Twelve-section reviewer report per the brief shape: scope-coverage
table, encryption/sessions design notes, users SDK notes, email-tied
flows, per-app roles, F1/F2/F3 implementation notes, decisions-beyond-
brief (§7, read first), how-to-verify-locally, open questions, latent
findings, deferred items, known limitations.
Key §7 flags for the reviewer: required `from` in EmailTemplateOpts,
duplicated TIMING_FLAT_DUMMY_HASH not refactored across admin auth
+ users SDK, no realtime_signing_key_nonce_LEGACY column to drop,
DELETE /users gated AppUsersWrite (admins satisfy via role chain),
cargo clean skipped on F2 attestation due to host memory constraints,
schema snapshot not re-blessed (DB-gated), integration test density
target not met (also DB-gated; reviewer to either add tests or
accept as known gap).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Scope coverage, realtime + client-lib notes, §8 attestation (482
workspace tests; e2e 6/6 + schema snapshot verified on a real DB),
every prompt-default deviation, and the latent dead_letter-trigger
fan-out finding + §4-vs-§8 ordering question for the reviewer.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Iteration 2: the v1 HANDBACK §8 claimed `cargo fmt --check` was
green against HEAD; the reviewer correctly caught that as false. The
sibling `chore: cargo fmt` commit (bf26a25) fixed the diff. This
commit updates §8 to replace the false claim with a table of actual
exit codes + test counts I re-ran post-fix, plus a §1 note
explaining the iteration so the audit trail is honest.
No code changes. Only HANDBACK.md.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Replaces the v1.1.1 HANDBACK (its release record is preserved on
main via the v1.1.1 commit log). v1.1.2 HANDBACK covers the seven
sections the implementation brief requires plus a tests-added
breakdown and open-question list for the reviewer.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
