus/cargo-clippy/0.1.97/meta.toml
@@ -0,0 +1,44 @@
+# docs/shapes.md S-161. Seed 7, maintainer item 1: "-W took / as a
+# placeholder and did not pair with its long form."
+#
+# The four rows of the "Allowing / Denying lints" block join their two
+# spellings with a spaced slash — `-W / --warn [LINT]` — so `-W` takes the
+# literal `/` as its value name and `--warn`, `--allow`, `--deny` and
+# `--forbid` reach the tree nowhere at all. Round 10 lifted the `/`-joining
+# repair out of S-144's lowdown-bullet gate and into the ordinary
+# option-table emit path, which is a real widening with zero fleet losses,
+# and it does NOT reach these rows: this document's rows are read by a
+# different row reader, so the tree is unchanged here and
+# `slash-joined-alias-outside-bullet` still reads 1 tool / 4 findings
+# fleet-wide. This fixture states that, so the gap is a failing contract
+# rather than a silence.
+
+[bless]
+provenance = "agent"
+
+[tool]
+name = "cargo-clippy"
+version = "0.1.97"
+platform = "ubuntu-24.04 (aarch64)"
+captured_with = "manual capture per corpus/README.md step 2 (TERM=dumb NO_COLOR=1 COLUMNS=100 LC_ALL=C.UTF-8); clippy 0.1.97 (8bab26f4f6 2026-07-14)"
+
+[[capture]]
+argv = ["cargo-clippy", "--help"]
+stdout = "help.txt"
+exit_code = 0
+
+[contract]
+must_contain_flags = ["--warn", "--allow", "--deny", "--forbid"]
+
+[contract.must_not_value_name]
+"-W" = "/"
+"-A" = "/"
+"-D" = "/"
+"-F" = "/"
+
+[contract.must_describe]
+"-W" = "Set lint warnings"
+
+[xfail]
+broken = true
+reason = "[S-161] the rows `-W / --warn [LINT]` join their two spellings with a spaced slash, so -W takes / as its value name and --warn reaches nothing; the same for -A/--allow, -D/--deny and -F/--forbid. The join repair shipped this round covers the ordinary option-table emit path and does not reach this document's row reader. slash-joined-alias-outside-bullet reads 1 tool / 4 findings fleet-wide, below the five-tool bar; nothing ships for it."
diff --git a/corpus/dpkg-statoverride/audit-seed2/expected.snap b/corpus/dpkg-statoverride/audit-seed2/expected.snap
index d3a7eb8e..4fbdbec4 100644
--- a/corpus/dpkg-statoverride/audit-seed2/expected.snap
+++ b/corpus/dpkg-statoverride/audit-seed2/expected.snap
@@ -73,7 +73,7 @@ flags:
     - help-text
 - spellings:
   - --force-
-  value_name: <thing>
+  value_name: <thing>[,...]
   value_kind: Required
   description: override problems (see --force-help).
   provenance:
@@ -81,7 +81,7 @@ flags:
     - help-text
 - spellings:
   - --no-force-
-  value_name: <thing>
+  value_name: <thing>[,...]
   value_kind: Required
   description: stop when problems encountered.
   provenance:
@@ -89,7 +89,7 @@ flags:
     - help-text
 - spellings:
   - --refuse-
-  value_name: <thing>
+  value_name: <thing>[,...]
   value_kind: Required
   description: ditto.
   provenance:
diff --git a/corpus/dpkg/1.22.6/expected.snap b/corpus/dpkg/1.22.6/expected.snap
index 4f235fb7..48bff2fc 100644
--- a/corpus/dpkg/1.22.6/expected.snap
+++ b/corpus/dpkg/1.22.6/expected.snap
@@ -459,7 +459,7 @@ flags:
     - help-text
 - spellings:
   - --force-
-  value_name: <thing>
+  value_name: <thing>[,...]
   value_kind: Required
   description: Override problems (see --force-help).
   provenance:
@@ -467,7 +467,7 @@ flags:
     - help-text
 - spellings:
   - --no-force-
-  value_name: <thing>
+  value_name: <thing>[,...]
   value_kind: Required
   description: Stop when problems encountered.
   provenance:
@@ -475,7 +475,7 @@ flags:
     - help-text
 - spellings:
   - --refuse-
-  value_name: <thing>
+  value_name: <thing>[,...]
   value_kind: Required
   description: Ditto.
   provenance:
diff --git a/corpus/grub-mkimage/2.12/help.txt b/corpus/grub-mkimage/2.12/help.txt
new file mode 100644
index 00000000..c7e1778d
--- /dev/null
+++ b/corpus/grub-mkimage/2.12/help.txt
@@ -0,0 +1,44 @@
+Usage: grub-mkimage [OPTION...] [OPTION]... [MODULES]
+Make a bootable image of GRUB.
+
+  -c, --config=FILE          embed FILE as an early config
+  -C, --compression=(xz|none|auto)
+                             choose the compression to use for core image
+      --disable-shim-lock    disable shim_lock verifier
+  -d, --directory=DIR        use images and modules under DIR
+                             [default=/usr/lib/grub/<platform>]
+  -D, --dtb=FILE             embed FILE as a device tree (DTB)
+
+  -k, --pubkey=FILE          embed FILE as public key for signature checking
+  -m,                              --memdisk=FILE         embed FILE as a memdisk image
+Implies `-p (memdisk)/boot/grub' and overrides
+                             any prefix supplied previously, but the prefix
+                             itself can be overridden by later options
+  -n, --note                 add NOTE segment for CHRP IEEE1275
+  -o, --output=FILE          output a generated image to FILE [default=stdout]
+  -O, --format=FORMAT        generate an image in FORMAT
+                             available formats: i386-coreboot, i386-multiboot,
+                             i386-pc, i386-xen_pvh, i386-pc-pxe,
+                             i386-pc-eltorito, i386-efi, i386-ieee1275,
+                             i386-qemu, x86_64-efi, i386-xen, x86_64-xen,
+                             mipsel-yeeloong-flash, mipsel-fuloong2f-flash,
+                             mipsel-loongson-elf, powerpc-ieee1275,
+                             sparc64-ieee1275-raw, sparc64-ieee1275-cdcore,
+                             sparc64-ieee1275-aout, ia64-efi, mips-arc,
+                             mipsel-arc, mipsel-qemu_mips-elf,
+                             mips-qemu_mips-flash, mipsel-qemu_mips-flash,
+                             mips-qemu_mips-elf, arm-uboot,
+                             arm-coreboot-vexpress, arm-coreboot-veyron,
+                             arm-efi, arm64-efi, loongarch64-efi, riscv32-efi,
+                             riscv64-efi
+  -p, --prefix=DIR           set prefix directory
+  -s, --sbat=FILE            SBAT metadata
+  -v, --verbose              print verbose messages.
+  -?, --help                 give this help list
+      --usage                give a short usage message
+  -V, --version              print program version
+
+Mandatory or optional arguments to long options are also mandatory or optional
+for any corresponding short options.
+
+Report bugs to <bug-grub@gnu.org>.
diff --git a/corpus/grub-mkimage/2.12/meta.toml b/corpus/grub-mkimage/2.12/meta.toml
new file mode 100644
index 00000000..a1e87b80
--- /dev/null
+++ b/corpus/grub-mkimage/2.12/meta.toml
@@ -0,0 +1,36 @@
+# [S-155] `-C, --compression=(xz|none|auto)` is one paren-delimited
+# alternation of literal values in the value position. It rendered as an
+# opaque placeholder holding the whole list; the fix reads it as
+# `--compression`'s own `choices` instead. See docs/shapes.md S-155.
+
+[bless]
+provenance = "agent"
+
+[tool]
+name = "grub-mkimage"
+version = "2.12"                     # grub-mkimage (GRUB) 2.12-1ubuntu7.3
+platform = "ubuntu-24.04"
+captured_with = "manual capture per corpus/README.md step 2 (TERM=dumb NO_COLOR=1 COLUMNS=100 LC_ALL=C.UTF-8); grub2-common 2.12-1ubuntu7.3"
+
+[[capture]]
+argv = ["grub-mkimage", "--help"]
+stdout = "help.txt"
+
+[contract]
+expected_framework = "GNU argp/getopt_long"
+min_status = "ok"
+
+[contract.must_attach_choices]
+"--compression" = ["xz", "none", "auto"]
+# [S-156] Open: still fails today. --format's own choices live only in its
+# description's "available formats:" tail, never attached as a real
+# choices list. This assertion is the fixture's own evidence that S-156
+# stays [xfail] below.
+"--format" = ["i386-coreboot", "i386-multiboot", "i386-pc", "i386-xen_pvh", "i386-pc-pxe", "i386-pc-eltorito", "i386-efi", "i386-ieee1275", "i386-qemu", "x86_64-efi", "i386-xen", "x86_64-xen", "mipsel-yeeloong-flash", "mipsel-fuloong2f-flash", "mipsel-loongson-elf", "powerpc-ieee1275", "sparc64-ieee1275-raw", "sparc64-ieee1275-cdcore", "sparc64-ieee1275-aout", "ia64-efi", "mips-arc", "mipsel-arc", "mipsel-qemu_mips-elf", "mips-qemu_mips-flash", "mipsel-qemu_mips-flash", "mips-qemu_mips-elf", "arm-uboot", "arm-coreboot-vexpress", "arm-coreboot-veyron", "arm-efi", "arm64-efi", "loongarch64-efi", "riscv32-efi", "riscv64-efi"]
+
+[contract.must_not_value_name]
+"--compression" = "xz|none|auto"
+
+[xfail]
+broken = true
+reason = "S-155 is fixed: --compression's paren-delimited alternation attaches as choices, asserted above. S-156 is open: --format's description continuation opens 'available formats:' and runs 33 comma-separated literal values to the end, never becoming --format's own choices; description-tail-enumerates-choices measures 1 genuine tool fleet-wide (a 36-tool sample built from a grep over audit/queue-captures for the four labels, plus rustc and tclobjnew-bpfcc), below the five-tool bar, so nothing ships for it this round."
diff --git a/corpus/javaflow-bpfcc/audit-seed2/expected.snap b/corpus/javaflow-bpfcc/audit-seed2/expected.snap
index b320691f..a3a64da8 100644
--- a/corpus/javaflow-bpfcc/audit-seed2/expected.snap
+++ b/corpus/javaflow-bpfcc/audit-seed2/expected.snap
@@ -19,8 +19,14 @@ flags:
 - spellings:
   - -l
   - --language
-  value_name: '{java,perl,php,python,ruby,tcl}'
   value_kind: Required
+  choices:
+  - java
+  - perl
+  - php
+  - python
+  - ruby
+  - tcl
   description: language to trace
   provenance:
     sources:
diff --git a/corpus/lto-dump/13.3.0/expected.snap b/corpus/lto-dump/13.3.0/expected.snap
index 881a4361..54ae090b 100644
--- a/corpus/lto-dump/13.3.0/expected.snap
+++ b/corpus/lto-dump/13.3.0/expected.snap
@@ -2478,7 +2478,7 @@ flags:
     - help-text
 - spellings:
   - -D
-  value_name: <macro>
+  value_name: <macro>[=<val>]
   value_kind: Required
   group: 'The following options are language-related:'
   provenance:
diff --git a/corpus/mksquashfs/4.6.1/expected.snap b/corpus/mksquashfs/4.6.1/expected.snap
index 1c355aaf..0cdbff13 100644
--- a/corpus/mksquashfs/4.6.1/expected.snap
+++ b/corpus/mksquashfs/4.6.1/expected.snap
@@ -758,6 +758,8 @@ flags:
     - help-text
 - spellings:
   - -Xstrategy
+  value_name: strategy1,strategy2,...,strategyN
+  value_kind: Required
   group: gzip (default)
   description: 'Compress using strategy1,strategy2,...,strategyN in turn and choose the best compression. Available strategies: default, filtered, huffman_only, run_length_encoded and fixed'
   provenance:
@@ -790,6 +792,8 @@ flags:
     - help-text
 - spellings:
   - -Xbcj
+  value_name: filter1,filter2,...,filterN
+  value_kind: Required
   group: xz
   description: 'Compress using filter1,filter2,...,filterN in turn (in addition to no filter), and choose the best compression. Available filters: x86, arm, armthumb, powerpc, sparc, ia64'
   provenance:
diff --git a/corpus/mksquashfs/4.6.1/meta.toml b/corpus/mksquashfs/4.6.1/meta.toml
index 780d2072..3885f26d 100644
--- a/corpus/mksquashfs/4.6.1/meta.toml
+++ b/corpus/mksquashfs/4.6.1/meta.toml
@@ -46,6 +46,10 @@ must_usage_forms_min = 1
 "-mem" = "<size>"
 "-comp" = "<comp>"
 "-mkfs-time" = "<time>"
+# Bare-word, comma-separated value lists (docs/shapes.md S-157): the same
+# table rule now also keeps a value with no bracket or angle delimiter.
+"-Xstrategy" = "strategy1,strategy2,...,strategyN"
+"-Xbcj" = "filter1,filter2,...,filterN"
 
