v1.27.24

[1.27.24] — 2026-08-18

Release notes

Security fixes

• A corrupt breach jurisdictions cell now fails the row read instead of
  silently becoming an empty list. If the stored JSON on a breach was
  corrupted, the breach previously read back with zero affected jurisdictions —
  hiding from the DPO every affected-law notification deadline that the breach
  carries. That read now errors loudly (fail-closed, the repo's D-1 "never
  certify silence" invariant) rather than presenting an empty scope.

Bug fixes

• Removed the blanket #![allow(dead_code)] + #![allow(unused_imports)]
  on the handlers module and deleted the real dead code they were hiding
  (unused imports in auth, recall, ump, govern; the never-used
  authorize_read_domain; the never-read ProposalRow.created_at; the UMP
  recall ranking_hints request field, now _ranking_hints with its wire key
  preserved). No behavior change — clippy -D warnings is now the dead-code
  watchdog instead of a blanket allow.

Full Changelog: v1.27.23...v1.27.24