[diegosouzapw]

Follow-up to the 13-PR merge wave of jonlwheat2-gif's #15159 audit fixes (#15227, #15283, #15215, #15217, #15221, #15222, #15226, #15233, #15242, #15244, #15290, #15291, #15282). Each PR was green on its own; two repo-wide gates only see the combined result:

• check-file-size: src/lib/db/providers.ts 1199 -> 1237 (fix(db): a cookie connection's name must not overwrite another account's session (#15159 B-01) #15290, own growth at the existing chokepoint) is now frozen at its measured size; open-sse/executors/deepseek-web.ts 1224 -> 1228 (prettier line-wrapping of the fix(backend): sanitize upstream error text in deepseek-web errorResponse (#15159 E-09) #15217 sanitization). Entries are inside frozen, with a dated annotation.
• check-mutation-test-coverage --strict: registers the covering test tests/unit/authz/route-guard-providers-spawn-local-only.test.ts (fix(authz): loopback-gate the two provider routes that spawn child processes (#15159 S-01) #15242) in stryker.conf.json tap.testFiles.

Validation on the release tip after the wave: check-file-size OK, check-mutation-test-coverage --strict exit 0, check-changelog-integrity OK, prettier clean.

[github-actions]

CI Coverage Report

• Coverage job: skipped
• PR test policy: success

Coverage artifact was not available for this run.