 # One row under each of the ten `Xxx options:` headings, and one under
 # each of the five compressor sub-labels, gzip included in source order
diff --git a/corpus/qemu-arm64-static/audit-seed2/expected.snap b/corpus/qemu-arm64-static/audit-seed2/expected.snap
index cdbfac2c..1ab64c85 100644
--- a/corpus/qemu-arm64-static/audit-seed2/expected.snap
+++ b/corpus/qemu-arm64-static/audit-seed2/expected.snap
@@ -40,6 +40,8 @@ flags:
     - help-text
 - spellings:
   - -cpu
+  value_name: model
+  value_kind: Required
   description: QEMU_CPU select CPU (-cpu help for list)
   provenance:
     sources:
diff --git a/corpus/qemu-arm64-static/audit-seed2/meta.toml b/corpus/qemu-arm64-static/audit-seed2/meta.toml
index 681d4bdb..8379ac40 100644
--- a/corpus/qemu-arm64-static/audit-seed2/meta.toml
+++ b/corpus/qemu-arm64-static/audit-seed2/meta.toml
@@ -34,3 +34,22 @@ expected_framework = "generic"
 # by nothing but a space, and `expected.snap` freezes every one of them
 # unchanged.
 must_contain_flags = ["help", "cpu", "one-insn-per-tb"]
+
+# `-cpu` and `-dfilter`'s own bare-word value names (docs/shapes.md
+# S-157): the single-dash-long-table rule now also reads a value with no
+# bracket or angle delimiter, one whitespace-delimited token past the
+# name, never swallowing this ragged table's third (`Env-variable`)
+# column.
+[contract.must_value_name]
+"-cpu" = "model"
+# `-dfilter`'s own value sits one space from its ENV-VARIABLE column, so
+# recovering it is the header-declared three-column fix's job (S-166),
+# not this bare-word rule's. Asserted on the branch that carries it.
+
+# The regression this row caught once (docs/shapes.md S-157): reading past
+# the first whitespace-delimited token swallowed the row's own
+# `Env-variable` column into the value.
+[contract.must_not_value_name]
+# `-dfilter`'s own value sits one space from its ENV-VARIABLE column, so
+# recovering it is the header-declared three-column fix's job (S-166),
+# not this bare-word rule's. Asserted on the branch that carries it.
diff --git a/corpus/rubyobjnew-bpfcc/audit-seed2/expected.snap b/corpus/rubyobjnew-bpfcc/audit-seed2/expected.snap
index 0a3ce840..08cd22e3 100644
--- a/corpus/rubyobjnew-bpfcc/audit-seed2/expected.snap
+++ b/corpus/rubyobjnew-bpfcc/audit-seed2/expected.snap
@@ -24,8 +24,12 @@ flags:
 - spellings:
   - -l
   - --language
-  value_name: '{c,java,ruby,tcl}'
   value_kind: Required
+  choices:
+  - c
+  - java
+  - ruby
+  - tcl
   description: language to trace
   provenance:
     sources:
diff --git a/corpus/rustc/1.97.1/expected.snap b/corpus/rustc/1.97.1/expected.snap
new file mode 100644
index 00000000..10a085f2
--- /dev/null
+++ b/corpus/rustc/1.97.1/expected.snap
@@ -0,0 +1,257 @@
+name: rustc
+usage:
+- 'Usage: rustc [OPTIONS] INPUT'
+positionals:
+- name: INPUT
+  required: true
+  provenance:
+    sources:
+    - help-text
+flags:
+- spellings:
+  - -h
+  - --help
+  description: Display this message
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --cfg
+  value_name: <SPEC>
+  value_kind: Required
+  description: Configure the compilation environment. SPEC supports the syntax `<NAME>[="<VALUE>"]`.
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --check-cfg
+  value_name: <SPEC>
+  value_kind: Required
+  description: Provide list of expected cfgs for checking
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -L
+  value_name: '[<KIND>=]<PATH>'
+  value_kind: Required
+  description: 'Add a directory to the library search path. The optional KIND can be one of <dependency|crate|native|framework|all> (default: all).'
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -l
+  value_name: <KIND>[:<MODIFIERS>
+  value_kind: Optional
+  description: 'Link the generated crate(s) to the specified native library NAME. The optional KIND can be one of <static|framework|dylib> (default: dylib). Optional comma separated MODIFIERS <bundle|verbatim|whole-archive|as-needed> may be specified each with a prefix of either ''+'' to enable or ''-'' to disable.'
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --crate-type
+  value_kind: Required
+  choices:
+  - bin
+  - lib
+  - rlib
+  - dylib
+  - cdylib
+  - staticlib
+  - proc-macro
+  description: Comma separated list of types of crates for the compiler to emit
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --crate-name
+  value_name: <NAME>
+  value_kind: Required
+  description: Specify the name of the crate being built
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --edition
+  value_kind: Required
+  choices:
+  - '2015'
+  - '2018'
+  - '2021'
+  - '2024'
+  - future
+  description: Specify which edition of the compiler to use when compiling code. The default is 2015 and the latest stable edition is 2024.
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --emit
+  value_name: <TYPE>[=<FILE>]
+  value_kind: Required
+  description: 'Comma separated list of types of output for the compiler to emit. Each TYPE has the default FILE name: * asm - CRATE_NAME.s * llvm-bc - CRATE_NAME.bc * dep-info - CRATE_NAME.d * link - (platform and crate-type dependent) * llvm-ir - CRATE_NAME.ll * metadata - libCRATE_NAME.rmeta * mir - CRATE_NAME.mir * obj - CRATE_NAME.o * thin-link-bitcode - CRATE_NAME.indexing.o'
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --print
+  value_name: <INFO>[=<FILE>]
+  value_kind: Required
+  description: Compiler information to print on stdout (or to a file) INFO may be one of <all-target-specs-json|backend-has-mnemonic|backend-has-zstd|calling-conventions|cfg|check-cfg|code-models|crate-name|crate-root-lint-levels|deployment-target|file-names|host-tuple|link-args|native-static-libs|relocation-models|split-debuginfo|stack-protector-strategies|supported-crate-types|sysroot|target-cpus|target-features|target-libdir|target-list|target-spec-json|target-spec-json-schema|tls-models>.
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -g
+  description: Equivalent to -C debuginfo=2
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -O
+  description: Equivalent to -C opt-level=3
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -o
+  value_name: <FILENAME>
+  value_kind: Required
+  description: Write output to FILENAME
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --out-dir
+  value_name: <DIR>
+  value_kind: Required
+  description: Write output to compiler-chosen filename in DIR
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --explain
+  value_name: <OPT>
+  value_kind: Required
+  description: Provide a detailed explanation of an error message
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --test
+  description: Build a test harness
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --target
+  value_name: <TARGET>
+  value_kind: Required
+  description: Target tuple for which the code is compiled
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -A
+  - --allow
+  value_name: <LINT>
+  value_kind: Required
+  description: Set lint allowed
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -W
+  - --warn
+  value_name: <LINT>
+  value_kind: Required
+  description: Set lint warnings
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --force-warn
+  value_name: <LINT>
+  value_kind: Required
+  description: Set lint force-warn
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -D
+  - --deny
+  value_name: <LINT>
+  value_kind: Required
+  description: Set lint denied
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -F
+  - --forbid
+  value_name: <LINT>
+  value_kind: Required
+  description: Set lint forbidden
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --cap-lints
+  value_name: <LEVEL>
+  value_kind: Required
+  description: Set the most restrictive lint level. More restrictive lints are capped at this level
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -C
+  - --codegen
+  value_name: <OPT>[=<VALUE>]
+  value_kind: Required
+  description: Set a codegen option
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -V
+  - --version
+  description: Print version info and exit
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -v
+  - --verbose
+  description: Use verbose output
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -C
+  value_name: help
+  value_kind: Required
+  group: 'Additional help:'
+  description: Print codegen options
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -W
+  value_name: help
+  value_kind: Required
+  group: 'Additional help:'
+  description: Print 'lint' options and default settings
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - --help
+  - -v
+  group: 'Additional help:'
+  description: Print the full set of options rustc accepts
+  provenance:
+    sources:
+    - help-text
+provenance:
+  sources:
+  - help-text
+  confidence: 0.5
+children_filled: true
diff --git a/corpus/rustc/1.97.1/help.txt b/corpus/rustc/1.97.1/help.txt
new file mode 100644
index 00000000..2053ce0b
--- /dev/null
+++ b/corpus/rustc/1.97.1/help.txt
@@ -0,0 +1,73 @@
+Usage: rustc [OPTIONS] INPUT
+
+Options:
+    -h, --help          Display this message
+        --cfg <SPEC>    Configure the compilation environment.
+                        SPEC supports the syntax `<NAME>[="<VALUE>"]`.
+        --check-cfg <SPEC>
+                        Provide list of expected cfgs for checking
+    -L [<KIND>=]<PATH>  Add a directory to the library search path. The
+                        optional KIND can be one of
+                        <dependency|crate|native|framework|all> (default:
+                        all).
+    -l [<KIND>[:<MODIFIERS>]=]<NAME>[:<RENAME>]
+                        Link the generated crate(s) to the specified native
+                        library NAME. The optional KIND can be one of
+                        <static|framework|dylib> (default: dylib).
+                        Optional comma separated MODIFIERS
+                        <bundle|verbatim|whole-archive|as-needed>
+                        may be specified each with a prefix of either '+' to
+                        enable or '-' to disable.
+        --crate-type <bin|lib|rlib|dylib|cdylib|staticlib|proc-macro>
+                        Comma separated list of types of crates
+                        for the compiler to emit
+        --crate-name <NAME>
+                        Specify the name of the crate being built
+        --edition <2015|2018|2021|2024|future>
+                        Specify which edition of the compiler to use when
+                        compiling code. The default is 2015 and the latest
+                        stable edition is 2024.
+        --emit <TYPE>[=<FILE>]
+                        Comma separated list of types of output for the
+                        compiler to emit.
+                        Each TYPE has the default FILE name:
+                        * asm - CRATE_NAME.s
+                        * llvm-bc - CRATE_NAME.bc
+                        * dep-info - CRATE_NAME.d
+                        * link - (platform and crate-type dependent)
+                        * llvm-ir - CRATE_NAME.ll
+                        * metadata - libCRATE_NAME.rmeta
+                        * mir - CRATE_NAME.mir
+                        * obj - CRATE_NAME.o
+                        * thin-link-bitcode - CRATE_NAME.indexing.o
+        --print <INFO>[=<FILE>]
+                        Compiler information to print on stdout (or to a file)
+                        INFO may be one of
+                        <all-target-specs-json|backend-has-mnemonic|backend-has-zstd|calling-conventions|cfg|check-cfg|code-models|crate-name|crate-root-lint-levels|deployment-target|file-names|host-tuple|link-args|native-static-libs|relocation-models|split-debuginfo|stack-protector-strategies|supported-crate-types|sysroot|target-cpus|target-features|target-libdir|target-list|target-spec-json|target-spec-json-schema|tls-models>.
+    -g                  Equivalent to -C debuginfo=2
+    -O                  Equivalent to -C opt-level=3
+    -o <FILENAME>       Write output to FILENAME
+        --out-dir <DIR> Write output to compiler-chosen filename in DIR
+        --explain <OPT> Provide a detailed explanation of an error message
+        --test          Build a test harness
+        --target <TARGET>
+                        Target tuple for which the code is compiled
+    -A, --allow <LINT>  Set lint allowed
+    -W, --warn <LINT>   Set lint warnings
+        --force-warn <LINT>
+                        Set lint force-warn
+    -D, --deny <LINT>   Set lint denied
+    -F, --forbid <LINT> Set lint forbidden
+        --cap-lints <LEVEL>
+                        Set the most restrictive lint level. More restrictive
+                        lints are capped at this level
+    -C, --codegen <OPT>[=<VALUE>]
+                        Set a codegen option
+    -V, --version       Print version info and exit
+    -v, --verbose       Use verbose output
+
+Additional help:
+    -C help             Print codegen options
+    -W help             Print 'lint' options and default settings
+    --help -v           Print the full set of options rustc accepts
+
diff --git a/corpus/rustc/1.97.1/meta.toml b/corpus/rustc/1.97.1/meta.toml
new file mode 100644
index 00000000..64ae26be
--- /dev/null
+++ b/corpus/rustc/1.97.1/meta.toml
@@ -0,0 +1,47 @@
+# [S-155] `--crate-type <bin|lib|rlib|dylib|cdylib|staticlib|proc-macro>`
+# and `--edition <2015|2018|2021|2024|future>` are each one angle-bracket
+# alternation of literal values in the value position. Both rendered as an
+# opaque placeholder holding the whole list; the fix reads each as its
+# flag's own `choices` instead. See docs/shapes.md S-155.
+#
+# [S-158] `-L [<KIND>=]<PATH>`, `--emit <TYPE>[=<FILE>]` and
+# `-C <OPT>[=<VALUE>]` each glue a bracket-optional group onto a required
+# angle placeholder. Each used to keep only the group that opens the run
+# and lose the other half. See docs/shapes.md S-158.
+
+[bless]
+provenance = "agent"
+
+[tool]
+name = "rustc"
+version = "1.97.1"                   # rustc 1.97.1 (8bab26f4f 2026-07-14)
+platform = "ubuntu-24.04"
+captured_with = "manual capture per corpus/README.md step 2 (TERM=dumb NO_COLOR=1 COLUMNS=100 LC_ALL=C.UTF-8); rustc 1.97.1"
+
+[[capture]]
+argv = ["rustc", "--help"]
+stdout = "help.txt"
+
+[contract]
+expected_framework = "generic"           # `--doctor rustc` against the live
+                                         # binary reads "clap (v3/v4)" from
+                                         # an artifact-scan match, but the
+                                         # corpus test has only the frozen
+                                         # help-text bytes, no binary, and
+                                         # falls to "generic" — the value
+                                         # this contract must assert
+min_status = "ok"
+must_contain_flags = ["L", "l", "emit", "C"]
+
+[contract.must_attach_choices]
+"--crate-type" = ["bin", "lib", "rlib", "dylib", "cdylib", "staticlib", "proc-macro"]
+"--edition" = ["2015", "2018", "2021", "2024", "future"]
+
+[contract.must_not_value_name]
+"--crate-type" = "bin|lib|rlib|dylib|cdylib|staticlib|proc-macro"
+"--edition" = "2015|2018|2021|2024|future"
+
+[contract.must_value_name]
+"-L" = "[<KIND>=]<PATH>"
+"--emit" = "<TYPE>[=<FILE>]"
+"-C" = "<OPT>[=<VALUE>]"
diff --git a/corpus/sqfstar/4.6.1/expected.snap b/corpus/sqfstar/4.6.1/expected.snap
index 9ab8368b..12966023 100644
--- a/corpus/sqfstar/4.6.1/expected.snap
+++ b/corpus/sqfstar/4.6.1/expected.snap
@@ -544,6 +544,8 @@ flags:
     - help-text
 - spellings:
   - -Xstrategy
+  value_name: strategy1,strategy2,...,strategyN
+  value_kind: Required
   group: gzip (default)
   description: 'Compress using strategy1,strategy2,...,strategyN in turn and choose the best compression. Available strategies: default, filtered, huffman_only, run_length_encoded and fixed'
   provenance:
@@ -576,6 +578,8 @@ flags:
     - help-text
 - spellings:
   - -Xbcj
+  value_name: filter1,filter2,...,filterN
+  value_kind: Required
   group: xz
   description: 'Compress using filter1,filter2,...,filterN in turn (in addition to no filter), and choose the best compression. Available filters: x86, arm, armthumb, powerpc, sparc, ia64'
   provenance:
diff --git a/corpus/sqfstar/4.6.1/meta.toml b/corpus/sqfstar/4.6.1/meta.toml
index a180459c..212d54e3 100644
--- a/corpus/sqfstar/4.6.1/meta.toml
+++ b/corpus/sqfstar/4.6.1/meta.toml
@@ -20,7 +20,7 @@ exit_code = 1
 expected_framework = "generic"
 # The single-dash-long table rule (docs/shapes.md S-145): these used to
 # split at their second letter, sharing mksquashfs's own shape.
-must_contain_flags = ["-pf", "-ef", "-Xhelp", "-Xhc", "-Xbcj"]
+must_contain_flags = ["-pf", "-ef", "-Xhelp", "-Xhc", "-Xbcj", "-Xstrategy"]
 # [S-142] the synopsis's own operand, once the glued `SYNTAX:` label is read.
 must_contain_positionals = ["FILESYSTEM"]
 must_usage_forms_min = 1
@@ -29,6 +29,9 @@ must_usage_forms_min = 1
 "-mem" = "<size>"
 "-comp" = "<comp>"
 "-mkfs-time" = "<time>"
+# Bare-word, comma-separated value lists (docs/shapes.md S-157).
+"-Xstrategy" = "strategy1,strategy2,...,strategyN"
+"-Xbcj" = "filter1,filter2,...,filterN"
 
