From 732e836868c7c4831b31af9c2daa5b39c431b75b Mon Sep 17 00:00:00 2001
From: Rongsong Shen <rshen@shenrs.eu>
Date: Fri, 12 Jun 2026 15:29:47 +0000
Subject: [PATCH] test(ha-commit-barrier-rollout):
 fact-retention-across-quorum-loss proof (task 4.3)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Green integration proof: 4 facts driven during total quorum loss append
RETAIN with rc 0 in <1000ms (vs 5000ms timeout — wrongly-applied WAIT
tripwire), pending with retained-depth=4 logged, present exactly once
on disk (real WAL header scan); reconnect + one covering ACK commits
the suffix with current_lsn unchanged (no redelivery). Completes the
bug-396 fix evidence (umbrella Req 2.8). Census 495/495.
---
 .../specs/ha-commit-barrier-rollout/tasks.md  |   2 +-
 .wolf/anatomy.md                              |  10 +-
 .wolf/buglog.json                             | 630 +++++++++---------
 .wolf/cerebrum.md                             |   2 +
 .wolf/memory.md                               |   5 +
 .../testsuite/test_commit_barrier_reply.c     | 257 +++++++
 6 files changed, 594 insertions(+), 312 deletions(-)

diff --git a/.kiro/specs/ha-commit-barrier-rollout/tasks.md b/.kiro/specs/ha-commit-barrier-rollout/tasks.md
index d2fa9ee8..d973c96b 100644
--- a/.kiro/specs/ha-commit-barrier-rollout/tasks.md
+++ b/.kiro/specs/ha-commit-barrier-rollout/tasks.md
@@ -60,7 +60,7 @@
   - Observable completion: all task 4.1 tests PASS; existing gate tests for request opcodes unchanged
   - _Requirements: 3.2_
 
-- [ ] 4.3 Write the fact-retention-across-quorum-loss integration test
+- [x] 4.3 Write the fact-retention-across-quorum-loss integration test (bug-396 end-to-end evidence complete)
   - Scenario (stub registry, n_peers=3): disconnect standbys (quorum lost) → drive worker-fact paths (job start/finish via `do_notify`-level calls) → appends succeed with no error, entries pending (`lsn > committed_lsn`), nothing dropped; reconnect + supply covering ACKs → `committed_lsn` advances over the retained suffix with no re-delivery of the facts; assert no timeout was ever applied to the fact entries
   - Observable completion: test PASSES against tasks 1.2 + 4.2 output (if it fails, fix the RETAIN/gate path, not the test); retained-depth observability counter visible in test logs
   - _Requirements: 3.1, 3.3, 3.4_
diff --git a/.wolf/anatomy.md b/.wolf/anatomy.md
index c2dd9022..bd941a69 100644
--- a/.wolf/anatomy.md
+++ b/.wolf/anatomy.md
@@ -1,7 +1,7 @@
 # anatomy.md
 
-> Auto-maintained by OpenWolf. Last scanned: 2026-06-12T11:16:47.642Z
-> Files: 513 tracked | Anatomy hits: 0 | Misses: 0
+> Auto-maintained by OpenWolf. Last scanned: 2026-06-12T15:29:40.114Z
+> Files: 515 tracked | Anatomy hits: 0 | Misses: 0
 
 ## ./
 
@@ -253,7 +253,7 @@
 - `requirements.md` — Requirements Document (~3181 tok)
 - `research.md` — Research & Design Decisions: ha-commit-barrier-rollout (~3672 tok)
 - `spec.json` (~143 tok)
-- `tasks.md` — Implementation Plan: ha-commit-barrier-rollout (~4653 tok)
+- `tasks.md` — Implementation Plan: ha-commit-barrier-rollout (~4663 tok)
 
 ## .kiro/specs/ha-commit-engine/
 
@@ -706,6 +706,7 @@
 
 ## src/controller/
 
+- `ha.c` — define _GNU_SOURCE (~43480 tok)
 - `job.c` — include <errno.h> (~8196 tok)
 - `join.c` — include "config.h" (~2530 tok)
 - `meson.build` (~1134 tok)
@@ -715,4 +716,5 @@
 ## src/controller/testsuite/
 
 - `controller_test.c` — include <argp.h> (~1368 tok)
-- `test_commit_barrier_reply.c` — Task 3.1 commit-first-then-reply integration tests + task 3.3 receipt-ACK verdict pins (jobdispatch/preason/rusage); cluster harness w/ real persist, wired commit engine, stub standbys, reply-capture endpoint, notify/get_ep_worker capture stubs (~17500 tok)
+- `test_commit_barrier_reply.c` — Commit-barrier reply-ordering integration tests (tasks 3.1/3.3/4.3): four restructured handlers, receipt-ACK verdict pins, fact-retention-across-quorum-loss (~21000 tok)
+- `test_commit_barrier_rollout.c` — Declares explicitly (~11136 tok)
diff --git a/.wolf/buglog.json b/.wolf/buglog.json
index 16d3d5cb..a46257a9 100644
--- a/.wolf/buglog.json
+++ b/.wolf/buglog.json
@@ -7,7 +7,7 @@
       "error_message": "Significant refactor of ",
       "file": "CLAUDE.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 23→30 lines (3 removed)",
+      "fix": "Rewrote 23\u219230 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -39,7 +39,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 14→19 lines (2 removed)",
+      "fix": "Rewrote 14\u219219 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -55,7 +55,7 @@
       "error_message": "Wrong reference: g_tmpdir should be g_instdir",
       "file": "src/controller/testsuite/test_config_repl.c",
       "root_cause": "Used \"g_tmpdir\" instead of \"g_instdir\"",
-      "fix": "Changed g_tmpdir → g_instdir",
+      "fix": "Changed g_tmpdir \u2192 g_instdir",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -87,7 +87,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/config-replication-design.md",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 17→20 lines (7 removed)",
+      "fix": "Rewrote 17\u219220 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -135,7 +135,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→9 lines (2 removed)",
+      "fix": "Rewrote 6\u21929 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -151,7 +151,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 11→5 lines (5 removed)",
+      "fix": "Rewrote 11\u21925 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -167,7 +167,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/config-replication-impl-status.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 10→12 lines (4 removed) | Also: | `handle_config_request()` (primary handler) | ✅ ; | `fetch_config_from_primary()` (standby fetch) |  | Also: | `handle_upgrade_config()` | ✅ Compiled, gated | ; | `push_config_to_standbys()` | ⚠ Stub (returns 0)",
+      "fix": "Rewrote 10\u219212 lines (4 removed) | Also: | `handle_config_request()` (primary handler) | \u2705 ; | `fetch_config_from_primary()` (standby fetch) |  | Also: | `handle_upgrade_config()` | \u2705 Compiled, gated | ; | `push_config_to_standbys()` | \u26a0 Stub (returns 0)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -183,7 +183,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/config-replication-impl-status.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 17→21 lines (4 removed)",
+      "fix": "Rewrote 17\u219221 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -199,7 +199,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→7 lines (3 removed)",
+      "fix": "Rewrote 6\u21927 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -215,7 +215,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 13→24 lines (6 removed)",
+      "fix": "Rewrote 13\u219224 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -231,7 +231,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 4→10 lines (4 removed)",
+      "fix": "Rewrote 4\u219210 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -247,7 +247,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 8→9 lines (4 removed)",
+      "fix": "Rewrote 8\u21929 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -262,7 +262,7 @@
       "timestamp": "2026-05-25T11:05:06.112Z",
       "error_message": "Missing error handling in send",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -278,7 +278,7 @@
       "timestamp": "2026-05-25T11:06:26.871Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -295,7 +295,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 23→40 lines (2 removed)",
+      "fix": "Rewrote 23\u219240 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -326,7 +326,7 @@
       "timestamp": "2026-05-25T11:32:18.221Z",
       "error_message": "Missing error handling in types",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -343,7 +343,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "36 lines replaced/restructured",
-      "fix": "Rewrote 63→79 lines (36 removed) | Also: 6. **No simultaneous primaries**: Only one node ca; 7. **Majority-commit WAL replication (CP writes)** | Also: - `handle_request_vote()` handler on all peers; - Config tag + LSN comparison for vote decision",
+      "fix": "Rewrote 63\u219279 lines (36 removed) | Also: 6. **No simultaneous primaries**: Only one node ca; 7. **Majority-commit WAL replication (CP writes)** | Also: - `handle_request_vote()` handler on all peers; - Config tag + LSN comparison for vote decision",
       "tags": [
         "auto-detected",
         "refactor",
@@ -391,7 +391,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 11→28 lines (3 removed)",
+      "fix": "Rewrote 11\u219228 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -439,7 +439,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 13→28 lines (2 removed)",
+      "fix": "Rewrote 13\u219228 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -471,7 +471,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "11 lines replaced/restructured",
-      "fix": "Rewrote 17→28 lines (11 removed)",
+      "fix": "Rewrote 17\u219228 lines (11 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -487,7 +487,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 28→45 lines (4 removed)",
+      "fix": "Rewrote 28\u219245 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -519,7 +519,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "13 lines replaced/restructured",
-      "fix": "Rewrote 22→35 lines (13 removed) | Also: **Files**: `src/controller/main.c`, `src/lib/netio; 1. **Peer-count validation in `main.c`** (before `",
+      "fix": "Rewrote 22\u219235 lines (13 removed) | Also: **Files**: `src/controller/main.c`, `src/lib/netio; 1. **Peer-count validation in `main.c`** (before `",
       "tags": [
         "auto-detected",
         "refactor",
@@ -567,7 +567,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→7 lines (2 removed)",
+      "fix": "Rewrote 4\u21927 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -583,7 +583,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→11 lines (2 removed)",
+      "fix": "Rewrote 9\u219211 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -631,7 +631,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "18 lines replaced/restructured",
-      "fix": "Rewrote 29→34 lines (18 removed)",
+      "fix": "Rewrote 29\u219234 lines (18 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -679,7 +679,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 13→29 lines (8 removed) | Also: 8. **Register OP_requestVote handler** in cluster'; switch at line ~195): since vtaskmgr and iomgr run",
+      "fix": "Rewrote 13\u219229 lines (8 removed) | Also: 8. **Register OP_requestVote handler** in cluster'; switch at line ~195): since vtaskmgr and iomgr run",
       "tags": [
         "auto-detected",
         "refactor",
@@ -695,7 +695,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 13→60 lines (9 removed) | Also: 3. **Replace timestamp polling with `EPOLLRDHUP`**; is replaced by an epoll event handler. On `EPOLLRD | Also: - **Split vote recovery**: After failing quorum, s; (using existing `jitter_seed` xorshift64), retry o",
+      "fix": "Rewrote 13\u219260 lines (9 removed) | Also: 3. **Replace timestamp polling with `EPOLLRDHUP`**; is replaced by an epoll event handler. On `EPOLLRD | Also: - **Split vote recovery**: After failing quorum, s; (using existing `jitter_seed` xorshift64), retry o",
       "tags": [
         "auto-detected",
         "refactor",
@@ -711,7 +711,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 8→34 lines (8 removed) | Also: 2. **Replace `ha_check_heartbeat_nocluster()` with; - On `EPOLLRDHUP` from `primary_ctrl_fd`: **close ",
+      "fix": "Rewrote 8\u219234 lines (8 removed) | Also: 2. **Replace `ha_check_heartbeat_nocluster()` with; - On `EPOLLRDHUP` from `primary_ctrl_fd`: **close ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -726,7 +726,7 @@
       "timestamp": "2026-05-26T13:51:32.274Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: - [ ] `test_heartbeat_carries_committed_lsn`: heartbeat payl; `committed_lsn`; standby updates `ha.last_known_committed_ls",
       "tags": [
         "auto-detected",
@@ -742,7 +742,7 @@
       "timestamp": "2026-05-26T13:52:49.044Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: // Catch-up gate (Clarification 6): behind nodes must not in; if (c->ha.in_catch_up) {",
       "tags": [
         "auto-detected",
@@ -758,7 +758,7 @@
       "timestamp": "2026-05-27T03:02:34.912Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: name, key, applied_lsn, and config_tag immediately after TCP; - [ ] `test_ctrl_hello_registers_standby_in_repl`: handle_ct",
       "tags": [
         "auto-detected",
@@ -774,7 +774,7 @@
       "timestamp": "2026-05-27T03:03:26.016Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -791,7 +791,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 37→51 lines (9 removed)",
+      "fix": "Rewrote 37\u219251 lines (9 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -807,7 +807,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 8→23 lines (8 removed) | Also: - [ ] `test_persistent_conn_single_node_noop`: ha_; when n_peers == 1; primary_ctrl_fd remains -1 (uni",
+      "fix": "Rewrote 8\u219223 lines (8 removed) | Also: - [ ] `test_persistent_conn_single_node_noop`: ha_; when n_peers == 1; primary_ctrl_fd remains -1 (uni",
       "tags": [
         "auto-detected",
         "refactor",
@@ -823,7 +823,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 34→51 lines (10 removed)",
+      "fix": "Rewrote 34\u219251 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -838,7 +838,7 @@
       "timestamp": "2026-05-27T03:56:41.037Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -855,7 +855,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "11 lines replaced/restructured",
-      "fix": "Rewrote 21→28 lines (11 removed)",
+      "fix": "Rewrote 21\u219228 lines (11 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -870,7 +870,7 @@
