diff --git a/.kiro/specs/ha-commit-engine/tasks.md b/.kiro/specs/ha-commit-engine/tasks.md
index 31b800d..99eb9dc 100644
--- a/.kiro/specs/ha-commit-engine/tasks.md
+++ b/.kiro/specs/ha-commit-engine/tasks.md
@@ -4,7 +4,7 @@
 > Verify exact line numbers with grep before editing (research.md table has the verified anchors; files drift).
 
 - [ ] 1. Commit engine core: per-LSN evaluation and commit-index integrity
-- [ ] 1.1 Write RED tests for per-LSN majority evaluation and commit-index integrity
+- [x] 1.1 Write RED tests for per-LSN majority evaluation and commit-index integrity
   - Create `testsuite/test_commit_engine.c` against a stub `persist_t` + `replicator_t` (XCE_TESTING pattern, AAA structure) and register it in `controller_unit_test_src` (meson.build); create `src/controller/include/commit.h` with the umbrella-verbatim interface (types + prototypes only) so tests compile
   - Tests: with n_peers=3, a standby ACK for LSN M does not commit entry N>M (kills `acked_lsn > 0` counting); ACK watermark >= N from one standby plus self commits N; cumulative/out-of-order watermarks advance `committed_lsn` to the majority median, never past the highest appended LSN, never backwards; one far-lagging standby does not block majority commit; RETAIN mode returns 0 immediately without blocking
   - Observable completion: build succeeds with the new header and test file; all new test cases FAIL (red) against a stub `commit.c` or unlinked implementation
@@ -78,3 +78,10 @@
   - Audit: grep confirms no production (engine-wired) walAck path reaches the `acked_lsn > 0` counting or the `n_active == 0 → success` branch; both survive only under the deprecated `ce == NULL` test fallback
   - Observable completion: full testsuite green under ASAN; audit results recorded in the task completion notes
   - _Requirements: 1.1, 1.2, 1.3, 2.1, 2.2, 2.3, 3.1, 3.2, 3.3, 4.1, 4.2, 4.3, 4.4, 5.1, 6.1, 6.2, 6.3, 7.1, 7.2, 7.3_
+
+## Implementation Notes
+
+- (1.1) THREE PRE-EXISTING suite failures, masked until now (bug-411): test_committed_lsn_does_not_advance_on_timeout (-110), test_repl_ack_after_promote_gate_allows_jobsub (-10013), test_rdhup_primary_dispatch_gate_opens (-10013). Masking cause: each test group runs its own UNITY_BEGIN/END so the process exit code reflects only the LAST group. They live in repl/persist sync-append and quorum-gate paths — tasks 1.2/2.x/5.x touch those areas and 6.1 requires full green, so they must be fixed (or proven fixed by the engine) along the way.
+- (1.1) Full-suite output under default ASAN dies at exit via LeakSanitizer (pre-existing leaks in worker_join/rdhup_integration/start_election_async/liveness groups) without flushing stdout — use ASAN_OPTIONS=detect_leaks=0 for full-run logs or run groups standalone with -t.
+- (1.1) repl_add_standby returns the SLOT INDEX, not 0 (bug-410 note for fixture writers).
+- (1.1) commit.c is registered ONLY in controller_unit_test_src for now; production target linkage lands with task 5.3.
diff --git a/.wolf/anatomy.md b/.wolf/anatomy.md
index c2da2c1..cb66038 100644
--- a/.wolf/anatomy.md
+++ b/.wolf/anatomy.md
@@ -1,7 +1,7 @@
 # anatomy.md
 
-> Auto-maintained by OpenWolf. Last scanned: 2026-06-11T13:00:00.755Z
-> Files: 506 tracked | Anatomy hits: 0 | Misses: 0
+> Auto-maintained by OpenWolf. Last scanned: 2026-06-11T14:16:52.677Z
+> Files: 511 tracked | Anatomy hits: 0 | Misses: 0
 
 ## ./
 
@@ -262,7 +262,7 @@
 - `requirements.md` — Requirements Document (~2715 tok)
 - `research.md` — Research Log: ha-commit-engine (~1345 tok)
 - `spec.json` (~140 tok)
-- `tasks.md` — Implementation Plan: ha-commit-engine (~2682 tok)
+- `tasks.md` — Implementation Plan: ha-commit-engine (~2947 tok)
 
 ## .kiro/specs/ha-config-bootstrap/
 
@@ -703,3 +703,17 @@
 - `6664f5dc160a6acfc03af4d9881c53f8f6c650ac384b1ad9b3db47d896800af9.json` (~656 tok)
 - `669931b38fdf0060e974d68dd28abc43e49a1907405848ce9d8b3b3901518313.json` (~376 tok)
 - `66cc2d1ad85554725cecb1f215d375511474a58829464647a0d8c109818d9804.json` (~57 tok)
+
+## src/controller/
+
+- `commit.c` — STUB commit engine (ha-commit-engine task 1.1 RED): init/fini real, commit_submit -ENOSYS, commit_on_ack no-op; real impl in task 1.2 (~474 tok)
+- `meson.build` (~1094 tok)
+
+## src/controller/include/
+
+- `commit.h` — commit engine service interface (umbrella-verbatim): commit_engine_t, WAIT/RETAIN modes, init/fini/submit/on_ack/set_writable_lsn/on_membership_change (~771 tok)
+
+## src/controller/testsuite/
+
+- `controller_test.c` — include <argp.h> (~1323 tok)
+- `test_commit_engine.c` — RED tests for per-LSN majority + commit-index integrity (Reqs 1.2, 2.1-2.3, 5.1): 7 cases against stub persist_t+replicator_t (~2459 tok)
diff --git a/.wolf/buglog.json b/.wolf/buglog.json
index 798f34a..88f98df 100644
--- a/.wolf/buglog.json
+++ b/.wolf/buglog.json
@@ -7,7 +7,7 @@
       "error_message": "Significant refactor of ",
       "file": "CLAUDE.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 23→30 lines (3 removed)",
+      "fix": "Rewrote 23\u219230 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -39,7 +39,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 14→19 lines (2 removed)",
+      "fix": "Rewrote 14\u219219 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -55,7 +55,7 @@
       "error_message": "Wrong reference: g_tmpdir should be g_instdir",
       "file": "src/controller/testsuite/test_config_repl.c",
       "root_cause": "Used \"g_tmpdir\" instead of \"g_instdir\"",
-      "fix": "Changed g_tmpdir → g_instdir",
+      "fix": "Changed g_tmpdir \u2192 g_instdir",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -87,7 +87,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/config-replication-design.md",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 17→20 lines (7 removed)",
+      "fix": "Rewrote 17\u219220 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -135,7 +135,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→9 lines (2 removed)",
+      "fix": "Rewrote 6\u21929 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -151,7 +151,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 11→5 lines (5 removed)",
+      "fix": "Rewrote 11\u21925 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -167,7 +167,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/config-replication-impl-status.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 10→12 lines (4 removed) | Also: | `handle_config_request()` (primary handler) | ✅ ; | `fetch_config_from_primary()` (standby fetch) |  | Also: | `handle_upgrade_config()` | ✅ Compiled, gated | ; | `push_config_to_standbys()` | ⚠ Stub (returns 0)",
+      "fix": "Rewrote 10\u219212 lines (4 removed) | Also: | `handle_config_request()` (primary handler) | \u2705 ; | `fetch_config_from_primary()` (standby fetch) |  | Also: | `handle_upgrade_config()` | \u2705 Compiled, gated | ; | `push_config_to_standbys()` | \u26a0 Stub (returns 0)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -183,7 +183,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/config-replication-impl-status.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 17→21 lines (4 removed)",
+      "fix": "Rewrote 17\u219221 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -199,7 +199,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→7 lines (3 removed)",
+      "fix": "Rewrote 6\u21927 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -215,7 +215,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 13→24 lines (6 removed)",
+      "fix": "Rewrote 13\u219224 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -231,7 +231,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 4→10 lines (4 removed)",
+      "fix": "Rewrote 4\u219210 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -247,7 +247,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 8→9 lines (4 removed)",
+      "fix": "Rewrote 8\u21929 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -262,7 +262,7 @@
       "timestamp": "2026-05-25T11:05:06.112Z",
       "error_message": "Missing error handling in send",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -278,7 +278,7 @@
       "timestamp": "2026-05-25T11:06:26.871Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -295,7 +295,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 23→40 lines (2 removed)",
+      "fix": "Rewrote 23\u219240 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -326,7 +326,7 @@
       "timestamp": "2026-05-25T11:32:18.221Z",
       "error_message": "Missing error handling in types",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -343,7 +343,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "36 lines replaced/restructured",
-      "fix": "Rewrote 63→79 lines (36 removed) | Also: 6. **No simultaneous primaries**: Only one node ca; 7. **Majority-commit WAL replication (CP writes)** | Also: - `handle_request_vote()` handler on all peers; - Config tag + LSN comparison for vote decision",
+      "fix": "Rewrote 63\u219279 lines (36 removed) | Also: 6. **No simultaneous primaries**: Only one node ca; 7. **Majority-commit WAL replication (CP writes)** | Also: - `handle_request_vote()` handler on all peers; - Config tag + LSN comparison for vote decision",
       "tags": [
         "auto-detected",
         "refactor",
@@ -391,7 +391,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 11→28 lines (3 removed)",
+      "fix": "Rewrote 11\u219228 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -439,7 +439,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 13→28 lines (2 removed)",
+      "fix": "Rewrote 13\u219228 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -471,7 +471,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "11 lines replaced/restructured",
-      "fix": "Rewrote 17→28 lines (11 removed)",
+      "fix": "Rewrote 17\u219228 lines (11 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -487,7 +487,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 28→45 lines (4 removed)",
+      "fix": "Rewrote 28\u219245 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -519,7 +519,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "13 lines replaced/restructured",
-      "fix": "Rewrote 22→35 lines (13 removed) | Also: **Files**: `src/controller/main.c`, `src/lib/netio; 1. **Peer-count validation in `main.c`** (before `",
+      "fix": "Rewrote 22\u219235 lines (13 removed) | Also: **Files**: `src/controller/main.c`, `src/lib/netio; 1. **Peer-count validation in `main.c`** (before `",
       "tags": [
         "auto-detected",
         "refactor",
@@ -567,7 +567,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→7 lines (2 removed)",
+      "fix": "Rewrote 4\u21927 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -583,7 +583,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→11 lines (2 removed)",
+      "fix": "Rewrote 9\u219211 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -631,7 +631,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "18 lines replaced/restructured",
-      "fix": "Rewrote 29→34 lines (18 removed)",
+      "fix": "Rewrote 29\u219234 lines (18 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -679,7 +679,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 13→29 lines (8 removed) | Also: 8. **Register OP_requestVote handler** in cluster'; switch at line ~195): since vtaskmgr and iomgr run",
+      "fix": "Rewrote 13\u219229 lines (8 removed) | Also: 8. **Register OP_requestVote handler** in cluster'; switch at line ~195): since vtaskmgr and iomgr run",
       "tags": [
         "auto-detected",
         "refactor",
@@ -695,7 +695,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 13→60 lines (9 removed) | Also: 3. **Replace timestamp polling with `EPOLLRDHUP`**; is replaced by an epoll event handler. On `EPOLLRD | Also: - **Split vote recovery**: After failing quorum, s; (using existing `jitter_seed` xorshift64), retry o",
+      "fix": "Rewrote 13\u219260 lines (9 removed) | Also: 3. **Replace timestamp polling with `EPOLLRDHUP`**; is replaced by an epoll event handler. On `EPOLLRD | Also: - **Split vote recovery**: After failing quorum, s; (using existing `jitter_seed` xorshift64), retry o",
       "tags": [
         "auto-detected",
         "refactor",
@@ -711,7 +711,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 8→34 lines (8 removed) | Also: 2. **Replace `ha_check_heartbeat_nocluster()` with; - On `EPOLLRDHUP` from `primary_ctrl_fd`: **close ",
+      "fix": "Rewrote 8\u219234 lines (8 removed) | Also: 2. **Replace `ha_check_heartbeat_nocluster()` with; - On `EPOLLRDHUP` from `primary_ctrl_fd`: **close ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -726,7 +726,7 @@
       "timestamp": "2026-05-26T13:51:32.274Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: - [ ] `test_heartbeat_carries_committed_lsn`: heartbeat payl; `committed_lsn`; standby updates `ha.last_known_committed_ls",
       "tags": [
         "auto-detected",
@@ -742,7 +742,7 @@
       "timestamp": "2026-05-26T13:52:49.044Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: // Catch-up gate (Clarification 6): behind nodes must not in; if (c->ha.in_catch_up) {",
       "tags": [
         "auto-detected",
@@ -758,7 +758,7 @@
       "timestamp": "2026-05-27T03:02:34.912Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: name, key, applied_lsn, and config_tag immediately after TCP; - [ ] `test_ctrl_hello_registers_standby_in_repl`: handle_ct",
       "tags": [
         "auto-detected",
@@ -774,7 +774,7 @@
       "timestamp": "2026-05-27T03:03:26.016Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -791,7 +791,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 37→51 lines (9 removed)",
+      "fix": "Rewrote 37\u219251 lines (9 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -807,7 +807,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 8→23 lines (8 removed) | Also: - [ ] `test_persistent_conn_single_node_noop`: ha_; when n_peers == 1; primary_ctrl_fd remains -1 (uni",
+      "fix": "Rewrote 8\u219223 lines (8 removed) | Also: - [ ] `test_persistent_conn_single_node_noop`: ha_; when n_peers == 1; primary_ctrl_fd remains -1 (uni",
       "tags": [
         "auto-detected",
         "refactor",
@@ -823,7 +823,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 34→51 lines (10 removed)",
+      "fix": "Rewrote 34\u219251 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -838,7 +838,7 @@
