feat(reborn): enable progressive tool disclosure by default

[serrrfirat]

Summary

• enable progressive tool disclosure when REBORN_TOOL_DISCLOSURE is unset or empty
• retain explicit REBORN_TOOL_DISCLOSURE=off and invalid/non-Unicode values as fail-closed rollback paths
• add production-default caller coverage while keeping general integration harnesses pinned to Off
• merge current main, port the mode change to its current ironclaw_loop_host owner, and inherit ci: unblock the queue — histogram diff gate fix, wasmtime RUSTSEC bump, stale events floor recapture #6966's legitimate ironclaw_events coverage-floor recapture

Change Type

• Bug fix
• New feature
• Refactor
• Documentation
• CI/Infrastructure
• Security
• Dependencies

Linked Issue

Closes #6810

Follows #5659 and #6859.

Validation

• cargo fmt --all -- --check
• cargo clippy --all --benches --tests --examples --all-features -- -D warnings — not run locally; the focused test builds passed and PR CI will run the repository clippy matrix.
• cargo build — not run separately; the owning-package and integration tests compiled the changed paths.
• Relevant tests pass: all ironclaw_loop_host tests (553 unit tests plus contract suites), all 27 reborn_integration_tool_disclosure tests, and the full ironclaw_reborn_composition package suite (one pre-existing TODO test and one doctest ignored).
• cargo test --features integration if database-backed or integration behavior changed — Not applicable: no database or backend behavior changed.
• Manual testing: Not applicable before PR canary; live verification will be posted by /canary on this PR.
• If a coding agent was used and supports it, review-pr or pr-shepherd --fix was run before requesting review — the post-merge diff against main was manually audited and the owner, whole-turn, and composition suites were run.

The branch is merged with current main. The earlier aggregate coverage failure was an upstream ironclaw_events code-and-test deletion already recaptured by #6966; this PR inherits that fix and does not change the coverage floor itself.

Test Strategy

User behavior:

Users with wide capability catalogs get the discovery bridge by default. Small catalogs remain direct. Operators can immediately restore the flat surface with REBORN_TOOL_DISCLOSURE=off.

Risk areas:

• Model behavior
• Browser
• Side effect
• Persistence
• Security or permissions
• External provider
• Cross-component behavior

Tests added or updated:

• Unit or contract: ironclaw_loop_host proves unset and empty configuration resolve to Bridged; invalid, non-Unicode, and explicit off resolve to Off.
• Reborn integration: a wide catalog under the production enum default advertises tool_search, tool_describe, and tool_call while deferring the flat GitHub list. The explicit-Off and hermetic-default controls remain green.
• Recorded fixture: Not applicable: deterministic surface selection is covered below the vendor seam.
• Browser E2E: Not applicable: no browser contract changes.
• Backend or runtime: ironclaw_loop_host and ironclaw_reborn_composition package suites plus the production capability-chain disclosure integration target.
• Live canary: completed on the pre-merge product head; the full run passed 11/12 shards, and repeated tool-call samples showed enough variance that no cost-reduction claim is made.

What the tests prove:

• unset/empty production configuration selects bridged disclosure
• invalid configuration and the explicit kill switch stay fail-closed
• wide catalogs expose the complete discovery protocol by default
• general integration harnesses remain hermetically pinned to Off

Commands run:

• cargo fmt --all -- --check
• cargo test -p ironclaw_loop_host
• cargo test -p ironclaw_reborn_integration_tests --test reborn_integration_tool_disclosure
• cargo test -p ironclaw_reborn_composition

Security Impact

The model-visible default changes from a flat catalog to threshold-gated progressive disclosure. Authorization, capability allow-set filtering, approvals, target registration, and mediated dispatch remain unchanged. #5659 already landed the narrowed-surface metadata-isolation prerequisite. Invalid/unreadable configuration and explicit off continue to fail closed.