       "timestamp": "2026-05-27T03:59:16.145Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -887,7 +887,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 10→13 lines (2 removed) | Also: **Replace LSF priority election with Raft-style qu; Five focused changes: | Also: 8. **Hard SSL/cert gate**: Controller refuses to b; 9. **Observable via logs**: Election results, vote",
+      "fix": "Rewrote 10\u219213 lines (2 removed) | Also: **Replace LSF priority election with Raft-style qu; Five focused changes: | Also: 8. **Hard SSL/cert gate**: Controller refuses to b; 9. **Observable via logs**: Election results, vote",
       "tags": [
         "auto-detected",
         "refactor",
@@ -902,7 +902,7 @@
       "timestamp": "2026-05-27T06:45:34.951Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -919,7 +919,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 8→11 lines (2 removed)",
+      "fix": "Rewrote 8\u219211 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -967,7 +967,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→7 lines (2 removed)",
+      "fix": "Rewrote 5\u21927 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -982,7 +982,7 @@
       "timestamp": "2026-05-28T02:55:40.362Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/schema/controller.capnp",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -999,7 +999,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→40 lines (2 removed)",
+      "fix": "Rewrote 5\u219240 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1014,7 +1014,7 @@
       "timestamp": "2026-05-28T03:39:14.341Z",
       "error_message": "Missing error handling in struct",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1030,7 +1030,7 @@
       "timestamp": "2026-05-28T03:40:17.891Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1047,7 +1047,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→6 lines (2 removed)",
+      "fix": "Rewrote 4\u21926 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1095,7 +1095,7 @@
       "error_message": "Wrong reference: vcpus should be nres",
       "file": "src/include/clusterconfig.h",
       "root_cause": "Used \"vcpus\" instead of \"nres\"",
-      "fix": "Changed vcpus → nres",
+      "fix": "Changed vcpus \u2192 nres",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1111,7 +1111,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 12→6 lines (8 removed)",
+      "fix": "Rewrote 12\u21926 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1143,7 +1143,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_startup.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 12→18 lines (8 removed)",
+      "fix": "Rewrote 12\u219218 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1159,7 +1159,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 109→144 lines (4 removed)",
+      "fix": "Rewrote 109\u2192144 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1206,7 +1206,7 @@
       "timestamp": "2026-05-28T07:13:42.089Z",
       "error_message": "Missing error handling in struct",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1222,7 +1222,7 @@
       "timestamp": "2026-05-28T07:14:03.724Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1255,7 +1255,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "14 lines replaced/restructured",
-      "fix": "Rewrote 92→344 lines (14 removed)",
+      "fix": "Rewrote 92\u2192344 lines (14 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1271,7 +1271,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 25→49 lines (6 removed)",
+      "fix": "Rewrote 25\u219249 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1335,7 +1335,7 @@
       "error_message": "Wrong reference: capn_str_null should be str",
       "file": "src/controller/config_repl.c",
       "root_cause": "Used \"capn_str_null\" instead of \"str\"",
-      "fix": "Changed capn_str_null → str",
+      "fix": "Changed capn_str_null \u2192 str",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1351,7 +1351,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 17→84 lines (7 removed)",
+      "fix": "Rewrote 17\u219284 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1398,7 +1398,7 @@
       "timestamp": "2026-05-28T13:34:49.513Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1415,7 +1415,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/repl.h",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 3→4 lines (3 removed) | Also: /* ACK handling — call from io_worker read callbac; /* Majority-quorum ACK wait — stub until task 7.3 ",
+      "fix": "Rewrote 3\u21924 lines (3 removed) | Also: /* ACK handling \u2014 call from io_worker read callbac; /* Majority-quorum ACK wait \u2014 stub until task 7.3 ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1430,7 +1430,7 @@
       "timestamp": "2026-05-28T13:52:52.636Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1447,7 +1447,7 @@
       "error_message": "Wrong reference: in_catch_up should be acked_config_lsn",
       "file": "src/controller/repl.c",
       "root_cause": "Used \"in_catch_up\" instead of \"acked_config_lsn\"",
-      "fix": "Changed in_catch_up → acked_config_lsn",
+      "fix": "Changed in_catch_up \u2192 acked_config_lsn",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1479,7 +1479,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/persist.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 20→29 lines (4 removed)",
+      "fix": "Rewrote 20\u219229 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1495,7 +1495,7 @@
       "error_message": "Wrong reference: ha_state_t should be _Atomic",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"ha_state_t\" instead of \"_Atomic\"",
-      "fix": "Changed ha_state_t → _Atomic",
+      "fix": "Changed ha_state_t \u2192 _Atomic",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1511,7 +1511,7 @@
       "error_message": "Wrong reference: socket should be epoll",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"socket\" instead of \"epoll\"",
-      "fix": "Changed socket → epoll",
+      "fix": "Changed socket \u2192 epoll",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1559,7 +1559,7 @@
       "error_message": "Wrong reference: XCE_ERR_STANDBY should be E_XCE_STANDBY",
       "file": "src/lib/request.c",
       "root_cause": "Used \"XCE_ERR_STANDBY\" instead of \"E_XCE_STANDBY\"",
-      "fix": "Changed XCE_ERR_STANDBY → E_XCE_STANDBY",
+      "fix": "Changed XCE_ERR_STANDBY \u2192 E_XCE_STANDBY",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1575,7 +1575,7 @@
       "error_message": "Wrong reference: XCE_ERR_NOT_READY should be E_XCE_NOT_READY",
       "file": "src/lib/testsuite/test_libxce_retry.c",
       "root_cause": "Used \"XCE_ERR_NOT_READY\" instead of \"E_XCE_NOT_READY\"",
-      "fix": "Changed XCE_ERR_NOT_READY → E_XCE_NOT_READY",
+      "fix": "Changed XCE_ERR_NOT_READY \u2192 E_XCE_NOT_READY",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1590,7 +1590,7 @@
       "timestamp": "2026-05-29T03:27:20.556Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1606,7 +1606,7 @@
       "timestamp": "2026-05-29T03:29:44.753Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/config_repl.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1623,7 +1623,7 @@
       "error_message": "Wrong reference: data should be ctrl_hello_reply_t",
       "file": "src/include/typemap.h",
       "root_cause": "Used \"data\" instead of \"ctrl_hello_reply_t\"",
-      "fix": "Changed data → ctrl_hello_reply_t",
+      "fix": "Changed data \u2192 ctrl_hello_reply_t",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1638,7 +1638,7 @@
       "timestamp": "2026-05-29T03:53:48.559Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/schema/controller.capnp",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1654,7 +1654,7 @@
       "timestamp": "2026-05-29T03:54:23.205Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: wal_catchup_entry_t*      walcatchupentrymsg;; snapshot_transfer_t*      snapshottransfermsg; | Also: /* Forward declarations for types defined later in this file; typedef struct snapshot_transfer_t      snapshot_transfer_fw",
       "tags": [
         "auto-detected",
@@ -1671,7 +1671,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→5 lines (2 removed)",
+      "fix": "Rewrote 5\u21925 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1687,7 +1687,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→3 lines (2 removed)",
+      "fix": "Rewrote 5\u21923 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1702,7 +1702,7 @@
       "timestamp": "2026-05-29T04:04:12.693Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1719,7 +1719,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 10→12 lines (2 removed)",
+      "fix": "Rewrote 10\u219212 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1751,7 +1751,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→20 lines (5 removed)",
+      "fix": "Rewrote 10\u219220 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1783,7 +1783,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 18→20 lines (9 removed)",
+      "fix": "Rewrote 18\u219220 lines (9 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1798,7 +1798,7 @@
       "timestamp": "2026-05-29T10:59:37.144Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1815,7 +1815,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 20→36 lines (10 removed) | Also: ### 11.1 Concurrent Startup (3 nodes); - Result: PASS / FAIL",
+      "fix": "Rewrote 20\u219236 lines (10 removed) | Also: ### 11.1 Concurrent Startup (3 nodes); - Result: PASS / FAIL",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1831,7 +1831,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 29→45 lines (5 removed)",
+      "fix": "Rewrote 29\u219245 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1847,7 +1847,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_bootstrap.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→8 lines (2 removed)",
+      "fix": "Rewrote 4\u21928 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1879,7 +1879,7 @@
       "error_message": "Wrong reference: nres should be vcpus",
       "file": "src/include/clusterconfig.h",
       "root_cause": "Used \"nres\" instead of \"vcpus\"",
-      "fix": "Changed nres → vcpus",
+      "fix": "Changed nres \u2192 vcpus",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1895,7 +1895,7 @@
       "error_message": "Wrong reference: data should be request_vote_reply_t",
       "file": "src/include/typemap.h",
       "root_cause": "Used \"data\" instead of \"request_vote_reply_t\"",
-      "fix": "Changed data → request_vote_reply_t",
+      "fix": "Changed data \u2192 request_vote_reply_t",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1911,7 +1911,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 19→25 lines (10 removed)",
+      "fix": "Rewrote 19\u219225 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1926,7 +1926,7 @@
       "timestamp": "2026-05-29T16:36:41.731Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1943,7 +1943,7 @@
       "error_message": "Wrong reference: cluster_init_phase2 should be cluster_register_listener",
       "file": "src/controller/include/cluster.h",
       "root_cause": "Used \"cluster_init_phase2\" instead of \"cluster_register_listener\"",
-      "fix": "Changed cluster_init_phase2 → cluster_register_listener",
+      "fix": "Changed cluster_init_phase2 \u2192 cluster_register_listener",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1975,7 +1975,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "30 lines replaced/restructured",
-      "fix": "Rewrote 79→61 lines (30 removed)",
+      "fix": "Rewrote 79\u219261 lines (30 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1991,7 +1991,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/xce/cluster_def.h",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 8→15 lines (5 removed)",
+      "fix": "Rewrote 8\u219215 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2007,7 +2007,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→16 lines (4 removed)",
+      "fix": "Rewrote 7\u219216 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2023,7 +2023,7 @@
       "error_message": "Wrong reference: CTRL_PERF_NHASH should be c",
       "file": "src/controller/cluster.c",
       "root_cause": "Used \"CTRL_PERF_NHASH\" instead of \"c\"",
-      "fix": "Changed CTRL_PERF_NHASH → c",
+      "fix": "Changed CTRL_PERF_NHASH \u2192 c",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2039,7 +2039,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "36 lines replaced/restructured",
-      "fix": "Rewrote 77→41 lines (36 removed)",
+      "fix": "Rewrote 77\u219241 lines (36 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2055,7 +2055,7 @@
       "error_message": "Wrong reference: true should be false",
       "file": ".claude/skills/xce-build/SKILL.md",
       "root_cause": "Used \"true\" instead of \"false\"",
-      "fix": "Changed true → false",
+      "fix": "Changed true \u2192 false",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2071,7 +2071,7 @@
       "error_message": "Wrong reference: 120 should be 300",
       "file": "src/controller/meson.build",
       "root_cause": "Used \"120\" instead of \"300\"",
-      "fix": "Changed 120 → 300",
+      "fix": "Changed 120 \u2192 300",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2086,7 +2086,7 @@
       "timestamp": "2026-05-30T02:37:40.267Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/myapp.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2103,7 +2103,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 15→21 lines (2 removed)",
+      "fix": "Rewrote 15\u219221 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2119,7 +2119,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→13 lines (2 removed)",
+      "fix": "Rewrote 9\u219213 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2135,7 +2135,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 10→27 lines (3 removed)",
+      "fix": "Rewrote 10\u219227 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2166,8 +2166,8 @@