 # One row under a flush `Xxx options:` heading and one under two of the
 # compressor sub-labels, gzip included (docs/shapes.md S-146).
diff --git a/corpus/tclobjnew-bpfcc/0.29.1/expected.snap b/corpus/tclobjnew-bpfcc/0.29.1/expected.snap
new file mode 100644
index 00000000..46d87149
--- /dev/null
+++ b/corpus/tclobjnew-bpfcc/0.29.1/expected.snap
@@ -0,0 +1,67 @@
+name: tclobjnew-bpfcc
+usage:
+- 'usage: uobjnew [-h] [-l {c,java,ruby,tcl}] [-C TOP_COUNT] [-S TOP_SIZE] [-v] pid [interval]'
+positionals:
+- name: pid
+  required: true
+  description: process id to attach to
+  provenance:
+    sources:
+    - help-text
+- name: interval
+  description: print every specified number of seconds
+  provenance:
+    sources:
+    - help-text
+flags:
+- spellings:
+  - -h
+  - --help
+  description: show this help message and exit
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -l
+  - --language
+  value_kind: Required
+  choices:
+  - c
+  - java
+  - ruby
+  - tcl
+  description: language to trace
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -C
+  - --top-count
+  value_name: TOP_COUNT
+  value_kind: Required
+  description: number of most frequently allocated types to print
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -S
+  - --top-size
+  value_name: TOP_SIZE
+  value_kind: Required
+  description: number of largest types by allocated bytes to print
+  provenance:
+    sources:
+    - help-text
+- spellings:
+  - -v
+  - --verbose
+  description: 'verbose mode: print the BPF program (for debugging purposes)'
+  provenance:
+    sources:
+    - help-text
+detected_framework: argparse
+provenance:
+  sources:
+  - help-text
+  confidence: 1.0
+children_filled: true
diff --git a/corpus/tclobjnew-bpfcc/0.29.1/help.txt b/corpus/tclobjnew-bpfcc/0.29.1/help.txt
new file mode 100644
index 00000000..e96af7f0
--- /dev/null
+++ b/corpus/tclobjnew-bpfcc/0.29.1/help.txt
@@ -0,0 +1,23 @@
+usage: uobjnew [-h] [-l {c,java,ruby,tcl}] [-C TOP_COUNT] [-S TOP_SIZE] [-v] pid [interval]
+
+Summarize object allocations in high-level languages.
+
+positional arguments:
+  pid                   process id to attach to
+  interval              print every specified number of seconds
+
+options:
+  -h, --help            show this help message and exit
+  -l {c,java,ruby,tcl}, --language {c,java,ruby,tcl}
+                        language to trace
+  -C TOP_COUNT, --top-count TOP_COUNT
+                        number of most frequently allocated types to print
+  -S TOP_SIZE, --top-size TOP_SIZE
+                        number of largest types by allocated bytes to print
+  -v, --verbose         verbose mode: print the BPF program (for debugging purposes)
+
+examples:
+    ./uobjnew -l java 145         # summarize Java allocations in process 145
+    ./uobjnew -l c 2020 1         # grab malloc() sizes and print every second
+    ./uobjnew -l ruby 6712 -C 10  # top 10 Ruby types by number of allocations
+    ./uobjnew -l ruby 6712 -S 10  # top 10 Ruby types by total size
diff --git a/corpus/tclobjnew-bpfcc/0.29.1/meta.toml b/corpus/tclobjnew-bpfcc/0.29.1/meta.toml
new file mode 100644
index 00000000..dd603d7c
--- /dev/null
+++ b/corpus/tclobjnew-bpfcc/0.29.1/meta.toml
@@ -0,0 +1,29 @@
+# [S-155] `-l {c,java,ruby,tcl}, --language {c,java,ruby,tcl}` is
+# argparse's own `{...}` metavar, printed only when `choices=` is set on
+# the argument. It rendered as an opaque placeholder holding the whole
+# list; the fix reads it as `--language`'s own `choices` instead, gated on
+# the argparse profile so no other framework's brace text is read this
+# way. See docs/shapes.md S-155.
+
+[bless]
+provenance = "agent"
+
+[tool]
+name = "tclobjnew-bpfcc"
+version = "0.29.1"                   # bpfcc-tools 0.29.1+ds-1ubuntu7
+platform = "ubuntu-24.04"
+captured_with = "manual capture per corpus/README.md step 2 (TERM=dumb NO_COLOR=1 COLUMNS=100 LC_ALL=C.UTF-8); bpfcc-tools 0.29.1+ds-1ubuntu7"
+
+[[capture]]
+argv = ["tclobjnew-bpfcc", "--help"]
+stdout = "help.txt"
+
+[contract]
+expected_framework = "argparse"
+min_status = "ok"
+
+[contract.must_attach_choices]
+"--language" = ["c", "java", "ruby", "tcl"]
+
+[contract.must_not_value_name]
+"--language" = "{c,java,ruby,tcl}"
diff --git a/docs/design.md b/docs/design.md
index 80627d16..baec8211 100644
--- a/docs/design.md
+++ b/docs/design.md
@@ -2893,6 +2893,15 @@ would move every optional-value row fleet-wide, including the named control
 tools `git` and `tar`, to restore one character that the IR already carries.
 `fdisk`'s `--lock[=<mode>]` is the same shape and the same answer.
 
+**A mixed bracket-and-angle glued value spec ships below the five-tool bar
+(2026-09-12).** `glued-bracket-angle-run` (docs/shapes.md S-158) has a
+raw-shape count of 1 tool (`rustc`), maintainer-named from the seed 7 audit.
+Ships anyway: the fix moved 11 tools once measured tree-wide (`rustc`,
+`dpkg`, `dpkg-statoverride`, `java`, `jlink`, `jdeps`, `jpackage`,
+`gp-collect-app`, `lto-dump`, `lto-dump-13`), with 0 flag-count and 0
+subcommand-count losses on a full-`PATH` sweep-diff of 2269 tools, alongside
+S-157's own sweep.
+
 ### Deferred, with the reason each is not simply undone
 
 **Sub-case (b) of the `-h` fallback is unmeasured and must stay that way until
diff --git a/docs/shapes.md b/docs/shapes.md
index 2e344038..5012cef7 100644
--- a/docs/shapes.md
+++ b/docs/shapes.md
@@ -2449,7 +2449,13 @@ entry's `tools` field and nothing else. It does not get a new entry.
   flag in a three-way `or` chain, S-099's own `-h or -? or --help`) and a
   bare lowercase first description word (never a value, `-m or
   --match-arch file.o`'s own shape). Below the five-tool bar. Ship
-  nothing; the fixture stays `[xfail]`.
+  nothing; the fixture stays `[xfail]`. A relaxation was built and refused: ending
+  the spelling run at a `--long` followed by one space and a bare lowercase
+  word joined `-c, --copyright` but still gave it the fabricated value name
+  `include`, so it failed its own acceptance test, and it fused `pod2man`'s
+  `--lquote` and `--rquote` into one entity, the shape `must_keep_separate`
+  exists to forbid. Narrowing it to value-free spellings did not stop the
+  fusion. Refused rather than shipped (issue #142).
 ### S-135: usage line's tab-indented continuation folds in unpunctuated
 
 - id: S-135
@@ -3000,6 +3006,243 @@ entry's `tools` field and nothing else. It does not get a new entry.
   there. Zero flag losses, zero subcommand movement, all nine named controls
   byte-identical.
 
+### S-155: an alternation value name becomes choices
+
+- id: S-155
+- looks like: |
+      -C, --compression=(xz|none|auto)          grub-mkimage
+          --crate-type <bin|lib|rlib|dylib|cdylib|staticlib|proc-macro>
+          --edition <2015|2018|2021|2024|future>                        rustc
+        -l {c,java,ruby,tcl}, --language {c,java,ruby,tcl}   tclobjnew-bpfcc
+- tools: grub-mkimage, grub-mkstandalone, rustc, tclobjnew-bpfcc,
+  javaflow-bpfcc, rubyobjnew-bpfcc, curl (brace/angle forms only where a
+  choice reading holds — see the false-positive note below) and
+  everywhere else the shape occurs on a full-`PATH` sweep (PLACEHOLDER_TOOLS
+  moved, PLACEHOLDER_FINDINGS findings)
+- handling: Fixed. A value spec that is one delimited alternation of
+  literal members, with no other token inside the delimiter, is that
+  entity's `choices` (`help_text::sections::emit::alternation_choices`).
+  Angle and paren forms split on `|` and require at least three members;
+  brace splits on `,`, requires only two, and is gated to the argparse
+  profile (`FrameworkProfile::argparse_subparser_quirk`, reused rather
+  than adding a nineteenth profile field), since argparse's own
+  `choices=` is a language-level declaration and no other convention in
+  the capture set uses `{` as a value delimiter (checked by grep over
+  `audit/queue-captures/*/0.std*`). The three-member floor on angle/paren
+  exists because curl's own `-b, --cookie <data|filename>` is the
+  identical two-member angle shape and is not a choice list: it describes
+  the value's TYPE (a literal string, or a path), and a reader does not
+  type `data` or `filename` themselves the way `xz`/`none`/`auto` are
+  typed literally. Nothing about the shape alone tells the two apart
+  below three members, so missing beats invented there (S-005's rule). A
+  member must match `^[a-z0-9][a-z0-9_.+-]*$`; a capitalized token
+  (lvm2's `Number`) or one holding whitespace (fuser's `-n SPACE`, inside
+  a `[...]` group this rule never opens) stays part of the placeholder.
+  Once choices are read from the placeholder itself, S-130's own rule
+  applies and `value_name` is dropped rather than kept twice. Scoped to
+  the option-table path (`emit_flags_with`); the usage-synopsis path is
+  untouched this round. `must_attach_choices`/`must_not_value_name` state
+  the claim.
+- fleet: `alternation-value-is-choices` reads 0 labelled members in the
+  seed-7 audit (`NOT EVALUABLE`, both self-check directions held, 8
+  cases). Raw-shape count 26 tools/45 findings (angle/paren) and 44
+  tools/62 findings (brace), 2026-09-12. Tree-level, full-`PATH` sweep:
+  PLACEHOLDER_TREE_BEFORE tools before the fix, PLACEHOLDER_TREE_AFTER
+  after. `sweep-diff`: PLACEHOLDER_FLAG_GAINS flag gains,
+  PLACEHOLDER_FLAG_LOSSES flag losses, PLACEHOLDER_SUB_GAINS subcommand
+  gains, PLACEHOLDER_SUB_LOSSES subcommand losses. Also moved `fzf`'s
+  `--color=COLSPEC`'s `(dark|light|16|bw)` and cryptsetup's `token
+  <add|remove|import|export>`, neither named in the brief.
+
+### S-156: a description tail that enumerates the values
+
+- id: S-156
+- looks like: |
+      -O, --format=FORMAT        generate an image in FORMAT
+                                 available formats: i386-coreboot, i386-multiboot,
+                                 i386-pc, i386-xen_pvh, i386-pc-eltorito,
+- tools: grub-mkimage
+- handling: Open defect, counted only. A flag description whose
+  continuation opens a labelled list (`available formats:`, `possible
+  values:`, `one of:`, `valid values:`) and then runs comma-separated
+  literal values to the end of the description would become that
+  entity's `choices`, with the label and list leaving the description.
+  Gated hard: the label must be the last such label in the description,
+  every member after it must match `^[a-z0-9][a-z0-9_.+-]*$`, there must
+  be at least three members, and the run must reach the end of the
+  description with nothing after it.
+- fleet: `description-tail-enumerates-choices` reads 0 labelled members
+  in the seed-7 audit (`NOT EVALUABLE`, both self-check directions held,
+  5 cases). A grep over `audit/queue-captures/*/0.std*` for the four
+  labels names 35 tools; the tree-level rule, checked against a
+  36-tool sample built from that grep plus `rustc` and
+  `tclobjnew-bpfcc`, reads 1 tool (grub-mkimage, 2 findings). Below the
+  five-tool bar. Not fixed this round; `corpus/grub-mkimage/2.12` stays
+  `[xfail]` for `--format`'s own description. 2026-09-12.
+### S-157: a bare-word value placeholder after a single-dash-long spelling
+
+- id: S-157
+- looks like: |
+      -Xstrategy strategy1,...,strategyN	compression strategy    mksquashfs
+      -audit int             set audit trail level            Xvfb
+- tools: Xvfb, mksquashfs, sqfstar, ckbcomp, containerd-shim-runc-v2,
+  docker-proxy, lshw, screen, sqlite3, xdpyinfo, xev, xkill, xlsatoms,
+  ldattach, pod2usage, and the whole qemu-*-static family (42 tools)
+- handling: Fixed, inside the single-dash-long table only (S-145's own
+  gate: a document whose option rows are column-0 `-word` spellings with
+  no `--long` row anywhere). `spaced_bare_word_value`
+  (`mandible-extract/src/help_text/sections/repair.rs`) reads the one
+  whitespace-delimited token after a table row's own single space as the
+  value name, whatever its case, keeping a comma-separated run whole
+  (`strategy1,...,strategyN`). Reading past that first token is refused:
+  `qemu-arm64-static`'s own ragged three-column table
+  (`Argument`/`Env-variable`/`Description`) separates `-dfilter`'s value
+  from its `QEMU_DFILTER` column by only one more space, so a wider
+  gap-based cut would swallow the next column into the value. The search
+  is scoped to the row identified as the flag's own leading token, never
+  any later occurrence of the same text in another row's description
+  (`dbiprof`'s `-case_sensitive  for -match and -exclude` mentions
+  `-match` in prose and must not donate it a fabricated value). The
+  table gate is the whole safety argument: `gcc`, `clang` and the `ld`
+  family all carry `-DMACRO` glued values beside a real `--help` row, so
+  their own tables never qualify.
+- fleet: `spaced-bare-word-table-value`
+  (`xtask/src/detector/spaced_bare_word_table_value.rs`) reads 9
+  tools/12 findings on a full-`PATH` sweep of 2269 tools, 2026-09-12,
+  each a table row the per-document evidence floor still refuses (a
+  glued repeated-character shape, or a run the S-145 table gate itself
+  excludes) — a documented lower bound, not a further fix this round.
+  No labelled member of this family exists in any audit seed; the four
+  self-checks are the only standing evidence. The fix itself moved 57
+  tools with 0 flag-count and 0 subcommand-count losses on the same
+  sweep-diff: `Xvfb`, `mksquashfs` and `sqfstar` gain their own named
+  rows; the qemu family (42 tools) recovers `-cpu`'s and `-dfilter`'s
+  value names; `lshw`, `ckbcomp`, `screen`, `sqlite3`, `xdpyinfo`,
+  `xev`, `xkill`, `xlsatoms`, `ldattach`, `pod2usage`,
+  `containerd-shim-runc-v2` and `docker-proxy` each recover at least
+  one. `git`, `gcc`, `aarch64-linux-gnu-g++-13`, `ar`, `pnpm`,
+  `systemctl`, `tar`, `find`, `docker`, `clang`, `vim.basic` and
+  `sg_map` stay byte-identical.
+
+### S-158: a bracket group glued to an angle placeholder keeps only the group
+
+- id: S-158
+- looks like: |
+      -L [<KIND>=]<PATH>  Add a directory to the library search path.
+          --emit <TYPE>[=<FILE>]
+- tools: rustc, dpkg, dpkg-statoverride, java, jlink, jdeps, jpackage,
+  gp-collect-app, lto-dump, lto-dump-13
+- handling: Fixed in `try_value`
+  (`mandible-extract/src/help_text/grammar.rs`). Extends the S-097
+  ruling ("a value spec written as two or more glued optional groups
+  renders as its own source spelling") to a run that mixes a bracket
+  group and a required angle placeholder: the whole glued run is the
+  value name, source spelling kept, and the value becomes required once
+  the required half joins it. Two symmetric additions: the bracket
+  branch glues one adjacent angle group onto its own close
+  (`take_glued_angle_group`, `-L [<KIND>=]<PATH>`); the bare-token
+  branch glues one adjacent bracket group onto a captured angle
+  placeholder (`take_glued_bracket_group`, `--emit <TYPE>[=<FILE>]`,
+  `dpkg`'s `--force-<thing>[,...]`). A single, never-folded bracket
+  group is normally left bracket-free for the renderer to wrap, so the
+  bracket branch re-wraps it explicitly once a required angle group
+  joins, or the source spelling would read `<KIND>=<PATH>` with the
+  bracket gone.
+- fleet: `glued-bracket-angle-run`
+  (`xtask/src/detector/glued_bracket_angle_run.rs`) reads a raw-shape
+  count of 1 tool (rustc) fleet-wide before this fix, maintainer-named
+  (seed 7). Below the five-tool bar, shipped anyway as a gated exception
+  (docs/design.md §16) because the same sweep-diff that measures S-157
+  covers it: 0 flag-count and 0 subcommand-count losses across 2269
+  tools, 2026-09-12. The fix moved 11 tools: `rustc`'s `-L`, `--emit`
+  and `-C`/`--codegen`; `dpkg` and `dpkg-statoverride`'s
+  `--force-<thing>[,...]` family; `java`, `jlink`, `jdeps`, `jpackage`
+  and `gp-collect-app`'s `--add-modules <name>[,<name>...]` shape;
+  `lto-dump`/`lto-dump-13`'s `-D`. No labelled member of this family
+  exists in any audit seed; the four self-checks are the only standing
+  evidence. `gcc`, `clang`, `aarch64-linux-gnu-g++-13` and the whole
+  nine-control set stay byte-identical.
+
+### S-159: a long spelling's own value name repeats into its description
+
+- id: S-159
+- looks like: |
+           -s foo, --src-dir  foo  Set the src dir (historical md5sums live here)
+           -d [n], --debug  [n]    Set the Debug level to N
+- tools: lcf
+- handling: Open, nothing built. The value name is written twice, once after
+  the short spelling and once after the long one, and the second copy is
+  read as the first word of the description, so `mandible lcf` shows
+  `-s, --src-dir foo` described "foo Set the src dir ...". The reserved id is
+  recorded here rather than dropped, because the shape is real and one tool
+  is evidence enough to name it; what is missing is a second tool. Nothing in
+  the seed-7 evidence separates this from a description that genuinely opens
+  with the value's own name, which is why no rule was written.
+- fleet: not measured. No detector was built, so there is no number, and the
+  neighbouring shape a detector DOES count is the multi-word metavar of S-148
+  (`pkcheck`'s `--details=KEY VALUE`, 1 tool/1 finding), which is a different
+  defect on a different row shape.
+
+### S-160: a value spec swallows the alias run's own trailing comma
+
+- id: S-160
+- looks like: |
+        -w, --width=width, -width
+        -p PCT,..., --pcts PCT,...
+        -s, --sections=LIST, --section=LIST
+- tools: pod2text, biolatpcts-bpfcc, make, tar, pr, systemd-run
+- handling: Fixed for the case the grammar can already admit, refused for the
+  rest, and the refusal is the interesting half.
+  `recover_comma_swallowed_alias` (`mandible-extract/src/help_text/
+  grammar.rs`) notices a value that ends in a literal `,` with a real
+  spelling behind it — a genuine value never ends in a comma on its own —
+  strips the comma and reads the alias run on. On a full-`PATH` sweep it
+  fires on exactly one tool, `biolatpcts-bpfcc`, whose `-p PCT,...,
+  --pcts PCT,...` row now reaches the tree as one entity spelled
+  `-p, --pcts` where it was a lone `-p` before.
+  It does NOT fix `pod2text`, which is the shape seed 7 named. The recovered
+  spelling there is `-width`, a single-dash-long name, and `alias_follows`
+  refuses it: `try_long` needs a `--` and `try_short` reads `-w` and chokes
+  on the tail. Admitting a single-dash-long spelling needs S-145's own
+  table test (no `--long` row anywhere in the document), and `pod2text`'s
+  table is full of `--long` rows, so the same evidence that protects `gcc`,
+  `clang` and `ld` from S-145 refuses `pod2text` here. That is the same gate
+  that refuses `fuser`'s `-SIGNAL`.
+- fleet: `comma-swallowed-alias`
+  (`xtask/src/detector/comma_swallowed_alias.rs`) reads 10 tools/31 findings
+  post-fix on a full-`PATH` sweep of 2323 tools, 2026-09-13, which is the
+  refused remainder. Reported, not gated. One flag gained fleet-wide, zero
+  lost, zero subcommand movement, all nine named controls byte-identical.
+
+### S-161: a `/`-joined second spelling outside a lowdown bullet
+
+- id: S-161
+- looks like: |
+          -W / --warn [LINT]       Set lint warnings
+          -A / --allow [LINT]      Set lint allowed
+- tools: cargo-clippy
+- handling: Open on its own tool, widened underneath. S-144 taught
+  `join_slash_alias` (`mandible-extract/src/help_text/sections/bullets.rs`)
+  to rewrite a spaced `/` between two flag-shaped tokens into the ordinary
+  comma-joined alias `parse_flag_spec` already reads, and gated it on the
+  lowdown bullet marker. Round 10 lifted that gate: the evidence is narrow
+  enough on its own (the separator must be exactly `/` with one space each
+  side, and what follows must itself be flag-shaped, so a path or the word
+  "input/output" in a description is never touched), so `emit_flags_with`
+  calls it on any option-table row now.
+  It does not reach `cargo-clippy`, whose four rows are read by a different
+  row reader, so `-W` still takes the literal `/` as its value name and
+  `--warn`, `--allow`, `--deny` and `--forbid` still reach the tree nowhere.
+  `corpus/cargo-clippy/0.1.97` is the `[xfail]` fixture that states it, with
+  `must_contain_flags` naming all four long spellings and
+  `must_not_value_name` naming the `/` on all four short ones.
+- fleet: `slash-joined-alias-outside-bullet`
+  (`xtask/src/detector/slash_joined_alias_outside_bullet.rs`) reads 1 tool/4
+  findings on a full-`PATH` sweep of 2323 tools, 2026-09-13, unchanged by the
+  widening, and far below the five-tool bar. Reported, not gated. The
+  widening itself moved no flag anywhere in the fleet: zero gains, zero
+  losses, no `spellings changed` row in the sweep-diff.
+
 ### S-171: a numbered `X1 X2 ...` pair sits ahead of a later required operand
 