       "timestamp": "2026-05-27T03:56:41.037Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -855,7 +855,7 @@
       "error_message": "Significant refactor of ",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
       "root_cause": "11 lines replaced/restructured",
-      "fix": "Rewrote 21→28 lines (11 removed)",
+      "fix": "Rewrote 21\u219228 lines (11 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -870,7 +870,7 @@
       "timestamp": "2026-05-27T03:59:16.145Z",
       "error_message": "Missing error handling in unknown",
       "file": "../../../../../claude/.claude/plans/prancy-herding-nest.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -887,7 +887,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 10→13 lines (2 removed) | Also: **Replace LSF priority election with Raft-style qu; Five focused changes: | Also: 8. **Hard SSL/cert gate**: Controller refuses to b; 9. **Observable via logs**: Election results, vote",
+      "fix": "Rewrote 10\u219213 lines (2 removed) | Also: **Replace LSF priority election with Raft-style qu; Five focused changes: | Also: 8. **Hard SSL/cert gate**: Controller refuses to b; 9. **Observable via logs**: Election results, vote",
       "tags": [
         "auto-detected",
         "refactor",
@@ -902,7 +902,7 @@
       "timestamp": "2026-05-27T06:45:34.951Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -919,7 +919,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/brief.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 8→11 lines (2 removed)",
+      "fix": "Rewrote 8\u219211 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -967,7 +967,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→7 lines (2 removed)",
+      "fix": "Rewrote 5\u21927 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -982,7 +982,7 @@
       "timestamp": "2026-05-28T02:55:40.362Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/schema/controller.capnp",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -999,7 +999,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→40 lines (2 removed)",
+      "fix": "Rewrote 5\u219240 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1014,7 +1014,7 @@
       "timestamp": "2026-05-28T03:39:14.341Z",
       "error_message": "Missing error handling in struct",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1030,7 +1030,7 @@
       "timestamp": "2026-05-28T03:40:17.891Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1047,7 +1047,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→6 lines (2 removed)",
+      "fix": "Rewrote 4\u21926 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1095,7 +1095,7 @@
       "error_message": "Wrong reference: vcpus should be nres",
       "file": "src/include/clusterconfig.h",
       "root_cause": "Used \"vcpus\" instead of \"nres\"",
-      "fix": "Changed vcpus → nres",
+      "fix": "Changed vcpus \u2192 nres",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1111,7 +1111,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 12→6 lines (8 removed)",
+      "fix": "Rewrote 12\u21926 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1143,7 +1143,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_startup.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 12→18 lines (8 removed)",
+      "fix": "Rewrote 12\u219218 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1159,7 +1159,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 109→144 lines (4 removed)",
+      "fix": "Rewrote 109\u2192144 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1206,7 +1206,7 @@
       "timestamp": "2026-05-28T07:13:42.089Z",
       "error_message": "Missing error handling in struct",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1222,7 +1222,7 @@
       "timestamp": "2026-05-28T07:14:03.724Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1255,7 +1255,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "14 lines replaced/restructured",
-      "fix": "Rewrote 92→344 lines (14 removed)",
+      "fix": "Rewrote 92\u2192344 lines (14 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1271,7 +1271,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 25→49 lines (6 removed)",
+      "fix": "Rewrote 25\u219249 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1335,7 +1335,7 @@
       "error_message": "Wrong reference: capn_str_null should be str",
       "file": "src/controller/config_repl.c",
       "root_cause": "Used \"capn_str_null\" instead of \"str\"",
-      "fix": "Changed capn_str_null → str",
+      "fix": "Changed capn_str_null \u2192 str",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1351,7 +1351,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 17→84 lines (7 removed)",
+      "fix": "Rewrote 17\u219284 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1398,7 +1398,7 @@
       "timestamp": "2026-05-28T13:34:49.513Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1415,7 +1415,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/repl.h",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 3→4 lines (3 removed) | Also: /* ACK handling — call from io_worker read callbac; /* Majority-quorum ACK wait — stub until task 7.3 ",
+      "fix": "Rewrote 3\u21924 lines (3 removed) | Also: /* ACK handling \u2014 call from io_worker read callbac; /* Majority-quorum ACK wait \u2014 stub until task 7.3 ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1430,7 +1430,7 @@
       "timestamp": "2026-05-28T13:52:52.636Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1447,7 +1447,7 @@
       "error_message": "Wrong reference: in_catch_up should be acked_config_lsn",
       "file": "src/controller/repl.c",
       "root_cause": "Used \"in_catch_up\" instead of \"acked_config_lsn\"",
-      "fix": "Changed in_catch_up → acked_config_lsn",
+      "fix": "Changed in_catch_up \u2192 acked_config_lsn",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1479,7 +1479,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/persist.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 20→29 lines (4 removed)",
+      "fix": "Rewrote 20\u219229 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1495,7 +1495,7 @@
       "error_message": "Wrong reference: ha_state_t should be _Atomic",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"ha_state_t\" instead of \"_Atomic\"",
-      "fix": "Changed ha_state_t → _Atomic",
+      "fix": "Changed ha_state_t \u2192 _Atomic",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1511,7 +1511,7 @@
       "error_message": "Wrong reference: socket should be epoll",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"socket\" instead of \"epoll\"",
-      "fix": "Changed socket → epoll",
+      "fix": "Changed socket \u2192 epoll",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1559,7 +1559,7 @@
       "error_message": "Wrong reference: XCE_ERR_STANDBY should be E_XCE_STANDBY",
       "file": "src/lib/request.c",
       "root_cause": "Used \"XCE_ERR_STANDBY\" instead of \"E_XCE_STANDBY\"",
-      "fix": "Changed XCE_ERR_STANDBY → E_XCE_STANDBY",
+      "fix": "Changed XCE_ERR_STANDBY \u2192 E_XCE_STANDBY",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1575,7 +1575,7 @@
       "error_message": "Wrong reference: XCE_ERR_NOT_READY should be E_XCE_NOT_READY",
       "file": "src/lib/testsuite/test_libxce_retry.c",
       "root_cause": "Used \"XCE_ERR_NOT_READY\" instead of \"E_XCE_NOT_READY\"",
-      "fix": "Changed XCE_ERR_NOT_READY → E_XCE_NOT_READY",
+      "fix": "Changed XCE_ERR_NOT_READY \u2192 E_XCE_NOT_READY",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1590,7 +1590,7 @@
       "timestamp": "2026-05-29T03:27:20.556Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1606,7 +1606,7 @@
       "timestamp": "2026-05-29T03:29:44.753Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/config_repl.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1623,7 +1623,7 @@
       "error_message": "Wrong reference: data should be ctrl_hello_reply_t",
       "file": "src/include/typemap.h",
       "root_cause": "Used \"data\" instead of \"ctrl_hello_reply_t\"",
-      "fix": "Changed data → ctrl_hello_reply_t",
+      "fix": "Changed data \u2192 ctrl_hello_reply_t",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1638,7 +1638,7 @@
       "timestamp": "2026-05-29T03:53:48.559Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/schema/controller.capnp",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1654,7 +1654,7 @@
       "timestamp": "2026-05-29T03:54:23.205Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: wal_catchup_entry_t*      walcatchupentrymsg;; snapshot_transfer_t*      snapshottransfermsg; | Also: /* Forward declarations for types defined later in this file; typedef struct snapshot_transfer_t      snapshot_transfer_fw",
       "tags": [
         "auto-detected",
@@ -1671,7 +1671,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→5 lines (2 removed)",
+      "fix": "Rewrote 5\u21925 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1687,7 +1687,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→3 lines (2 removed)",
+      "fix": "Rewrote 5\u21923 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1702,7 +1702,7 @@
       "timestamp": "2026-05-29T04:04:12.693Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1719,7 +1719,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 10→12 lines (2 removed)",
+      "fix": "Rewrote 10\u219212 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1751,7 +1751,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→20 lines (5 removed)",
+      "fix": "Rewrote 10\u219220 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1783,7 +1783,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 18→20 lines (9 removed)",
+      "fix": "Rewrote 18\u219220 lines (9 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1798,7 +1798,7 @@
       "timestamp": "2026-05-29T10:59:37.144Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1815,7 +1815,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 20→36 lines (10 removed) | Also: ### 11.1 Concurrent Startup (3 nodes); - Result: PASS / FAIL",
+      "fix": "Rewrote 20\u219236 lines (10 removed) | Also: ### 11.1 Concurrent Startup (3 nodes); - Result: PASS / FAIL",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1831,7 +1831,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 29→45 lines (5 removed)",
+      "fix": "Rewrote 29\u219245 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1847,7 +1847,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_bootstrap.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→8 lines (2 removed)",
+      "fix": "Rewrote 4\u21928 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1879,7 +1879,7 @@
       "error_message": "Wrong reference: nres should be vcpus",
       "file": "src/include/clusterconfig.h",
       "root_cause": "Used \"nres\" instead of \"vcpus\"",
-      "fix": "Changed nres → vcpus",
+      "fix": "Changed nres \u2192 vcpus",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1895,7 +1895,7 @@
       "error_message": "Wrong reference: data should be request_vote_reply_t",
       "file": "src/include/typemap.h",
       "root_cause": "Used \"data\" instead of \"request_vote_reply_t\"",
-      "fix": "Changed data → request_vote_reply_t",
+      "fix": "Changed data \u2192 request_vote_reply_t",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1911,7 +1911,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 19→25 lines (10 removed)",
+      "fix": "Rewrote 19\u219225 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1926,7 +1926,7 @@
       "timestamp": "2026-05-29T16:36:41.731Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -1943,7 +1943,7 @@
       "error_message": "Wrong reference: cluster_init_phase2 should be cluster_register_listener",
       "file": "src/controller/include/cluster.h",
       "root_cause": "Used \"cluster_init_phase2\" instead of \"cluster_register_listener\"",
-      "fix": "Changed cluster_init_phase2 → cluster_register_listener",
+      "fix": "Changed cluster_init_phase2 \u2192 cluster_register_listener",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -1975,7 +1975,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "30 lines replaced/restructured",
-      "fix": "Rewrote 79→61 lines (30 removed)",
+      "fix": "Rewrote 79\u219261 lines (30 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -1991,7 +1991,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/xce/cluster_def.h",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 8→15 lines (5 removed)",
+      "fix": "Rewrote 8\u219215 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2007,7 +2007,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→16 lines (4 removed)",
+      "fix": "Rewrote 7\u219216 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2023,7 +2023,7 @@
       "error_message": "Wrong reference: CTRL_PERF_NHASH should be c",
       "file": "src/controller/cluster.c",
       "root_cause": "Used \"CTRL_PERF_NHASH\" instead of \"c\"",
-      "fix": "Changed CTRL_PERF_NHASH → c",
+      "fix": "Changed CTRL_PERF_NHASH \u2192 c",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2039,7 +2039,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "36 lines replaced/restructured",
-      "fix": "Rewrote 77→41 lines (36 removed)",
+      "fix": "Rewrote 77\u219241 lines (36 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2055,7 +2055,7 @@
       "error_message": "Wrong reference: true should be false",
       "file": ".claude/skills/xce-build/SKILL.md",
       "root_cause": "Used \"true\" instead of \"false\"",
-      "fix": "Changed true → false",
+      "fix": "Changed true \u2192 false",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2071,7 +2071,7 @@
       "error_message": "Wrong reference: 120 should be 300",
       "file": "src/controller/meson.build",
       "root_cause": "Used \"120\" instead of \"300\"",
-      "fix": "Changed 120 → 300",
+      "fix": "Changed 120 \u2192 300",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2086,7 +2086,7 @@
       "timestamp": "2026-05-30T02:37:40.267Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/myapp.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2103,7 +2103,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 15→21 lines (2 removed)",
