- Shipped
- July 3, 2026 at 5:31 AM UTC
- Author
- Kamo
- Commit
- c6d455b
Adversarial-review findings MLOS-W-01/03/04: - the 404-normalized empty list envelope now echoes the request's identity keys **************** so unknown, foreign-org and own-empty results are byte-identical in SHAPE, not just status - key presence was itself an oracle (and broke the UI's declared envelope type); - by-id reads re-craft downstream 404s with the proxy's own message so unknown-id and foreign-org probes are indistinguishable (governance pullThroughActive, pricing runDetail/results/adjustments); - correctedValue + stewardRoutingThresholdsJson capped at 8k chars before they can reach a permanent WORM row (mirrors the pricing facts caps).