 - id: S-171
diff --git a/mandible-extract/src/help_text/grammar.rs b/mandible-extract/src/help_text/grammar.rs
index accbca7b..8fb60244 100644
--- a/mandible-extract/src/help_text/grammar.rs
+++ b/mandible-extract/src/help_text/grammar.rs
@@ -266,8 +266,15 @@ pub fn parse_flag_spec(input: &str) -> FlagSpec {
         // The alias list may continue past it via `,`/`|`, see
         // [`alias_continues`], or via the word `or` when the second
         // spelling repeats the value too (`icupkg`'s `-s path or
-        // --sourcedir path`), see [`or_alias_continues`]. S-099.
-        let Some(next) = alias_continues(tail).or_else(|| or_alias_continues(tail)) else {
+        // --sourcedir path`), see [`or_alias_continues`]. S-099. Or the
+        // value itself swallowed the alias run's own separator
+        // (`pod2text`'s `-w, --width=width, -width`, its own description
+        // on the next line with no column gap to bound the spec): see
+        // [`recover_comma_swallowed_alias`], S-160.
+        let Some(next) = alias_continues(tail)
+            .or_else(|| or_alias_continues(tail))
+            .or_else(|| recover_comma_swallowed_alias(&mut spec, tail))
+        else {
             spec.fully_consumed = tail.trim().is_empty();
             return spec;
         };
@@ -330,6 +337,12 @@ fn strip_or_alias_separator(rest: &str) -> Option<&str> {
 /// both continue after a single space, so neither is a row joining two
 /// spellings. See docs/shapes.md S-099.
 fn or_alias_ends_the_spec(after: &str) -> bool {
+    or_alias_ends_at_column_boundary(after)
+}
+
+/// [`or_alias_ends_the_spec`]'s original evidence: a real column gap (tab
+/// or 2+ spaces), the fragment's own end, or a chained `or`.
+fn or_alias_ends_at_column_boundary(after: &str) -> bool {
     let token_len = after.find([' ', '\t', ',', '|']).unwrap_or(after.len());
     let tail = &after[token_len..];
     if tail.is_empty() || tail.starts_with(['\t', ',', '|', '=', '[']) || tail.starts_with("  ") {
@@ -394,6 +407,24 @@ fn or_alias_continues(after_value: &str) -> Option<&str> {
     or_alias_ends_the_spec(value_part).then_some(spelling_start)
 }
 
+/// A value that swallowed the alias run's own trailing separator
+/// (`pod2text`'s `-w, --width=width, -width`): the value ends in a
+/// literal `,` and a real spelling follows in `tail`, so the alias run
+/// ended one token early. The trailing comma is the tell — a genuine
+/// value never ends in one on its own. Strips the comma from `spec`'s
+/// value and hands back `tail` positioned at the recovered spelling, the
+/// same shape [`alias_continues`] returns. See docs/shapes.md S-160.
+fn recover_comma_swallowed_alias<'a>(spec: &mut FlagSpec, tail: &'a str) -> Option<&'a str> {
+    let value = spec.value_name.as_deref()?;
+    let trimmed_value = value.strip_suffix(',')?;
+    let after = tail.trim_start_matches(' ');
+    if !alias_follows(after) {
+        return None;
+    }
+    spec.value_name = Some(trimmed_value.to_string());
+    Some(after)
+}
+
 /// Rewrite a brace-delimited alternation of flag spellings into the
 /// comma-free alias list [`parse_flag_spec`] already reads:
 /// `{-i|--input} <input xml file>` becomes `-i --input <input xml file>`.
@@ -773,6 +804,31 @@ fn nested_bracket_content(s: &str) -> Option<&str> {
     s[content_len..].starts_with(']').then(|| &s[..content_len])
 }
 
+/// An angle-delimited placeholder glued directly onto `s`'s own start —
+/// `<PATH>` right after a bracket group's close, no separator — returned
+/// verbatim with its own angle brackets, or `None` when `s` doesn't open
+/// on `<`, carries no matching `>`, or the placeholder is empty. See
+/// [`try_value`]'s bracket branch and docs/shapes.md S-158.
+fn take_glued_angle_group(s: &str) -> Option<(&str, &str)> {
+    let rest = s.strip_prefix('<')?;
+    let close = rest.find('>')?;
+    (close > 0).then(|| (&s[..close + 2], &rest[close + 1..]))
+}
+
+/// A bracket group glued directly onto `s`'s own start — `[=<FILE>]` right
+/// after a required angle placeholder, no separator — returned verbatim
+/// with its own brackets, or `None` when `s` doesn't open on `[`, carries
+/// no matching `]`, or the group is empty. Single-level only, unlike
+/// [`nested_bracket_content`]: the angle placeholder ahead of it already
+/// carries the required half, so this glued half is read as one plain
+/// optional group. See [`try_value`]'s bare-token branch and docs/shapes.md
+/// S-158.
+fn take_glued_bracket_group(s: &str) -> Option<(&str, &str)> {
+    let rest = s.strip_prefix('[')?;
+    let close = rest.find(']')?;
+    (close > 0).then(|| (&s[..close + 2], &rest[close + 1..]))
+}
+
 /// A value spec following the flag token(s): `=VALUE`, ` VALUE`,
 /// `[=VALUE]`, `[VALUE]`, `<value>`, or a bare uppercase-ish word. Returns
 /// `(value_name, kind, rest)`.
@@ -839,6 +895,25 @@ fn try_value(input: &str) -> Option<(String, ValueKind, &str)> {
             s = probe;
             current = next_name;
         }
+        // A required angle placeholder glued directly onto the bracket
+        // run's own close (`rustc`'s `-L [<KIND>=]<PATH>`): the ruling
+        // extends past a run of glued bracket groups (S-097) to a run
+        // that mixes bracket groups and angle placeholders — the whole
+        // glued run is the value name, source spelling kept, and the
+        // value becomes required once a non-optional angle group joins
+        // it. See docs/shapes.md S-158.
+        if let Some((angle, after)) = take_glued_angle_group(s) {
+            // A single, never-folded group is normally left bracket-free
+            // (the renderer adds the bracket for an `Optional` value); once
+            // a required angle group joins it the value is no longer
+            // `Optional`, so the bracket must be written here instead, or
+            // the source spelling `[<KIND>=]<PATH>` would read `<KIND>=<PATH>`.
+            if !folded_any {
+                combined = format!("[{combined}]");
+            }
+            combined.push_str(angle);
+            return Some((combined, ValueKind::Required, after));
+        }
         return Some((combined, ValueKind::Optional, s));
     }
 
@@ -853,10 +928,19 @@ fn try_value(input: &str) -> Option<(String, ValueKind, &str)> {
     if s.is_empty() {
         return None;
     }
-    let (name, tail) = take_rest_value_token(s);
+    let (mut name, mut tail) = take_rest_value_token(s);
     if name.is_empty() {
         return None;
     }
+    // A bracket group glued directly onto a required angle placeholder
+    // (`rustc`'s `--emit <TYPE>[=<FILE>]`): the mirror of the bracket-first
+    // case above, same S-158 ruling.
+    if name.starts_with('<') {
+        if let Some((bracket, after)) = take_glued_bracket_group(tail) {
+            name.push_str(bracket);
+            tail = after;
+        }
+    }
     Some((name, ValueKind::Required, tail))
 }
 
diff --git a/mandible-extract/src/help_text/sections/bullets.rs b/mandible-extract/src/help_text/sections/bullets.rs
index 848142ae..f65b219e 100644
--- a/mandible-extract/src/help_text/sections/bullets.rs
+++ b/mandible-extract/src/help_text/sections/bullets.rs
@@ -109,16 +109,19 @@ fn is_lowercase_bare_word(word: &str) -> bool {
     !word.is_empty() && word.chars().all(|c| c.is_ascii_lowercase())
 }
 
-/// S-144's alias half: a `/`-joined second spelling with a space on each
-/// side (`"--print-build-logs / -L Print..."`) is rewritten to the
-/// ordinary comma-joined alias (`", -L"`) [`super::grammar::parse_flag_spec`]
-/// already reads, so the row's own `-L`/`-v` alias survives instead of
-/// being read as an unparsed leftover. Fires only when the token right
-/// after the spelling's own run is exactly `/` with one space on each
-/// side and what follows is itself flag-shaped, so an ordinary
-/// description merely containing a slash (a path, "input/output") is
-/// never touched.
-fn join_slash_alias(text: &str) -> String {
+/// S-144's alias half, and S-161's own repair (docs/shapes.md): a
+/// `/`-joined second spelling with a space on each side
+/// (`"--print-build-logs / -L Print..."`, `cargo-clippy`'s `-W / --warn
+/// [LINT]`) is rewritten to the ordinary comma-joined alias (`", -L"`)
+/// [`super::grammar::parse_flag_spec`] already reads, so the row's own
+/// alias survives instead of being read as an unparsed leftover. Fires
+/// only when the token right after the spelling's own run is exactly `/`
+/// with one space on each side and what follows is itself flag-shaped, so
+/// an ordinary description merely containing a slash (a path,
+/// "input/output") is never touched. Ungated on the lowdown bullet marker
+/// (S-161 lifted it out of that gate): the same narrow evidence is safe on
+/// any option-table row, called from [`super::emit::emit_flags_with`] too.
+pub(super) fn join_slash_alias(text: &str) -> String {
     let Some(spec_end) = text.find(' ') else {
         return text.to_string();
     };
diff --git a/mandible-extract/src/help_text/sections/emit.rs b/mandible-extract/src/help_text/sections/emit.rs
index 3a03eb16..aa803c46 100644
--- a/mandible-extract/src/help_text/sections/emit.rs
+++ b/mandible-extract/src/help_text/sections/emit.rs
@@ -39,6 +39,7 @@ pub(super) fn emit_flags_block(
     packed: bool,
     is_plus_sigil: &[bool],
     argfile_entry: Option<FlagRowEntry>,
+    is_argparse: bool,
     out: &mut ParsedHelp,
 ) -> (usize, usize) {
     let (mut seen, mut clean) = if packed {
@@ -50,11 +51,16 @@ pub(super) fn emit_flags_block(
             out,
         );
         let plus_seen = plus_sigil.len();
-        let (_, plus_clean) =
-            emit_flags_with(group.clone(), plus_sigil, &vec![true; plus_seen], out);
+        let (_, plus_clean) = emit_flags_with(
+            group.clone(),
+            plus_sigil,
+            &vec![true; plus_seen],
+            is_argparse,
+            out,
+        );
         (ordinary_seen + plus_seen, ordinary_seen + plus_clean)
     } else {
-        emit_flags_with(group.clone(), entries, is_plus_sigil, out)
+        emit_flags_with(group.clone(), entries, is_plus_sigil, is_argparse, out)
     };
     if let Some(entry) = argfile_entry {
         seen += 1;
@@ -84,6 +90,72 @@ pub(super) fn value_name_duplicates_its_own_choices(
     rebuilt.len() == choices.len() && rebuilt.iter().zip(choices).all(|(v, c)| *v == c.name)
 }
 