+      "fix": "Rewrote 15\u219221 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2119,7 +2119,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→13 lines (2 removed)",
+      "fix": "Rewrote 9\u219213 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2135,7 +2135,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 10→27 lines (3 removed)",
+      "fix": "Rewrote 10\u219227 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2166,8 +2166,8 @@
       "timestamp": "2026-05-30T06:38:09.325Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* After election determines role: */; int is_first_boot = !c->running;  /* running=1 only after cl | Also: #### `ha_dispatch_gate` — CTRL_PRIMARY_COMMITTING case; ```c | Also: ### 3-node startup — ctrl-a wins (with COMMITTING phase); participant PeerC as ctrl-c endpoint | Also: - **`ha_start_election_async()` is fully non-blocking**: Arm; - *Initial startup* (`ha->phase2_done == 0`): calls `cluster",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* After election determines role: */; int is_first_boot = !c->running;  /* running=1 only after cl | Also: #### `ha_dispatch_gate` \u2014 CTRL_PRIMARY_COMMITTING case; ```c | Also: ### 3-node startup \u2014 ctrl-a wins (with COMMITTING phase); participant PeerC as ctrl-c endpoint | Also: - **`ha_start_election_async()` is fully non-blocking**: Arm; - *Initial startup* (`ha->phase2_done == 0`): calls `cluster",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -2183,7 +2183,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 19→26 lines (4 removed) | Also: ├── ha.h                 # Add to ha_state_t: clie; │                        #          ha_repl_ack_re | Also: └── myapp.c              # Restructured: phase1 + ; #         for(;;) retry loop, cluster_init_phase2,",
+      "fix": "Rewrote 19\u219226 lines (4 removed) | Also: \u251c\u2500\u2500 ha.h                 # Add to ha_state_t: clie; \u2502                        #          ha_repl_ack_re | Also: \u2514\u2500\u2500 myapp.c              # Restructured: phase1 + ; #         for(;;) retry loop, cluster_init_phase2,",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2199,7 +2199,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/election-iomgr-refactor/design.md",
       "root_cause": "12 lines replaced/restructured",
-      "fix": "Rewrote 15→20 lines (12 removed) | Also: - `src/controller/ha.h` — Add `client_ssl_ctx`, `r; - `src/controller/ha.c` — Main changes above; `ha_ | Also: ├── delay.c              # Add delay_task_ms() (ms; │                        # Add delay_task_cancel()",
+      "fix": "Rewrote 15\u219220 lines (12 removed) | Also: - `src/controller/ha.h` \u2014 Add `client_ssl_ctx`, `r; - `src/controller/ha.c` \u2014 Main changes above; `ha_ | Also: \u251c\u2500\u2500 delay.c              # Add delay_task_ms() (ms; \u2502                        # Add delay_task_cancel()",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2231,7 +2231,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/delay.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 53→85 lines (3 removed)",
+      "fix": "Rewrote 53\u219285 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2247,7 +2247,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→8 lines (4 removed)",
+      "fix": "Rewrote 7\u21928 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2327,7 +2327,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 14→17 lines (3 removed)",
+      "fix": "Rewrote 14\u219217 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2359,7 +2359,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_start_election_async.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 24→42 lines (8 removed)",
+      "fix": "Rewrote 24\u219242 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2390,7 +2390,7 @@
       "timestamp": "2026-05-30T11:08:59.808Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2406,7 +2406,7 @@
       "timestamp": "2026-05-30T11:09:47.905Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2423,7 +2423,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 62→164 lines (8 removed) | Also: /* Store candidate own tag/lsn in votes[0] for eva; * n_peers==1 → n_other==0, so votes[] has 0 entrie | Also: * election_timeout_ctx_t: argument for the delay_t; * ha_elect_evaluate_and_signal when the election d",
+      "fix": "Rewrote 62\u2192164 lines (8 removed) | Also: /* Store candidate own tag/lsn in votes[0] for eva; * n_peers==1 \u2192 n_other==0, so votes[] has 0 entrie | Also: * election_timeout_ctx_t: argument for the delay_t; * ha_elect_evaluate_and_signal when the election d",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2454,7 +2454,7 @@
       "timestamp": "2026-05-30T11:43:44.829Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: /* Push config to standbys with lower config_tag (Req 7.1) *; #ifdef XCE_TESTING",
       "tags": [
         "auto-detected",
@@ -2470,7 +2470,7 @@
       "timestamp": "2026-05-30T11:44:15.059Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2486,7 +2486,7 @@
       "timestamp": "2026-05-30T11:45:24.946Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -2519,7 +2519,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 22→32 lines (2 removed)",
+      "fix": "Rewrote 22\u219232 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2631,7 +2631,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 15→5 lines (10 removed)",
+      "fix": "Rewrote 15\u21925 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2695,7 +2695,7 @@
       "error_message": "Wrong reference: third should be second",
       "file": "src/controller/testsuite/test_ha_repl_ack.c",
       "root_cause": "Used \"third\" instead of \"second\"",
-      "fix": "Changed third → second",
+      "fix": "Changed third \u2192 second",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -2727,7 +2727,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→15 lines (5 removed)",
+      "fix": "Rewrote 10\u219215 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2759,7 +2759,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "15 lines replaced/restructured",
-      "fix": "Rewrote 23→10 lines (15 removed)",
+      "fix": "Rewrote 23\u219210 lines (15 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2775,7 +2775,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→9 lines (2 removed)",
+      "fix": "Rewrote 5\u21929 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2791,7 +2791,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 14→16 lines (2 removed)",
+      "fix": "Rewrote 14\u219216 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2823,7 +2823,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "12 lines replaced/restructured",
-      "fix": "Rewrote 15→20 lines (12 removed)",
+      "fix": "Rewrote 15\u219220 lines (12 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2839,7 +2839,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→8 lines (2 removed)",
+      "fix": "Rewrote 4\u21928 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2855,7 +2855,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/xce.build/lib/controller.capnp.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 11→19 lines (4 removed) | Also: encode_Data_ptr(cs, &(d->sha256), s->sha256);; encode_Data_ptr(cs, &(d->bytes), s->bytes);",
+      "fix": "Rewrote 11\u219219 lines (4 removed) | Also: encode_Data_ptr(cs, &(d->sha256), s->sha256);; encode_Data_ptr(cs, &(d->bytes), s->bytes);",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2871,7 +2871,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "28 lines replaced/restructured",
-      "fix": "Rewrote 31→4 lines (28 removed)",
+      "fix": "Rewrote 31\u21924 lines (28 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2887,7 +2887,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 8→18 lines (4 removed)",
+      "fix": "Rewrote 8\u219218 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2903,7 +2903,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/request.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 10→19 lines (4 removed)",
+      "fix": "Rewrote 10\u219219 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2935,7 +2935,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→10 lines (2 removed)",
+      "fix": "Rewrote 5\u219210 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2951,7 +2951,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→11 lines (2 removed)",
+      "fix": "Rewrote 9\u219211 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -2966,7 +2966,7 @@
       "timestamp": "2026-05-31T04:11:45.534Z",
       "error_message": "Missing error handling in struct",
       "file": ".kiro/specs/raft-library/design.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: Caller->>RaftSM: raft_on_vote_request(state, from, term); alt term < current_term",
       "tags": [
         "auto-detected",
@@ -2983,7 +2983,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/raft-library/design.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 8→26 lines (5 removed) | Also: * raft_init: initialize state for a node.; * All required callbacks (except on_trace and on_v | Also: - C standard library only (`stdint.h`, `pthread.h`; - `raft.c` may include `<stdatomic.h>` for lock-fr | Also: | Threading | `pthread_mutex_t` (caller-owned) | P; | Atomics | None in library | Caller uses atomics ",
+      "fix": "Rewrote 8\u219226 lines (5 removed) | Also: * raft_init: initialize state for a node.; * All required callbacks (except on_trace and on_v | Also: - C standard library only (`stdint.h`, `pthread.h`; - `raft.c` may include `<stdatomic.h>` for lock-fr | Also: | Threading | `pthread_mutex_t` (caller-owned) | P; | Atomics | None in library | Caller uses atomics ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3014,7 +3014,7 @@
       "timestamp": "2026-05-31T04:58:21.609Z",
       "error_message": "Missing error handling in RAFT_H",
       "file": "src/lib/raft/raft.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3063,7 +3063,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/testsuite/test_raft.c",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 77→107 lines (8 removed)",
+      "fix": "Rewrote 77\u2192107 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3079,7 +3079,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 9→62 lines (5 removed)",
+      "fix": "Rewrote 9\u219262 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3095,7 +3095,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 8→57 lines (4 removed)",
+      "fix": "Rewrote 8\u219257 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3111,7 +3111,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 15→38 lines (4 removed)",
+      "fix": "Rewrote 15\u219238 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3127,7 +3127,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft_sim.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→3 lines (2 removed)",
+      "fix": "Rewrote 6\u21923 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3159,7 +3159,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "32 lines replaced/restructured",
-      "fix": "Rewrote 49→16 lines (32 removed)",
+      "fix": "Rewrote 49\u219216 lines (32 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3174,7 +3174,7 @@
       "timestamp": "2026-05-31T07:26:39.758Z",
       "error_message": "Missing error handling in before",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3191,7 +3191,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→19 lines (3 removed) | Also: typedef struct {; ha_state_t     *ha; | Also: /* ── Type definitions needed by ha_elect_evaluate; *",
+      "fix": "Rewrote 6\u219219 lines (3 removed) | Also: typedef struct {; ha_state_t     *ha; | Also: /* \u2500\u2500 Type definitions needed by ha_elect_evaluate; *",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3207,7 +3207,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "167 lines replaced/restructured",
-      "fix": "Rewrote 291→137 lines (167 removed) | Also: /* Clear voted_for: the old primary is dead; any v; * is stale and must not block the new election. */",
+      "fix": "Rewrote 291\u2192137 lines (167 removed) | Also: /* Clear voted_for: the old primary is dead; any v; * is stale and must not block the new election. */",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3223,7 +3223,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "12 lines replaced/restructured",
-      "fix": "Rewrote 28→68 lines (12 removed)",
+      "fix": "Rewrote 28\u219268 lines (12 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3239,7 +3239,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 16→21 lines (2 removed) | Also: /* Task 6.3: delegate vote reply accumulation to r; * raft_on_vote_reply owns quorum tracking and fire",
+      "fix": "Rewrote 16\u219221 lines (2 removed) | Also: /* Task 6.3: delegate vote reply accumulation to r; * raft_on_vote_reply owns quorum tracking and fire",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3255,7 +3255,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 10→4 lines (7 removed)",
+      "fix": "Rewrote 10\u21924 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3271,7 +3271,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 5→14 lines (2 removed)",
+      "fix": "Rewrote 5\u219214 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3284,7 +3284,7 @@
     {
       "id": "bug-206",
       "timestamp": "2026-05-31T08:40:00.000Z",
-      "error_message": "test_vote_reply_handler_term_fencing FAIL: Expected 10 Was 3 — ha->term must be atomically updated to peer term when peer term > ours",
+      "error_message": "test_vote_reply_handler_term_fencing FAIL: Expected 10 Was 3 \u2014 ha->term must be atomically updated to peer term when peer term > ours",
       "file": "src/controller/ha.c",
       "root_cause": "vote_reply_msg_handler delegated term fencing entirely to raft_cb_become_follower (via raft_on_vote_reply). In XCE_TESTING builds, vote_reply_dispatch calls xce_vote_reply_hook and returns early, bypassing raft_on_vote_reply and thus never updating ha->term.",
       "fix": "Added explicit CAS loop in vote_reply_msg_handler before vote_reply_dispatch to advance ha->term when vr_term > ha->term. This applies on both the production path and the XCE_TESTING hook path.",
@@ -3306,7 +3306,7 @@
       "error_message": "Wrong reference: test_raft_init_zero_peers_returns_einval should be test_raft_init_even_peers_returns_einval",
