fix(http,audits): the guide describes the router that exists, and the registry gate finds its own

[indykish]

The two files 0.9.3 deliberately left. Merging this publishes 0.9.4.

docs/REST_API_DESIGN_GUIDELINES.md

§7 taught a six-place route registration through files that no longer exist. The router it now describes is built FROM the route table: Route::all() is walked at startup, so a path cannot be served under a spelling the table does not carry. Adding an endpoint is a family enum variant plus its ALL entry, a RouteMeta row, a handler in a plane crate, and the generated document — and the failure table says which of those fail loudly and which one is silent.

Guard replaces the middleware policy table. RouteClass and Scopes join it. Ownership is written down for the first time: derived from the template, so the cross-tenant check a handler used to call by hand is not a thing a handler can forget.

§8 describes an axum handler taking the extractors it reads and returning Result<Response, Refusal>. §4 and §5 stop naming hx.ok and hx.fail.

The base is the product repo's own copy, which had already been corrected in place and would have been overwritten by the next orly update.

audits/error-codes.sh

The script hard-coded one repository's registry path, source globs and allowlist — the debt its own header acknowledged and named the fix for. All four now resolve at run time from ORLY_ERROR_PREFIX, ORLY_ERROR_REGISTRY, ORLY_ERROR_SOURCES and ORLY_ERROR_ALLOWLIST, or by autodetection: Rust where something declares ErrorCode::declare("<PREFIX>-…"), Zig where an error_registry.zig exists. A repository with neither skips with a reason instead of hard-exiting or passing vacuously.

Two findings the Rust runtime forced:

• Unit tests live inside the file they cover, so #[cfg(test)] blocks are skipped by brace depth, the same shape audits/ufs.sh already uses.
• A doc comment naming a retired code is prose, not a call site, so comment lines leave the USED set.

Verification

macOS bash 3.2:

make audit                    → green
bash evals/dispatch/run.sh    → 43 passed, 0 failed
bash evals/dispatch/parity.sh → 10 passed, 0 failed
audits/rule-ledger.sh         → 23 passed, 0 failed

Against the product repo the rewritten gate autodetects its Rust registry and reports registry (rust): 172 declared — the number that proves it found a registry rather than scanning nothing. Against a repository with none it prints skipped — no UZ-* registry found and exits 0.

🤖 Generated with Claude Code

https://claude.ai/code/session_01BSLUVqAJkk9Yj3TfSC3U2Z

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!