+/// True when `member` is a literal value rather than a metavar: it opens
+/// with a lowercase letter or digit and carries nothing but lowercase
+/// letters, digits, `_`, `.`, `+` or `-` after that. A capitalized token
+/// (lvm2's `Number`) or one holding whitespace (fuser's `-n SPACE`) fails
+/// this and keeps the value_name untouched. See docs/shapes.md S-155.
+fn is_literal_choice_member(member: &str) -> bool {
+    let mut chars = member.chars();
+    let Some(first) = chars.next() else {
+        return false;
+    };
+    (first.is_ascii_lowercase() || first.is_ascii_digit())
+        && chars.all(|c| {
+            c.is_ascii_lowercase() || c.is_ascii_digit() || matches!(c, '_' | '.' | '+' | '-')
+        })
+}
+
+/// True when `member` is nothing but ASCII digits — a digit run is never a
+/// metavar name (`<0|1>`), unlike a word (`<data|filename>`).
+fn is_purely_numeric(member: &str) -> bool {
+    !member.is_empty() && member.chars().all(|c| c.is_ascii_digit())
+}
+
+/// A value spec that is one delimited alternation of literal members is
+/// that entity's `choices`, not its placeholder (S-155). Three
+/// admissions: a paren group at any member count, a brace group only on
+/// an argparse document, and an angle group at three or more members or
+/// at two purely numeric ones. A two-member word alternation
+/// (`<number|name>`) is a metavar pair and stays refused.
+///
+/// Fixtures: `corpus/grub-mkimage/2.12`, `corpus/rustc/1.97.1`.
+fn alternation_choices(value_name: &str, is_argparse: bool) -> Option<Vec<String>> {
+    let (inner, sep, angle) = if let Some(inner) = value_name
+        .strip_prefix('(')
+        .and_then(|v| v.strip_suffix(')'))
+    {
+        (inner, '|', false)
+    } else if is_argparse {
+        let inner = value_name
+            .strip_prefix('{')
+            .and_then(|v| v.strip_suffix('}'))?;
+        (inner, ',', false)
+    } else {
+        let inner = value_name
+            .strip_prefix('<')
+            .and_then(|v| v.strip_suffix('>'))?;
+        (inner, '|', true)
+    };
+    if inner.is_empty() || inner.contains(['<', '>', '(', ')', '{', '}', '[', ']']) {
+        return None;
+    }
+    let members: Vec<&str> = inner.split(sep).collect();
+    if !members.iter().all(|m| is_literal_choice_member(m)) {
+        return None;
+    }
+    if angle
+        && members.len() < 3
+        && !(members.len() == 2 && members.iter().all(|m| is_purely_numeric(m)))
+    {
+        return None;
+    }
+    if members.len() < 2 {
+        return None;
+    }
+    Some(members.into_iter().map(str::to_string).collect())
+}
+
 /// Turn recovered flag rows into `ParsedHelp` entries. `is_plus_sigil`
 /// (same length as `entries`, or empty to mean "none") reads `true` at
 /// index `n` to route that entry through [`parse_plus_sigil_spec`]
@@ -91,11 +163,13 @@ pub(super) fn value_name_duplicates_its_own_choices(
 /// [`scan_flags_block`]'s neighbor-gated `+`/`+<placeholder>` row
 /// (S-095) — every other entry, from every other caller, always reads
 /// `false` here and gets the ordinary grammar, which stays deaf to a bare
-/// `+` (see `try_bare_sigil`'s own doc comment).
+/// `+` (see `try_bare_sigil`'s own doc comment). `is_argparse` gates the
+/// brace form of S-155's alternation-choices rule.
 pub(super) fn emit_flags_with(
     group: Option<String>,
     entries: Vec<FlagRowEntry>,
     is_plus_sigil: &[bool],
+    is_argparse: bool,
     out: &mut ParsedHelp,
 ) -> (usize, usize) {
     let mut seen = 0usize;
@@ -105,6 +179,11 @@ pub(super) fn emit_flags_with(
             break;
         }
         seen += 1;
+        // S-161: a `/`-joined second spelling (`-W / --warn [LINT]`) reads
+        // as the ordinary comma-joined alias `parse_flag_spec` already
+        // knows, on any option-table row, not only a lowdown bullet's own
+        // (S-144's gated version of the same repair).
+        let spec_text = super::bullets::join_slash_alias(&spec_text);
         let mut spec = if is_plus_sigil.get(idx).copied().unwrap_or(false) {
             parse_plus_sigil_spec(&spec_text)
         } else {
@@ -120,15 +199,25 @@ pub(super) fn emit_flags_with(
         }
         let mut description = desc_text;
         if let Some(broken) = spec.value_name.clone() {
-            if let Some(repair) = repair_parenthetical_value(&spec_text, &broken) {
-                spec.value_name = repair.value_name;
-                spec.value_kind = repair.value_kind;
-                if let Some(qualifier) = repair.qualifier_text {
-                    description = if description.trim().is_empty() {
-                        qualifier
-                    } else {
-                        format!("{qualifier} {description}")
-                    };
+            // A paren-delimited alternation of literal values
+            // (`--compression=(xz|none|auto)`, S-155) reads as `xz|none|auto`
+            // (single "word", no space) — precisely the shape
+            // `repair_parenthetical_value` otherwise treats as a bare
+            // single-word value and strips its parens from. Read as
+            // choices first and skip the repair entirely when it matches,
+            // so the parens survive into the later `alternation_choices`
+            // check below rather than being stripped out from under it.
+            if alternation_choices(&broken, is_argparse).is_none() {
+                if let Some(repair) = repair_parenthetical_value(&spec_text, &broken) {
+                    spec.value_name = repair.value_name;
+                    spec.value_kind = repair.value_kind;
+                    if let Some(qualifier) = repair.qualifier_text {
+                        description = if description.trim().is_empty() {
+                            qualifier
+                        } else {
+                            format!("{qualifier} {description}")
+                        };
+                    }
                 }
             }
         }
@@ -149,6 +238,24 @@ pub(super) fn emit_flags_with(
                 description: desc.map(|d| Text::sanitize(&d)),
             })
             .collect();
+        // A value spec that is nothing but one delimited alternation of
+        // literal values is that entity's `choices` (S-155): the reader
+        // could not otherwise see that these are the only values, and
+        // search could not match one. Scoped to when no other source
+        // already populated `choices` — a sub-row or clap's own
+        // `[possible values: …]` outranks a bare reading of the
+        // placeholder text.
+        if flag.choices.is_empty() {
+            if let Some(value_name) = flag.value_name.as_deref() {
+                if let Some(members) = alternation_choices(value_name, is_argparse) {
+                    flag.choices = members.into_iter().map(Choice::bare).collect();
+                    // S-130: the choices came from the placeholder text
+                    // itself, so value_name must not repeat them — there
+                    // is no separate generic placeholder here to keep.
+                    flag.value_name = None;
+                }
+            }
+        }
         // A docopt bracket row's own trailing `|`-list (`trailing_choice_list`,
         // S-120) already carries every value as `choices`; when no bracketed
         // placeholder introduced it (`--configreport log|vg|lv|pv|pvseg|seg`,
diff --git a/mandible-extract/src/help_text/sections/mod.rs b/mandible-extract/src/help_text/sections/mod.rs
index 0e5c1942..35294e80 100644
--- a/mandible-extract/src/help_text/sections/mod.rs
+++ b/mandible-extract/src/help_text/sections/mod.rs
@@ -1205,6 +1205,11 @@ fn emit_heading_block(
             packed,
             &is_plus_sigil,
             argfile_entry,
+            // `argparse_subparser_quirk` is set only for `Framework::Argparse`
+            // (see profile.rs), so it doubles here as "this tool is
+            // argparse" for S-155's brace-alternation gate, with no new
+            // profile field needed.
+            profile.is_some_and(|p| p.argparse_subparser_quirk),
             st.result,
         );
         st.total_entries += seen;
@@ -1544,6 +1549,7 @@ fn scan_entries(
                 packed,
                 &is_plus_sigil,
                 argfile_entry,
+                profile.is_some_and(|p| p.argparse_subparser_quirk),
                 st.result,
             );
             st.total_entries += seen;
diff --git a/mandible-extract/src/help_text/sections/repair.rs b/mandible-extract/src/help_text/sections/repair.rs
index 39e63fc3..66b41665 100644
--- a/mandible-extract/src/help_text/sections/repair.rs
+++ b/mandible-extract/src/help_text/sections/repair.rs
@@ -301,7 +301,16 @@ pub(super) fn repair_single_dash_long_options(
         let uniformly_lowercase = token_is_uniformly_lowercase(&name_token);
         let spaced_value = (table_row || !uniformly_lowercase)
             .then(|| spaced_value_placeholder(raw, &name_token))
-            .flatten();
+            .flatten()
+            // A table row's own bare-word placeholder (S-157, `-audit int`,
+            // `-Xstrategy strategy1,...,strategyN`): only inside a table,
+            // where no `--long` row exists to make a bare word ambiguous
+            // with the GCC/Clang glued-value convention's own description.
+            .or_else(|| {
+                table_row
+                    .then(|| spaced_bare_word_value(&lines, &name_token))
+                    .flatten()
+            });
         if !table_row && !uniformly_lowercase && spaced_value.is_none() {
             continue;
         }
@@ -492,6 +501,45 @@ fn placeholder_at(hay: &[char], start: usize) -> Option<(String, ValueKind)> {
     }
 }
 
+/// The bare-word value name a single-dash-long-table row (S-145) documents
+/// one space after `name_token`, no bracket or angle placeholder —
+/// `-audit int`. Only inside a table (S-145's own gate), since outside one
+/// a bare word is a description's first word (gcc's `-DMACRO` row).
+/// Scoped to `name_token`'s own row (never a later mention in another
+/// row's description — `dbiprof`'s `-match` inside `-case_sensitive`'s own
+/// text). Stops at the first whitespace, so a ragged three-column table
+/// (`qemu-arm64-static`) can't donate its next column, and a comma run
+/// (`strategy1,...,strategyN`) survives whole since it has no space in it.
+/// See docs/shapes.md S-157.
+fn spaced_bare_word_value(lines: &[&str], name_token: &str) -> Option<(String, ValueKind)> {
+    lines.iter().find_map(|line| {
+        let trimmed = line.trim_start();
+        let after = trimmed.strip_prefix(name_token)?;
+        if after.starts_with(is_word_char) {
+            return None;
+        }
+        let after = after.strip_prefix(' ')?;
+        if after.starts_with([' ', '\t', '<', '[']) {
+            return None;
+        }
+        let value = after.split_whitespace().next()?;
+        // A row separates its value from its description by a real column
+        // gap; prose that merely names a spelling does not. mksquashfs's
+        // `-one-file-system-x` describes itself as "-one-file-system
+        // option except ...", which donated the fabricated value `option`
+        // to `-one-file-system` itself before this check existed.
+        let rest = &after[value.len()..];
+        if !rest.is_empty() && !rest.starts_with(['\t']) && !rest.starts_with("  ") {
+            return None;
+        }
+        value
+            .chars()
+            .next()
+            .is_some_and(|c| c.is_ascii_alphanumeric())
+            .then(|| (value.to_string(), ValueKind::Required))
+    })
+}
+
 /// Split a swallowed tail into the option-name half and the glued value
 /// half: `"umber=N"` → `("umber", Some("N"))`, `"elp"` → `("elp", None)`.
 /// `None` when the tail ends at the `=` with nothing after it (`"oo="`)
@@ -814,7 +862,7 @@ mod tests {
     #[test]
     fn qemus_single_dash_long_options_keep_their_real_names() {
         let parsed = parse(QEMU_TABLE);
-        for name in ["help", "cpu", "one-insn-per-tb", "version"] {
+        for name in ["help", "one-insn-per-tb", "version"] {
             let flag = flag_named(&parsed, name);
             assert!(flag.single_dash(), "-{name} is spelled with one dash");
             assert_eq!(flag.spelling(), format!("-{name}"));
@@ -824,6 +872,19 @@ mod tests {
         }
     }
 
+    /// `-cpu`'s own bare-word value name (S-157): the row's second column
+    /// (`model`) is a real value, one whitespace-delimited token past the
+    /// name, never swallowed into the third (`QEMU_CPU`) column.
+    #[test]
+    fn qemus_bare_word_table_value_is_recovered() {
+        let parsed = parse(QEMU_TABLE);
+        let cpu = flag_named(&parsed, "cpu");
+        assert!(cpu.single_dash());
+        assert_eq!(cpu.short(), None);
+        assert_eq!(cpu.value_name.as_deref(), Some("model"));
+        assert_eq!(cpu.value_kind, ValueKind::Required);
+    }
+
     /// `-g port` stores a `value_name` exactly as `-help` stores
     /// `"elp"`; only the space in the raw text tells them apart.
     #[test]
diff --git a/xtask/src/coverage/round10.rs b/xtask/src/coverage/round10.rs
index b40881cf..1c613e29 100644
--- a/xtask/src/coverage/round10.rs
+++ b/xtask/src/coverage/round10.rs
@@ -1,8 +1,6 @@
-//! The round-10 family detectors, atlas S-150 and S-151. S-150 is a bare
-//! usage label seeding an empty form. S-151 is a usage form's own foreign
-//! leading program word, the case S-108's `usage-program-word-mismatch`
-//! does not already handle. Split into their own file for the same
-//! line-count reason `round7.rs`, `round8.rs` and `round9.rs` are.
+//! The round-10 family detectors, atlas S-150 upward. Split into its own
+//! file for the same line-count reason `round7.rs`, `round8.rs` and
+//! `round9.rs` are.
 