       "file": "src/lib/testsuite/test_raft.c",
       "root_cause": "Used \"test_raft_init_zero_peers_returns_einval\" instead of \"test_raft_init_even_peers_returns_einval\"",
-      "fix": "Changed test_raft_init_zero_peers_returns_einval → test_raft_init_even_peers_returns_einval",
+      "fix": "Changed test_raft_init_zero_peers_returns_einval \u2192 test_raft_init_even_peers_returns_einval",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3319,7 +3319,7 @@
     {
       "id": "bug-208",
       "timestamp": "2026-05-31",
-      "error_message": "ASAN LeakSanitizer: detected memory leaks in scheduler testsuite — build exits with error code",
+      "error_message": "ASAN LeakSanitizer: detected memory leaks in scheduler testsuite \u2014 build exits with error code",
       "file": "src/scheduler/testsuite/test.c",
       "root_cause": "sched_meet_host_selection() lazily allocates w->host_eval_ctx via build_host_eval_ctx(). Four test functions (test_meet_host_selection_always_true_passes, test_meet_host_selection_always_false_fails, test_meet_host_selection_numeric_match, test_meet_host_selection_string_match) called zarray_fini() without first calling sched_worker_release_host_ctx() to free the lazily-allocated host_eval_ctx.",
       "fix": "Added sched_worker_release_host_ctx(&w) calls before zarray_fini() in all four affected test functions.",
@@ -3356,7 +3356,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "24 lines replaced/restructured",
-      "fix": "Rewrote 28→3 lines (24 removed) | Also: if (my_config_tag == 0) {; INFO(\"ha_start_election_async: no local config (ta",
+      "fix": "Rewrote 28\u21923 lines (24 removed) | Also: if (my_config_tag == 0) {; INFO(\"ha_start_election_async: no local config (ta",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3372,7 +3372,7 @@
       "error_message": "Wrong reference: 2000 should be 5000",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"2000\" instead of \"5000\"",
-      "fix": "Changed 2000 → 5000",
+      "fix": "Changed 2000 \u2192 5000",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3388,7 +3388,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 15→25 lines (3 removed)",
+      "fix": "Rewrote 15\u219225 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3404,7 +3404,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 10→14 lines (8 removed)",
+      "fix": "Rewrote 10\u219214 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3420,7 +3420,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→17 lines (4 removed) | Also: /* Trigger async config fetch from primary so stan; #ifndef XCE_TESTING | Also: handle_request_vote_reply(vctx->ha, vctx->ctx, vct; /* Fix 5 (HIGH): do NOT free vctx here.",
+      "fix": "Rewrote 7\u219217 lines (4 removed) | Also: /* Trigger async config fetch from primary so stan; #ifndef XCE_TESTING | Also: handle_request_vote_reply(vctx->ha, vctx->ctx, vct; /* Fix 5 (HIGH): do NOT free vctx here.",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3467,7 +3467,7 @@
       "timestamp": "2026-05-31T12:54:26.372Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3484,7 +3484,7 @@
       "error_message": "Wrong reference: Request_body_nodata should be Request_body_nomsg",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"Request_body_nodata\" instead of \"Request_body_nomsg\"",
-      "fix": "Changed Request_body_nodata → Request_body_nomsg",
+      "fix": "Changed Request_body_nodata \u2192 Request_body_nomsg",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3500,7 +3500,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 10→18 lines (4 removed)",
+      "fix": "Rewrote 10\u219218 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3516,7 +3516,7 @@
       "error_message": "Wrong reference: vote_reply_msg_handler should be vote_reply_msg_handler_for_test",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"vote_reply_msg_handler\" instead of \"vote_reply_msg_handler_for_test\"",
-      "fix": "Changed vote_reply_msg_handler → vote_reply_msg_handler_for_test",
+      "fix": "Changed vote_reply_msg_handler \u2192 vote_reply_msg_handler_for_test",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3532,7 +3532,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 13→36 lines (3 removed)",
+      "fix": "Rewrote 13\u219236 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3548,7 +3548,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "20 lines replaced/restructured",
-      "fix": "Rewrote 36→13 lines (20 removed)",
+      "fix": "Rewrote 36\u219213 lines (20 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3563,7 +3563,7 @@
       "timestamp": "2026-06-01T01:49:30.537Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3596,7 +3596,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "42 lines replaced/restructured",
-      "fix": "Rewrote 64→19 lines (42 removed)",
+      "fix": "Rewrote 64\u219219 lines (42 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3611,7 +3611,7 @@
       "timestamp": "2026-06-01T02:27:55.942Z",
       "error_message": "Missing error handling in struct",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -3628,7 +3628,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→14 lines (5 removed)",
+      "fix": "Rewrote 10\u219214 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3644,7 +3644,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 5→15 lines (5 removed)",
+      "fix": "Rewrote 5\u219215 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3660,7 +3660,7 @@
       "error_message": "Wrong operator: && should be !=",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"&&\" instead of \"!=\"",
-      "fix": "Changed operator && → !=",
+      "fix": "Changed operator && \u2192 !=",
       "tags": [
         "auto-detected",
         "operator-fix",
@@ -3676,7 +3676,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 16→7 lines (10 removed)",
+      "fix": "Rewrote 16\u21927 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3692,7 +3692,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "140 lines replaced/restructured",
-      "fix": "Rewrote 173→11 lines (140 removed)",
+      "fix": "Rewrote 173\u219211 lines (140 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3708,7 +3708,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "16 lines replaced/restructured",
-      "fix": "Rewrote 25→12 lines (16 removed)",
+      "fix": "Rewrote 25\u219212 lines (16 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3740,7 +3740,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 31→37 lines (2 removed)",
+      "fix": "Rewrote 31\u219237 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3788,7 +3788,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "21 lines replaced/restructured",
-      "fix": "Rewrote 28→5 lines (21 removed)",
+      "fix": "Rewrote 28\u21925 lines (21 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3852,7 +3852,7 @@
       "error_message": "Wrong reference: test_ha_connect should be test_ha_ctrlhello",
       "file": "src/controller/testsuite/controller_test.c",
       "root_cause": "Used \"test_ha_connect\" instead of \"test_ha_ctrlhello\"",
-      "fix": "Changed test_ha_connect → test_ha_ctrlhello",
+      "fix": "Changed test_ha_connect \u2192 test_ha_ctrlhello",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3868,7 +3868,7 @@
       "error_message": "Wrong reference: vcpu should be vcpus",
       "file": "src/tools/deploy-ha.sh",
       "root_cause": "Used \"vcpu\" instead of \"vcpus\"",
-      "fix": "Changed vcpu → vcpus",
+      "fix": "Changed vcpu \u2192 vcpus",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -3884,7 +3884,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "10 lines replaced/restructured",
-      "fix": "Rewrote 10→6 lines (10 removed)",
+      "fix": "Rewrote 10\u21926 lines (10 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3900,7 +3900,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 7→22 lines (2 removed)",
+      "fix": "Rewrote 7\u219222 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3916,7 +3916,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 5→10 lines (3 removed)",
+      "fix": "Rewrote 5\u219210 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3932,7 +3932,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/request.c",
       "root_cause": "32 lines replaced/restructured",
-      "fix": "Rewrote 49→60 lines (32 removed)",
+      "fix": "Rewrote 49\u219260 lines (32 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3948,7 +3948,7 @@
       "error_message": "Significant refactor of ",
       "file": ".claude/skills/xce-deploy-ha/SKILL.md",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 17→32 lines (7 removed)",
+      "fix": "Rewrote 17\u219232 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3964,7 +3964,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→9 lines (3 removed)",
+      "fix": "Rewrote 6\u21929 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -3979,7 +3979,7 @@
       "timestamp": "2026-06-01T07:28:15.703Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_ha_connection_reuse.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4012,7 +4012,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_connection_reuse.c",
       "root_cause": "19 lines replaced/restructured",
-      "fix": "Rewrote 67→86 lines (19 removed)",
+      "fix": "Rewrote 67\u219286 lines (19 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4044,7 +4044,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-heartbeat-liveness/requirements.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 10→17 lines (5 removed)",
+      "fix": "Rewrote 10\u219217 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4060,7 +4060,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→10 lines (2 removed)",
+      "fix": "Rewrote 6\u219210 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4092,7 +4092,7 @@
       "error_message": "Wrong reference: startup_validation should be testsuite_test_ha_liveness",
       "file": "src/xce.build/build.ninja",
       "root_cause": "Used \"startup_validation\" instead of \"testsuite_test_ha_liveness\"",
-      "fix": "Changed startup_validation → testsuite_test_ha_liveness",
+      "fix": "Changed startup_validation \u2192 testsuite_test_ha_liveness",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -4108,7 +4108,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "76 lines replaced/restructured",
-      "fix": "Rewrote 112→155 lines (76 removed)",
+      "fix": "Rewrote 112\u2192155 lines (76 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4124,7 +4124,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_liveness.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 21→24 lines (5 removed)",
+      "fix": "Rewrote 21\u219224 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4140,7 +4140,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_failover.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 29→47 lines (7 removed)",
+      "fix": "Rewrote 29\u219247 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4172,7 +4172,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "22 lines replaced/restructured",
-      "fix": "Rewrote 53→21 lines (22 removed)",
+      "fix": "Rewrote 53\u219221 lines (22 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4188,7 +4188,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 8→10 lines (2 removed)",
+      "fix": "Rewrote 8\u219210 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4219,7 +4219,7 @@
       "timestamp": "2026-06-03T05:20:44.299Z",
       "error_message": "Missing error handling in lives",
       "file": ".kiro/specs/ha-config-bootstrap/research.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4268,7 +4268,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "11 lines replaced/restructured",
-      "fix": "Rewrote 14→3 lines (11 removed)",
+      "fix": "Rewrote 14\u21923 lines (11 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4284,7 +4284,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "79 lines replaced/restructured",
-      "fix": "Rewrote 87→3 lines (79 removed)",
+      "fix": "Rewrote 87\u21923 lines (79 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4300,7 +4300,7 @@
       "error_message": "Wrong reference: test_am_i_primary should be test_ha_cluster",
       "file": "src/controller/testsuite/controller_test.c",
       "root_cause": "Used \"test_am_i_primary\" instead of \"test_ha_cluster\"",
-      "fix": "Changed test_am_i_primary → test_ha_cluster",
+      "fix": "Changed test_am_i_primary \u2192 test_ha_cluster",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -4316,7 +4316,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 10→3 lines (8 removed)",
+      "fix": "Rewrote 10\u21923 lines (8 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4332,7 +4332,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "21 lines replaced/restructured",
-      "fix": "Rewrote 26→4 lines (21 removed) | Also: /* ha_check_heartbeat_nocluster() removed from the; * ha_watchdog_thread().  XCE_TESTING shim preserve",
+      "fix": "Rewrote 26\u21924 lines (21 removed) | Also: /* ha_check_heartbeat_nocluster() removed from the; * ha_watchdog_thread().  XCE_TESTING shim preserve",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4348,7 +4348,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "63 lines replaced/restructured",
-      "fix": "Rewrote 68→4 lines (63 removed) | Also: /* SIGUSR1 must set failover_requested via async-s; static void test_sigusr1_sets_failover_requested(v | Also: RUN_TEST(test_watchdog_starts_and_stops);; RUN_TEST(test_heartbeat_no_action_when_no_primary)",
+      "fix": "Rewrote 68\u21924 lines (63 removed) | Also: /* SIGUSR1 must set failover_requested via async-s; static void test_sigusr1_sets_failover_requested(v | Also: RUN_TEST(test_watchdog_starts_and_stops);; RUN_TEST(test_heartbeat_no_action_when_no_primary)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4364,7 +4364,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 8→8 lines (6 removed) | Also: **Expected within 1 second on both standbys:**; **Expected on the winner (needs 1 vote from the ot | Also: defer_config_fetch=1; Config fetch successful from primary (tag=...) | Also: Date:; Commit: (run: cd /home/rshen/projects/xce/worktree",
