Why: land the A3-baseline-driven rule-layer fixes (negation-aware matching, specificity tie-break, fail-closed slots) across the composition. Evidence: unit transport (misexec-git-run.json); eval mis_exec=0 with 37/37 pass (verify-misexec2.json); full combination re-run below. Impact: four component gitlinks. Refs: feature/recall-misexec-fixes