       "timestamp": "2026-05-30T06:38:09.325Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* After election determines role: */; int is_first_boot = !c->running;  /* running=1 only after cl | Also: #### `ha_dispatch_gate` — CTRL_PRIMARY_COMMITTING case; ```c | Also: ### 3-node startup — ctrl-a wins (with COMMITTING phase); participant PeerC as ctrl-c endpoint | Also: - **`ha_start_election_async()` is fully non-blocking**: Arm; - *Initial startup* (`ha->phase2_done == 0`): calls `cluster",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* After election determines role: */; int is_first_boot = !c->running;  /* running=1 only after cl | Also: #### `ha_dispatch_gate` \u2014 CTRL_PRIMARY_COMMITTING case; ```c | Also: ### 3-node startup \u2014 ctrl-a wins (with COMMITTING phase); participant PeerC as ctrl-c endpoint | Also: - **`ha_start_election_async()` is fully non-blocking**: Arm; - *Initial startup* (`ha->phase2_done == 0`): calls `cluster",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -2183,7 +2183,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 19→26 lines (4 removed) | Also: ├── ha.h                 # Add to ha_state_t: clie; │                        #          ha_repl_ack_re | Also: └── myapp.c              # Restructured: phase1 + ; #         for(;;) retry loop, cluster_init_phase2,",
+      "fix": "Rewrote 19\u219226 lines (4 removed) | Also: \u251c\u2500\u2500 ha.h                 # Add to ha_state_t: clie; \u2502                        #          ha_repl_ack_re | Also: \u2514\u2500\u2500 myapp.c              # Restructured: phase1 + ; #         for(;;) retry loop, cluster_init_phase2,",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2199,7 +2199,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
       "root_cause": "12 lines replaced/restructured",
-      "fix": "Rewrote 15→20 lines (12 removed) | Also: - `src/controller/ha.h` — Add `client_ssl_ctx`, `r; - `src/controller/ha.c` — Main changes above; `ha_ | Also: ├── delay.c              # Add delay_task_ms() (ms; │                        # Add delay_task_cancel()",
+      "fix": "Rewrote 15\u219220 lines (12 removed) | Also: - `src/controller/ha.h` \u2014 Add `client_ssl_ctx`, `r; - `src/controller/ha.c` \u2014 Main changes above; `ha_ | Also: \u251c\u2500\u2500 delay.c              # Add delay_task_ms() (ms; \u2502                        # Add delay_task_cancel()",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2231,7 +2231,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/delay.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 53→85 lines (3 removed)",
+      "fix": "Rewrote 53\u219285 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2247,7 +2247,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→8 lines (4 removed)",
+      "fix": "Rewrote 7\u21928 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2327,7 +2327,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 14→17 lines (3 removed)",
+      "fix": "Rewrote 14\u219217 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2359,7 +2359,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_start_election_async.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 24→42 lines (8 removed)",
+      "fix": "Rewrote 24\u219242 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2390,7 +2390,7 @@
       "timestamp": "2026-05-30T11:08:59.808Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2406,7 +2406,7 @@
       "timestamp": "2026-05-30T11:09:47.905Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2423,7 +2423,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 62→164 lines (8 removed) | Also: /* Store candidate own tag/lsn in votes[0] for eva; * n_peers==1 → n_other==0, so votes[] has 0 entrie | Also: * election_timeout_ctx_t: argument for the delay_t; * ha_elect_evaluate_and_signal when the election d",
+      "fix": "Rewrote 62\u2192164 lines (8 removed) | Also: /* Store candidate own tag/lsn in votes[0] for eva; * n_peers==1 \u2192 n_other==0, so votes[] has 0 entrie | Also: * election_timeout_ctx_t: argument for the delay_t; * ha_elect_evaluate_and_signal when the election d",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2454,7 +2454,7 @@
       "timestamp": "2026-05-30T11:43:44.829Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: /* Push config to standbys with lower config_tag (Req 7.1) *; #ifdef XCE_TESTING",
       "tags": [
         "auto-detected",
@@ -2470,7 +2470,7 @@
       "timestamp": "2026-05-30T11:44:15.059Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2486,7 +2486,7 @@
       "timestamp": "2026-05-30T11:45:24.946Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2519,7 +2519,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 22→32 lines (2 removed)",
+      "fix": "Rewrote 22\u219232 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2631,7 +2631,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 15→5 lines (10 removed)",
+      "fix": "Rewrote 15\u21925 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2695,7 +2695,7 @@
       "error_message": "Wrong reference: third should be second",
       "file": "src/controller/testsuite/test_ha_repl_ack.c",
       "root_cause": "Used \"third\" instead of \"second\"",
-      "fix": "Changed third → second",
+      "fix": "Changed third \u2192 second",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2727,7 +2727,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→15 lines (5 removed)",
+      "fix": "Rewrote 10\u219215 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2759,7 +2759,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "15 lines replaced/restructured",
-      "fix": "Rewrote 23→10 lines (15 removed)",
+      "fix": "Rewrote 23\u219210 lines (15 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2775,7 +2775,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→9 lines (2 removed)",
+      "fix": "Rewrote 5\u21929 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2791,7 +2791,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 14→16 lines (2 removed)",
+      "fix": "Rewrote 14\u219216 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2823,7 +2823,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "12 lines replaced/restructured",
-      "fix": "Rewrote 15→20 lines (12 removed)",
+      "fix": "Rewrote 15\u219220 lines (12 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2839,7 +2839,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→8 lines (2 removed)",
+      "fix": "Rewrote 4\u21928 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2855,7 +2855,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/xce.build/lib/controller.capnp.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 11→19 lines (4 removed) | Also: encode_Data_ptr(cs, &(d->sha256), s->sha256);; encode_Data_ptr(cs, &(d->bytes), s->bytes);",
+      "fix": "Rewrote 11\u219219 lines (4 removed) | Also: encode_Data_ptr(cs, &(d->sha256), s->sha256);; encode_Data_ptr(cs, &(d->bytes), s->bytes);",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2871,7 +2871,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "28 lines replaced/restructured",
-      "fix": "Rewrote 31→4 lines (28 removed)",
+      "fix": "Rewrote 31\u21924 lines (28 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2887,7 +2887,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 8→18 lines (4 removed)",
+      "fix": "Rewrote 8\u219218 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2903,7 +2903,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/request.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 10→19 lines (4 removed)",
+      "fix": "Rewrote 10\u219219 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2935,7 +2935,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→10 lines (2 removed)",
+      "fix": "Rewrote 5\u219210 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2951,7 +2951,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→11 lines (2 removed)",
+      "fix": "Rewrote 9\u219211 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2966,7 +2966,7 @@
       "timestamp": "2026-05-31T04:11:45.534Z",
       "error_message": "Missing error handling in struct",
       "file": ".kiro/specs/raft-library/design.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: Caller->>RaftSM: raft_on_vote_request(state, from, term); alt term < current_term",
       "tags": [
         "auto-detected",
@@ -2983,7 +2983,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/raft-library/design.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 8→26 lines (5 removed) | Also: * raft_init: initialize state for a node.; * All required callbacks (except on_trace and on_v | Also: - C standard library only (`stdint.h`, `pthread.h`; - `raft.c` may include `<stdatomic.h>` for lock-fr | Also: | Threading | `pthread_mutex_t` (caller-owned) | P; | Atomics | None in library | Caller uses atomics ",
+      "fix": "Rewrote 8\u219226 lines (5 removed) | Also: * raft_init: initialize state for a node.; * All required callbacks (except on_trace and on_v | Also: - C standard library only (`stdint.h`, `pthread.h`; - `raft.c` may include `<stdatomic.h>` for lock-fr | Also: | Threading | `pthread_mutex_t` (caller-owned) | P; | Atomics | None in library | Caller uses atomics ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3014,7 +3014,7 @@
       "timestamp": "2026-05-31T04:58:21.609Z",
       "error_message": "Missing error handling in RAFT_H",
       "file": "src/lib/raft/raft.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3063,7 +3063,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/testsuite/test_raft.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 77→107 lines (8 removed)",
+      "fix": "Rewrote 77\u2192107 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3079,7 +3079,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 9→62 lines (5 removed)",
+      "fix": "Rewrote 9\u219262 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3095,7 +3095,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 8→57 lines (4 removed)",
+      "fix": "Rewrote 8\u219257 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3111,7 +3111,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 15→38 lines (4 removed)",
+      "fix": "Rewrote 15\u219238 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3127,7 +3127,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft_sim.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→3 lines (2 removed)",
+      "fix": "Rewrote 6\u21923 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3159,7 +3159,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "32 lines replaced/restructured",
-      "fix": "Rewrote 49→16 lines (32 removed)",
+      "fix": "Rewrote 49\u219216 lines (32 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3174,7 +3174,7 @@
       "timestamp": "2026-05-31T07:26:39.758Z",
       "error_message": "Missing error handling in before",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3191,7 +3191,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→19 lines (3 removed) | Also: typedef struct {; ha_state_t     *ha; | Also: /* ── Type definitions needed by ha_elect_evaluate; *",
+      "fix": "Rewrote 6\u219219 lines (3 removed) | Also: typedef struct {; ha_state_t     *ha; | Also: /* \u2500\u2500 Type definitions needed by ha_elect_evaluate; *",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3207,7 +3207,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "167 lines replaced/restructured",
-      "fix": "Rewrote 291→137 lines (167 removed) | Also: /* Clear voted_for: the old primary is dead; any v; * is stale and must not block the new election. */",
+      "fix": "Rewrote 291\u2192137 lines (167 removed) | Also: /* Clear voted_for: the old primary is dead; any v; * is stale and must not block the new election. */",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3223,7 +3223,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "12 lines replaced/restructured",
-      "fix": "Rewrote 28→68 lines (12 removed)",
+      "fix": "Rewrote 28\u219268 lines (12 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3239,7 +3239,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 16→21 lines (2 removed) | Also: /* Task 6.3: delegate vote reply accumulation to r; * raft_on_vote_reply owns quorum tracking and fire",
+      "fix": "Rewrote 16\u219221 lines (2 removed) | Also: /* Task 6.3: delegate vote reply accumulation to r; * raft_on_vote_reply owns quorum tracking and fire",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3255,7 +3255,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 10→4 lines (7 removed)",
+      "fix": "Rewrote 10\u21924 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3271,7 +3271,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→14 lines (2 removed)",
+      "fix": "Rewrote 5\u219214 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3284,7 +3284,7 @@
     {
       "id": "bug-206",
       "timestamp": "2026-05-31T08:40:00.000Z",
-      "error_message": "test_vote_reply_handler_term_fencing FAIL: Expected 10 Was 3 — ha->term must be atomically updated to peer term when peer term > ours",
+      "error_message": "test_vote_reply_handler_term_fencing FAIL: Expected 10 Was 3 \u2014 ha->term must be atomically updated to peer term when peer term > ours",
       "file": "src/controller/ha.c",
       "root_cause": "vote_reply_msg_handler delegated term fencing entirely to raft_cb_become_follower (via raft_on_vote_reply). In XCE_TESTING builds, vote_reply_dispatch calls xce_vote_reply_hook and returns early, bypassing raft_on_vote_reply and thus never updating ha->term.",
       "fix": "Added explicit CAS loop in vote_reply_msg_handler before vote_reply_dispatch to advance ha->term when vr_term > ha->term. This applies on both the production path and the XCE_TESTING hook path.",
@@ -3306,7 +3306,7 @@
       "error_message": "Wrong reference: test_raft_init_zero_peers_returns_einval should be test_raft_init_even_peers_returns_einval",
       "file": "src/lib/testsuite/test_raft.c",
       "root_cause": "Used \"test_raft_init_zero_peers_returns_einval\" instead of \"test_raft_init_even_peers_returns_einval\"",
-      "fix": "Changed test_raft_init_zero_peers_returns_einval → test_raft_init_even_peers_returns_einval",