 use super::score::FAMILY_DETECTOR_SAMPLES_PER_ROW;
 use crate::detector::{Detector, ToolEvidence};
@@ -16,6 +14,14 @@ pub(super) fn round10_family_counts(
     let evidence = ToolEvidence { raw, root };
     let bare = crate::detector::bare_usage_label_form::BareUsageLabelForm.hits(&evidence);
     let foreign = crate::detector::usage_foreign_program_word::detect(raw, root);
+    let alt = crate::detector::alternation_value_is_choices::detect(raw, root);
+    let tail = crate::detector::description_tail_enumerates_choices::detect(raw, root);
+    let sbw =
+        crate::detector::spaced_bare_word_table_value::SpacedBareWordTableValue.hits(&evidence);
+    let gbar = crate::detector::glued_bracket_angle_run::GluedBracketAngleRun.hits(&evidence);
+    let sjab = crate::detector::slash_joined_alias_outside_bullet::SlashJoinedAliasOutsideBullet
+        .hits(&evidence);
+    let csa = crate::detector::comma_swallowed_alias::CommaSwallowedAlias.hits(&evidence);
     vec![
         (
             "bare-usage-label-form",
@@ -37,5 +43,53 @@ pub(super) fn round10_family_counts(
                 })
                 .collect(),
         ),
+        (
+            "alternation-value-is-choices",
+            alt.finding_count(),
+            alt.findings
+                .iter()
+                .take(cap)
+                .map(|f| {
+                    format!(
+                        "{:?}{} never became choices, from {:?}",
+                        f.members, f.delimiter, f.line
+                    )
+                })
+                .collect(),
+        ),
+        (
+            "description-tail-enumerates-choices",
+            tail.finding_count(),
+            tail.findings
+                .iter()
+                .take(cap)
+                .map(|f| {
+                    format!(
+                        "-{} {:?} tail never became choices: {:?}",
+                        f.long, f.label, f.members
+                    )
+                })
+                .collect(),
+        ),
+        (
+            "spaced-bare-word-table-value",
+            sbw.len(),
+            sbw.into_iter().take(cap).collect(),
+        ),
+        (
+            "glued-bracket-angle-run",
+            gbar.len(),
+            gbar.into_iter().take(cap).collect(),
+        ),
+        (
+            "slash-joined-alias-outside-bullet",
+            sjab.len(),
+            sjab.into_iter().take(cap).collect(),
+        ),
+        (
+            "comma-swallowed-alias",
+            csa.len(),
+            csa.into_iter().take(cap).collect(),
+        ),
     ]
 }
diff --git a/xtask/src/detector/alternation_value_is_choices.rs b/xtask/src/detector/alternation_value_is_choices.rs
new file mode 100644
index 00000000..071e87df
--- /dev/null
+++ b/xtask/src/detector/alternation_value_is_choices.rs
@@ -0,0 +1,310 @@
+//! `alternation-value-is-choices` (atlas S-155): a value spec that is one
+//! delimited alternation of literal values, which reached the tree as one
+//! opaque placeholder instead of the flag's own choices.
+//!
+//! Fixtures: `corpus/grub-mkimage/2.12`, `corpus/rustc/1.97.1`,
+//! `corpus/tclobjnew-bpfcc/0.29.1`.
+
+use mandible_core::CommandNode;
+
+pub struct Finding {
+    pub delimiter: char,
+    pub members: Vec<String>,
+    pub line: String,
+}
+
+pub struct Report {
+    pub findings: Vec<Finding>,
+}
+
+impl Report {
+    pub fn finding_count(&self) -> usize {
+        self.findings.len()
+    }
+}
+
+/// True when `member` is a literal value rather than a metavar or a flag:
+/// it opens with a lowercase letter or digit and carries nothing but
+/// lowercase letters, digits, `_`, `.`, `+` or `-` after that. Rejects a
+/// capitalized metavar (`Number`) and a token holding whitespace (fuser's
+/// `-n SPACE`, inside a `[...]` group this detector never opens anyway).
+fn is_literal_choice_member(member: &str) -> bool {
+    let mut chars = member.chars();
+    let Some(first) = chars.next() else {
+        return false;
+    };
+    (first.is_ascii_lowercase() || first.is_ascii_digit())
+        && chars.all(|c| {
+            c.is_ascii_lowercase() || c.is_ascii_digit() || matches!(c, '_' | '.' | '+' | '-')
+        })
+}
+
+/// True when `member` is nothing but ASCII digits — never a metavar name.
+fn is_purely_numeric(member: &str) -> bool {
+    !member.is_empty() && member.chars().all(|c| c.is_ascii_digit())
+}
+
+/// The first delimited alternation candidate on `line`: a paren group at
+/// any member count, a brace group only on an argparse document, or an
+/// angle group at three or more members, or two purely numeric ones. A
+/// two-member word alternation (`<number|name>`) is a metavar pair, not a
+/// choice set, and stays refused. See S-155.
+fn candidate(line: &str, is_argparse: bool) -> Option<(char, Vec<String>)> {
+    let delimiters: &[(char, char, char, bool)] = if is_argparse {
+        &[
+            ('(', ')', '|', false),
+            ('{', '}', ',', false),
+            ('<', '>', '|', true),
+        ]
+    } else {
+        &[('(', ')', '|', false), ('<', '>', '|', true)]
+    };
+    for &(open, close, sep, angle) in delimiters {
+        let Some(start) = line.find(open) else {
+            continue;
+        };
+        let rest = &line[start + open.len_utf8()..];
+        let Some(end) = rest.find(close) else {
+            continue;
+        };
+        let inner = &rest[..end];
+        if inner.is_empty() || inner.contains(['<', '>', '(', ')', '{', '}', '[', ']']) {
+            continue;
+        }
+        let members: Vec<&str> = inner.split(sep).collect();
+        if members.len() < 2 || !members.iter().all(|m| is_literal_choice_member(m)) {
+            continue;
+        }
+        if angle
+            && members.len() < 3
+            && !(members.len() == 2 && members.iter().all(|m| is_purely_numeric(m)))
+        {
+            continue;
+        }
+        return Some((open, members.into_iter().map(str::to_string).collect()));
+    }
+    None
+}
+
+pub fn detect(raw: &str, root: &CommandNode) -> Report {
+    // Tier A′'s own weaker, help-text-signature step for argparse (spec
+    // §7 Tier A′ rule 2.2): the fixed string argparse's `-h`/`--help`
+    // always prints.
+    let is_argparse = raw.contains("show this help message and exit");
+    let mut findings = Vec::new();
+    for line in raw.lines() {
+        let Some((delimiter, members)) = candidate(line, is_argparse) else {
+            continue;
+        };
+        let attached = root.flags().any(|e| {
+            members.len() == e.choices.len()
+                && members.iter().zip(&e.choices).all(|(m, c)| m == &c.name)
+        });
+        if !attached {
+            findings.push(Finding {
+                delimiter,
+                members,
+                line: line.to_string(),
+            });
+        }
+    }
+    Report { findings }
+}
+
+pub struct AlternationValueIsChoices;
+
+impl crate::detector::Detector for AlternationValueIsChoices {
+    fn name(&self) -> &'static str {
+        "alternation-value-is-choices"
+    }
+
+    fn family(&self) -> Option<&'static str> {
+        // No seed-7 labelled tool carries this shape (calibration verdict
+        // NOT EVALUABLE), so there is no closed `DEFECT_FAMILIES` entry to
+        // claim. See docs/shapes.md S-155.
+        None
+    }
+
+    fn describes(&self) -> &'static str {
+        "a value spec that is one delimited alternation of two or more literal values \
+         (`--compression=(xz|none|auto)`) renders as an opaque placeholder rather than the \
+         flag's own choices"
+    }
+
+    fn hits(&self, evidence: &crate::detector::ToolEvidence<'_>) -> Vec<String> {
+        detect(evidence.raw, evidence.root)
+            .findings
+            .into_iter()
+            .map(|f| format!("{:?} never became choices, from {:?}", f.members, f.line))
+            .collect()
+    }
+
+    fn self_checks(&self) -> Vec<SelfCheck> {
+        self_checks()
+    }
+}
+
+// ----------------------------------------------------------------------
+// Self-checks
+// ----------------------------------------------------------------------
+
+use crate::detector::{Expect, SelfCheck};
+use mandible_core::{Choice, Entity, Provenance, Source};
+
+fn flag_with(long: &str, value_name: Option<&str>, choices: &[&str]) -> Entity {
+    let mut e = Entity::flag_spelled(
+        None,
+        Some(long.to_string()),
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.value_name = value_name.map(str::to_string);
+    e.choices = choices.iter().map(|c| Choice::bare(*c)).collect();
+    e
+}
+
+fn node_with(name: &str, flags: Vec<Entity>) -> CommandNode {
+    let mut root = CommandNode::new(name, Provenance::single(Source::HelpText));
+    root.set_entities_of(mandible_core::EntityKind::Flag, flags);
+    root
+}
+
+pub(crate) fn self_checks() -> Vec<SelfCheck> {
+    vec![
+        SelfCheck {
+            name: "grub-mkimage's own row, pre-fix shape (`--compression=(xz|none|auto)`)",
+            why: "the defect itself: the tree still carries the whole list as an unread \
+                  placeholder",
+            expect: Expect::Fires(1),
+            raw: "  -C, --compression=(xz|none|auto)          choose the compression\n".to_string(),
+            root: node_with(
+                "grub-mkimage",
+                vec![flag_with("compression", Some("(xz|none|auto)"), &[])],
+            ),
+        },
+        SelfCheck {
+            name: "grub-mkimage's own row, post-fix shape (choices attached)",
+            why: "once the alternation reads as choices, the identical raw row must go silent",
+            expect: Expect::Silent,
+            raw: "  -C, --compression=(xz|none|auto)          choose the compression\n".to_string(),
+            root: node_with(
+                "grub-mkimage",
+                vec![flag_with("compression", None, &["xz", "none", "auto"])],
+            ),
+        },
+        SelfCheck {
+            name: "rustc's own `--crate-type` row, angle-bracket form",
+            why: "the angle-bracket delimiter must generalize the same as the paren form",
+            expect: Expect::Fires(1),
+            raw: "    --crate-type <bin|lib|rlib|dylib|cdylib|staticlib|proc-macro>\n".to_string(),
+            root: node_with(
+                "rustc",
+                vec![flag_with(
+                    "crate-type",
+                    Some("<bin|lib|rlib|dylib|cdylib|staticlib|proc-macro>"),
+                    &[],
+                )],
+            ),
+        },
+        SelfCheck {
+            name: "tclobjnew-bpfcc's own `--language` row, brace form under argparse",
+            why: "argparse's own `{...}` metavar must generalize once the argparse marker is \
+                  present in the raw text",
+            expect: Expect::Fires(1),
+            raw: "  -l {c,java,ruby,tcl}, --language {c,java,ruby,tcl}\n                        \
+                  show this help message and exit\n"
+                .to_string(),
+            root: node_with(
+                "tclobjnew-bpfcc",
+                vec![flag_with("language", Some("{c,java,ruby,tcl}"), &[])],
+            ),
+        },
+        SelfCheck {
+            name: "a brace group with no argparse marker anywhere in the raw text",
+            why: "the brace form is gated to the argparse profile; an identical brace group on \
+                  a non-argparse tool must never be claimed",
+            expect: Expect::Silent,
+            raw: "  -l {c,java,ruby,tcl}, --language {c,java,ruby,tcl}\n".to_string(),
+            root: node_with(
+                "cache_restore",
+                vec![flag_with("language", Some("{c,java,ruby,tcl}"), &[])],
+            ),
+        },
+        SelfCheck {
+            name: "curl's own `-b, --cookie <data|filename>`, a two-member value-TYPE description",
+            why: "below three members, an angle-delimited pipe list is at least as often an \
+                  either/or description of the value's own type as a real choice list — \
+                  neither `data` nor `filename` is something a user picks literally, unlike \
+                  `xz`/`none`/`auto` — so it must never be claimed",
+            expect: Expect::Silent,
+            raw: "  -b, --cookie <data|filename> Send cookies from string/file\n".to_string(),
+            root: node_with(
+                "curl",
+                vec![flag_with("cookie", Some("<data|filename>"), &[])],
+            ),
+        },
+        SelfCheck {
+            name: "setpriv's own `--ruid <uid|user>`, the identical two-member word shape",
+            why: "the same value-TYPE ambiguity as curl's cookie flag, on a different tool — \
+                  must never be claimed",
+            expect: Expect::Silent,
+            raw: "      --ruid <uid|user>       set real user ID\n".to_string(),
+            root: node_with("setpriv", vec![flag_with("ruid", Some("<uid|user>"), &[])]),
+        },
+        SelfCheck {
+            name: "start-stop-daemon's own `-u, --user <username|uid>`",
+            why: "the same value-TYPE ambiguity a third time — must never be claimed",
+            expect: Expect::Silent,
+            raw: "  -u, --user <username|uid>   match only processes owned by this user\n"
+                .to_string(),
+            root: node_with(
+                "start-stop-daemon",
+                vec![flag_with("user", Some("<username|uid>"), &[])],
+            ),
+        },
+        SelfCheck {
+            name: "a two-member purely-numeric angle alternation (`<0|1>`)",
+            why: "a digit run is never a metavar name, so the two-member floor that guards \
+                  against curl's shape must not apply here",
+            expect: Expect::Fires(1),
+            raw: "  -c, --compress=<0|1|2>   compress data before writing\n".to_string(),
+            root: node_with("jlink", vec![flag_with("compress", Some("<0|1>"), &[])]),
+        },
+        SelfCheck {
+            name: "lvm2's own `--units [Number]r|R|h|...`, a real distinct placeholder",
+            why: "a bracketed placeholder is not one of the three delimiters this rule reads; \
+                  S-120/S-130 already own that shape and this detector must stay silent on it",
+            expect: Expect::Silent,
+            raw: "      --units [Number]r|R|h|H|b|B|s|S|k|K|m|M|g|G|t|T|p|P|e|E\n".to_string(),
+            root: node_with(
+                "pvdisplay",
+                vec![flag_with(
+                    "units",
+                    Some("[Number]r|R|h|H|b|B|s|S|k|K|m|M|g|G|t|T|p|P|e|E"),
+                    &[],
+                )],
+            ),
+        },
+        SelfCheck {
+            name: "a single-member angle placeholder (`<FILE>`)",
+            why: "one member is a real placeholder name, never a choice list, so it must never \
+                  be claimed",
+            expect: Expect::Silent,
+            raw: "  -o, --output <FILE>        write output to FILE\n".to_string(),
+            root: node_with("prog", vec![flag_with("output", Some("<FILE>"), &[])]),
+        },
+        SelfCheck {
+            name: "an unbracketed alternative-type placeholder (`triplet|filename`)",
+            why: "pkg-config's own `--personality=triplet|filename` has no enclosing \
+                  delimiter, and nothing about the bare shape alone tells an enumerated choice \
+                  list apart from an alternative-value-type placeholder — never claimed",
+            expect: Expect::Silent,
+            raw: "  --personality=triplet|filename   assume given personality\n".to_string(),
+            root: node_with(
+                "pkg-config",
+                vec![flag_with("personality", Some("triplet|filename"), &[])],
+            ),
+        },
+    ]
+}
diff --git a/xtask/src/detector/comma_swallowed_alias.rs b/xtask/src/detector/comma_swallowed_alias.rs
new file mode 100644
index 00000000..e7d6a7ab
--- /dev/null
+++ b/xtask/src/detector/comma_swallowed_alias.rs
@@ -0,0 +1,156 @@
+//! `comma-swallowed-alias` (atlas S-160): a third single-dash-long
+//! spelling after a valued long form reaches nothing, because the value
+//! spec swallowed the alias run's own trailing comma
+//! (`pod2text`'s `-w, --width=width, -width`, value read as `width,`).
+//! Fixture: `corpus/pod2text/*/`.
+
+use mandible_core::CommandNode;
+
+pub struct Finding {
+    pub value: String,
+    pub missing: String,
+    pub line: String,
+}
+
+pub struct Report {
+    pub findings: Vec<Finding>,
+}
+
+/// A row whose leading alias run repeats a `-<letter>[, --long=value, ]`
+/// shape ending in a value that itself carries a trailing comma, with one
+/// more single-dash spelling right after it — the exact shape
+/// `recover_comma_swallowed_alias` (`mandible-extract`) repairs.
+fn parse_row(line: &str) -> Option<(String, String)> {
+    let trimmed = line.trim_start();
+    let eq = trimmed.find('=')?;
+    let after_eq = &trimmed[eq + 1..];
+    let comma = after_eq.find(", -")?;
+    let value = &after_eq[..comma];
+    if value.is_empty() || value.contains(' ') {
+        return None;
+    }
+    let rest = &after_eq[comma + 2..];
+    let missing_len = rest[1..]
+        .find([',', ' ', '\t'])
+        .map_or(rest.len() - 1, |i| i + 1);
+    let missing = &rest[..missing_len];
+    Some((value.to_string(), missing.to_string()))
+}
+
+fn tree_has_single_dash(root: &CommandNode, name: &str) -> bool {
+    root.flags().any(|e| {
+        e.spellings
+            .iter()
+            .any(|s| s.dashes == mandible_core::Dashes::Single && s.name == name)
+    })
+}
+
+pub fn detect(raw: &str, root: &CommandNode) -> Report {
+    let mut findings = Vec::new();
+    for line in raw.lines() {
+        let Some((value, missing)) = parse_row(line) else {
+            continue;
+        };
+        let name = missing.trim_start_matches('-');
+        if !tree_has_single_dash(root, name) {
+            findings.push(Finding {
+                value,
+                missing,
+                line: line.to_string(),
+            });
+        }
+    }
+    Report { findings }
+}
+
+// ----------------------------------------------------------------------
+// Self-checks
+// ----------------------------------------------------------------------
+
+use crate::detector::{Detector, Expect, SelfCheck, ToolEvidence};
+use mandible_core::{Entity, Provenance, Source};
+
+/// pod2text's real row, byte-exact (`pod2text --help`).
+pub(crate) const POD2TEXT_WIDTH_ROW: &str = "    -w, --width=width, -width\n";
+
+fn node_with_flags(flags: Vec<Entity>) -> CommandNode {
+    let mut root = CommandNode::new("pod2text", Provenance::single(Source::HelpText));
+    root.set_entities_of(mandible_core::EntityKind::Flag, flags);
+    root
+}
+
+fn w_width_flag(value_name: &str) -> Entity {
+    let mut e = Entity::flag_spelled(
+        Some('w'),
+        Some("width".to_string()),
