fix(core,cli): enforce internal invariants in release builds (degrade non-boundary spans, assert skeleton/width/range/cursor invariants); path helpers fail closed on strip_prefix and non-UTF-8 paths; fmt non-UTF-8 exits 2 (#220, #217) - #388

Merged

dean0x merged 11 commits into

mainfrom

fix/c5-release-invariants-fail-closed-paths

Sep 15, 2026

Commits on Sep 15, 2026

test(core): RED — #220 sites degrade or assert in release; pub-API range checks, neutralize width parity and source-map cursor asserts pinned (#220)
dean0x
committed
ad23019
fix(core): degrade non-boundary import/extends spans via line_len_at; enforce the skeleton-block, neutralize-width, range-check and source-map-cursor invariants in release (#220)
dean0x
committed
9e23488
test(lint): RED — relative_display must fail closed (#217)
dean0x
committed
12b3408
fix(lint): relative_display returns Result; display paths computed before the sort; run exits 2 with the analysis-failure envelope (#217)
dean0x
committed
dd54b82
test(core): RED — empty or non-UTF-8 source-map anchors must not be vacuous (#217)
dean0x
committed
7e9a5fe
fix(core): path_to_unified is Option; unusable root → basename, unusable base → root anchor; source_root is None for a non-UTF-8 root (#217)
dean0x
committed
d73cf2f
test(cli): RED — out-of-root flatten is classified, warned and never absolute; watch ghost prune keeps in-root state (#217)
dean0x
committed
a10a7bc
fix(cli): output_path_for warns on the flattened arm, degenerate stems are relative, watch external-ghost prune skips the output probe (#217)
dean0x
committed
0be5e56
test(fmt): RED — non-UTF-8 path exits 2 (#217)
dean0x
committed
aae35a9
fix(fmt): a non-UTF-8 path is mds::io (exit 2) like lint and build (#217)
dean0x
committed
f4707d7
docs: release-enforced invariants and fail-closed path helpers — CHANGELOG, spec §7.2/§7.5/§7.9, SECURITY.md, rustdoc, KBs (#220, #217)
dean0x
committed
e1a69d0