Files
BillyOutlastandClaude Opus 5.5 2017aee1d3 Contract test: require the offline-user branch, catch stray hosted calls
Two holes raised in review, each now with a negative control:
- an endpoint route could lose its local-* user branch and still pass;
  sites that take a userId must now carry both conditions.
- discovery was by declaration shape, so a hosted request in a function
  declaration or method would have gone unclassified. Every hosted
  request must now sit inside a classified call site.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-11 16:51:37 -04:00
..