fix: implement audit findings from consolidated review#3935

Open

piotr-roslaniec wants to merge 17 commits intofix/review-findingsfrom

fix/audit-findings

Commits on Apr 9, 2026

fix(covenantsigner): rename misleading test after resilient loading change
piotr-roslaniec
committed
fix(covenantsigner): use errors.Is for errJobNotFound comparison in Poll
piotr-roslaniec
committed
fix(covenantsigner): restrict healthz auth bypass to GET method
piotr-roslaniec
committed
docs(covenantsigner): warn against CLI flag for AuthToken
piotr-roslaniec
committed
fix(covenantsigner): add aggregate load summary with skip count
piotr-roslaniec
committed
fix(covenantsigner): remove superseded job from byRequestID on dedup
piotr-roslaniec
committed
fix(covenantsigner): use deterministic tiebreaker when both timestamps unparseable
piotr-roslaniec
committed
fix(covenantsigner): poison route keys from skipped jobs to preserve dedupe
piotr-roslaniec
committed
fix(covenantsigner): extract Submit critical section into createOrDedup
piotr-roslaniec
committed
fix(covenantsigner): cancel service context on init failure and OS signals
piotr-roslaniec
committed
docs(covenantsigner): document advisory flock limitations and storage requirements
piotr-roslaniec
committed
fix(tbtc): improve error messages and docs for degraded wallet registry
piotr-roslaniec
committed
fix(tbtc): use canonicaljson.Marshal for handoff payload hash
piotr-roslaniec
committed
fix(covenantsigner): correctly distinguish single vs both unparseable timestamps
piotr-roslaniec
committed
fix(covenantsigner): correct context preservation test to use service context
piotr-roslaniec
committed
fix(covenantsigner): remove subsystem signal handler that steals process signals
piotr-roslaniec
committed
fix(covenantsigner): clear route poison when a valid job loads for same key
piotr-roslaniec
committed