Skip to content

Commit 7d779ea

Browse files
lesnik512claude
lesnik512
and
claude
committed
chore(planning): archive the deep-audit bundles; close the audit
All 35 confirmed 2026-06-14 deep-audit findings are remediated across #62-#66. Promote the four remaining bundles (deep-audit umbrella + correctness/test-quality/doc-fixes) to changes/archive/ with status: shipped, pr, and outcome filled; Active is now empty. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent daf6ac3 commit 7d779ea

6 files changed

Lines changed: 17 additions & 13 deletions

File tree

‎planning/README.md‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,12 +70,16 @@ carry **no** frontmatter — living prose, dated by git.
7070

7171
### Active
7272

73-
- **[deep-audit](changes/active/2026-06-14.01-deep-audit/design.md)** (2026-06-14) — Full-codebase deep audit covering the perf/security/supply-chain gaps the 2026-06-07 audit skipped, plus correctness, concurrency, refactoring, and test quality. Report: [audits/2026-06-14-deep-audit.md](audits/2026-06-14-deep-audit.md) — 35 confirmed (1 High, 4 Medium, 14 Low, 14 nits); headline is an `architecture/extras.md` pydantic-isolation accuracy bug. Report-only; confirmed findings spawn follow-up bundles.
73+
_None._
7474

7575
### Archived (shipped)
7676

77+
- **[audit-doc-fixes](changes/archive/2026-06-14.06-audit-doc-fixes/change.md)** (#66, 2026-06-14) — Closed the [deep-audit](audits/2026-06-14-deep-audit.md) doc-accuracy findings: `Client.stream()` docs, terminal-call attribution, the four auto-raise sites, the pydantic upper bound, and root import paths.
78+
- **[audit-test-quality](changes/archive/2026-06-14.05-audit-test-quality/change.md)** (#65, 2026-06-14) — Closed 11 [deep-audit](audits/2026-06-14-deep-audit.md) test-quality findings: sync-terminal + CookieConflict coverage, the `StatusError.__init__` invariant, missing status constructions, sync mirrors, typing overloads, a deterministic bulkhead barrier, a pinned budget clock, an observability assertion, and the `TimeoutError` circuit trigger.
79+
- **[audit-correctness](changes/archive/2026-06-14.04-audit-correctness/change.md)** (#64, 2026-06-14) — Closed 8 [deep-audit](audits/2026-06-14-deep-audit.md) correctness + public-API findings: RetryBudget token ordering, two `OverflowError` crashes, the redaction triple-slash, the msgspec guard, streaming-body symmetry, the RetryBudget docstring caveat, and `middleware/__all__`.
7780
- **[security-hardening](changes/archive/2026-06-14.03-security-hardening/design.md)** (#63, 2026-06-14) — Closed the [deep-audit](audits/2026-06-14-deep-audit.md) security cluster: URL secret redaction centralized at the `_emit_event` chokepoint (userinfo + sensitive query/fragment keys), opt-in `max_error_body_bytes` + `ResponseTooLargeError` bounding the `stream()` error pre-read, and `trust_env` + header-reachability docs. Non-streaming hard body cap deferred.
7881
- **[pydantic-import-isolation](changes/archive/2026-06-14.02-pydantic-import-isolation/change.md)** (#62, 2026-06-14) — Guarded the pydantic import so the decoder module loads without the extra and the `architecture/extras.md` Seam-C invariant holds for pydantic. Closed the [deep-audit](audits/2026-06-14-deep-audit.md) High + 2 folded Mediums.
82+
- **[deep-audit](changes/archive/2026-06-14.01-deep-audit/design.md)** (2026-06-14) — Full-codebase deep audit (perf/security/supply-chain gaps + correctness/concurrency/refactoring/test quality). [Report](audits/2026-06-14-deep-audit.md): 35 confirmed; all remediated across #62–#66 (non-streaming hard body cap deferred).
7983
- **[docs-ux-restructure](changes/archive/2026-06-14.01-docs-ux-restructure/design.md)** (#60, 2026-06-14) — Thin README front-door + canonical `docs/index.md` (G3), why-httpware hook (G1), runnable jsonplaceholder example (G4), nav reorder + architecture links, base-client scrub. G2 dropped; G6 (decoder guide) still open.
8084
- **[docs-audit-followups](changes/archive/2026-06-13.05-docs-audit-followups/change.md)** (#58, 2026-06-13) — Second docs-audit batch: corrected the overstated invariant-enforcement claims in `CLAUDE.md` + `architecture/overview.md` (only `print()`/blanket-`type: ignore` are machine-checked), readability findings R1–R3, and documented the public `STATUS_TO_EXCEPTION` (G5).
8185
- **[docs-accuracy-fixes](changes/archive/2026-06-13.04-docs-accuracy-fixes/change.md)** (f203821, 2026-06-13) — Fixed 5 verified factual errors from the [docs audit](audits/2026-06-13-docs-audit.md): RetryBudget formula, modern-di 2.x recipe, contributing-doc CI/grep claim, `just lint` comment, middleware stable-contracts list (+ AsyncTimeout non-finite wording).

