v0.42.29

Highlights

This tag closes only FIX-MTR-01.

metadata_from_verified_fact now returns a small domain error instead of a full HTTP Response. The two existing callers still map that error through mst2_error_response. Integrity failures stay HTTP 502 with INTEGRITY_ERROR. A digest mismatch stays HTTP 409 with EXPECTED_DIGEST_MISMATCH and retryable=false. The live OpenAPI document does not add those codes. The implementation is the already-published commit f1043180959d4ee759fe82145cbb199a2d3b8ada. This release is the patch on top of it: 0.42.28 to 0.42.29.

Already released, not closed again

v0.42.28 (03c05b04388b8acc9535d99d39fa0a1c747a6746) already released FIX-MTR-03, including cloned test databases and rustls 0.23.46. That card stays closed by v0.42.28. Its AC-1 and VER-5 stay open. This note does not mark that work complete a second time.

Checks

On this machine, before the signed commit 1dbfb0c610d202c8c8d06ca107dd78fb387020c0: the verified-fact module ran 6 tests, the two existing exact cases each ran 1 test, the serial api:: suite was 427 passed / 0 failed / 1 ignored, and cargo test --all exited 0 (library 2563 passed / 0 failed / 3 ignored). cargo +nightly fmt --all --check, strict clippy, cargo build, and cargo build --tests exited 0 with no warnings. Claude and Codex both returned VERDICT: PASS with P0=0 and P1=0.