make docs OK

LiveReview Pre-Commit Check: skipped (iter:1, coverage:0%)

Author: shrsv

network/network_status.md

@@ -72,8 +72,8 @@ This document tracks network-side operations in git-lrc as an auditable inventor
 | Client.DoJSON | api | Request/response JSON payload bytes | Standard JSON HTTP call wrapper | Medium | Medium risk from broad transport usage and status-handling variance | Compensated by centralized transport wrapper with timeout controls; acceptable risk | [network/http_client.go](http_client.go#L43) |
 | Client.Do | api | Raw HTTP request/response bytes | Generic HTTP call wrapper for non-JSON/raw workflows | Medium | Medium risk from raw payload handling flexibility | Partially compensated by shared client boundary; Suggestion: document callsite expectations for raw bodies | [network/http_client.go](http_client.go#L89) |
 | SetupEnsureCloudUserURL | api | Base URL plus endpoint normalization inputs | Normalize endpoint composition and reduce path ambiguity | Medium | Medium risk if normalization logic diverges from endpoint assumptions | Compensated by centralized URL builder utility; acceptable risk | [network/endpoints.go](endpoints.go#L13) |
-| PollReview | api | Review IDs, status payloads, timeout state | Timeout-bounded polling orchestration in review runtime | High | High availability/latency risk if review service is degraded | Compensated by bounded timeout and interval controls; residual risk acceptable | [internal/reviewapi/helpers.go](../internal/reviewapi/helpers.go#L175) |
-| formatJSONParseError | api | Response body text for parse diagnostics | Improve operator diagnostics when endpoint/port mismatches occur | Low | Low risk diagnostic utility behavior | Compensated by safer error interpretation path; acceptable risk | [internal/reviewapi/helpers.go](../internal/reviewapi/helpers.go#L103) |
+| PollReview | api | Review IDs, status payloads, timeout state | Timeout-bounded polling orchestration in review runtime | High | High availability/latency risk if review service is degraded | Compensated by bounded timeout and interval controls; residual risk acceptable | [internal/reviewapi/helpers.go](../internal/reviewapi/helpers.go#L201) |
+| formatJSONParseError | api | Response body text for parse diagnostics | Improve operator diagnostics when endpoint/port mismatches occur | Low | Low risk diagnostic utility behavior | Compensated by safer error interpretation path; acceptable risk | [internal/reviewapi/helpers.go](../internal/reviewapi/helpers.go#L129) |
 
 ## Control Signals For Security Review
 

storage/storage_status.md

@@ -38,8 +38,8 @@ This document tracks storage-side operations in git-lrc as an auditable inventor
 | --- | --- | --- | --- | --- | --- | --- | --- |
 | ReadConfigFile | file | TOML config bytes including API key and connector state | Load CLI configuration from ~/.lrc.toml | High | Credential disclosure risk if file is too permissive | Compensated by strict mode enforcement via chmod path; residual risk acceptable with 0600 policy | [storage/config_io.go](config_io.go#L9) |
 | WriteFileAtomically | file | Generic file bytes (used for durable state/config writes) | Persist file content using temp-and-rename pattern | High | Integrity risk from partial/truncated writes | Compensated by atomic temp-then-rename; residual risk acceptable for local FS assumptions | [storage/files.go](files.go#L29) |
-| Chmod | file | File mode bits (0600/0755 style permissions) | Enforce permission model on config and scripts | High | Misconfiguration risk if wrong mode is applied | Compensated by centralized wrapper plus mode-specific tests for secret and executable paths; residual risk acceptable | [storage/files.go](files.go#L119) |
-| MkdirAll | file | Directory paths | Create required storage folders safely | Low | Low risk of directory sprawl/path misuse | Compensated by controlled internal callsites; acceptable risk | [storage/files.go](files.go#L87) |
+| Chmod | file | File mode bits (0600/0755 style permissions) | Enforce permission model on config and scripts | High | Misconfiguration risk if wrong mode is applied | Compensated by centralized wrapper plus mode-specific tests for secret and executable paths; residual risk acceptable | [storage/files.go](files.go#L128) |
+| MkdirAll | file | Directory paths | Create required storage folders safely | Low | Low risk of directory sprawl/path misuse | Compensated by controlled internal callsites; acceptable risk | [storage/files.go](files.go#L96) |
 
 ## Inventory: Review And Attestation Database
 
@@ -52,8 +52,8 @@ This document tracks storage-side operations in git-lrc as an auditable inventor
 | QueryAttestationReviewedSessionsByBranch | db | Ordered review session rows | Retrieve historical review evidence by branch | Medium | Evidence retrieval ordering/completeness risk | Compensated by explicit ordering query; acceptable risk | [storage/attestation_review_db_io.go](attestation_review_db_io.go#L93) |
 | DeleteAttestationReviewSessionsByBranch | db | Branch-scoped review rows | Purge branch review history | High | Data loss and forensic gap risk | Compensated by scoped delete API plus optional (opt-in) dry-run and audit logging options; default path has no additional logging overhead | [storage/attestation_review_db_io.go](attestation_review_db_io.go#L111) |
 | DeleteAllAttestationReviewSessions | db | Entire review_sessions table | Administrative full wipe of review history | High | High-impact irreversible evidence loss risk | Partially compensated by optional caller confirmation gate API with legacy delete path preserved for backward compatibility; residual risk remains high unless callers adopt confirmation policy | [storage/attestation_review_db_io.go](attestation_review_db_io.go#L148) |
-| OpenSQLite | db | Generic SQLite connection and PRAGMA state | Standardized DB opener utility | High | Broad DB behavior risk if PRAGMA policy regresses | Compensated by centralized opener policy and wrapped errors; residual risk acceptable | [storage/files.go](files.go#L145) |
-| ExecSQL | db | SQL statement plus args | Execute SQL with wrapped errors | High | SQL misuse risk from broad execution capability | Compensated by using ExecSQL for all review_sessions mutation paths in storage (schema init, insert, branch delete, full delete); direct db.Exec remains only inside ExecSQL wrapper | [storage/files.go](files.go#L161) |
+| OpenSQLite | db | Generic SQLite connection and PRAGMA state | Standardized DB opener utility | High | Broad DB behavior risk if PRAGMA policy regresses | Compensated by centralized opener policy and wrapped errors; residual risk acceptable | [storage/files.go](files.go#L154) |
+| ExecSQL | db | SQL statement plus args | Execute SQL with wrapped errors | High | SQL misuse risk from broad execution capability | Compensated by using ExecSQL for all review_sessions mutation paths in storage (schema init, insert, branch delete, full delete); direct db.Exec remains only inside ExecSQL wrapper | [storage/files.go](files.go#L170) |
 
 ## Inventory: Hook Lifecycle Storage