fix(audit): enforce phase0 summary max-limit semantics

Validate maxSessions/maxChannels/maxSkipReasons as non-negative finite values, make 0 produce zero rows, and add regression coverage. No architecture/protocol flow changes; diagram files reviewed and no updates were needed.
2026-02-27 13:08:37 -08:00
parent fd0ab6e6df
commit c68fd2498e
3 changed files with 93 additions and 5 deletions
@@ -463,6 +463,18 @@
      ],
      "test_status": "pnpm test:run src/audit/phase0BaselineDrift.test.ts + pnpm typecheck passing"
    },
+    "phase0-live-baseline-summary-limit-validation-hardening": {
+      "status": "completed",
+      "date": "2026-02-27",
+      "updated": "2026-02-27",
+      "summary": "Hardened phase-0 baseline summary limit handling so `maxSessions`, `maxChannels`, and `maxSkipReasons` enforce non-negative finite values, treat `0` as zero rows, and reject negative limits with explicit errors.",
+      "files_modified": [
+        "src/audit/phase0BaselineSummary.ts",
+        "src/audit/phase0BaselineSummary.test.ts",
+        "docs/plans/state.json"
+      ],
+      "test_status": "pnpm test:run src/audit/phase0BaselineSummary.test.ts + pnpm typecheck passing"
+    },
    "phase0-instrumentation-ticket-checklist": {
      "status": "completed",
      "date": "2026-02-25",