Harden DetMir runtime hot paths

[igor04091968]

Summary

• add bounded timeout/process cleanup for DetMir runtime checks
• make DLP disabled/core_only skip semantics explicit for contour checks
• keep Worktime hot path independent from optional DLP evidence buckets
• add resilience check script and Worktime operations documentation

Verification

• git diff --cached --check
• bash -n scripts/detmir_resilience_check.sh
• CARGO_TARGET_DIR=/home/igor/.cache/aw-split-a-target cargo test -p check-aw-data -p detmir-auto -p detmir-check -p detmir-dlp -p dlp-health-check -p worktime-api -p worktime-autoheal --locked

Production notes

• does not enable DLP runtime
• disabled/core_only remains valid DetMir production state

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1288a0b0-7c47-4c82-93fb-35f60cd281b9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch detmir-runtime-hotpath-followup-20260701

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}