40a75d342f
Accepted: dep major ranges, ssh client leak fix, tmp-name hardening, dispose-ordering note, invalidate-during-build test, testable parseArgs, coverage justification, README security sections. Rejected with evidence: MySQL session read-only blocks DML/DDL (verified on mysql:8.4, ERROR 1792); in-process store races impossible (synchronous read-modify-write).