+      "fix": "Changed test_raft_init_zero_peers_returns_einval \u2192 test_raft_init_even_peers_returns_einval",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3319,7 +3319,7 @@
     {
       "id": "bug-208",
       "timestamp": "2026-05-31",
-      "error_message": "ASAN LeakSanitizer: detected memory leaks in scheduler testsuite — build exits with error code",
+      "error_message": "ASAN LeakSanitizer: detected memory leaks in scheduler testsuite \u2014 build exits with error code",
       "file": "src/scheduler/testsuite/test.c",
       "root_cause": "sched_meet_host_selection() lazily allocates w->host_eval_ctx via build_host_eval_ctx(). Four test functions (test_meet_host_selection_always_true_passes, test_meet_host_selection_always_false_fails, test_meet_host_selection_numeric_match, test_meet_host_selection_string_match) called zarray_fini() without first calling sched_worker_release_host_ctx() to free the lazily-allocated host_eval_ctx.",
       "fix": "Added sched_worker_release_host_ctx(&w) calls before zarray_fini() in all four affected test functions.",
@@ -3356,7 +3356,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "24 lines replaced/restructured",
-      "fix": "Rewrote 28→3 lines (24 removed) | Also: if (my_config_tag == 0) {; INFO(\"ha_start_election_async: no local config (ta",
+      "fix": "Rewrote 28\u21923 lines (24 removed) | Also: if (my_config_tag == 0) {; INFO(\"ha_start_election_async: no local config (ta",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3372,7 +3372,7 @@
       "error_message": "Wrong reference: 2000 should be 5000",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"2000\" instead of \"5000\"",
-      "fix": "Changed 2000 → 5000",
+      "fix": "Changed 2000 \u2192 5000",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3388,7 +3388,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 15→25 lines (3 removed)",
+      "fix": "Rewrote 15\u219225 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3404,7 +3404,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 10→14 lines (8 removed)",
+      "fix": "Rewrote 10\u219214 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3420,7 +3420,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→17 lines (4 removed) | Also: /* Trigger async config fetch from primary so stan; #ifndef XCE_TESTING | Also: handle_request_vote_reply(vctx->ha, vctx->ctx, vct; /* Fix 5 (HIGH): do NOT free vctx here.",
+      "fix": "Rewrote 7\u219217 lines (4 removed) | Also: /* Trigger async config fetch from primary so stan; #ifndef XCE_TESTING | Also: handle_request_vote_reply(vctx->ha, vctx->ctx, vct; /* Fix 5 (HIGH): do NOT free vctx here.",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3467,7 +3467,7 @@
       "timestamp": "2026-05-31T12:54:26.372Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3484,7 +3484,7 @@
       "error_message": "Wrong reference: Request_body_nodata should be Request_body_nomsg",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"Request_body_nodata\" instead of \"Request_body_nomsg\"",
-      "fix": "Changed Request_body_nodata → Request_body_nomsg",
+      "fix": "Changed Request_body_nodata \u2192 Request_body_nomsg",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3500,7 +3500,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 10→18 lines (4 removed)",
+      "fix": "Rewrote 10\u219218 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3516,7 +3516,7 @@
       "error_message": "Wrong reference: vote_reply_msg_handler should be vote_reply_msg_handler_for_test",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"vote_reply_msg_handler\" instead of \"vote_reply_msg_handler_for_test\"",
-      "fix": "Changed vote_reply_msg_handler → vote_reply_msg_handler_for_test",
+      "fix": "Changed vote_reply_msg_handler \u2192 vote_reply_msg_handler_for_test",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3532,7 +3532,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 13→36 lines (3 removed)",
+      "fix": "Rewrote 13\u219236 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3548,7 +3548,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "20 lines replaced/restructured",
-      "fix": "Rewrote 36→13 lines (20 removed)",
+      "fix": "Rewrote 36\u219213 lines (20 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3563,7 +3563,7 @@
       "timestamp": "2026-06-01T01:49:30.537Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3596,7 +3596,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "42 lines replaced/restructured",
-      "fix": "Rewrote 64→19 lines (42 removed)",
+      "fix": "Rewrote 64\u219219 lines (42 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3611,7 +3611,7 @@
       "timestamp": "2026-06-01T02:27:55.942Z",
       "error_message": "Missing error handling in struct",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3628,7 +3628,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→14 lines (5 removed)",
+      "fix": "Rewrote 10\u219214 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3644,7 +3644,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 5→15 lines (5 removed)",
+      "fix": "Rewrote 5\u219215 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3660,7 +3660,7 @@
       "error_message": "Wrong operator: && should be !=",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"&&\" instead of \"!=\"",
-      "fix": "Changed operator && → !=",
+      "fix": "Changed operator && \u2192 !=",
       "tags": [
         "auto-detected",
         "operator-fix",
@@ -3676,7 +3676,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 16→7 lines (10 removed)",
+      "fix": "Rewrote 16\u21927 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3692,7 +3692,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "140 lines replaced/restructured",
-      "fix": "Rewrote 173→11 lines (140 removed)",
+      "fix": "Rewrote 173\u219211 lines (140 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3708,7 +3708,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "16 lines replaced/restructured",
-      "fix": "Rewrote 25→12 lines (16 removed)",
+      "fix": "Rewrote 25\u219212 lines (16 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3740,7 +3740,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 31→37 lines (2 removed)",
+      "fix": "Rewrote 31\u219237 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3788,7 +3788,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "21 lines replaced/restructured",
-      "fix": "Rewrote 28→5 lines (21 removed)",
+      "fix": "Rewrote 28\u21925 lines (21 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3852,7 +3852,7 @@
       "error_message": "Wrong reference: test_ha_connect should be test_ha_ctrlhello",
       "file": "src/controller/testsuite/controller_test.c",
       "root_cause": "Used \"test_ha_connect\" instead of \"test_ha_ctrlhello\"",
-      "fix": "Changed test_ha_connect → test_ha_ctrlhello",
+      "fix": "Changed test_ha_connect \u2192 test_ha_ctrlhello",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3868,7 +3868,7 @@
       "error_message": "Wrong reference: vcpu should be vcpus",
       "file": "src/tools/deploy-ha.sh",
       "root_cause": "Used \"vcpu\" instead of \"vcpus\"",
-      "fix": "Changed vcpu → vcpus",
+      "fix": "Changed vcpu \u2192 vcpus",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3884,7 +3884,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 10→6 lines (10 removed)",
+      "fix": "Rewrote 10\u21926 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3900,7 +3900,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 7→22 lines (2 removed)",
+      "fix": "Rewrote 7\u219222 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3916,7 +3916,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 5→10 lines (3 removed)",
+      "fix": "Rewrote 5\u219210 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3932,7 +3932,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/request.c",
       "root_cause": "32 lines replaced/restructured",
-      "fix": "Rewrote 49→60 lines (32 removed)",
+      "fix": "Rewrote 49\u219260 lines (32 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3948,7 +3948,7 @@
       "error_message": "Significant refactor of ",
       "file": ".claude/skills/xce-deploy-ha/SKILL.md",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 17→32 lines (7 removed)",
+      "fix": "Rewrote 17\u219232 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3964,7 +3964,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→9 lines (3 removed)",
+      "fix": "Rewrote 6\u21929 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3979,7 +3979,7 @@
       "timestamp": "2026-06-01T07:28:15.703Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_ha_connection_reuse.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4012,7 +4012,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_connection_reuse.c",
       "root_cause": "19 lines replaced/restructured",
-      "fix": "Rewrote 67→86 lines (19 removed)",
+      "fix": "Rewrote 67\u219286 lines (19 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4044,7 +4044,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-heartbeat-liveness/requirements.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→17 lines (5 removed)",
+      "fix": "Rewrote 10\u219217 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4060,7 +4060,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→10 lines (2 removed)",
+      "fix": "Rewrote 6\u219210 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4092,7 +4092,7 @@
       "error_message": "Wrong reference: startup_validation should be testsuite_test_ha_liveness",
       "file": "src/xce.build/build.ninja",
       "root_cause": "Used \"startup_validation\" instead of \"testsuite_test_ha_liveness\"",
-      "fix": "Changed startup_validation → testsuite_test_ha_liveness",
+      "fix": "Changed startup_validation \u2192 testsuite_test_ha_liveness",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -4108,7 +4108,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "76 lines replaced/restructured",
-      "fix": "Rewrote 112→155 lines (76 removed)",
+      "fix": "Rewrote 112\u2192155 lines (76 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4124,7 +4124,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_liveness.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 21→24 lines (5 removed)",
+      "fix": "Rewrote 21\u219224 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4140,7 +4140,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_failover.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 29→47 lines (7 removed)",
+      "fix": "Rewrote 29\u219247 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4172,7 +4172,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "22 lines replaced/restructured",
-      "fix": "Rewrote 53→21 lines (22 removed)",
+      "fix": "Rewrote 53\u219221 lines (22 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4188,7 +4188,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 8→10 lines (2 removed)",
+      "fix": "Rewrote 8\u219210 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4219,7 +4219,7 @@
       "timestamp": "2026-06-03T05:20:44.299Z",
       "error_message": "Missing error handling in lives",
       "file": ".kiro/specs/ha-config-bootstrap/research.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4268,7 +4268,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "11 lines replaced/restructured",
-      "fix": "Rewrote 14→3 lines (11 removed)",
+      "fix": "Rewrote 14\u21923 lines (11 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4284,7 +4284,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "79 lines replaced/restructured",
-      "fix": "Rewrote 87→3 lines (79 removed)",
+      "fix": "Rewrote 87\u21923 lines (79 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4300,7 +4300,7 @@
       "error_message": "Wrong reference: test_am_i_primary should be test_ha_cluster",
       "file": "src/controller/testsuite/controller_test.c",
       "root_cause": "Used \"test_am_i_primary\" instead of \"test_ha_cluster\"",
-      "fix": "Changed test_am_i_primary → test_ha_cluster",
+      "fix": "Changed test_am_i_primary \u2192 test_ha_cluster",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -4316,7 +4316,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 10→3 lines (8 removed)",
+      "fix": "Rewrote 10\u21923 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4332,7 +4332,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "21 lines replaced/restructured",
-      "fix": "Rewrote 26→4 lines (21 removed) | Also: /* ha_check_heartbeat_nocluster() removed from the; * ha_watchdog_thread().  XCE_TESTING shim preserve",
+      "fix": "Rewrote 26\u21924 lines (21 removed) | Also: /* ha_check_heartbeat_nocluster() removed from the; * ha_watchdog_thread().  XCE_TESTING shim preserve",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4348,7 +4348,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "63 lines replaced/restructured",
-      "fix": "Rewrote 68→4 lines (63 removed) | Also: /* SIGUSR1 must set failover_requested via async-s; static void test_sigusr1_sets_failover_requested(v | Also: RUN_TEST(test_watchdog_starts_and_stops);; RUN_TEST(test_heartbeat_no_action_when_no_primary)",
+      "fix": "Rewrote 68\u21924 lines (63 removed) | Also: /* SIGUSR1 must set failover_requested via async-s; static void test_sigusr1_sets_failover_requested(v | Also: RUN_TEST(test_watchdog_starts_and_stops);; RUN_TEST(test_heartbeat_no_action_when_no_primary)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4364,7 +4364,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 8→8 lines (6 removed) | Also: **Expected within 1 second on both standbys:**; **Expected on the winner (needs 1 vote from the ot | Also: defer_config_fetch=1; Config fetch successful from primary (tag=...) | Also: Date:; Commit: (run: cd /home/rshen/projects/xce/worktree",
