chore: baseline snapshot — prior-session work + ha-consistency-invariants spec family

Pre-existing uncommitted work: ha-repl-hardening payload data plane (7.x),
heartbeat liveness fix (Req 1.3), connection-reuse ASAN fixes, doc cleanup.
New: ha-consistency-invariants umbrella (requirements/design/research) and
its four implementation sub-specs (specs generated via batch, cross-spec
review applied), steering roadmap + product.md Raft+CP decision.

.kiro/specs/scheduler-controller-msg-gap/spec.json

@@ -1,7 +1,7 @@
 {
   "feature_name": "scheduler-controller-msg-gap",
-  "description": "Analyze the codebase to find gaps in the scheduler's handling of controller messages — missing message types, unhandled edge cases, or incomplete message processing paths",
-  "phase": "tasks-generated",
+  "description": "Analyze the codebase to find gaps in the scheduler's handling of controller messages \u2014 missing message types, unhandled edge cases, or incomplete message processing paths",
+  "phase": "implemented",
   "created_at": "2026-05-11T01:34:00-07:00",
   "updated_at": "2026-05-11T19:30:00-07:00",
   "language": "en",
@@ -19,5 +19,6 @@
       "generated": true,
       "approved": true
     }
-  }
-}
+  },
+  "note": "Bugs 335/336 fixed 2026-06-10. Memory leaks in sched_pend_update_killer and test coverage gaps remain documented. Scheduler 15/15 tests green."
+}

.kiro/specs/scheduler-controller-msg-gap/tasks.md

@@ -124,4 +124,4 @@ Extend `src/scheduler/testsuite/test.c` with unit tests covering every acceptanc
 - [x] 9.6 Test dequeue path for `XCE_SCHED_OP_UPDATE_RESVALS` — verify unknown host skipped, known host updated
 - [x] 9.7 Test dequeue path for `XCE_SCHED_OP_JOB_RUSAGE` — verify `-ENOENT` for unknown jobid, rusage stored and plugin called for known jobid; verify `-EINVAL` on NULL rusage
 - [x] 9.8 Verify dead code symbols are absent — compile-time check that `sched_handle_jobpush` / `sched_handle_workerpush` are not defined (2.1, 2.2)
-- [ ]* 9.9 Verify WARN log is emitted in `sched_update()` when any handler returns a non-zero error code (optional — may require log capture infrastructure)
+- [~] 9.9 *(gated: log capture infrastructure)* Verify WARN log is emitted in `sched_update()` when any handler returns a non-zero error code (optional — may require log capture infrastructure)