+      "fix": "Rewrote 8\u21928 lines (6 removed) | Also: **Expected within 1 second on both standbys:**; **Expected on the winner (needs 1 vote from the ot | Also: defer_config_fetch=1; Config fetch successful from primary (tag=...) | Also: Date:; Commit: (run: cd /home/rshen/projects/xce/worktree",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4380,7 +4380,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-config-bootstrap/manual-tests.md",
       "root_cause": "95 lines replaced/restructured",
-      "fix": "Rewrote 158→65 lines (95 removed) | Also: - [ ] `ha-term.bin` file exists after election; - [ ] Magic bytes are `0xDEADBEEFCAFEBABE` (little",
+      "fix": "Rewrote 158\u219265 lines (95 removed) | Also: - [ ] `ha-term.bin` file exists after election; - [ ] Magic bytes are `0xDEADBEEFCAFEBABE` (little",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4396,7 +4396,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 45→62 lines (6 removed)",
+      "fix": "Rewrote 45\u219262 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4411,7 +4411,7 @@
       "timestamp": "2026-06-04T00:24:46.380Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/myapp.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4428,7 +4428,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 5→7 lines (4 removed)",
+      "fix": "Rewrote 5\u21927 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4443,7 +4443,7 @@
       "timestamp": "2026-06-04T09:46:14.610Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-repl-hardening/design.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4476,7 +4476,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 4→4 lines (3 removed)",
+      "fix": "Rewrote 4\u21924 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4492,7 +4492,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 5→7 lines (4 removed)",
+      "fix": "Rewrote 5\u21927 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4508,7 +4508,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/schema/controller.capnp",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→13 lines (2 removed)",
+      "fix": "Rewrote 4\u219213 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4524,7 +4524,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 4→8 lines (2 removed)",
+      "fix": "Rewrote 4\u21928 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4539,8 +4539,8 @@
       "timestamp": "2026-06-04T14:33:03.464Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
-      "fix": "Added try/catch block | Also: /* ── Task 2.1: OPCode_walCatchupEntry handler ─────────────; #ifdef XCE_TESTING | Also: /* Task 2.1: OPCode_walCatchupEntry handler */; RUN_TEST(test_wal_catchup_entry_advances_applied_lsn);",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
+      "fix": "Added try/catch block | Also: /* \u2500\u2500 Task 2.1: OPCode_walCatchupEntry handler \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500; #ifdef XCE_TESTING | Also: /* Task 2.1: OPCode_walCatchupEntry handler */; RUN_TEST(test_wal_catchup_entry_advances_applied_lsn);",
       "tags": [
         "auto-detected",
         "error-handling",
@@ -4555,7 +4555,7 @@
       "timestamp": "2026-06-04T14:41:35.073Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/cluster.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: case OPCode_walCatchupEntry:; /* Task 2.1: standby applies a single WAL catch-up entry fro",
       "tags": [
         "auto-detected",
@@ -4572,7 +4572,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "57 lines replaced/restructured",
-      "fix": "Rewrote 82→16 lines (57 removed)",
+      "fix": "Rewrote 82\u219216 lines (57 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4587,7 +4587,7 @@
       "timestamp": "2026-06-04T14:45:42.730Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4603,7 +4603,7 @@
       "timestamp": "2026-06-04T14:46:44.652Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: #include \"persist.h\"      /* persist_t, apply_wal_entry */; #include \"typemap.h\"      /* wal_catchup_entry_t */",
       "tags": [
         "auto-detected",
@@ -4619,7 +4619,7 @@
       "timestamp": "2026-06-04T15:09:54.280Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4636,7 +4636,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "22 lines replaced/restructured",
-      "fix": "Rewrote 58→114 lines (22 removed)",
+      "fix": "Rewrote 58\u2192114 lines (22 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4652,7 +4652,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 10→15 lines (3 removed)",
+      "fix": "Rewrote 10\u219215 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4684,7 +4684,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 44→89 lines (4 removed) | Also: /* Decode stateReport and call convergence tracker; memset(&sr, 0, sizeof(sr));",
+      "fix": "Rewrote 44\u219289 lines (4 removed) | Also: /* Decode stateReport and call convergence tracker; memset(&sr, 0, sizeof(sr));",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4732,7 +4732,7 @@
       "error_message": "Wrong reference: test_evaluate_repl_action_stream_wal_from_zero should be test_evaluate_repl_action_send_snapshot_lsn_zero",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "Used \"test_evaluate_repl_action_stream_wal_from_zero\" instead of \"test_evaluate_repl_action_send_snapshot_lsn_zero\"",
-      "fix": "Changed test_evaluate_repl_action_stream_wal_from_zero → test_evaluate_repl_action_send_snapshot_lsn_zero",
+      "fix": "Changed test_evaluate_repl_action_stream_wal_from_zero \u2192 test_evaluate_repl_action_send_snapshot_lsn_zero",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -4763,7 +4763,7 @@
       "timestamp": "2026-06-04T17:34:23.150Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4780,7 +4780,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 71→93 lines (4 removed)",
+      "fix": "Rewrote 71\u219293 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4795,7 +4795,7 @@
       "timestamp": "2026-06-04T17:40:05.798Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4844,7 +4844,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 6→15 lines (2 removed)",
+      "fix": "Rewrote 6\u219215 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4859,7 +4859,7 @@
       "timestamp": "2026-06-04T23:21:45.737Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -4876,7 +4876,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_config_repl.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 9→12 lines (2 removed)",
+      "fix": "Rewrote 9\u219212 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4892,7 +4892,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-repl-hardening/tasks.md",
       "root_cause": "9 lines replaced/restructured",
-      "fix": "Rewrote 9→35 lines (9 removed)",
+      "fix": "Rewrote 9\u219235 lines (9 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4908,7 +4908,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 7→10 lines (4 removed) | Also: /* Task 3.5: snapshot transfer.; * Creates a checkpoint in the delaymgr thread (not",
+      "fix": "Rewrote 7\u219210 lines (4 removed) | Also: /* Task 3.5: snapshot transfer.; * Creates a checkpoint in the delaymgr thread (not",
       "tags": [
         "auto-detected",
         "refactor",
@@ -4988,7 +4988,7 @@
       "error_message": "Wrong reference: uintptr_t should be void",
       "file": "src/controller/testsuite/test_ha_evaluate_committing.c",
       "root_cause": "Used \"uintptr_t\" instead of \"void\"",
-      "fix": "Changed uintptr_t → void",
+      "fix": "Changed uintptr_t \u2192 void",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5004,7 +5004,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "149 lines replaced/restructured",
-      "fix": "Rewrote 207→38 lines (149 removed)",
+      "fix": "Rewrote 207\u219238 lines (149 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5036,7 +5036,7 @@
       "error_message": "Wrong reference: 10000 should be 60000",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"10000\" instead of \"60000\"",
-      "fix": "Changed 10000 → 60000",
+      "fix": "Changed 10000 \u2192 60000",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5052,7 +5052,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 24→42 lines (5 removed)",
+      "fix": "Rewrote 24\u219242 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5068,7 +5068,7 @@
       "error_message": "Wrong reference: 10000 should be HA_DEFAULT_COMMITTING_TIMEOUT_MS",
       "file": "src/controller/testsuite/test_ha_evaluate_committing.c",
       "root_cause": "Used \"10000\" instead of \"HA_DEFAULT_COMMITTING_TIMEOUT_MS\"",
-      "fix": "Changed 10000 → HA_DEFAULT_COMMITTING_TIMEOUT_MS",
+      "fix": "Changed 10000 \u2192 HA_DEFAULT_COMMITTING_TIMEOUT_MS",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5083,7 +5083,7 @@
       "timestamp": "2026-06-05T05:10:13.646Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5099,7 +5099,7 @@
       "timestamp": "2026-06-05T05:39:48.707Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_config_repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5115,7 +5115,7 @@
       "timestamp": "2026-06-05T06:50:00Z",
       "error_message": "3-node startup: majority convergence never fires; cluster falls through to committing_timeout degraded-mode WARN",
       "file": "src/controller/ha.c",
-      "root_cause": "ha->n_peers was set to candidates_count (3, total including self) in ha_start_election_async. ha_check_majority_convergence loops i=0..n_peers-1 checking standby_converged[], but standby_converged[] is indexed by votes_idx (relative, self excluded: 0..n_other-1). With n_peers=3, it checked standby_converged[2] which is never set, so n_converged (2) < n_peers (3) always — majority convergence path could never succeed.",
+      "root_cause": "ha->n_peers was set to candidates_count (3, total including self) in ha_start_election_async. ha_check_majority_convergence loops i=0..n_peers-1 checking standby_converged[], but standby_converged[] is indexed by votes_idx (relative, self excluded: 0..n_other-1). With n_peers=3, it checked standby_converged[2] which is never set, so n_converged (2) < n_peers (3) always \u2014 majority convergence path could never succeed.",
       "fix": "Changed ha->n_peers = n_peers to ha->n_peers = n_other (= n_peers-1 = other-node count). Moved the assignment after n_other is computed. ha_repl_ack_received quorum formula (ha->n_peers+2)/2 still yields correct majority for both old and new value.",
       "tags": [
         "ha",
@@ -5134,7 +5134,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 7→12 lines (2 removed) | Also: /* Disarm any existing poll ctx */; free(old);",
+      "fix": "Rewrote 7\u219212 lines (2 removed) | Also: /* Disarm any existing poll ctx */; free(old);",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5149,7 +5149,7 @@
       "timestamp": "2026-06-05T07:23:00.000Z",
       "error_message": "AddressSanitizer: attempting double-free on sctx in ha_connect_to_peer",
       "file": "src/controller/ha.c",
-      "root_cause": "endpoint_fini calls FREEUP(ep->data) which frees sctx, then ha_connect_to_peer also calls free(sctx) — double-free at lines 3594-3595 and 3600-3601",
+      "root_cause": "endpoint_fini calls FREEUP(ep->data) which frees sctx, then ha_connect_to_peer also calls free(sctx) \u2014 double-free at lines 3594-3595 and 3600-3601",
       "fix": "Set ep->data = NULL before endpoint_fini so FREEUP becomes a no-op; then free(sctx) explicitly in the error paths",
       "tags": [
         "double-free",
@@ -5165,7 +5165,7 @@
     {
       "id": "bug-007",
       "timestamp": "2026-06-05T07:23:00.000Z",
-      "error_message": "AddressSanitizer: heap-use-after-free in liveness_poll_fn at ha.c:3293 — reading ctx->cancelled after ha_arm_heartbeat_timeout_vtask freed the old ctx",
+      "error_message": "AddressSanitizer: heap-use-after-free in liveness_poll_fn at ha.c:3293 \u2014 reading ctx->cancelled after ha_arm_heartbeat_timeout_vtask freed the old ctx",
       "file": "src/controller/ha.c",
       "root_cause": "ha_arm_heartbeat_timeout_vtask freed the old liveness_poll_ctx_t immediately after setting cancelled=1, but the delaymgr task was already in flight reading ctx->cancelled=0 and then continued to read ctx->ha after free",
       "fix": "ha_arm_heartbeat_timeout_vtask no longer frees old ctx; liveness_poll_fn now frees ctx when it fires with cancelled=1 (guarded by #ifndef XCE_TESTING to avoid bad-free on stack-allocated test ctxs)",
@@ -5187,7 +5187,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 41→87 lines (2 removed)",
+      "fix": "Rewrote 41\u219287 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5203,7 +5203,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 8→5 lines (6 removed)",
+      "fix": "Rewrote 8\u21925 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5219,7 +5219,7 @@
       "error_message": "Wrong reference: DEBUG2 should be INFO",
       "file": "src/controller/ha.c",
       "root_cause": "Used \"DEBUG2\" instead of \"INFO\"",
-      "fix": "Changed DEBUG2 → INFO",
+      "fix": "Changed DEBUG2 \u2192 INFO",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5283,7 +5283,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/docs/cluster-config-split-analysis.md",
       "root_cause": "8 lines replaced/restructured",
-      "fix": "Rewrote 11→21 lines (8 removed) | Also: ### Phase 1: Schema split (wire-compatible); 4. **Keep the old `ClusterConfig` fields intact** ",
+      "fix": "Rewrote 11\u219221 lines (8 removed) | Also: ### Phase 1: Schema split (wire-compatible); 4. **Keep the old `ClusterConfig` fields intact** ",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5299,7 +5299,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 27→36 lines (5 removed)",
+      "fix": "Rewrote 27\u219236 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5315,7 +5315,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/lib/raft/raft.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 9→15 lines (4 removed)",
+      "fix": "Rewrote 9\u219215 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5331,7 +5331,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "37 lines replaced/restructured",
-      "fix": "Rewrote 41→4 lines (37 removed)",