+      "fix": "Rewrote 8\u21928 lines (6 removed) | Also: **Expected within 1 second on both standbys:**; **Expected on the winner (needs 1 vote from the ot | Also: defer_config_fetch=1; Config fetch successful from primary (tag=...) | Also: Date:; Commit: (run: cd /home/rshen/projects/xce/worktree",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4380,7 +4380,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "95 lines replaced/restructured",
-      "fix": "Rewrote 158→65 lines (95 removed) | Also: - [ ] `ha-term.bin` file exists after election; - [ ] Magic bytes are `0xDEADBEEFCAFEBABE` (little",
+      "fix": "Rewrote 158\u219265 lines (95 removed) | Also: - [ ] `ha-term.bin` file exists after election; - [ ] Magic bytes are `0xDEADBEEFCAFEBABE` (little",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4396,7 +4396,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 45→62 lines (6 removed)",
+      "fix": "Rewrote 45\u219262 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4411,7 +4411,7 @@
       "timestamp": "2026-06-04T00:24:46.380Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/myapp.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4428,7 +4428,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 5→7 lines (4 removed)",
+      "fix": "Rewrote 5\u21927 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4443,7 +4443,7 @@
       "timestamp": "2026-06-04T09:46:14.610Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-repl-hardening/design.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4476,7 +4476,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 4→4 lines (3 removed)",
+      "fix": "Rewrote 4\u21924 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4492,7 +4492,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 5→7 lines (4 removed)",
+      "fix": "Rewrote 5\u21927 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4508,7 +4508,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→13 lines (2 removed)",
+      "fix": "Rewrote 4\u219213 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4524,7 +4524,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→8 lines (2 removed)",
+      "fix": "Rewrote 4\u21928 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4539,8 +4539,8 @@
       "timestamp": "2026-06-04T14:33:03.464Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* ── Task 2.1: OPCode_walCatchupEntry handler ─────────────; #ifdef XCE_TESTING | Also: /* Task 2.1: OPCode_walCatchupEntry handler */; RUN_TEST(test_wal_catchup_entry_advances_applied_lsn);",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* \u2500\u2500 Task 2.1: OPCode_walCatchupEntry handler \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500; #ifdef XCE_TESTING | Also: /* Task 2.1: OPCode_walCatchupEntry handler */; RUN_TEST(test_wal_catchup_entry_advances_applied_lsn);",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -4555,7 +4555,7 @@
       "timestamp": "2026-06-04T14:41:35.073Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: case OPCode_walCatchupEntry:; /* Task 2.1: standby applies a single WAL catch-up entry fro",
       "tags": [
         "auto-detected",
@@ -4572,7 +4572,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "57 lines replaced/restructured",
-      "fix": "Rewrote 82→16 lines (57 removed)",
+      "fix": "Rewrote 82\u219216 lines (57 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4587,7 +4587,7 @@
       "timestamp": "2026-06-04T14:45:42.730Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4603,7 +4603,7 @@
       "timestamp": "2026-06-04T14:46:44.652Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: #include \"persist.h\"      /* persist_t, apply_wal_entry */; #include \"typemap.h\"      /* wal_catchup_entry_t */",
       "tags": [
         "auto-detected",
@@ -4619,7 +4619,7 @@
       "timestamp": "2026-06-04T15:09:54.280Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4636,7 +4636,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "22 lines replaced/restructured",
-      "fix": "Rewrote 58→114 lines (22 removed)",
+      "fix": "Rewrote 58\u2192114 lines (22 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4652,7 +4652,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 10→15 lines (3 removed)",
+      "fix": "Rewrote 10\u219215 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4684,7 +4684,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 44→89 lines (4 removed) | Also: /* Decode stateReport and call convergence tracker; memset(&sr, 0, sizeof(sr));",
+      "fix": "Rewrote 44\u219289 lines (4 removed) | Also: /* Decode stateReport and call convergence tracker; memset(&sr, 0, sizeof(sr));",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4732,7 +4732,7 @@
       "error_message": "Wrong reference: test_evaluate_repl_action_stream_wal_from_zero should be test_evaluate_repl_action_send_snapshot_lsn_zero",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "Used \"test_evaluate_repl_action_stream_wal_from_zero\" instead of \"test_evaluate_repl_action_send_snapshot_lsn_zero\"",
-      "fix": "Changed test_evaluate_repl_action_stream_wal_from_zero → test_evaluate_repl_action_send_snapshot_lsn_zero",
+      "fix": "Changed test_evaluate_repl_action_stream_wal_from_zero \u2192 test_evaluate_repl_action_send_snapshot_lsn_zero",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -4763,7 +4763,7 @@
       "timestamp": "2026-06-04T17:34:23.150Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4780,7 +4780,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 71→93 lines (4 removed)",
+      "fix": "Rewrote 71\u219293 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4795,7 +4795,7 @@
       "timestamp": "2026-06-04T17:40:05.798Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4844,7 +4844,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→15 lines (2 removed)",
+      "fix": "Rewrote 6\u219215 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4859,7 +4859,7 @@
       "timestamp": "2026-06-04T23:21:45.737Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4876,7 +4876,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→12 lines (2 removed)",
+      "fix": "Rewrote 9\u219212 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4892,7 +4892,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-repl-hardening/tasks.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 9→35 lines (9 removed)",
+      "fix": "Rewrote 9\u219235 lines (9 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4908,7 +4908,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→10 lines (4 removed) | Also: /* Task 3.5: snapshot transfer.; * Creates a checkpoint in the delaymgr thread (not",
+      "fix": "Rewrote 7\u219210 lines (4 removed) | Also: /* Task 3.5: snapshot transfer.; * Creates a checkpoint in the delaymgr thread (not",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4988,7 +4988,7 @@
       "error_message": "Wrong reference: uintptr_t should be void",
       "file": "src/controller/testsuite/test_ha_evaluate_committing.c",
       "root_cause": "Used \"uintptr_t\" instead of \"void\"",
-      "fix": "Changed uintptr_t → void",
+      "fix": "Changed uintptr_t \u2192 void",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5004,7 +5004,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "149 lines replaced/restructured",
-      "fix": "Rewrote 207→38 lines (149 removed)",
+      "fix": "Rewrote 207\u219238 lines (149 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5036,7 +5036,7 @@
       "error_message": "Wrong reference: 10000 should be 60000",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"10000\" instead of \"60000\"",
-      "fix": "Changed 10000 → 60000",
+      "fix": "Changed 10000 \u2192 60000",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5052,7 +5052,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 24→42 lines (5 removed)",
+      "fix": "Rewrote 24\u219242 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5068,7 +5068,7 @@
       "error_message": "Wrong reference: 10000 should be HA_DEFAULT_COMMITTING_TIMEOUT_MS",
       "file": "src/controller/testsuite/test_ha_evaluate_committing.c",
       "root_cause": "Used \"10000\" instead of \"HA_DEFAULT_COMMITTING_TIMEOUT_MS\"",
-      "fix": "Changed 10000 → HA_DEFAULT_COMMITTING_TIMEOUT_MS",
+      "fix": "Changed 10000 \u2192 HA_DEFAULT_COMMITTING_TIMEOUT_MS",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5083,7 +5083,7 @@
       "timestamp": "2026-06-05T05:10:13.646Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5099,7 +5099,7 @@
       "timestamp": "2026-06-05T05:39:48.707Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5115,7 +5115,7 @@
       "timestamp": "2026-06-05T06:50:00Z",
       "error_message": "3-node startup: majority convergence never fires; cluster falls through to committing_timeout degraded-mode WARN",
       "file": "src/controller/ha.c",
-      "root_cause": "ha->n_peers was set to candidates_count (3, total including self) in ha_start_election_async. ha_check_majority_convergence loops i=0..n_peers-1 checking standby_converged[], but standby_converged[] is indexed by votes_idx (relative, self excluded: 0..n_other-1). With n_peers=3, it checked standby_converged[2] which is never set, so n_converged (2) < n_peers (3) always — majority convergence path could never succeed.",
+      "root_cause": "ha->n_peers was set to candidates_count (3, total including self) in ha_start_election_async. ha_check_majority_convergence loops i=0..n_peers-1 checking standby_converged[], but standby_converged[] is indexed by votes_idx (relative, self excluded: 0..n_other-1). With n_peers=3, it checked standby_converged[2] which is never set, so n_converged (2) < n_peers (3) always \u2014 majority convergence path could never succeed.",
       "fix": "Changed ha->n_peers = n_peers to ha->n_peers = n_other (= n_peers-1 = other-node count). Moved the assignment after n_other is computed. ha_repl_ack_received quorum formula (ha->n_peers+2)/2 still yields correct majority for both old and new value.",
       "tags": [
         "ha",
@@ -5134,7 +5134,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 7→12 lines (2 removed) | Also: /* Disarm any existing poll ctx */; free(old);",
+      "fix": "Rewrote 7\u219212 lines (2 removed) | Also: /* Disarm any existing poll ctx */; free(old);",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5149,7 +5149,7 @@
       "timestamp": "2026-06-05T07:23:00.000Z",
       "error_message": "AddressSanitizer: attempting double-free on sctx in ha_connect_to_peer",
       "file": "src/controller/ha.c",
-      "root_cause": "endpoint_fini calls FREEUP(ep->data) which frees sctx, then ha_connect_to_peer also calls free(sctx) — double-free at lines 3594-3595 and 3600-3601",
+      "root_cause": "endpoint_fini calls FREEUP(ep->data) which frees sctx, then ha_connect_to_peer also calls free(sctx) \u2014 double-free at lines 3594-3595 and 3600-3601",
       "fix": "Set ep->data = NULL before endpoint_fini so FREEUP becomes a no-op; then free(sctx) explicitly in the error paths",
       "tags": [
         "double-free",
@@ -5165,7 +5165,7 @@
     {
       "id": "bug-007",
       "timestamp": "2026-06-05T07:23:00.000Z",
-      "error_message": "AddressSanitizer: heap-use-after-free in liveness_poll_fn at ha.c:3293 — reading ctx->cancelled after ha_arm_heartbeat_timeout_vtask freed the old ctx",
+      "error_message": "AddressSanitizer: heap-use-after-free in liveness_poll_fn at ha.c:3293 \u2014 reading ctx->cancelled after ha_arm_heartbeat_timeout_vtask freed the old ctx",
       "file": "src/controller/ha.c",
       "root_cause": "ha_arm_heartbeat_timeout_vtask freed the old liveness_poll_ctx_t immediately after setting cancelled=1, but the delaymgr task was already in flight reading ctx->cancelled=0 and then continued to read ctx->ha after free",
       "fix": "ha_arm_heartbeat_timeout_vtask no longer frees old ctx; liveness_poll_fn now frees ctx when it fires with cancelled=1 (guarded by #ifndef XCE_TESTING to avoid bad-free on stack-allocated test ctxs)",
@@ -5187,7 +5187,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 41→87 lines (2 removed)",
+      "fix": "Rewrote 41\u219287 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5203,7 +5203,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 8→5 lines (6 removed)",
+      "fix": "Rewrote 8\u21925 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5219,7 +5219,7 @@
       "error_message": "Wrong reference: DEBUG2 should be INFO",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"DEBUG2\" instead of \"INFO\"",
-      "fix": "Changed DEBUG2 → INFO",
+      "fix": "Changed DEBUG2 \u2192 INFO",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5283,7 +5283,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/cluster-config-split-analysis.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 11→21 lines (8 removed) | Also: ### Phase 1: Schema split (wire-compatible); 4. **Keep the old `ClusterConfig` fields intact** ",
+      "fix": "Rewrote 11\u219221 lines (8 removed) | Also: ### Phase 1: Schema split (wire-compatible); 4. **Keep the old `ClusterConfig` fields intact** ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5299,7 +5299,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 27→36 lines (5 removed)",
+      "fix": "Rewrote 27\u219236 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5315,7 +5315,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 9→15 lines (4 removed)",
+      "fix": "Rewrote 9\u219215 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5331,7 +5331,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "37 lines replaced/restructured",
-      "fix": "Rewrote 41→4 lines (37 removed)",
+      "fix": "Rewrote 41\u21924 lines (37 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5471,7 +5471,7 @@
       "error_message": "Wrong reference: last_heartbeat should be voted_for_term",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"last_heartbeat\" instead of \"voted_for_term\"",
-      "fix": "Changed last_heartbeat → voted_for_term",
+      "fix": "Changed last_heartbeat \u2192 voted_for_term",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5487,7 +5487,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 13→17 lines (4 removed)",
+      "fix": "Rewrote 13\u219217 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5538,7 +5538,7 @@