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.value_name = Some(value_name.to_string());
+    e.value_kind = mandible_core::ValueKind::Required;
+    e
+}
+
+fn dash_width_flag() -> Entity {
+    let mut e = Entity::flag_spelled(
+        None,
+        None,
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.spellings = vec![mandible_core::Spelling::single_dash("width")];
+    e
+}
+
+pub struct CommaSwallowedAlias;
+
+impl Detector for CommaSwallowedAlias {
+    fn name(&self) -> &'static str {
+        "comma-swallowed-alias"
+    }
+
+    fn family(&self) -> Option<&'static str> {
+        None
+    }
+
+    fn describes(&self) -> &'static str {
+        "a value spec swallowed the alias run's own trailing comma, so a third single-dash-long \
+         spelling after a valued long form reaches nothing"
+    }
+
+    fn hits(&self, evidence: &ToolEvidence<'_>) -> Vec<String> {
+        detect(evidence.raw, evidence.root)
+            .findings
+            .into_iter()
+            .map(|f| {
+                format!(
+                    "{:?} never reached the tree, value read {:?}, from {:?}",
+                    f.missing, f.value, f.line
+                )
+            })
+            .collect()
+    }
+
+    fn self_checks(&self) -> Vec<SelfCheck> {
+        vec![
+            SelfCheck {
+                name: "pod2text's own bytes, `-width` unreached",
+                why: "the defect itself: the value read `width,` with the comma glued in, and \
+                      `-width` never became its own spelling",
+                expect: Expect::Fires(1),
+                raw: POD2TEXT_WIDTH_ROW.to_string(),
+                root: node_with_flags(vec![w_width_flag("width,")]),
+            },
+            SelfCheck {
+                name: "the same row, correctly recovered",
+                why: "once `-width` reaches the tree and the comma is stripped from the value, \
+                      the same row must go silent",
+                expect: Expect::Silent,
+                raw: POD2TEXT_WIDTH_ROW.to_string(),
+                root: node_with_flags(vec![w_width_flag("width"), dash_width_flag()]),
+            },
+        ]
+    }
+}
diff --git a/xtask/src/detector/description_tail_enumerates_choices.rs b/xtask/src/detector/description_tail_enumerates_choices.rs
new file mode 100644
index 00000000..2316cf0f
--- /dev/null
+++ b/xtask/src/detector/description_tail_enumerates_choices.rs
@@ -0,0 +1,261 @@
+//! `description-tail-enumerates-choices` (atlas S-156): a flag description
+//! whose tail opens a labelled list and then runs comma-separated literal
+//! values to the end, which belong in the flag's own choices.
+//!
+//! Fixture: `corpus/grub-mkimage/2.12`. Counted only, below the bar.
+
+use mandible_core::CommandNode;
+
+const LABELS: &[&str] = &[
+    "available formats:",
+    "possible values:",
+    "one of:",
+    "valid values:",
+];
+
+pub struct Finding {
+    pub long: String,
+    pub label: &'static str,
+    pub members: Vec<String>,
+}
+
+pub struct Report {
+    pub findings: Vec<Finding>,
+}
+
+impl Report {
+    pub fn finding_count(&self) -> usize {
+        self.findings.len()
+    }
+}
+
+fn is_literal_member(m: &str) -> bool {
+    let mut chars = m.chars();
+    let Some(first) = chars.next() else {
+        return false;
+    };
+    (first.is_ascii_lowercase() || first.is_ascii_digit())
+        && chars.all(|c| {
+            c.is_ascii_lowercase() || c.is_ascii_digit() || matches!(c, '_' | '.' | '+' | '-')
+        })
+}
+
+/// The last labelled list this description's own tail carries, when the
+/// label is the last one in the text and every member after it is
+/// literal, at least three of them, running to the very end.
+fn label_tail(description: &str) -> Option<(&'static str, Vec<String>)> {
+    let lower = description.to_lowercase();
+    let mut best: Option<(usize, &'static str)> = None;
+    for label in LABELS {
+        if let Some(idx) = lower.rfind(label) {
+            if best.is_none_or(|(b, _)| idx > b) {
+                best = Some((idx, label));
+            }
+        }
+    }
+    let (idx, label) = best?;
+    let tail = description[idx + label.len()..].trim();
+    if tail.is_empty() {
+        return None;
+    }
+    let members: Vec<&str> = tail.split(',').map(str::trim).collect();
+    if members.len() < 3 || !members.iter().all(|m| is_literal_member(m)) {
+        return None;
+    }
+    Some((label, members.into_iter().map(str::to_string).collect()))
+}
+
+pub fn detect(_raw: &str, root: &CommandNode) -> Report {
+    let mut findings = Vec::new();
+    for e in root.flags() {
+        let Some(description) = e.description.as_ref().map(|t| t.as_str()) else {
+            continue;
+        };
+        let Some((label, members)) = label_tail(description) else {
+            continue;
+        };
+        let already_attached = members.len() == e.choices.len()
+            && members.iter().zip(&e.choices).all(|(m, c)| m == &c.name);
+        if !already_attached {
+            let Some(long) = e.long().map(str::to_string) else {
+                continue;
+            };
+            findings.push(Finding {
+                long,
+                label,
+                members,
+            });
+        }
+    }
+    Report { findings }
+}
+
+pub struct DescriptionTailEnumeratesChoices;
+
+impl crate::detector::Detector for DescriptionTailEnumeratesChoices {
+    fn name(&self) -> &'static str {
+        "description-tail-enumerates-choices"
+    }
+
+    fn family(&self) -> Option<&'static str> {
+        // No seed-7 labelled tool carries this shape (calibration verdict
+        // NOT EVALUABLE), so there is no closed `DEFECT_FAMILIES` entry to
+        // claim. See docs/shapes.md S-156.
+        None
+    }
+
+    fn describes(&self) -> &'static str {
+        "a flag description whose continuation opens a labelled list (`available formats:`) \
+         and runs comma-separated literal values to the end never becomes that flag's choices"
+    }
+
+    fn hits(&self, evidence: &crate::detector::ToolEvidence<'_>) -> Vec<String> {
+        detect(evidence.raw, evidence.root)
+            .findings
+            .into_iter()
+            .map(|f| {
+                format!(
+                    "-{} {:?} tail never became choices: {:?}",
+                    f.long, f.label, f.members
+                )
+            })
+            .collect()
+    }
+
+    fn self_checks(&self) -> Vec<SelfCheck> {
+        self_checks()
+    }
+}
+
+// ----------------------------------------------------------------------
+// Self-checks
+// ----------------------------------------------------------------------
+
+use crate::detector::{Expect, SelfCheck};
+use mandible_core::{Choice, Entity, Provenance, Source, Text};
+
+const GRUB_MKIMAGE_FORMAT_DESCRIPTION: &str = "generate an image in FORMAT available formats: \
+     i386-coreboot, i386-multiboot, i386-pc, i386-xen_pvh, i386-pc-eltorito, i386-efi, \
+     i386-ieee1275, i386-qemu, x86_64-efi, i386-xen, x86_64-xen, mipsel-yeeloong-flash, \
+     mipsel-fuloong2f-flash, mipsel-loongson-elf, powerpc-ieee1275, sparc64-ieee1275-raw, \
+     sparc64-ieee1275-cdcore, sparc64-ieee1275-aout, ia64-efi, mips-arc, mipsel-arc, \
+     mipsel-qemu_mips-elf, mips-qemu_mips-flash, mipsel-qemu_mips-flash, mips-qemu_mips-elf, \
+     arm-uboot, arm-coreboot-vexpress, arm-coreboot-veyron, arm-efi, arm64-efi, loongarch64-efi, \
+     riscv32-efi, riscv64-efi";
+
+fn flag_with(long: &str, description: &str, choices: &[&str]) -> Entity {
+    let mut e = Entity::flag_spelled(
+        None,
+        Some(long.to_string()),
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.description = Some(Text::sanitize(description));
+    e.choices = choices.iter().map(|c| Choice::bare(*c)).collect();
+    e
+}
+
+fn node_with(name: &str, flags: Vec<Entity>) -> CommandNode {
+    let mut root = CommandNode::new(name, Provenance::single(Source::HelpText));
+    root.set_entities_of(mandible_core::EntityKind::Flag, flags);
+    root
+}
+
+pub(crate) fn self_checks() -> Vec<SelfCheck> {
+    vec![
+        SelfCheck {
+            name: "grub-mkimage's own `--format`, pre-fix shape (list still in the description)",
+            why: "the defect itself: the described list never became choices",
+            expect: Expect::Fires(1),
+            raw: String::new(),
+            root: node_with(
+                "grub-mkimage",
+                vec![flag_with("format", GRUB_MKIMAGE_FORMAT_DESCRIPTION, &[])],
+            ),
+        },
+        SelfCheck {
+            name: "grub-mkimage's own `--format`, post-fix shape (choices attached, label gone)",
+            why: "once the label and list move to choices, the identical tree must go silent",
+            expect: Expect::Silent,
+            raw: String::new(),
+            root: node_with(
+                "grub-mkimage",
+                vec![flag_with(
+                    "format",
+                    "generate an image in FORMAT",
+                    &[
+                        "i386-coreboot",
+                        "i386-multiboot",
+                        "i386-pc",
+                        "i386-xen_pvh",
+                        "i386-pc-eltorito",
+                        "i386-efi",
+                        "i386-ieee1275",
+                        "i386-qemu",
+                        "x86_64-efi",
+                        "i386-xen",
+                        "x86_64-xen",
+                        "mipsel-yeeloong-flash",
+                        "mipsel-fuloong2f-flash",
+                        "mipsel-loongson-elf",
+                        "powerpc-ieee1275",
+                        "sparc64-ieee1275-raw",
+                        "sparc64-ieee1275-cdcore",
+                        "sparc64-ieee1275-aout",
+                        "ia64-efi",
+                        "mips-arc",
+                        "mipsel-arc",
+                        "mipsel-qemu_mips-elf",
+                        "mips-qemu_mips-flash",
+                        "mipsel-qemu_mips-flash",
+                        "mips-qemu_mips-elf",
+                        "arm-uboot",
+                        "arm-coreboot-vexpress",
+                        "arm-coreboot-veyron",
+                        "arm-efi",
+                        "arm64-efi",
+                        "loongarch64-efi",
+                        "riscv32-efi",
+                        "riscv64-efi",
+                    ],
+                )],
+            ),
+        },
+        SelfCheck {
+            name: "an ordinary description with no labelled list at all",
+            why: "prose that never opens one of the four labels must never be claimed",
+            expect: Expect::Silent,
+            raw: String::new(),
+            root: node_with(
+                "prog",
+                vec![flag_with("target", "the triple to build for", &[])],
+            ),
+        },
+        SelfCheck {
+            name: "a labelled list with fewer than three members",
+            why: "the gate requires at least three members; two is too weak a signal to trust",
+            expect: Expect::Silent,
+            raw: String::new(),
+            root: node_with(
+                "prog",
+                vec![flag_with("mode", "select a mode one of: fast, slow", &[])],
+            ),
+        },
+        SelfCheck {
+            name: "a labelled list followed by more prose",
+            why: "the label must be the last sentence-opening; text after the list means this \
+                  is not the tail of the description and must never be claimed",
+            expect: Expect::Silent,
+            raw: String::new(),
+            root: node_with(
+                "prog",
+                vec![flag_with(
+                    "mode",
+                    "select a mode one of: fast, slow, medium. See the manual for details",
+                    &[],
+                )],
+            ),
+        },
+    ]
+}
diff --git a/xtask/src/detector/glued_bracket_angle_run.rs b/xtask/src/detector/glued_bracket_angle_run.rs
new file mode 100644
index 00000000..bc5c5f95
--- /dev/null
+++ b/xtask/src/detector/glued_bracket_angle_run.rs
@@ -0,0 +1,161 @@
+//! `glued-bracket-angle-run` (atlas S-158): a value spec that mixes a
+//! bracket-optional group and a required angle placeholder, glued
+//! directly onto each other with no separator, loses the half that
+//! doesn't open the run — `-L [<KIND>=]<PATH>` keeps only `[<KIND>=]`,
+//! `--emit <TYPE>[=<FILE>]` keeps only `<TYPE>`. Fixture:
+//! `corpus/rustc/1.82.0/`.
+
+use mandible_core::CommandNode;
+
+pub struct Finding {
+    pub run: String,
+    pub line: String,
+}
+
+pub struct Report {
+    pub findings: Vec<Finding>,
+}
+
+/// A `[...]<...>` or `<...>[...]` run starting at `s`, verbatim including
+/// every delimiter, or `None`. Single-level brackets only, matching
+/// [`mandible_extract`]'s own `take_glued_angle_group`/
+/// `take_glued_bracket_group`.
+fn glued_run_at(s: &str) -> Option<&str> {
+    if let Some(rest) = s.strip_prefix('[') {
+        let close = rest.find(']')?;
+        let after_bracket = &rest[close + 1..];
+        let angle_rest = after_bracket.strip_prefix('<')?;
+        let angle_close = angle_rest.find('>')?;
+        return Some(&s[..close + 2 + angle_close + 2]);
+    }
+    if let Some(rest) = s.strip_prefix('<') {
+        let close = rest.find('>')?;
+        let after_angle = &rest[close + 1..];
+        if !after_angle.starts_with('[') {
+            return None;
+        }
+        let bracket_rest = &after_angle[1..];
+        let bracket_close = bracket_rest.find(']')?;
+        return Some(&s[..close + 2 + bracket_close + 2]);
+    }
+    None
+}
+
+fn tree_keeps_run(root: &CommandNode, run: &str) -> bool {
+    root.flags().any(|e| e.value_name.as_deref() == Some(run))
+}
+
+pub fn detect(raw: &str, root: &CommandNode) -> Report {
+    let mut findings = Vec::new();
+    for line in raw.lines() {
+        let mut rest = line;
+        while let Some(start) = rest.find(['[', '<']) {
+            let candidate = &rest[start..];
+            if let Some(run) = glued_run_at(candidate) {
+                if !tree_keeps_run(root, run) {
+                    findings.push(Finding {
+                        run: run.to_string(),
+                        line: line.to_string(),
+                    });
+                }
+                rest = &candidate[run.len()..];
+            } else {
+                rest = &candidate[1..];
+            }
+        }
+    }
+    Report { findings }
+}
+
+// ----------------------------------------------------------------------
+// Self-checks
+// ----------------------------------------------------------------------
+
+use crate::detector::{Detector, Expect, SelfCheck, ToolEvidence};
+use mandible_core::{Entity, Provenance, Source};
+
+/// rustc's real rows, byte-exact (`rustc --help`).
+pub(crate) const RUSTC_L_ROW: &str =
+    "    -L [<KIND>=]<PATH>  Add a directory to the library search path.\n";
+pub(crate) const RUSTC_EMIT_ROW: &str = "        --emit <TYPE>[=<FILE>]\n";
+
+fn flag_with_value(value_name: Option<&str>) -> Entity {
+    let mut e = Entity::flag_spelled(
+        Some('L'),
+        None,
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.value_name = value_name.map(str::to_string);
+    if value_name.is_some() {
+        e.value_kind = mandible_core::ValueKind::Required;
+    }
+    e
+}
+
+fn node_with_flags(flags: Vec<Entity>) -> CommandNode {
+    let mut root = CommandNode::new("rustc", Provenance::single(Source::HelpText));
+    root.set_entities_of(mandible_core::EntityKind::Flag, flags);
+    root
+}
+
+pub struct GluedBracketAngleRun;
+
+impl Detector for GluedBracketAngleRun {
+    fn name(&self) -> &'static str {
+        "glued-bracket-angle-run"
+    }
+
+    fn family(&self) -> Option<&'static str> {
+        None
+    }
+
+    fn describes(&self) -> &'static str {
+        "a value spec mixing a glued bracket-optional group and a required angle placeholder \
+         loses the half that doesn't open the run"
+    }
+
+    fn hits(&self, evidence: &ToolEvidence<'_>) -> Vec<String> {
+        detect(evidence.raw, evidence.root)
+            .findings
+            .into_iter()
+            .map(|f| format!("{:?} never became one value name, from {:?}", f.run, f.line))
+            .collect()
+    }
+
+    fn self_checks(&self) -> Vec<SelfCheck> {
+        vec![
+            SelfCheck {
+                name: "rustc's own bytes, `-L` losing `<PATH>`",
+                why: "the defect itself: the bracket group survives but the required angle \
+                      placeholder glued onto it is dropped",
+                expect: Expect::Fires(1),
+                raw: RUSTC_L_ROW.to_string(),
+                root: node_with_flags(vec![flag_with_value(Some("[<KIND>=]"))]),
+            },
+            SelfCheck {
+                name: "`-L` recovered as one glued value name",
+                why: "once the tree keeps the whole run, the same row must go silent",
+                expect: Expect::Silent,
+                raw: RUSTC_L_ROW.to_string(),
+                root: node_with_flags(vec![flag_with_value(Some("[<KIND>=]<PATH>"))]),
+            },
+            SelfCheck {
+                name: "rustc's own bytes, `--emit` losing `[=<FILE>]`",
+                why: "the mirror shape: an angle placeholder opens the run and the glued \
+                      bracket group after it is dropped",
+                expect: Expect::Fires(1),
+                raw: RUSTC_EMIT_ROW.to_string(),
+                root: node_with_flags(vec![flag_with_value(Some("<TYPE>"))]),
+            },
+            SelfCheck {
+                name: "`--emit` recovered as one glued value name",
+                why: "once the tree keeps the whole run, the same row must go silent",
+                expect: Expect::Silent,
+                raw: RUSTC_EMIT_ROW.to_string(),
+                root: node_with_flags(vec![flag_with_value(Some("<TYPE>[=<FILE>]"))]),
+            },
+        ]
+    }
+}
diff --git a/xtask/src/detector/mod.rs b/xtask/src/detector/mod.rs
index 375ece70..0f1383f2 100644
--- a/xtask/src/detector/mod.rs
+++ b/xtask/src/detector/mod.rs
@@ -107,6 +107,15 @@ pub(crate) mod option_table_multiword_value_name;
 pub(crate) mod bare_usage_label_form;
 pub(crate) mod usage_foreign_program_word;
 pub(crate) mod usage_form_trailing_description;
+// Round-10 family detectors (atlas S-155 and S-156).
+pub(crate) mod alternation_value_is_choices;
+pub(crate) mod description_tail_enumerates_choices;
+// Round-10 family detectors (issue-fed round, atlas S-157 to S-161), same
+// direct-`Detector`-impl shape.
+pub(crate) mod comma_swallowed_alias;
+pub(crate) mod glued_bracket_angle_run;
+pub(crate) mod slash_joined_alias_outside_bullet;
+pub(crate) mod spaced_bare_word_table_value;
 
