v0.7.2 — Review cleanup pass
A bug-fix release clearing the remaining lower-severity findings from the adversarial review (20 fixes, one commit each).
Fixes
- Resource leaks: background-log fds, session wake-pipe fds, and the throwaway replay tempdir are all released now.
- Crash-safety: the TRUST daemon's state files are written atomically (crash mid-write no longer resets them).
- Fleet concurrency: the Claude-bridge inbox read-modify-write is flock-serialized; the wake-pipe drain is now atomic with the inbox swap (no lost wakeups).
- Verification accuracy: interpreter inline-code runs (
python -c,node -e) count as file-mutating; the read-before-edit gate falls back to a content sha1 when mtime+size look unchanged. - Resilience / graceful degradation: deeply-nested Python no longer aborts the symbol index; a missing
git, an empty model ladder, non-numericoffset/limit, non-string action fields, and a transient 400 all degrade cleanly instead of crashing or persisting bad state. - Fidelity: edits preserve CRLF line endings and executable bits; a subset index refresh no longer clobbers the cache.
Stdlib-only, zero runtime deps. 416 tests green.