       "timestamp": "2026-06-10T01:36:59.112Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/schema/controller.capnp",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5554,7 +5554,7 @@
       "timestamp": "2026-06-10T01:37:29.771Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5571,7 +5571,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 16→31 lines (6 removed)",
+      "fix": "Rewrote 16\u219231 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5586,7 +5586,7 @@
       "timestamp": "2026-06-10T01:38:31.262Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/include/request.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5618,7 +5618,7 @@
       "timestamp": "2026-06-10T01:39:31.683Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/lib/request.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: if (req->body_which == Request_body_walcatchupentrymsg; && req->body.walcatchupentrymsg != NULL) { | Also: /* wal_entry_to_wire: fill a wire WalCatchupEntry from a C e; * fields and raw payload bytes.  Sub-entry nesting is one le",
       "tags": [
         "auto-detected",
@@ -5653,7 +5653,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 29→32 lines (4 removed)",
+      "fix": "Rewrote 29\u219232 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5669,7 +5669,7 @@
       "error_message": "Wrong reference: payload should be raw_payload",
       "file": "src/controller/config_repl.c",
       "root_cause": "Used \"payload\" instead of \"raw_payload\"",
-      "fix": "Changed payload → raw_payload",
+      "fix": "Changed payload \u2192 raw_payload",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5685,7 +5685,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 13→16 lines (2 removed)",
+      "fix": "Rewrote 13\u219216 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5701,7 +5701,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 49→137 lines (7 removed)",
+      "fix": "Rewrote 49\u2192137 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5716,7 +5716,7 @@
       "timestamp": "2026-06-10T01:49:36.997Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5785,7 +5785,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/scheduler/src/scheduler.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 4→6 lines (4 removed)",
+      "fix": "Rewrote 4\u21926 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5838,7 +5838,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 9→15 lines (4 removed)",
+      "fix": "Rewrote 9\u219215 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5870,7 +5870,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 8→13 lines (3 removed) | Also: /* Req 4.1: ctrlhello counts as primary activity —; if ((ctrl_role_t)atomic_load_explicit(&c->ha.role,",
+      "fix": "Rewrote 8\u219213 lines (3 removed) | Also: /* Req 4.1: ctrlhello counts as primary activity \u2014; if ((ctrl_role_t)atomic_load_explicit(&c->ha.role,",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5886,7 +5886,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→12 lines (3 removed)",
+      "fix": "Rewrote 6\u219212 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5901,7 +5901,7 @@
       "timestamp": "2026-06-10T07:56:21.347Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_repl_unit.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: /* =========================================================; * Task 1.1: repl_broadcast send path tests",
       "tags": [
         "auto-detected",
@@ -5918,7 +5918,7 @@
       "error_message": "Wrong reference: WAL_JOB should be WAL_JOB_SUBMIT",
       "file": "src/controller/testsuite/test_repl_unit.c",
       "root_cause": "Used \"WAL_JOB\" instead of \"WAL_JOB_SUBMIT\"",
-      "fix": "Changed WAL_JOB → WAL_JOB_SUBMIT",
+      "fix": "Changed WAL_JOB \u2192 WAL_JOB_SUBMIT",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5933,7 +5933,7 @@
       "timestamp": "2026-06-10T07:58:15.167Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5950,7 +5950,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/repl.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 42→65 lines (3 removed)",
+      "fix": "Rewrote 42\u219265 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5966,7 +5966,7 @@
       "error_message": "Wrong reference: DEBUG3 should be TRACE",
       "file": "src/controller/repl.c",
       "root_cause": "Used \"DEBUG3\" instead of \"TRACE\"",
-      "fix": "Changed DEBUG3 → TRACE",
+      "fix": "Changed DEBUG3 \u2192 TRACE",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5982,7 +5982,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 12→16 lines (3 removed)",
+      "fix": "Rewrote 12\u219216 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5998,7 +5998,7 @@
       "error_message": "Wrong reference: request should be ep",
       "file": "src/controller/cluster.c",
       "root_cause": "Used \"request\" instead of \"ep\"",
-      "fix": "Changed request → ep",
+      "fix": "Changed request \u2192 ep",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -6013,7 +6013,7 @@
       "timestamp": "2026-06-10T08:47:48.296Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_ha_role.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: /* Task 3.3 (ha-wal-replication): dispatch gate standby-role; RUN_TEST(test_dispatch_gate_allows_wal_catchup_in_standby_ro",
       "tags": [
         "auto-detected",
@@ -6029,7 +6029,7 @@
       "timestamp": "2026-06-10T08:50:27.397Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6061,7 +6061,7 @@
       "timestamp": "2026-06-10T09:59:08.979Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_p2_integration.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6096,7 +6096,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_p2_integration.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 50→72 lines (4 removed)",
+      "fix": "Rewrote 50\u219272 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6112,7 +6112,7 @@
       "error_message": "Wrong reference: test_catchup_full_lifecycle_integration should be test_single_node_committed_lsn_unchanged",
       "file": "src/controller/testsuite/test_p2_integration.c",
       "root_cause": "Used \"test_catchup_full_lifecycle_integration\" instead of \"test_single_node_committed_lsn_unchanged\"",
-      "fix": "Changed test_catchup_full_lifecycle_integration → test_single_node_committed_lsn_unchanged",
+      "fix": "Changed test_catchup_full_lifecycle_integration \u2192 test_single_node_committed_lsn_unchanged",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -6127,7 +6127,7 @@
       "timestamp": "2026-06-10T10:37:49.028Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_repl_unit.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6160,7 +6160,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/steering/product.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 13→22 lines (5 removed)",
+      "fix": "Rewrote 13\u219222 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6192,7 +6192,7 @@
       "error_message": "Significant refactor of ",
       "file": "CLAUDE.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 5→5 lines (4 removed)",
+      "fix": "Rewrote 5\u21925 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6224,7 +6224,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→5 lines (3 removed) | Also: ### Controllers; - Struct: `type {Resource}Controller struct{}`",
+      "fix": "Rewrote 6\u21925 lines (3 removed) | Also: ### Controllers; - Struct: `type {Resource}Controller struct{}`",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6256,7 +6256,7 @@
       "error_message": "Wrong reference: signal should be stdio",
       "file": "src/lib/delay.c",
       "root_cause": "Used \"signal\" instead of \"stdio\"",
-      "fix": "Changed signal → stdio",
+      "fix": "Changed signal \u2192 stdio",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -6271,7 +6271,7 @@
       "timestamp": "2026-06-11T03:30:54.341Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6320,7 +6320,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/job.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 15→28 lines (2 removed)",
+      "fix": "Rewrote 15\u219228 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6352,7 +6352,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-consistency-invariants/research.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 7→7 lines (3 removed)",
+      "fix": "Rewrote 7\u21927 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6368,7 +6368,7 @@
       "error_message": "Worker job state notifications (OPCode_notify) are permanently lost when the controller dispatch gate rejects them (quorum loss / COMMITTING window): worker never reads replies, never retries, no rejoin resync",
       "file": "src/worker/src/controller_connector.c, src/lib/xceapi.c, src/controller/cluster.c",
       "root_cause": "xce_notify is enqueue-and-forget (no cbuf_get); error replies dropped via cbuf_tryput -EAGAIN (xcectx.c:304); xcecd_job_finished return ignored (FIXME at xcecd_worker_utils.c:298); xce_join_req carries no running-job state so rejoin cannot resync",
-      "fix": "NOT YET FIXED - discovered during ha-consistency-invariants gap research; design will add primary-side pending-facts queue (hold uncommitted facts until quorum) + idempotency guards in mark_job_*; see .kiro/specs/ha-consistency-invariants/research.md deep-dive section A",
+      "fix": "FIXED 2026-06-12 (ha-commit-barrier-rollout tasks 1.2+4.2+4.3): dispatch gate admits fact opcodes (notify/update/setpreason/clrpreason) without write quorum (ha.c CTRL_PRIMARY allowlist); facts append via RETAIN (log-is-the-queue, no timeout) and commit when quorum returns. End-to-end retention proof: test_fact_retention_across_quorum_loss. Worker-side redelivery gap remains (worker-rejoin-resync backlog covers disconnect windows).",
       "tags": [
         "ha",
         "notify",
@@ -6379,7 +6379,7 @@
       ],
       "related_bugs": [],
       "occurrences": 1,
-      "last_seen": "2026-06-10T22:45:00-07:00"
+      "last_seen": "2026-06-12"
     },
     {
       "id": "bug-397",
@@ -6387,7 +6387,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-consistency-invariants/requirements.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 3→4 lines (2 removed)",
+      "fix": "Rewrote 3\u21924 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6466,7 +6466,7 @@
       "timestamp": "2026-06-11T07:53:43.868Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-consistency-invariants/research.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6498,7 +6498,7 @@
       "timestamp": "2026-06-11T08:46:20.815Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/steering/roadmap.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6579,7 +6579,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/steering/roadmap.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 6→8 lines (4 removed)",
+      "fix": "Rewrote 6\u21928 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6594,7 +6594,7 @@
       "timestamp": "2026-06-11T13:30:00Z",
       "error_message": "test_commit_engine fixture: Expected 0 Was 1 from repl_add_standby",
       "file": "src/controller/testsuite/test_commit_engine.c",
-      "root_cause": "repl_add_standby returns the slot index (>=0) on success, not 0 — second add legitimately returns 1",
+      "root_cause": "repl_add_standby returns the slot index (>=0) on success, not 0 \u2014 second add legitimately returns 1",
       "fix": "fixture asserts TEST_ASSERT_EQUAL_INT(i, repl_add_standby(...)) per standby slot",
       "tags": [
         "controller",
@@ -6611,8 +6611,8 @@
       "timestamp": "2026-06-11T13:35:00Z",
       "error_message": "3 pre-existing controller testsuite failures masked by exit code 0: test_committed_lsn_does_not_advance_on_timeout (-110), test_repl_ack_after_promote_gate_allows_jobsub (-10013), test_rdhup_primary_dispatch_gate_opens (-10013)",
       "file": "src/controller/testsuite/controller_test.c",
-      "root_cause": "each test group calls UNITY_BEGIN/UNITY_END internally, resetting Unity counters — main()'s final UNITY_END returns 0 unless the LAST group fails, so meson reported the suite green despite 3 real failures; Unity also misattributes failure FILE names to whichever file's UNITY_BEGIN ran (e.g. reports test_repl_unit.c for a test living in test_p2_integration.c)",
-      "fix": "not fixed (out of task 1.1 boundary) — documented; failures exist identically on baseline without ha-commit-engine changes (verified by stash/rebuild). persist_wal_sync_append returns -ETIMEDOUT while the test expects rc==0 with sync_rc==-ETIMEDOUT; the two gate tests fail ha_has_write_quorum (standby_endpoints empty with n_peers=2)",
+      "root_cause": "each test group calls UNITY_BEGIN/UNITY_END internally, resetting Unity counters \u2014 main()'s final UNITY_END returns 0 unless the LAST group fails, so meson reported the suite green despite 3 real failures; Unity also misattributes failure FILE names to whichever file's UNITY_BEGIN ran (e.g. reports test_repl_unit.c for a test living in test_p2_integration.c)",
+      "fix": "not fixed (out of task 1.1 boundary) \u2014 documented; failures exist identically on baseline without ha-commit-engine changes (verified by stash/rebuild). persist_wal_sync_append returns -ETIMEDOUT while the test expects rc==0 with sync_rc==-ETIMEDOUT; the two gate tests fail ha_has_write_quorum (standby_endpoints empty with n_peers=2)",
       "tags": [
         "controller",
         "testsuite",
@@ -6631,7 +6631,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/commit.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 11→21 lines (2 removed) | Also: (void)timeout_ms; /* RETAIN never honors the timeo; * via commit_on_ack (Req 2.1). */",
+      "fix": "Rewrote 11\u219221 lines (2 removed) | Also: (void)timeout_ms; /* RETAIN never honors the timeo; * via commit_on_ack (Req 2.1). */",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6646,8 +6646,8 @@
