How the required asterisk is placed

The danger * is driven by the native required attribute — no class needed. Where it lands depends on the field's shape:

• Simple fields (input / select / textarea) → the group's <label>, via .pa-form-group:has(:required) > label.
• Grouped choices (radios/checkboxes inside a .pa-radio-group / .pa-checkbox-group) → the requirement belongs to the group, so the * sits once on the group heading and the per-option markers are suppressed. See Priority below.
• Standalone choice (a lone .pa-checkbox / .pa-radio, e.g. a consent box with no *-group wrapper) → the * sits on its own option label. Use native required, or — when the checked state is JS-driven and never carries the attribute — declare it on the group with .pa-form-group--required. Both land the * on the option label. See I accept the terms below.
• Complex widgets with no native control (image browser, dropzone, web component) → add .pa-form-group--required to the group as the explicit trigger.

The first “Horizontal orientation” group has no required, so it shows no marker.