ekp/.phrase/phases/phase-kp-overhaul-20260726/task_post_audit_hardening_20260820.md

Tasks: Post-Audit Hardening 2026-08-20

• task037 [x] Validate public buffer widths before mutation and make rejected ekp-justify-region requests failure-atomic. Add red tests for zero, negative, non-integer, and projection-preservation cases.

  • Source: post-audit buffer probe and plan_post_audit_hardening_20260820.md.
  • Validation: focused buffer ERT 4/4 plus source-preferred full ERT 294/294.

• task038 [x] Resolve backward-delete live projection semantics. Add a public edit-path regression at the narrowest reproducible width and update the live-layout spec/postmortem with the accepted invariant.

  • Source: postmortem/20260730-incremental-live-append-ownership.md and plan_post_audit_hardening_20260820.md.
  • Validation: focused live-edit ERT 4/4, randomized ERT 294/294, and source-first isolated ERT 294/294 process runs.

• task039 [x] Make hyphenation locale resolution try the exact normalized locale registry before short-code fallback. Add equivalent BCP-47/underscore tests and preserve fail-closed unsupported-pattern behavior.

  • Source: ekp-hyphen.el, plan_dictionary_governance_20260728.md, and the post-audit locale probe.
  • Validation: focused dictionary ERT 11/11, manifest check, and full ERT 294/294.

• task040 [x] Validate C hyphen and forbidden position vectors for the exact exclusive break-index domain, monotonic ordering, and duplicate policy before DP access. Add direct single/batch ABI regressions without changing the 15-field schema.

  • Source: plan_c_api_contract_20260728.md and the post-audit C probe.
  • Validation: C warning-clean build, direct/batch C ERT 15/15, fuzz 300/300, and Elisp parity.

• task041 [x] Restore the showcase automatic inline-code face and make normal, random, and isolated runners source-fresh and complete over the ERT inventory. Add a regression proving stale ignored bytecode cannot mask the showcase contract.

  • Source: 888a401, plan_test_isolation_20260728.md, and the post-audit clean-source failure.
  • Validation: source loader symbol checks, clean-source showcase 3/3, normal/random/isolated 294-test inventories, and GUI contract checks.

• task042 [x] Remove manual buffer integrations when no spans remain and auto-mode does not own the lifecycle. Preserve composition with foreign filters and add empty/foreign-only teardown regressions.

  • Source: plan_integration_lifecycle_20260728.md and the post-audit no-projection probe.
  • Validation: focused integration ERT 4/4 and full source-first buffer suite.

• task030 [ ] Re-profile and, if still necessary, optimize the remaining source-instrumented narrow live-append structural commit path after task037–task042. Keep exact parity, source-clean projection, and zero-work point motion as hard constraints; close only on the locked 16 ms gate.

  • issue028 is part of this task: each baseline/candidate evaluator round must explicitly load source files from its own code root, never rely on local .elc precedence.