       "timestamp": "2026-06-11T15:28:35.990Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_commit_engine.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* ═════════════════════════════════════════════════════════; * Task 3.1 — membership re-evaluation (commit_on_membership_ | Also: /* Task 3.1 — membership re-evaluation */; RUN_TEST(test_catchup_standby_ack_does_not_count_toward_pend",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550; * Task 3.1 \u2014 membership re-evaluation (commit_on_membership_ | Also: /* Task 3.1 \u2014 membership re-evaluation */; RUN_TEST(test_catchup_standby_ack_does_not_count_toward_pend",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -6662,7 +6662,7 @@
       "timestamp": "2026-06-11T15:55:52.451Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/include/repl.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6678,7 +6678,7 @@
       "timestamp": "2026-06-11T15:56:20.945Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6695,7 +6695,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_commit_engine.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 10→15 lines (2 removed)",
+      "fix": "Rewrote 10\u219215 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6710,7 +6710,7 @@
       "timestamp": "2026-06-11T15:57:43.900Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_commit_engine.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6726,7 +6726,7 @@
       "timestamp": "2026-06-11T16:15:06.660Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-commit-engine/tasks.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6742,7 +6742,7 @@
       "timestamp": "2026-06-11T16:19:30.370Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6758,8 +6758,8 @@
       "timestamp": "2026-06-11T16:19:51.195Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_commit_engine.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* Task 4.2 — wired gate: registry truth at ha_dispatch_gate; RUN_TEST(test_gate_wired_registry_catchup_standby_rejects_th",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* Task 4.2 \u2014 wired gate: registry truth at ha_dispatch_gate; RUN_TEST(test_gate_wired_registry_catchup_standby_rejects_th",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -6790,7 +6790,7 @@
       "timestamp": "2026-06-11T16:23:59.453Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6806,8 +6806,8 @@
       "timestamp": "2026-06-11T22:39:24.704Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_commit_engine.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* ═════════════════════════════════════════════════════════; * Task 5.1 — integration: ACK feed and the job-submit sync-a | Also: #include \"typemap.h\"          /* wal_catchup_entry_t (task 5; #include \"wal_types.h\"        /* WAL_JOB_SUBMIT (task 5.1 sy",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550; * Task 5.1 \u2014 integration: ACK feed and the job-submit sync-a | Also: #include \"typemap.h\"          /* wal_catchup_entry_t (task 5; #include \"wal_types.h\"        /* WAL_JOB_SUBMIT (task 5.1 sy",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -6855,7 +6855,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/repl.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 13→27 lines (5 removed)",
+      "fix": "Rewrote 13\u219227 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6870,7 +6870,7 @@
       "timestamp": "2026-06-11T23:32:42.365Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-commit-engine/tasks.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6919,7 +6919,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/persist.c",
       "root_cause": "16 lines replaced/restructured",
-      "fix": "Rewrote 40→67 lines (16 removed)",
+      "fix": "Rewrote 40\u219267 lines (16 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6967,7 +6967,7 @@
       "error_message": "Wrong reference: test_single_node_committed_lsn_unchanged should be test_single_node_committed_lsn_advances",
       "file": "src/controller/testsuite/test_p2_integration.c",
       "root_cause": "Used \"test_single_node_committed_lsn_unchanged\" instead of \"test_single_node_committed_lsn_advances\"",
-      "fix": "Changed test_single_node_committed_lsn_unchanged → test_single_node_committed_lsn_advances",
+      "fix": "Changed test_single_node_committed_lsn_unchanged \u2192 test_single_node_committed_lsn_advances",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -7068,7 +7068,7 @@
       "timestamp": "2026-06-12T04:13:06.326Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-commit-barrier-rollout/tasks.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -7101,7 +7101,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/persist.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→12 lines (4 removed) | Also: return persist_wal_async(p, wal_type, &js, sizeof(; persist_t* p       = cls; | Also: int rc = persist_wal_async(p, wal_type, pkt, (uint; persist_t* p       = cls;",
+      "fix": "Rewrote 7\u219212 lines (4 removed) | Also: return persist_wal_async(p, wal_type, &js, sizeof(; persist_t* p       = cls; | Also: int rc = persist_wal_async(p, wal_type, pkt, (uint; persist_t* p       = cls;",
       "tags": [
         "auto-detected",
         "refactor",
@@ -7149,7 +7149,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_commit_barrier_reply.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 3→5 lines (2 removed) | Also: static xce_signal_t  g_sigkill = { .signo = SIGKIL; static xce_jobctrl_t g_jobctrl;",
+      "fix": "Rewrote 3\u21925 lines (2 removed) | Also: static xce_signal_t  g_sigkill = { .signo = SIGKIL; static xce_jobctrl_t g_jobctrl;",
       "tags": [
         "auto-detected",
         "refactor",
@@ -7257,7 +7257,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_commit_barrier_reply.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 12→56 lines (7 removed) | Also: xce_job_t  jdef;; static int jobobj_ready; /* jobj module tables — o",
+      "fix": "Rewrote 12\u219256 lines (7 removed) | Also: xce_job_t  jdef;; static int jobobj_ready; /* jobj module tables \u2014 o",
       "tags": [
         "auto-detected",
         "refactor",
@@ -7272,7 +7272,7 @@
       "timestamp": "2026-06-12T11:05:00-07:00",
       "error_message": "va_list type confusion: WAL_JOB_RUSAGE hook payload reads job_t fields from an xce_job_rusages_t*",
       "file": "src/controller/job.c (caller) / src/controller/persist.c (consumer)",
-      "root_cause": "update_job_rusages fires AFTER_EVENT HOOK_DETAIL_JOB_RUSAGE_UPDATE with (cluster_t*, xce_job_rusages_t*) at job.c:1015-1016, but persist_job_hook_fun's default arm (persist.c:1354-1359) reads the second vararg as job_t* and dereferences j->job.state at offset 56 == sizeof(xce_job_rusages_t) — an out-of-bounds read on an exactly-sized allocation; the WAL_JOB_RUSAGE payload state field is garbage (jobid at offset 0 lines up by accident)",
+      "root_cause": "update_job_rusages fires AFTER_EVENT HOOK_DETAIL_JOB_RUSAGE_UPDATE with (cluster_t*, xce_job_rusages_t*) at job.c:1015-1016, but persist_job_hook_fun's default arm (persist.c:1354-1359) reads the second vararg as job_t* and dereferences j->job.state at offset 56 == sizeof(xce_job_rusages_t) \u2014 an out-of-bounds read on an exactly-sized allocation; the WAL_JOB_RUSAGE payload state field is garbage (jobid at offset 0 lines up by accident)",
       "fix": "NOT FIXED (discovered while writing task 3.3 receipt-ACK verdict pins; production out of boundary). Test test_update_op_rusage_receipt_reply_facts_retained uses a padded union so the pin stays in-bounds under ASAN without masking the bug; fix candidates: dedicated RUSAGE arm in persist_job_hook_fun reading xce_job_rusages_t*, or fire the hook with (c, j) like the other job hooks",
       "tags": [
         "pre-existing",
@@ -7290,6 +7290,22 @@
       ],
       "occurrences": 1,
       "last_seen": "2026-06-12T11:05:00-07:00"
+    },
+    {
+      "id": "bug-452",
+      "timestamp": "2026-06-12T15:03:38.962Z",
+      "error_message": "Function not marked async",
+      "file": "src/controller/testsuite/test_commit_barrier_reply.c",
+      "root_cause": "Function uses await but wasn't declared async",
+      "fix": "Added async modifier",
+      "tags": [
+        "auto-detected",
+        "async-fix",
+        "c"
+      ],
+      "related_bugs": [],
+      "occurrences": 1,
+      "last_seen": "2026-06-12T15:03:38.962Z"
     }
   ]
 }
\ No newline at end of file
diff --git a/.wolf/cerebrum.md b/.wolf/cerebrum.md
index e6734f58..22be7e3a 100644
--- a/.wolf/cerebrum.md
+++ b/.wolf/cerebrum.md
@@ -9,6 +9,8 @@
 <!-- How the user likes things done. Code style, tools, patterns, communication. -->
 
 ## Key Learnings
+- Census EXACT method (2026-06-12): count DISTINCT Unity `file:line:test:PASS` triples (`grep -aoE` + sort -u), not raw `2mPASS` occurrences — tinylog interleaving garbles ~9 verdict lines per run and duplicates others; distinct-triple count matched the 494-baseline arithmetic exactly (495 after task 4.3's +1).
+- repl registry reconnect semantics: repl_remove_standby vacates the slot (ep=NULL, keeps last_disconnected_lsn guard); repl_add_standby reuses the first empty slot and memsets it (acked_lsn=0). With both standbys removed, majority_candidate_locked zero-fills to n_peers-1 → candidate 0 → committed_lsn frozen (RETAIN entries safely pending); after re-add, ONE covering ack = 2-of-3 majority.
 - repl_wait_majority_ack walAck track is engine-only since barrier-rollout 2.2: entry_lsn==0 returns 0 immediately (documented once-per-lifetime LSN-0 first entry), everything else delegates to commit_submit unconditionally — ce==NULL surfaces as -EINVAL from commit_submit (unreachable in production; cluster_init_phase2 always wires the engine). The counting loop that remains in the function is configAck-ONLY (no self-count, n_active==0 shortcut is Req 8.5 config behavior). persist_wal_sync_append's residual non-engine branch can only store committed_lsn for the LSN-0 no-op case. (2026-06-12, task 2.2)
 - `commit_submit(COMMIT_MODE_RETAIN)` is fully lock-free: it returns 0 BEFORE `pthread_mutex_lock(&ce->lock)` (commit.c:233-239), so it is safe to call from hook functions even while entity write locks are held — only WAIT mode takes ce->lock. (barrier-rollout task 1.2, 2026-06-12)
 - ha-commit-engine: once repl.c references commit_* symbols (task 5.2), commit.c MUST be in controller_src (meson.build) or the production xce_controller link fails — the "linkage lands with 5.3" note in tasks.md only held while repl.c had no engine references. Lock order ce->lock → r->lock: repl.c calls engine hooks only AFTER releasing r->lock.
diff --git a/.wolf/memory.md b/.wolf/memory.md
index 4ad13c72..1092926c 100644
--- a/.wolf/memory.md
+++ b/.wolf/memory.md
@@ -957,3 +957,8 @@
 | 07:14 | Edited src/controller/ha.c | expanded (+10 lines) | ~205 |
 | 14:35 | task 4.2 validated: gate switch admits notify/update/setpreason/clrpreason; build OK; 21/21 rollout, 494 census ZERO FAIL | src/controller/ha.c | success | ~3k |
 | 07:50 | Edited .kiro/specs/ha-commit-barrier-rollout/tasks.md | inline fix | ~12 |
+| 08:02 | Edited src/controller/testsuite/test_commit_barrier_reply.c | 5→6 lines | ~43 |
+| 08:03 | Edited src/controller/testsuite/test_commit_barrier_reply.c | added 3 condition(s) | ~3291 |
+| 08:03 | Edited src/controller/testsuite/test_commit_barrier_reply.c | 2→5 lines | ~72 |
+| 15:15 | Task 4.3 ha-commit-barrier-rollout: fact-retention-across-quorum-loss integration test (GREEN on landing) — quorum lost via repl_remove_standby x2, 4 worker facts via on_job_start/on_job_finish (cluster.c/do_notify not in test link), RETAIN pending + on-disk exactly-once scan, reconnect + covering ACK advances committed_lsn, no re-delivery, retained-depth=4 printed | src/controller/testsuite/test_commit_barrier_reply.c | census 495 distinct Unity PASS (494+1), ZERO FAIL | ~55k |
+| 08:29 | Edited .kiro/specs/ha-commit-barrier-rollout/tasks.md | inline fix | ~30 |
diff --git a/src/controller/testsuite/test_commit_barrier_reply.c b/src/controller/testsuite/test_commit_barrier_reply.c
index eadebf3f..df643541 100644
--- a/src/controller/testsuite/test_commit_barrier_reply.c
+++ b/src/controller/testsuite/test_commit_barrier_reply.c
@@ -58,6 +58,7 @@
 #include <rtti.h>
 
 #include <errno.h>
+#include <fcntl.h>
 #include <pthread.h>
 #include <signal.h>
 #include <stdatomic.h>
@@ -1244,6 +1245,259 @@ static void test_update_op_rusage_receipt_reply_facts_retained(void)
     printf("test_update_op_rusage_receipt_reply_facts_retained: PASS\n");
 }
 
+/* ════════════════════════════════════════════════════════════════════════
+ * Fact retention across quorum loss (task 4.3, Req 3.1, 3.3, 3.4)
+ *
+ * GREEN-on-landing integration proof of the RETAIN persistence semantics
+ * (umbrella Req 2.8 end-to-end evidence; completes the bug-396 fix):
+ * with quorum LOST (both standby registry slots disconnected via
+ * repl_remove_standby) the worker-fact paths still append, with no error
+ * and no commit timeout; the entries stay pending (lsn > committed_lsn)
+ * and nothing is dropped (each fact on disk exactly once); after
+ * reconnect + a covering ACK, committed_lsn advances over the retained
+ * suffix with NO re-delivery of the facts (the log itself is the queue).
+ *
+ * It lives HERE (not test_commit_barrier_rollout.c) because it needs this
+ * file's full harness: cluster_t with jobmgr + real tmpdir persist with
+ * registered production hooks + wired engine (n_peers=3) + the stub
+ * standby registry + the job.c link (cbrp_make_job).
+ *
+ * Facts are driven via on_job_start / on_job_finish (job.c) DIRECTLY:
+ * do_notify lives in cluster.c, which is NOT in the unit-test link
+ * (meson controller_unit_test_src), and on_job_* is exactly do_notify's
+ * fact path minus the opcode decode. Gate admission of OPCode_notify
+ * during quorum loss is task 4.1/4.2's coverage (test_commit_barrier_
+ * rollout.c fact-gate cases); this test's focus is RETAIN persistence.
+ *
+ * mark_job_* is currently UNGUARDED (idempotency guards land in task 6),
+ * so only distinct forward transitions are driven: job 80 start→finish,
+ * job 81 start→finish — four distinct (job, transition) facts, no
+ * duplicates, independent of future guard behavior.