+      "fix": "Rewrote 41\u21924 lines (37 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5471,7 +5471,7 @@
       "error_message": "Wrong reference: last_heartbeat should be voted_for_term",
       "file": "src/controller/ha.h",
       "root_cause": "Used \"last_heartbeat\" instead of \"voted_for_term\"",
-      "fix": "Changed last_heartbeat → voted_for_term",
+      "fix": "Changed last_heartbeat \u2192 voted_for_term",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5487,7 +5487,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/myapp.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 13→17 lines (4 removed)",
+      "fix": "Rewrote 13\u219217 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5538,7 +5538,7 @@
       "timestamp": "2026-06-10T01:36:59.112Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/schema/controller.capnp",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5554,7 +5554,7 @@
       "timestamp": "2026-06-10T01:37:29.771Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5571,7 +5571,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/include/typemap.h",
       "root_cause": "6 lines replaced/restructured",
-      "fix": "Rewrote 16→31 lines (6 removed)",
+      "fix": "Rewrote 16\u219231 lines (6 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5586,7 +5586,7 @@
       "timestamp": "2026-06-10T01:38:31.262Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/include/request.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5618,7 +5618,7 @@
       "timestamp": "2026-06-10T01:39:31.683Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/lib/request.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: if (req->body_which == Request_body_walcatchupentrymsg; && req->body.walcatchupentrymsg != NULL) { | Also: /* wal_entry_to_wire: fill a wire WalCatchupEntry from a C e; * fields and raw payload bytes.  Sub-entry nesting is one le",
       "tags": [
         "auto-detected",
@@ -5653,7 +5653,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 29→32 lines (4 removed)",
+      "fix": "Rewrote 29\u219232 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5669,7 +5669,7 @@
       "error_message": "Wrong reference: payload should be raw_payload",
       "file": "src/controller/config_repl.c",
       "root_cause": "Used \"payload\" instead of \"raw_payload\"",
-      "fix": "Changed payload → raw_payload",
+      "fix": "Changed payload \u2192 raw_payload",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5685,7 +5685,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 13→16 lines (2 removed)",
+      "fix": "Rewrote 13\u219216 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5701,7 +5701,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_ha_role.c",
       "root_cause": "7 lines replaced/restructured",
-      "fix": "Rewrote 49→137 lines (7 removed)",
+      "fix": "Rewrote 49\u2192137 lines (7 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5716,7 +5716,7 @@
       "timestamp": "2026-06-10T01:49:36.997Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5785,7 +5785,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/scheduler/src/scheduler.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 4→6 lines (4 removed)",
+      "fix": "Rewrote 4\u21926 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5838,7 +5838,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 9→15 lines (4 removed)",
+      "fix": "Rewrote 9\u219215 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5870,7 +5870,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/cluster.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 8→13 lines (3 removed) | Also: /* Req 4.1: ctrlhello counts as primary activity —; if ((ctrl_role_t)atomic_load_explicit(&c->ha.role,",
+      "fix": "Rewrote 8\u219213 lines (3 removed) | Also: /* Req 4.1: ctrlhello counts as primary activity \u2014; if ((ctrl_role_t)atomic_load_explicit(&c->ha.role,",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5886,7 +5886,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/config_repl.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→12 lines (3 removed)",
+      "fix": "Rewrote 6\u219212 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5901,7 +5901,7 @@
       "timestamp": "2026-06-10T07:56:21.347Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_repl_unit.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: /* =========================================================; * Task 1.1: repl_broadcast send path tests",
       "tags": [
         "auto-detected",
@@ -5918,7 +5918,7 @@
       "error_message": "Wrong reference: WAL_JOB should be WAL_JOB_SUBMIT",
       "file": "src/controller/testsuite/test_repl_unit.c",
       "root_cause": "Used \"WAL_JOB\" instead of \"WAL_JOB_SUBMIT\"",
-      "fix": "Changed WAL_JOB → WAL_JOB_SUBMIT",
+      "fix": "Changed WAL_JOB \u2192 WAL_JOB_SUBMIT",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5933,7 +5933,7 @@
       "timestamp": "2026-06-10T07:58:15.167Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/repl.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -5950,7 +5950,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/repl.c",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 42→65 lines (3 removed)",
+      "fix": "Rewrote 42\u219265 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5966,7 +5966,7 @@
       "error_message": "Wrong reference: DEBUG3 should be TRACE",
       "file": "src/controller/repl.c",
       "root_cause": "Used \"DEBUG3\" instead of \"TRACE\"",
-      "fix": "Changed DEBUG3 → TRACE",
+      "fix": "Changed DEBUG3 \u2192 TRACE",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -5982,7 +5982,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/ha.h",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 12→16 lines (3 removed)",
+      "fix": "Rewrote 12\u219216 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -5998,7 +5998,7 @@
       "error_message": "Wrong reference: request should be ep",
       "file": "src/controller/cluster.c",
       "root_cause": "Used \"request\" instead of \"ep\"",
-      "fix": "Changed request → ep",
+      "fix": "Changed request \u2192 ep",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -6013,7 +6013,7 @@
       "timestamp": "2026-06-10T08:47:48.296Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_ha_role.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block | Also: /* Task 3.3 (ha-wal-replication): dispatch gate standby-role; RUN_TEST(test_dispatch_gate_allows_wal_catchup_in_standby_ro",
       "tags": [
         "auto-detected",
@@ -6029,7 +6029,7 @@
       "timestamp": "2026-06-10T08:50:27.397Z",
       "error_message": "Missing error handling in struct",
       "file": "src/include/typemap.h",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6061,7 +6061,7 @@
       "timestamp": "2026-06-10T09:59:08.979Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/testsuite/test_p2_integration.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6096,7 +6096,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/testsuite/test_p2_integration.c",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 50→72 lines (4 removed)",
+      "fix": "Rewrote 50\u219272 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6112,7 +6112,7 @@
       "error_message": "Wrong reference: test_catchup_full_lifecycle_integration should be test_single_node_committed_lsn_unchanged",
       "file": "src/controller/testsuite/test_p2_integration.c",
       "root_cause": "Used \"test_catchup_full_lifecycle_integration\" instead of \"test_single_node_committed_lsn_unchanged\"",
-      "fix": "Changed test_catchup_full_lifecycle_integration → test_single_node_committed_lsn_unchanged",
+      "fix": "Changed test_catchup_full_lifecycle_integration \u2192 test_single_node_committed_lsn_unchanged",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -6127,7 +6127,7 @@
       "timestamp": "2026-06-10T10:37:49.028Z",
       "error_message": "Missing error handling in unknown",
       "file": "src/controller/testsuite/test_repl_unit.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6160,7 +6160,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/steering/product.md",
       "root_cause": "5 lines replaced/restructured",
-      "fix": "Rewrote 13→22 lines (5 removed)",
+      "fix": "Rewrote 13\u219222 lines (5 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6192,7 +6192,7 @@
       "error_message": "Significant refactor of ",
       "file": "CLAUDE.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 5→5 lines (4 removed)",
+      "fix": "Rewrote 5\u21925 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6224,7 +6224,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/CLAUDE.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 6→5 lines (3 removed) | Also: ### Controllers; - Struct: `type {Resource}Controller struct{}`",
+      "fix": "Rewrote 6\u21925 lines (3 removed) | Also: ### Controllers; - Struct: `type {Resource}Controller struct{}`",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6256,7 +6256,7 @@
       "error_message": "Wrong reference: signal should be stdio",
       "file": "src/lib/delay.c",
       "root_cause": "Used \"signal\" instead of \"stdio\"",
-      "fix": "Changed signal → stdio",
+      "fix": "Changed signal \u2192 stdio",
       "tags": [
         "auto-detected",
         "wrong-reference",
@@ -6271,7 +6271,7 @@
       "timestamp": "2026-06-11T03:30:54.341Z",
       "error_message": "Missing error handling in XCE_TESTING",
       "file": "src/controller/ha.c",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6320,7 +6320,7 @@
       "error_message": "Significant refactor of ",
       "file": "src/controller/job.c",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 15→28 lines (2 removed)",
+      "fix": "Rewrote 15\u219228 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6352,7 +6352,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-consistency-invariants/research.md",
       "root_cause": "3 lines replaced/restructured",
-      "fix": "Rewrote 7→7 lines (3 removed)",
+      "fix": "Rewrote 7\u21927 lines (3 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6387,7 +6387,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/specs/ha-consistency-invariants/requirements.md",
       "root_cause": "2 lines replaced/restructured",
-      "fix": "Rewrote 3→4 lines (2 removed)",
+      "fix": "Rewrote 3\u21924 lines (2 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6466,7 +6466,7 @@
       "timestamp": "2026-06-11T07:53:43.868Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/specs/ha-consistency-invariants/research.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6498,7 +6498,7 @@
       "timestamp": "2026-06-11T08:46:20.815Z",
       "error_message": "Missing error handling in unknown",
       "file": ".kiro/steering/roadmap.md",
-      "root_cause": "Code path had no error handling — exceptions would propagate uncaught",
+      "root_cause": "Code path had no error handling \u2014 exceptions would propagate uncaught",
       "fix": "Added try/catch block",
       "tags": [
         "auto-detected",
@@ -6579,7 +6579,7 @@
       "error_message": "Significant refactor of ",
       "file": ".kiro/steering/roadmap.md",
       "root_cause": "4 lines replaced/restructured",
-      "fix": "Rewrote 6→8 lines (4 removed)",
+      "fix": "Rewrote 6\u21928 lines (4 removed)",
       "tags": [
         "auto-detected",
         "refactor",
@@ -6588,6 +6588,42 @@
       "related_bugs": [],
       "occurrences": 1,
       "last_seen": "2026-06-11T12:57:17.283Z"
+    },
+    {
+      "id": "bug-410",
+      "timestamp": "2026-06-11T13:30:00Z",
+      "error_message": "test_commit_engine fixture: Expected 0 Was 1 from repl_add_standby",
+      "file": "src/controller/testsuite/test_commit_engine.c",
+      "root_cause": "repl_add_standby returns the slot index (>=0) on success, not 0 \u2014 second add legitimately returns 1",
+      "fix": "fixture asserts TEST_ASSERT_EQUAL_INT(i, repl_add_standby(...)) per standby slot",
+      "tags": [
+        "controller",
+        "testsuite",
+        "repl",
+        "return-convention"
+      ],
+      "related_bugs": [],
+      "occurrences": 1,
+      "last_seen": "2026-06-11T13:30:00Z"
+    },
+    {
+      "id": "bug-411",
+      "timestamp": "2026-06-11T13:35:00Z",
+      "error_message": "3 pre-existing controller testsuite failures masked by exit code 0: test_committed_lsn_does_not_advance_on_timeout (-110), test_repl_ack_after_promote_gate_allows_jobsub (-10013), test_rdhup_primary_dispatch_gate_opens (-10013)",
+      "file": "src/controller/testsuite/controller_test.c",
+      "root_cause": "each test group calls UNITY_BEGIN/UNITY_END internally, resetting Unity counters \u2014 main()'s final UNITY_END returns 0 unless the LAST group fails, so meson reported the suite green despite 3 real failures; Unity also misattributes failure FILE names to whichever file's UNITY_BEGIN ran (e.g. reports test_repl_unit.c for a test living in test_p2_integration.c)",
+      "fix": "not fixed (out of task 1.1 boundary) \u2014 documented; failures exist identically on baseline without ha-commit-engine changes (verified by stash/rebuild). persist_wal_sync_append returns -ETIMEDOUT while the test expects rc==0 with sync_rc==-ETIMEDOUT; the two gate tests fail ha_has_write_quorum (standby_endpoints empty with n_peers=2)",
+      "tags": [
+        "controller",
+        "testsuite",
+        "unity",
+        "exit-code",
+        "pre-existing",
+        "ha"
+      ],
+      "related_bugs": [],
+      "occurrences": 1,
+      "last_seen": "2026-06-11T13:35:00Z"
     }
   ]
 }
\ No newline at end of file
diff --git a/.wolf/cerebrum.md b/.wolf/cerebrum.md
index fa57cf8..4f6636f 100644
--- a/.wolf/cerebrum.md
+++ b/.wolf/cerebrum.md
@@ -34,6 +34,10 @@
 - Heartbeat freshness source of truth (2026-06-09): `ha_heartbeat_is_fresh` derives from `ha->last_activity` (whole CLOCK_MONOTONIC seconds, written by ha_on_heartbeat_received, lock-free time_t read). The old `last_heartbeat` timespec field was REMOVED from ha_state_t — do not reintroduce it. The standby vote-deny gate is `role==CTRL_STANDBY && primary_ctrl_fd >= 0 && ha_heartbeat_is_fresh(ha)`; RDHUP resets primary_ctrl_fd to -1 so a standby whose primary died can grant votes immediately even if last_activity is still fresh.
