Cursor Agent8/5/2026, 10:11:57 AM

Locks residual high-risk seams beyond open coverage PRs #298–#300 and the
branch's send-queue/projection coverage: abort-vs-rate-limit retry gates,
classifier chain depth/cause preference, lifecycle-only retry, maxRetries
sanitization, cold-start MCP close errors that must not mask sibling
failures, and incomplete/foreign attestation fail-closed on the verify path.

Co-authored-by: Max Weinbach <mweinbach@users.noreply.github.com>

Parentf95989b