+ * ════════════════════════════════════════════════════════════════════════ */
+
+/* Count WAL entries with (wal_type, wal_jobstate_t.jobid) by direct scan
+ * of the active on-disk segment (persist_wal_async pwrites synchronously,
+ * so same-process reads see every append without an fsync). The priming
+ * entry (payload "p", 1 byte) and any non-jobstate entries are skipped by
+ * the payload-size check. Single segment is guaranteed here: rotation
+ * needs 64 MB (WAL_SEGMENT_SIZE_BYTES). Returns the match count;
+ * *state_out (optional) receives the LAST matching entry's state. */
+static int cbrp_count_jobstate_entries(persist_t *p, uint32_t wal_type,
+                                       uint64_t jobid, uint32_t *state_out)
+{
+    char     seg_path[sizeof(p->seg_path)];
+    uint64_t seg_end, off = 0;
+    int      fd, count = 0;
+
+    pthread_mutex_lock(&p->lock);
+    memcpy(seg_path, p->seg_path, sizeof(seg_path));
+    seg_end = p->seg_offset;
+    pthread_mutex_unlock(&p->lock);
+
+    fd = open(seg_path, O_RDONLY);
+    TEST_ASSERT_TRUE_MESSAGE(fd >= 0, "active WAL segment must be openable");
+
+    while (off + sizeof(wal_entry_hdr_t) <= seg_end) {
+        wal_entry_hdr_t hdr;
+
+        TEST_ASSERT_EQUAL_INT_MESSAGE(
+            (int)sizeof(hdr),
+            (int)pread(fd, &hdr, sizeof(hdr), (off_t)off),
+            "WAL segment scan: short header read");
+        if (hdr.type == wal_type
+            && hdr.payload_len == sizeof(wal_jobstate_t)) {
+            wal_jobstate_t js;
+
+            TEST_ASSERT_EQUAL_INT_MESSAGE(
+                (int)sizeof(js),
+                (int)pread(fd, &js, sizeof(js), (off_t)(off + sizeof(hdr))),
+                "WAL segment scan: short payload read");
+            if (js.jobid == jobid) {
+                count++;
+                if (state_out != NULL)
+                    *state_out = js.state;
+            }
+        }
+        off += sizeof(hdr) + hdr.payload_len;
+    }
+    close(fd);
+    return count;
+}
+
+/* Drive one fact call: it must succeed (rc 0 — in particular NEVER
+ * -ETIMEDOUT) and return latency-bounded. sync_timeout_ms is 5000 in this
+ * test, so a fact path that wrongly ran a WAIT barrier with ACKs
+ * unobtainable would block ~5000 ms and trip the 1000 ms bound — the
+ * "no timeout was ever applied" assertion (Req 3.1: facts have NO commit
+ * timeout; RETAIN returns immediately). */
+#define CBRP_DRIVE_FACT(call, what)                                          \
+    do {                                                                     \
+        uint64_t t0_ = cbrp_mono_ms();                                       \
+        int      rc_ = (call);                                               \
+        uint64_t el_ = cbrp_mono_ms() - t0_;                                 \
+        TEST_ASSERT_EQUAL_INT_MESSAGE(0, rc_,                                \
+            what ": fact append must succeed with no error during quorum "   \
+                 "loss — never -ETIMEDOUT (Req 3.1, 3.2)");                  \
+        TEST_ASSERT_TRUE_MESSAGE(el_ < 1000,                                 \
+            what ": no commit timeout may ever be applied to a fact entry "  \
+                 "— RETAIN returns immediately (Req 3.1)");                  \
+    } while (0)
+
+/* makeJob deep-copies submit; statics survive Unity's longjmp. */
+static job_submit_data_t g_fr_submit80;
+static job_submit_data_t g_fr_submit81;
+
+static void test_fact_retention_across_quorum_loss(void)
+{
+    static unsigned int fr_pids[2] = { 8001, 8101 };
+
+    job_pidinfo_t   start80, start81;
+    xce_jobfinish_t fin80, fin81;
+    uint64_t        lsn_before, lsn_after, first_fact_lsn, watermark;
+    uint64_t        committed, deadline;
+    uint32_t        st_start80 = 0, st_fin80 = 0;
+    uint32_t        st_start81 = 0, st_fin81 = 0;
+
+    /* Arrange: 3-member cluster, two running jobs-to-be. The large
+     * sync_timeout (5000 ms) gives the CBRP_DRIVE_FACT latency bound its
+     * discriminating power (see macro comment). */
+    cbrp_setup(5000);
+    memset(&g_fr_submit80, 0, sizeof(g_fr_submit80));
+    memset(&g_fr_submit81, 0, sizeof(g_fr_submit81));
+    cbrp_make_job(80, &g_fr_submit80);
+    cbrp_make_job(81, &g_fr_submit81);
+
+    /* Act 1 — QUORUM LOST: disconnect both standby registry slots
+     * (repl_remove_standby = the RDHUP disconnect path's registry effect).
+     * n_peers stays 3 in the engine: self alone is 1 of 3, no majority. */
+    repl_remove_standby(&g_hc.persist.repl, &g_hep_a);
+    repl_remove_standby(&g_hc.persist.repl, &g_hep_b);
+
+    pthread_mutex_lock(&g_hc.persist.lock);
+    lsn_before = g_hc.persist.current_lsn;
+    pthread_mutex_unlock(&g_hc.persist.lock);
+    first_fact_lsn = lsn_before; /* persist_wal_async assigns current_lsn */
+
+    /* Act 2 — drive four distinct worker-fact transitions with zero
+     * quorum: job 80 start/finish, job 81 start/finish (do_notify-level
+     * fact paths; see section header for why on_job_* directly). */
+    memset(&start80, 0, sizeof(start80));
+    start80.jobid = 80;
+    start80.npids = 1;
+    start80.pids  = &fr_pids[0];
+    CBRP_DRIVE_FACT(on_job_start(&g_hc, &start80), "on_job_start(80)");
+
+    memset(&start81, 0, sizeof(start81));
+    start81.jobid = 81;
+    start81.npids = 1;
+    start81.pids  = &fr_pids[1];
+    CBRP_DRIVE_FACT(on_job_start(&g_hc, &start81), "on_job_start(81)");
+
+    memset(&fin80, 0, sizeof(fin80));
+    fin80.jobid     = 80;
+    fin80.exit_code = 0; /* → JOB_STAT_DONE */
+    CBRP_DRIVE_FACT(on_job_finish(&g_hc, &fin80), "on_job_finish(80)");
+
+    memset(&fin81, 0, sizeof(fin81));
+    fin81.jobid     = 81;
+    fin81.exit_code = 0;
+    CBRP_DRIVE_FACT(on_job_finish(&g_hc, &fin81), "on_job_finish(81)");
+
+    /* Assert — pending, nothing dropped (Req 3.1, 3.3): all four facts
+     * appended exactly once, none committed (committed_lsn untouched by
+     * the membership shrink: zero countable standbys → candidate 0). */
+    pthread_mutex_lock(&g_hc.persist.lock);
+    lsn_after = g_hc.persist.current_lsn;
+    pthread_mutex_unlock(&g_hc.persist.lock);
+    watermark = lsn_after - 1;
+    committed = atomic_load(&g_hc.persist.committed_lsn);
+
+    TEST_ASSERT_EQUAL_UINT64_MESSAGE(lsn_before + 4, lsn_after,
+        "each of the four facts must append exactly one WAL entry "
+        "(accepted, not rejected, during quorum loss — Req 3.2)");
+    TEST_ASSERT_TRUE_MESSAGE(committed < first_fact_lsn,
+        "every fact entry must remain pending (lsn > committed_lsn) "
+        "while quorum is lost (Req 3.1)");
+
+    /* Retained-depth observability counter (design §Observability:
+     * committed-vs-appended lag), visible in the test log. */
+    printf("test_fact_retention_across_quorum_loss: retained-depth=%lu "
+           "(appended watermark=%lu, committed_lsn=%lu)\n",
+           (unsigned long)(watermark - committed),
+           (unsigned long)watermark, (unsigned long)committed);
+    TEST_ASSERT_EQUAL_UINT64_MESSAGE(4, watermark - committed,
+        "retained depth must equal the four uncommitted fact entries");
+
+    /* Nothing dropped: each fact is on disk exactly once, with the
+     * post-transition state recorded (start → RUN, finish(0) → DONE). */
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_START, 80,
+                                    &st_start80),
+        "job 80 START fact must be retained exactly once (Req 3.3)");
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_START, 81,
+                                    &st_start81),
+        "job 81 START fact must be retained exactly once (Req 3.3)");
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_FINISH, 80,
+                                    &st_fin80),
+        "job 80 FINISH fact must be retained exactly once (Req 3.3)");
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_FINISH, 81,
+                                    &st_fin81),
+        "job 81 FINISH fact must be retained exactly once (Req 3.3)");
+    TEST_ASSERT_EQUAL_UINT32(JOB_STAT_RUN, st_start80);
+    TEST_ASSERT_EQUAL_UINT32(JOB_STAT_RUN, st_start81);
+    TEST_ASSERT_EQUAL_UINT32(JOB_STAT_DONE, st_fin80);
+    TEST_ASSERT_EQUAL_UINT32(JOB_STAT_DONE, st_fin81);
+
+    /* Act 3 — RECONNECT + covering ACK (Req 3.4): re-register both
+     * standbys (slots were vacated; repl_add_standby resets their
+     * watermarks to 0) and deliver one ACK covering the retained suffix —
+     * self + sb_a = 2 of n_peers=3, a majority. */
+    TEST_ASSERT_TRUE(
+        repl_add_standby(&g_hc.persist.repl, &g_hep_a, "sb_a", 7400) >= 0);
+    TEST_ASSERT_TRUE(
+        repl_add_standby(&g_hc.persist.repl, &g_hep_b, "sb_b", 7401) >= 0);
+    repl_on_ack(&g_hc.persist.repl, &g_hep_a, watermark);
+
+    deadline = cbrp_mono_ms() + 2000;
+    while (atomic_load(&g_hc.persist.committed_lsn) < watermark
+           && cbrp_mono_ms() < deadline)
+        cbrp_sleep_ms(5);
+
+    /* Assert — committed without re-delivery (Req 3.4): committed_lsn
+     * covers the retained suffix; the WAL still holds each fact exactly
+     * once (no duplicate appends) and current_lsn never moved — the
+     * RETAINED entries committed, not re-delivered copies. */
+    TEST_ASSERT_TRUE_MESSAGE(
+        atomic_load(&g_hc.persist.committed_lsn) >= watermark,
+        "a covering ACK after reconnect must advance committed_lsn over "
+        "the retained fact suffix (Req 3.4)");
+
+    pthread_mutex_lock(&g_hc.persist.lock);
+    TEST_ASSERT_EQUAL_UINT64_MESSAGE(lsn_after, g_hc.persist.current_lsn,
+        "commitment must consume the retained entries — no re-delivery, "
+        "no duplicate appends (Req 3.4)");
+    pthread_mutex_unlock(&g_hc.persist.lock);
+
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_START, 80, NULL),
+        "job 80 START must still be on disk exactly once after commit");
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_START, 81, NULL),
+        "job 81 START must still be on disk exactly once after commit");
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_FINISH, 80, NULL),
+        "job 80 FINISH must still be on disk exactly once after commit");
+    TEST_ASSERT_EQUAL_INT_MESSAGE(1,
+        cbrp_count_jobstate_entries(&g_hc.persist, WAL_JOB_FINISH, 81, NULL),
+        "job 81 FINISH must still be on disk exactly once after commit");
+
+    cbrp_teardown();
+    printf("test_fact_retention_across_quorum_loss: PASS\n");
+}
+
 /* ── Test group entry point ──────────────────────────────────────────── */
 
 void test_commit_barrier_reply(void)
@@ -1277,5 +1531,8 @@ void test_commit_barrier_reply(void)
     RUN_TEST(test_set_preason_receipt_reply_fact_retained);
     RUN_TEST(test_clr_preason_receipt_reply_fact_retained);
     RUN_TEST(test_update_op_rusage_receipt_reply_facts_retained);
+    /* Fact retention across quorum loss (task 4.3, Req 3.1, 3.3, 3.4) —
+     * green on landing against tasks 1.2 + 4.2 output */
+    RUN_TEST(test_fact_retention_across_quorum_loss);
     UNITY_END();
 }