 - raft_init restore contract (2026-06-09): persistence writes (term, voted_for) as a pair, so `raft_init` must set `voted_for_term = initial_term` when `initial_voted_for != -1`. Leaving it 0 lets a restarted node double-vote in the same term (Election Safety violation). Covered by test_proto_H6.
 
+- repl_add_standby returns the SLOT INDEX (>=0) on success, not 0 (2026-06-11, ha-commit-engine task 1.1): asserting `== 0` breaks on the second standby. Assert `>= 0` or the expected index.
+- Unity harness quirks in controller_unit_test (2026-06-11): (a) failure lines misattribute the FILE — Unity.TestFile comes from whichever group's UNITY_BEGIN ran, so a failure printed as test_repl_unit.c:294 may live in test_p2_integration.c; locate the actual test by grepping for the test NAME. (b) Each group's UNITY_BEGIN resets counters, so the process exit code only reflects the LAST group — failures in earlier groups are masked (exit=0); meson reports green despite real failures. Grep output for FAIL with `grep FAIL` on the raw log (ANSI codes sit between ':' and 'FAIL', so `grep ":FAIL"` misses them).
+- 3 pre-existing controller suite failures on persistent_ha baseline (2026-06-11, verified by stash/rebuild without ha-commit-engine changes, see bug-411): test_committed_lsn_does_not_advance_on_timeout (rc -110 vs expected 0 — persist_wal_sync_append now returns -ETIMEDOUT, test expects old rc==0+sync_rc contract), test_repl_ack_after_promote_gate_allows_jobsub and test_rdhup_primary_dispatch_gate_opens (both -10013: ha_has_write_quorum false, standby_endpoints empty with n_peers=2).
+
 ## Do-Not-Repeat
 
 <!-- Mistakes made and corrected. Each entry prevents the same mistake recurring. -->
diff --git a/.wolf/memory.md b/.wolf/memory.md
index 68f519d..d84bca5 100644
--- a/.wolf/memory.md
+++ b/.wolf/memory.md
@@ -860,3 +860,13 @@
 | 05:57 | Edited .kiro/steering/roadmap.md | 6→8 lines | ~365 |
 | 11:40 | kiro-spec-batch complete: 4 sub-specs generated (3 waves), cross-spec review passed after 6 doc fixes (1 by fix-agent before spend limit, rest verified/applied); roadmap marked [x] | 4 spec dirs, roadmap.md, umbrella design.md | 51 sub-tasks total, ready for /kiro-impl ha-commit-engine | ~700k |
 | 05:57 | Session end: 99 writes across 12 files (brief.md, project_ha_consistency_invariants.md, product.md, spec.json, requirements.md) | 69 reads | ~240145 tok |
+| 06:26 | Created src/controller/include/commit.h | — | ~771 |
+| 06:27 | Created src/controller/commit.c | — | ~474 |
+| 06:28 | Created src/controller/testsuite/test_commit_engine.c | — | ~2440 |
+| 06:28 | Edited src/controller/meson.build | 2→4 lines | ~30 |
+| 06:28 | Edited src/controller/testsuite/controller_test.c | 1→2 lines | ~20 |
+| 06:28 | Edited src/controller/testsuite/controller_test.c | 3→4 lines | ~22 |
+| 06:32 | Edited src/controller/testsuite/test_commit_engine.c | modified for() | ~75 |
+| 13:30 | Task 1.1 ha-commit-engine RED: commit.h + stub commit.c + test_commit_engine.c (7 failing tests) | src/controller/{include/commit.h,commit.c,testsuite/test_commit_engine.c,meson.build,testsuite/controller_test.c} | 7/7 RED for right reasons; 3 suite failures proven pre-existing via baseline stash run | ~60k |
+| 07:16 | Edited .kiro/specs/ha-commit-engine/tasks.md | inline fix | ~23 |
+| 07:16 | Edited .kiro/specs/ha-commit-engine/tasks.md | modified now() | ~344 |
diff --git a/src/controller/commit.c b/src/controller/commit.c
new file mode 100644
index 0000000..4efda5a
--- /dev/null
+++ b/src/controller/commit.c
@@ -0,0 +1,68 @@
+/*
+ * commit.c — STUB for ha-commit-engine task 1.1 (RED phase).
+ *
+ * Behavioral functions are deliberately inert (-ENOSYS / no-op) so the
+ * task 1.1 tests in testsuite/test_commit_engine.c compile, link, and FAIL
+ * on their assertions. init/fini are real enough that tests exercise the
+ * engine's behavioral contract rather than failing at fixture setup.
+ *
+ * The real implementation lands in task 1.2 (per-LSN majority evaluation,
+ * monotonic/contiguous committed_lsn advancement).
+ */
+#include <errno.h>
+
+#include "commit.h"
+
+int commit_engine_init(commit_engine_t* ce, persist_t* p, int n_peers, int n_vcpus)
+{
+    if (ce == NULL || p == NULL || n_peers < 0 || n_vcpus < 1) {
+        return -EINVAL;
+    }
+    pthread_mutex_init(&ce->lock, NULL);
+    pthread_cond_init(&ce->cond, NULL);
+    ce->p              = p;
+    ce->n_peers        = n_peers;
+    ce->n_vcpus        = n_vcpus;
+    ce->inflight_waits = 0;
+    ce->writable_lsn   = 0;
+    return 0;
+}
+
+void commit_engine_fini(commit_engine_t* ce)
+{
+    if (ce == NULL) {
+        return;
+    }
+    pthread_cond_destroy(&ce->cond);
+    pthread_mutex_destroy(&ce->lock);
+    ce->p = NULL;
+}
+
+int commit_submit(commit_engine_t* ce, uint64_t lsn, commit_mode_t mode,
+                  uint32_t timeout_ms)
+{
+    (void)ce;
+    (void)lsn;
+    (void)mode;
+    (void)timeout_ms;
+    return -ENOSYS; /* stub: real WAIT/RETAIN semantics in task 1.2/2.2 */
+}
+
+void commit_on_ack(commit_engine_t* ce, int standby_idx, uint64_t acked_lsn)
+{
+    (void)ce;
+    (void)standby_idx;
+    (void)acked_lsn;
+    /* stub: never advances committed_lsn */
+}
+
+void commit_set_writable_lsn(commit_engine_t* ce, uint64_t noop_lsn)
+{
+    (void)ce;
+    (void)noop_lsn;
+}
+
+void commit_on_membership_change(commit_engine_t* ce)
+{
+    (void)ce;
+}
diff --git a/src/controller/include/commit.h b/src/controller/include/commit.h
new file mode 100644
index 0000000..3f82f2f
--- /dev/null
+++ b/src/controller/include/commit.h
@@ -0,0 +1,61 @@
+#pragma once
+/*
+ * commit.h — Commit engine: single authority for per-entry commit evaluation,
+ * committed_lsn advancement, and waiter completion.
+ *
+ * Service interface is umbrella-verbatim from
+ * .kiro/specs/ha-consistency-invariants/design.md (sliced by ha-commit-engine).
+ *
+ * All functions thread-safe; commit_on_ack callable from iomgr (non-blocking).
+ */
+#include <pthread.h>
+#include <stdint.h>
+
+#include "persist.h" /* persist_t (owns committed_lsn atomic + replicator_t registry) */
+
+/* Headroom kept free of blocking commit waits; cap = max(1, n_vcpus - reserved) */
+#define COMMIT_WAIT_RESERVED 2
+
+typedef enum { COMMIT_MODE_WAIT, COMMIT_MODE_RETAIN } commit_mode_t;
+
+/*
+ * Commit engine state — in-memory only (commit state volatile, Raft-conformant).
+ * Per-standby view delegated to standby_conn_t.acked_lsn / in_catch_up via
+ * p->repl (no duplication).
+ */
+typedef struct commit_engine {
+    pthread_mutex_t lock;
+    pthread_cond_t  cond; /* broadcast on committed_lsn advance / membership change */
+    persist_t*      p;    /* back-reference: committed_lsn store + repl registry */
+    int             n_peers;
+    int             n_vcpus;
+    int             inflight_waits;        /* <= max(1, n_vcpus - COMMIT_WAIT_RESERVED) */
+    uint64_t        writable_lsn;          /* own-term gate; 0 = no gate */
+    uint64_t        scratch[MAX_STANDBYS]; /* sorted matchIndex scratch array */
+} commit_engine_t;
+
+/* Lifecycle. init validates n_peers >= 0, n_vcpus >= 1, non-NULL persist_t;
+ * returns -EINVAL otherwise. Call after n_peers and n_vcpus are final. */
+int  commit_engine_init(commit_engine_t* ce, persist_t* p, int n_peers, int n_vcpus);
+void commit_engine_fini(commit_engine_t* ce);
+
+/* Register entry at append time. RETAIN returns 0 immediately.
+ * WAIT blocks up to timeout_ms: 0 = committed; -ETIMEDOUT = not committed
+ * (entry remains in log; outcome resolves per umbrella 2.5); -XCE_ERR_NOT_READY =
+ * admission cap exhausted (only cause). An unmet own-term gate does NOT fail
+ * fast: the gate is part of the completion predicate, so WAIT blocks within
+ * timeout_ms until the gate opens, surfacing -ETIMEDOUT if it never does. */
+int commit_submit(commit_engine_t* ce, uint64_t lsn, commit_mode_t mode,
+                  uint32_t timeout_ms);
+
+/* iomgr path: record standby ACK, evaluate majority, advance committed_lsn
+ * contiguously, wake satisfied waiters. Never blocks. */
+void commit_on_ack(commit_engine_t* ce, int standby_idx, uint64_t acked_lsn);
+
+/* Promotion: set own-term gate to the no-op entry's LSN.
+ * (API ships here; no caller in this spec — unset = no gate.) */
+void commit_set_writable_lsn(commit_engine_t* ce, uint64_t noop_lsn);
+
+/* Quorum-membership change (standby add/remove/catch-up transition):
+ * re-evaluate pending entries; standbys in catch-up are excluded. */
+void commit_on_membership_change(commit_engine_t* ce);
diff --git a/src/controller/meson.build b/src/controller/meson.build
index bfe101d..3778b31 100644
--- a/src/controller/meson.build
+++ b/src/controller/meson.build
@@ -119,6 +119,8 @@ controller_unit_test_src = [
   'testsuite/test_ha_connection_reuse.c',
   'testsuite/test_ha_rdhup_integration.c',
   'testsuite/test_ha_liveness.c',
+  'testsuite/test_commit_engine.c',
+  'commit.c',
   'startup_validation.c',
   'worker.c',
   'persist.c',
diff --git a/src/controller/testsuite/controller_test.c b/src/controller/testsuite/controller_test.c
index e4ce176..bf8bb1b 100644
--- a/src/controller/testsuite/controller_test.c
+++ b/src/controller/testsuite/controller_test.c
@@ -50,6 +50,7 @@ extern void test_ha_repl_ack(void);
 extern void test_ha_connection_reuse(void);
 extern void test_ha_rdhup_integration(void);
 extern void test_ha_liveness(void);
+extern void test_commit_engine(void);
 
 void setUp(void) { return; }
 
@@ -169,6 +170,7 @@ int main(int argc, char* argv[])
     TEST(test_ha_connection_reuse);
     TEST(test_ha_rdhup_integration);
     TEST(test_ha_liveness);
+    TEST(test_commit_engine);
 
     return UNITY_END();
 }
diff --git a/src/controller/testsuite/test_commit_engine.c b/src/controller/testsuite/test_commit_engine.c
new file mode 100644
index 0000000..a8ee628
--- /dev/null
+++ b/src/controller/testsuite/test_commit_engine.c
@@ -0,0 +1,270 @@
+/*
+ * test_commit_engine.c — RED-phase tests for the commit engine
+ * (ha-commit-engine task 1.1: per-LSN majority evaluation and
+ * commit-index integrity).
