fix: address Low-severity findings from the whole-codebase review - #199

Merged

chmmou merged 16 commits into

mainfrom

fix/review-low-findings

Jul 18, 2026

Commits on Jul 18, 2026

fix(api): skip the auth-failure retry for non-refreshable credentials
chmmou
committed
928bb89
fix(transport): treat context cancellation as non-retryable
chmmou
committed
16d7176
fix(cli): prompt on stderr, audit refusals, keep exit class on audit failure
chmmou
committed
b91c854
fix(auth): validate credential token shape and session lifetime range
chmmou
committed
97d517e
fix(config): add ErrUnknownProfile / ErrMissingCredentials sentinels
chmmou
committed
40dc28d
refactor: unexport the Caller field in dns/directoryprotection/server/usage
chmmou
committed
2c59ac0
fix(testdata): rename fixtures encoding non-existent KAS actions
chmmou
committed
8faa9e7
test(chown,ssl,symlink): anchor the captured placeholder fault fixtures
chmmou
committed
4fcaee2
chore(testdata): use RFC 2606-reserved names in redacted fixture values
chmmou
committed
4600387
docs(changelog): record the Low-severity review fixes
chmmou
committed
e337235
fix(transport,cli): re-review corrections to the Low-finding fixes
chmmou
committed
3e5e01b
fix(cli,transport,config,session,testutil): second-pass Med/Low review corrections
chmmou
committed
016e6cf
docs: refresh README, ROADMAP, CLAUDE.md, and the destructive-writes contract to the shipped state
chmmou
committed
76a77b0
docs(changelog): record the second-pass review fixes
chmmou
committed
e1552d9
fix(cli,transport,api): address High/Med/Low findings from the third review pass
chmmou
committed
1c65eac
docs: record the third-pass review fixes
chmmou
committed
aff6e1c