planning/changes/active/2026-06-14.01-deep-audit/design.md renamed to planning/changes/archive/2026-06-14.01-deep-audit/design.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
2-
status: draft
2+
status: shipped
33
date: 2026-06-14
44
slug: deep-audit
55
supersedes: null
66
superseded_by: null
77
pr: null
8-
outcome: null
8+
outcome: Audit complete - 35 confirmed findings, all remediated across #62 (pydantic High+2 Mediums), #63 (security cluster), #64 (correctness), #65 (test quality), #66 (docs). Non-streaming hard body cap deferred (planning/deferred.md).
99
---
1010

1111
# Design: Full-codebase deep audit (perf · security · refactoring · bugs)

planning/changes/active/2026-06-14.01-deep-audit/plan.md renamed to planning/changes/archive/2026-06-14.01-deep-audit/plan.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
status: draft
2+
status: shipped
33
date: 2026-06-14
44
slug: deep-audit
55
spec: deep-audit

planning/changes/active/2026-06-14.04-audit-correctness/change.md renamed to planning/changes/archive/2026-06-14.04-audit-correctness/change.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
2-
status: draft
2+
status: shipped
33
date: 2026-06-14
44
slug: audit-correctness
55
supersedes: null
66
superseded_by: null
7-
pr: null
8-
outcome: null
7+
pr: 64
8+
outcome: Shipped via #64 - 8 correctness + public-API findings (RetryBudget token ordering, _parse_retry_after and full_jitter_delay OverflowError, redaction triple-slash, msgspec guard, streaming-body symmetry, RetryBudget docstring, middleware __all__).
99
---
1010

1111
# Change: Deep-audit correctness + public-API fixes

planning/changes/active/2026-06-14.05-audit-test-quality/change.md renamed to planning/changes/archive/2026-06-14.05-audit-test-quality/change.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
2-
status: draft
2+
status: shipped
33
date: 2026-06-14
44
slug: audit-test-quality
55
supersedes: null
66
superseded_by: null
7-
pr: null
8-
outcome: null
7+
pr: 65
8+
outcome: Shipped via #65 - 11 test-quality findings (sync terminal + CookieConflict coverage, StatusError __init__ invariant, missing status constructions, sync mirrors, typing overloads, deterministic bulkhead barrier, pinned budget clock, observability assertion, TimeoutError circuit trigger).
99
---
1010

1111
# Change: Deep-audit test-quality findings

planning/changes/active/2026-06-14.06-audit-doc-fixes/change.md renamed to planning/changes/archive/2026-06-14.06-audit-doc-fixes/change.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
---
2-
status: draft
2+
status: shipped
33
date: 2026-06-14
44
slug: audit-doc-fixes
55
supersedes: null
66
superseded_by: null
7-
pr: null
8-
outcome: null
7+
pr: 66
8+
outcome: Shipped via #66 - 5 doc-accuracy findings (Client.stream docs, terminal attribution, errors auto-raise sites, pydantic upper bound, root import paths).
99
---
1010

1111
# Change: Deep-audit documentation accuracy fixes

0 commit comments

Comments
 (0)