+ *
+ * The engine is constructed standalone against a stub persist_t +
+ * replicator_t (XCE_TESTING pattern): the persist_t is a zeroed stack
+ * struct whose only live parts are committed_lsn, current_lsn, and the
+ * embedded replicator registry. Standby ACK watermarks are written
+ * directly into standby_conn_t.acked_lsn before feeding commit_on_ack,
+ * exactly as repl_on_ack does in production.
+ *
+ * Cluster model: n_peers = 3 means primary (self) + 2 standbys.
+ * Majority for entry N = self + at least n_peers/2 standbys with
+ * acked_lsn >= N (Raft §5.3, umbrella-verbatim commit rule).
+ *
+ * These cases FAIL against the task-1.1 stub commit.c and go green with
+ * the task-1.2 implementation.
+ *
+ * Requirements: 1.2, 2.1, 2.2, 2.3, 5.1
+ */
+#include <errno.h>
+#include <stdatomic.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <string.h>
+#include <time.h>
+#include <unity/unity.h>
+
+#include "commit.h"
+#include "persist.h"
+#include "repl.h"
+
+/* ── Fixture ──────────────────────────────────────────────────────────────
+ * Static: persist_t embeds large path buffers, and statics survive Unity's
+ * longjmp on assertion failure (pattern from test_repl_majority.c). */
+static persist_t       g_p;
+static commit_engine_t g_ce;
+
+/* Dummy endpoints — the replicator only compares pointers */
+static int g_eps[MAX_STANDBYS];
+
+/*
+ * Arrange a fresh engine over a stub persist_t + replicator_t.
+ * appended_lsn = highest locally appended WAL entry; persist invariant is
+ * committed_lsn <= current_lsn - 1, so current_lsn = appended_lsn + 1.
+ */
+static void engine_setup(int n_peers, int n_standbys, uint64_t appended_lsn)
+{
+    int  i;
+    char name[16];
+
+    memset(&g_p, 0, sizeof(g_p));
+    TEST_ASSERT_EQUAL_INT(0, repl_init(&g_p.repl));
+    for (i = 0; i < n_standbys; i++) {
+        snprintf(name, sizeof(name), "sb%d", i);
+        /* repl_add_standby returns the slot index (>= 0) on success */
+        TEST_ASSERT_EQUAL_INT(
+            i, repl_add_standby(&g_p.repl, &g_eps[i], name, 7000 + (uint32_t)i));
+    }
+    g_p.current_lsn = appended_lsn + 1;
+    atomic_store(&g_p.committed_lsn, 0);
+
+    TEST_ASSERT_EQUAL_INT(0, commit_engine_init(&g_ce, &g_p, n_peers, 8));
+}
+
+static void engine_teardown(void)
+{
+    commit_engine_fini(&g_ce);
+    repl_fini(&g_p.repl);
+}
+
+/* Register appended entries 1..up_to with the engine (RETAIN = bookkeeping
+ * only, no blocking). Return codes asserted in the dedicated RETAIN test. */
+static void append_entries(uint64_t up_to)
+{
+    uint64_t lsn;
+
+    for (lsn = 1; lsn <= up_to; lsn++) {
+        (void)commit_submit(&g_ce, lsn, COMMIT_MODE_RETAIN, 0);
+    }
+}
+
+/* Standby ACK watermark arrives: update the registry (what repl_on_ack
+ * does in production) and feed the engine. */
+static void standby_ack(int idx, uint64_t acked_lsn)
+{
+    atomic_store(&g_p.repl.standbys[idx].acked_lsn, acked_lsn);
+    commit_on_ack(&g_ce, idx, acked_lsn);
+}
+
+static uint64_t committed(void)
+{
+    return atomic_load(&g_p.committed_lsn);
+}
+
+static uint64_t mono_ms(void)
+{
+    struct timespec ts;
+
+    clock_gettime(CLOCK_MONOTONIC, &ts);
+    return (uint64_t)ts.tv_sec * 1000u + (uint64_t)ts.tv_nsec / 1000000u;
+}
+
+/* ── Test 1: per-LSN evaluation — ACK for LSN M never commits N > M ───────
+ * Kills the `acked_lsn > 0` ("ACKed anything ever") counting. (Req 1.2) */
+static void test_ack_for_lower_lsn_does_not_commit_higher_entry(void)
+{
+    /* Arrange: 3-member cluster, entries 1..3 appended */
+    engine_setup(3, 2, 3);
+    append_entries(3);
+
+    /* Act: standby 0 ACKs only LSN M=1 */
+    standby_ack(0, 1);
+
+    /* Assert: entry N=3 is NOT committed (dishonest counting would have
+     * counted "ACKed anything" and committed 3); entry 1 IS committed
+     * (self + standby 0 cover it) */
+    TEST_ASSERT_TRUE_MESSAGE(committed() < 3,
+                             "ACK for LSN 1 must not commit entry 3");
+    TEST_ASSERT_EQUAL_UINT64(1, committed());
+
+    engine_teardown();
+    printf("test_ack_for_lower_lsn_does_not_commit_higher_entry: PASS\n");
+}
+
+/* ── Test 2: ACK watermark >= N from one standby plus self commits N ──────
+ * (Req 1.2, 2.1) */
+static void test_ack_at_entry_plus_self_commits_entry(void)
+{
+    /* Arrange: 3-member cluster, entries 1..2 appended */
+    engine_setup(3, 2, 2);
+    append_entries(2);
+
+    /* Act: standby 0's watermark covers entry 2 (self + sb0 = 2/3) */
+    standby_ack(0, 2);
+
+    /* Assert: entry 2 committed */
+    TEST_ASSERT_EQUAL_UINT64(2, committed());
+
+    engine_teardown();
+    printf("test_ack_at_entry_plus_self_commits_entry: PASS\n");
+}
+
+/* ── Test 3: cumulative / out-of-order watermarks → majority median ───────
+ * committed_lsn always advances to the highest LSN covered by self + a
+ * majority of standby watermarks, contiguously. (Req 2.1, 2.3) */
+static void test_out_of_order_watermarks_advance_to_majority_median(void)
+{
+    /* Arrange: 3-member cluster, entries 1..5 appended */
+    engine_setup(3, 2, 5);
+    append_entries(5);
+
+    /* Act + Assert, step by step (cumulative watermarks, mixed order) */
+
+    /* sb1 ACKs watermark 2 → matchIndex {self=5, sb0=0, sb1=2}: median 2 */
+    standby_ack(1, 2);
+    TEST_ASSERT_EQUAL_UINT64(2, committed());
+
+    /* sb0 ACKs watermark 4 → {self=5, sb0=4, sb1=2}: median 4 — entry 5
+     * still lacks majority and must NOT be committed */
+    standby_ack(0, 4);
+    TEST_ASSERT_EQUAL_UINT64(4, committed());
+
+    /* sb0 ACKs watermark 5 → {self=5, sb0=5, sb1=2}: median 5 */
+    standby_ack(0, 5);
+    TEST_ASSERT_EQUAL_UINT64(5, committed());
+
+    engine_teardown();
+    printf("test_out_of_order_watermarks_advance_to_majority_median: PASS\n");
+}
+
+/* ── Test 4: committed_lsn never exceeds the highest appended LSN ─────────
+ * (Req 2.3) */
+static void test_committed_lsn_never_exceeds_appended_log(void)
+{
+    /* Arrange: 3-member cluster, only entries 1..3 appended locally */
+    engine_setup(3, 2, 3);
+    append_entries(3);
+
+    /* Act: both standbys report watermarks beyond our appended log */
+    standby_ack(0, 10);
+    standby_ack(1, 10);
+
+    /* Assert: clamped to the highest appended LSN */
+    TEST_ASSERT_EQUAL_UINT64(3, committed());
+
+    engine_teardown();
+    printf("test_committed_lsn_never_exceeds_appended_log: PASS\n");
+}
+
+/* ── Test 5: committed_lsn is monotonic — never moves backwards ───────────
+ * (Req 2.2) */
+static void test_committed_lsn_never_regresses(void)
+{
+    /* Arrange: 3-member cluster, entries 1..4 appended; commit up to 4 */
+    engine_setup(3, 2, 4);
+    append_entries(4);
+    standby_ack(0, 4);
+    TEST_ASSERT_EQUAL_UINT64(4, committed());
+
+    /* Act: a regressing watermark arrives (stale/duplicate ACK) — the
+     * majority median over current registry state would now be 1 */
+    standby_ack(0, 1);
+
+    /* Assert: commit index never decreases */
+    TEST_ASSERT_EQUAL_UINT64(4, committed());
+
+    engine_teardown();
+    printf("test_committed_lsn_never_regresses: PASS\n");
+}
+
+/* ── Test 6: one far-lagging standby does not block majority commit ───────
+ * (Req 5.1) */
+static void test_lagging_standby_does_not_block_majority_commit(void)
+{
+    /* Arrange: 3-member cluster, entries 1..3 appended; standby 1 is far
+     * behind and never ACKs (watermark stays 0) */
+    engine_setup(3, 2, 3);
+    append_entries(3);
+
+    /* Act: standby 0 alone covers entry 3 — self + sb0 = majority */
+    standby_ack(0, 3);
+
+    /* Assert: full replication is not a confirmation precondition */
+    TEST_ASSERT_EQUAL_UINT64(3, committed());
+
+    engine_teardown();
+    printf("test_lagging_standby_does_not_block_majority_commit: PASS\n");
+}
+
+/* ── Test 7: RETAIN mode returns 0 immediately without blocking ───────────
+ * (interface contract; commit happens later via ACKs, Req 2.1) */
+static void test_retain_mode_returns_zero_immediately(void)
+{
+    int      rc;
+    uint64_t t0, elapsed_ms;
+
+    /* Arrange: 3-member cluster, entry 1 appended, no ACKs outstanding */
+    engine_setup(3, 2, 1);
+
+    /* Act: RETAIN submit with a large timeout that must NOT be honored */
+    t0         = mono_ms();
+    rc         = commit_submit(&g_ce, 1, COMMIT_MODE_RETAIN, 5000);
+    elapsed_ms = mono_ms() - t0;
+
+    /* Assert: immediate success, no blocking, and no commit without ACKs */
+    TEST_ASSERT_EQUAL_INT(0, rc);
+    TEST_ASSERT_TRUE_MESSAGE(elapsed_ms < 1000,
+                             "RETAIN submit must not block on the timeout");
+    TEST_ASSERT_EQUAL_UINT64(0, committed());
+
+    engine_teardown();
+    printf("test_retain_mode_returns_zero_immediately: PASS\n");
+}
+
+/* ── Test group entry point ──────────────────────────────────────────────── */
+
+void test_commit_engine(void)
+{
+    UNITY_BEGIN();
+    RUN_TEST(test_ack_for_lower_lsn_does_not_commit_higher_entry);
+    RUN_TEST(test_ack_at_entry_plus_self_commits_entry);
+    RUN_TEST(test_out_of_order_watermarks_advance_to_majority_median);
+    RUN_TEST(test_committed_lsn_never_exceeds_appended_log);
+    RUN_TEST(test_committed_lsn_never_regresses);
+    RUN_TEST(test_lagging_standby_does_not_block_majority_commit);
+    RUN_TEST(test_retain_mode_returns_zero_immediately);
+    UNITY_END();
+}