 pub(crate) use calibration::*;
 pub(crate) use commands::*;
@@ -757,6 +766,12 @@ pub fn registry() -> Vec<Box<dyn Detector>> {
         Box::new(bare_usage_label_form::BareUsageLabelForm),
         Box::new(usage_foreign_program_word::UsageForeignProgramWord),
         Box::new(usage_form_trailing_description::UsageFormTrailingDescription),
+        Box::new(alternation_value_is_choices::AlternationValueIsChoices),
+        Box::new(description_tail_enumerates_choices::DescriptionTailEnumeratesChoices),
+        Box::new(spaced_bare_word_table_value::SpacedBareWordTableValue),
+        Box::new(glued_bracket_angle_run::GluedBracketAngleRun),
+        Box::new(slash_joined_alias_outside_bullet::SlashJoinedAliasOutsideBullet),
+        Box::new(comma_swallowed_alias::CommaSwallowedAlias),
     ]
 }
 
diff --git a/xtask/src/detector/single_dash_long_table.rs b/xtask/src/detector/single_dash_long_table.rs
index 01705705..1a98e2a9 100644
--- a/xtask/src/detector/single_dash_long_table.rs
+++ b/xtask/src/detector/single_dash_long_table.rs
@@ -29,7 +29,7 @@ impl Report {
 /// True when some physical line's leading token, after trimming
 /// indentation, is a `--word` spelling — disqualifies the whole document
 /// as a single-dash-long table.
-fn document_has_double_dash_row(raw: &str) -> bool {
+pub(crate) fn document_has_double_dash_row(raw: &str) -> bool {
     raw.lines().any(|line| {
         let trimmed = line.trim_start();
         trimmed
@@ -44,7 +44,7 @@ fn document_has_double_dash_row(raw: &str) -> bool {
 /// (excluded by the caller's own document-level check, and defensively
 /// here too) and never a bare one-character short flag, which carries no
 /// table-rule information of its own.
-fn single_dash_long_row(trimmed: &str) -> Option<String> {
+pub(crate) fn single_dash_long_row(trimmed: &str) -> Option<String> {
     let rest = trimmed.strip_prefix('-')?;
     if rest.is_empty() || rest.starts_with('-') {
         return None;
diff --git a/xtask/src/detector/slash_joined_alias_outside_bullet.rs b/xtask/src/detector/slash_joined_alias_outside_bullet.rs
new file mode 100644
index 00000000..17008ea9
--- /dev/null
+++ b/xtask/src/detector/slash_joined_alias_outside_bullet.rs
@@ -0,0 +1,142 @@
+//! `slash-joined-alias-outside-bullet` (atlas S-161): a `/`-joined second
+//! spelling with a space on each side (`cargo-clippy`'s `-W / --warn
+//! [LINT]`) reaches the tree with the first spelling valued `/` and the
+//! second spelling reaching nothing, four times. Fixture:
+//! `corpus/cargo-clippy/*/`.
+
+use mandible_core::CommandNode;
+
+pub struct Finding {
+    pub short: String,
+    pub long: String,
+    pub line: String,
+}
+
+pub struct Report {
+    pub findings: Vec<Finding>,
+}
+
+/// `-X / --long ...`: a short spelling, one space, a literal `/`, one
+/// space, a `--long` spelling — the exact row shape
+/// `mandible_extract::help_text::sections::bullets::join_slash_alias`
+/// repairs.
+fn parse_row(line: &str) -> Option<(String, String)> {
+    let trimmed = line.trim_start();
+    let short_end = trimmed.find(' ')?;
+    let (short, rest) = trimmed.split_at(short_end);
+    if !short.starts_with('-') || short.starts_with("--") {
+        return None;
+    }
+    let rest = rest.strip_prefix(" / ")?;
+    if !rest.starts_with("--") {
+        return None;
+    }
+    let long_end = rest.find(|c: char| c.is_whitespace()).unwrap_or(rest.len());
+    Some((short.to_string(), rest[..long_end].to_string()))
+}
+
+fn tree_has_long(root: &CommandNode, name: &str) -> bool {
+    root.flags().any(|e| e.long() == Some(name))
+}
+
+pub fn detect(raw: &str, root: &CommandNode) -> Report {
+    let mut findings = Vec::new();
+    for line in raw.lines() {
+        let Some((short, long)) = parse_row(line) else {
+            continue;
+        };
+        let long_name = long.trim_start_matches('-');
+        if !tree_has_long(root, long_name) {
+            findings.push(Finding {
+                short,
+                long,
+                line: line.to_string(),
+            });
+        }
+    }
+    Report { findings }
+}
+
+// ----------------------------------------------------------------------
+// Self-checks
+// ----------------------------------------------------------------------
+
+use crate::detector::{Detector, Expect, SelfCheck, ToolEvidence};
+use mandible_core::{Entity, Provenance, Source};
+
+/// cargo-clippy's real row, byte-exact (`cargo-clippy --help`).
+pub(crate) const CLIPPY_WARN_ROW: &str = "    -W / --warn [LINT]       Set lint warnings\n";
+
+fn node_with_flags(flags: Vec<Entity>) -> CommandNode {
+    let mut root = CommandNode::new("cargo-clippy", Provenance::single(Source::HelpText));
+    root.set_entities_of(mandible_core::EntityKind::Flag, flags);
+    root
+}
+
+fn short_flag_valued_slash() -> Entity {
+    let mut e = Entity::flag_spelled(
+        Some('W'),
+        None,
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.value_name = Some("/".to_string());
+    e.value_kind = mandible_core::ValueKind::Required;
+    e
+}
+
+fn short_long_alias() -> Entity {
+    Entity::flag_spelled(
+        Some('W'),
+        Some("warn".to_string()),
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    )
+}
+
+pub struct SlashJoinedAliasOutsideBullet;
+
+impl Detector for SlashJoinedAliasOutsideBullet {
+    fn name(&self) -> &'static str {
+        "slash-joined-alias-outside-bullet"
+    }
+
+    fn family(&self) -> Option<&'static str> {
+        None
+    }
+
+    fn describes(&self) -> &'static str {
+        "a `/`-joined second spelling with a space on each side reaches nothing, the first \
+         spelling keeping `/` as a fabricated value"
+    }
+
+    fn hits(&self, evidence: &ToolEvidence<'_>) -> Vec<String> {
+        detect(evidence.raw, evidence.root)
+            .findings
+            .into_iter()
+            .map(|f| format!("{:?} never joined {:?}, from {:?}", f.short, f.long, f.line))
+            .collect()
+    }
+
+    fn self_checks(&self) -> Vec<SelfCheck> {
+        vec![
+            SelfCheck {
+                name: "cargo-clippy's own bytes, `-W` fabricating value `/`",
+                why: "the defect itself: `--warn` never reaches the tree and `-W` keeps the \
+                      literal separator as its value",
+                expect: Expect::Fires(1),
+                raw: CLIPPY_WARN_ROW.to_string(),
+                root: node_with_flags(vec![short_flag_valued_slash()]),
+            },
+            SelfCheck {
+                name: "the same row, correctly joined",
+                why: "once both spellings are one entity, the same row must go silent",
+                expect: Expect::Silent,
+                raw: CLIPPY_WARN_ROW.to_string(),
+                root: node_with_flags(vec![short_long_alias()]),
+            },
+        ]
+    }
+}
diff --git a/xtask/src/detector/spaced_bare_word_table_value.rs b/xtask/src/detector/spaced_bare_word_table_value.rs
new file mode 100644
index 00000000..a04a5b70
--- /dev/null
+++ b/xtask/src/detector/spaced_bare_word_table_value.rs
@@ -0,0 +1,182 @@
+//! `spaced-bare-word-table-value` (atlas S-157): inside a single-dash-long
+//! table (S-145, no `--long` row anywhere), a row's value name is a bare
+//! word one space after the spelling, with no bracket or angle delimiter —
+//! `-Xstrategy strategy1,...,strategyN`, `-audit int`. The value reads as
+//! the first word of the description instead. Fixtures: `corpus/Xvfb/`,
+//! `corpus/mksquashfs/4.6.1/`, `corpus/sqfstar/4.6.1/`.
+
+use super::single_dash_long_table::{document_has_double_dash_row, single_dash_long_row};
+use mandible_core::CommandNode;
+
+pub struct Finding {
+    pub name: String,
+    pub value: String,
+    pub line: String,
+}
+
+pub struct Report {
+    pub findings: Vec<Finding>,
+}
+
+/// The one whitespace-delimited token one space after `trimmed`'s own
+/// name — never a bracket or angle placeholder (`spaced_value_placeholder`'s
+/// own shape), and never anything past that first token: a ragged
+/// three-column table may separate it from the next column by only one
+/// more space (`qemu-arm64-static`'s `-dfilter range[,...] QEMU_DFILTER`).
+fn bare_word_value(trimmed: &str, name: &str) -> Option<String> {
+    let rest = &trimmed[name.len() + 1..];
+    let after = rest.strip_prefix(' ')?;
+    if after.starts_with([' ', '\t', '<', '[']) {
+        return None;
+    }
+    let value = after.split_whitespace().next()?;
+    value
+        .chars()
+        .next()
+        .is_some_and(|c| c.is_ascii_alphanumeric())
+        .then(|| value.to_string())
+}
+
+fn flag_value_name(root: &CommandNode, name: &str) -> Option<String> {
+    root.flags()
+        .find(|e| {
+            e.spellings
+                .iter()
+                .any(|s| s.dashes == mandible_core::Dashes::Single && s.name == name)
+        })
+        .and_then(|e| e.value_name.clone())
+}
+
+pub fn detect(raw: &str, root: &CommandNode) -> Report {
+    if document_has_double_dash_row(raw) {
+        return Report {
+            findings: Vec::new(),
+        };
+    }
+    let mut findings = Vec::new();
+    let mut seen = std::collections::BTreeSet::new();
+    for line in raw.lines() {
+        let trimmed = line.trim_start();
+        let Some(name) = single_dash_long_row(trimmed) else {
+            continue;
+        };
+        let Some(value) = bare_word_value(trimmed, &name) else {
+            continue;
+        };
+        if !seen.insert(name.clone()) {
+            continue;
+        }
+        let recovered = flag_value_name(root, &name).as_deref() == Some(value.as_str());
+        if !recovered {
+            findings.push(Finding {
+                name,
+                value,
+                line: line.to_string(),
+            });
+        }
+    }
+    Report { findings }
+}
+
+// ----------------------------------------------------------------------
+// Self-checks
+// ----------------------------------------------------------------------
+
+use crate::detector::{Detector, Expect, SelfCheck, ToolEvidence};
+use mandible_core::{Entity, Provenance, Source};
+
+/// Xvfb's real row, byte-exact (`Xvfb --help`).
+pub(crate) const XVFB_AUDIT_ROW: &str = "-audit int             set audit trail level\n";
+/// mksquashfs's real row, byte-exact (`corpus/mksquashfs/4.6.1/help.stderr.txt`).
+pub(crate) const MKSQUASHFS_XSTRATEGY_ROW: &str =
+    "-Xstrategy strategy1,...,strategyN\tcompression strategy\n";
+
+fn single_dash_flag(name: &str, value_name: Option<&str>) -> Entity {
+    let mut e = Entity::flag_spelled(
+        None,
+        None,
+        false,
+        false,
+        Provenance::single(Source::HelpText),
+    );
+    e.spellings = vec![mandible_core::Spelling::single_dash(name)];
+    e.value_name = value_name.map(str::to_string);
+    if value_name.is_some() {
+        e.value_kind = mandible_core::ValueKind::Required;
+    }
+    e
+}
+
+fn node_with_flags(flags: Vec<Entity>) -> CommandNode {
+    let mut root = CommandNode::new("Xvfb", Provenance::single(Source::HelpText));
+    root.set_entities_of(mandible_core::EntityKind::Flag, flags);
+    root
+}
+
+pub struct SpacedBareWordTableValue;
+
+impl Detector for SpacedBareWordTableValue {
+    fn name(&self) -> &'static str {
+        "spaced-bare-word-table-value"
+    }
+
+    fn family(&self) -> Option<&'static str> {
+        None
+    }
+
+    fn describes(&self) -> &'static str {
+        "inside a single-dash-long table, a row's bare-word value name (no bracket, no angle \
+         placeholder) is lost, its first word absorbed into the description"
+    }
+
+    fn hits(&self, evidence: &ToolEvidence<'_>) -> Vec<String> {
+        detect(evidence.raw, evidence.root)
+            .findings
+            .into_iter()
+            .map(|f| {
+                format!(
+                    "-{} never carried value {:?}, from {:?}",
+                    f.name, f.value, f.line
+                )
+            })
+            .collect()
+    }
+
+    fn self_checks(&self) -> Vec<SelfCheck> {
+        vec![
+            SelfCheck {
+                name: "Xvfb's own bytes, `-audit` with no value name",
+                why: "the defect itself: the table row's bare-word value never reached the tree",
+                expect: Expect::Fires(1),
+                raw: XVFB_AUDIT_ROW.to_string(),
+                root: node_with_flags(vec![single_dash_flag("audit", None)]),
+            },
+            SelfCheck {
+                name: "`-audit` recovered with value `int`",
+                why: "once the tree carries the row's own bare-word value, the same row must go \
+                      silent",
+                expect: Expect::Silent,
+                raw: XVFB_AUDIT_ROW.to_string(),
+                root: node_with_flags(vec![single_dash_flag("audit", Some("int"))]),
+            },
+            SelfCheck {
+                name: "mksquashfs's `-Xstrategy`, a comma-separated value list",
+                why: "the value name is a comma run, not one bare word, and must be kept whole \
+                      rather than cut at the first comma",
+                expect: Expect::Fires(1),
+                raw: MKSQUASHFS_XSTRATEGY_ROW.to_string(),
+                root: node_with_flags(vec![single_dash_flag("Xstrategy", None)]),
+            },
+            SelfCheck {
+                name: "gcc's own document, `-DMACRO`'s row beside a real `--help` row",
+                why: "a document that documents even one `--long` row anywhere is never a \
+                      table, so a bare description word is never mistaken for a value here",
+                expect: Expect::Silent,
+                raw: "-Doption value        Enable the option.\n\
+                       --help                Display this information.\n"
+                    .to_string(),
+                root: node_with_flags(vec![single_dash_flag("Doption", None)]),
+            },
+        ]
+    }
+}