Post-merge review follow-up. TcpSocketOptionsValidator (src/io/broker/TcpSocketOptions.ts) does not validate the nested framing object — framing.maxLineLen <= 0 / NaN passes on the options path (the HOCON path only gets getInt type-checking). Since maxLineLen bounds the inbound line-framing buffer (security audit BRK-1), an invalid value silently defeats the cap. Add a nested-field rule (fail('framing.maxLineLen', …) for a positive integer).
Out of scope for the initial post-merge reconciliation (WP1–WP7); filed for later.
Post-merge review follow-up.
TcpSocketOptionsValidator(src/io/broker/TcpSocketOptions.ts) does not validate the nestedframingobject —framing.maxLineLen <= 0/NaNpasses on the options path (the HOCON path only getsgetInttype-checking). SincemaxLineLenbounds the inbound line-framing buffer (security audit BRK-1), an invalid value silently defeats the cap. Add a nested-field rule (fail('framing.maxLineLen', …)for a positive integer).Out of scope for the initial post-merge reconciliation (WP1–WP7); filed for later.