Reborn Trust-Boundary Checklist

• Public policy/evidence/trust-bearing types: no constructors or trust-bearing types changed.
• Untrusted content enters prompts only through an envelope/escaping primitive: no prompt content or untrusted input handling changed.
• Hashes declare purpose; trust/binding/authenticity uses SHA-256/BLAKE3 or separate authenticity check: Not applicable; no hash behavior changed.
• New/changed status, exit, policy, runtime, or error variants: downstream match sites audited. Command/output: no variants changed; ToolDisclosureMode's default only was changed.
• Security/durability serde(default) fields fail closed or have migration tests: no serialized fields changed; invalid environment configuration remains Off.
• Queues/maps/buffers/counters have bounds and overflow-safe arithmetic: no queue/map/buffer/counter changed; the existing 32-tool / 12k-token disclosure budget remains enforced.
• Driver/operator-visible errors have stable class semantics (Transient, Permanent, Misconfigured, PolicyDenied or equivalent): no error class changed.
• Sandbox/native/host names accurately describe trust boundary: no runtime-lane or sandbox names changed.

Database Impact

None.

Blast Radius

Reborn model requests whose effective catalog exceeds 32 tools or 12k estimated schema tokens now receive the discovery bridge by default. Below-threshold surfaces are unchanged. The primary regression risk is extra model calls or incorrect discovery behavior on weaker tool-calling models.

Rollback Plan

Set REBORN_TOOL_DISCLOSURE=off to restore the flat catalog without a deploy. Revert this commit to restore default-Off configuration semantics. No migration or persisted-state rollback is required.

Review Follow-Through

• Post the exact-head /canary result and a per-case tool-call comparison against the latest successful scheduled canary.
• Keep the production deployment override at off until canary evidence is reviewed; remove it through bounded cohorts afterward.

---

Review track: C (runtime default change)

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[railway-app]

🚅 Deployed to the ironclaw-pr-6958 environment in ironclaw-ci-preview

Service	Status	Web	Updated (UTC)
ironclaw	❌ Build Failed (View Logs)	Web	Aug 7, 2026 at 2:42 pm

[serrrfirat]

/canary cases=qa_3b_endpoint_status_live_chat,qa_9b_routine_dm_delivery_exactly_once,qa_10a_slack_self_attribution

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 935c4cfb-aa29-4e86-885a-bb85f64d577f

📥 Commits

Reviewing files that changed from the base of the PR and between 81724a6 and 34431dc.

📒 Files selected for processing (12)

• crates/app/ironclaw_composition/src/runtime/tests/core.rs
• crates/app/ironclaw_composition/src/runtime/tests/outbound_delivery.rs
• crates/app/ironclaw_composition/tests/runtime.rs
• crates/app/ironclaw_composition/tests/webui_v2_e2e.rs
• crates/loop/ironclaw_loop_host/src/tool_disclosure_mode.rs
• tests/CLAUDE.md
• tests/e2e/reborn_webui_harness.py
• tests/e2e/scenarios/test_reborn_responses_api.py
• tests/integration/support/builder.rs
• tests/integration/tool_disclosure.rs
• tests/reborn_qa_routines.rs
• tests/support/reborn_parity_qa/binary_e2e.rs

---

📝 Walkthrough

Summary by CodeRabbit

• New Features

  • Progressive tool disclosure is now enabled by default, making large tool catalogs easier to navigate.
  • Large GitHub tool catalogs can be accessed through tool_search, tool_describe, and tool_call.

• Bug Fixes

  • Explicitly disabling tool disclosure remains supported.
  • Invalid configuration values continue to fail safely with disclosure disabled.

• Tests

  • Expanded coverage validates default, bridged, and disabled tool-disclosure behavior.

Walkthrough

ToolDisclosureMode now defaults to Bridged when unset or empty. Integration coverage verifies bridge tools for wide catalogs. Existing test harnesses explicitly select Off to preserve flat tool surfaces.

Changes

Tool disclosure default

Layer / File(s)	Summary
Runtime default and parsing semantics crates/loop/ironclaw_loop_host/src/tool_disclosure_mode.rs	Unset and empty configuration now resolve to Bridged. Explicit off and invalid values resolve to Off.
Production-default integration coverage tests/integration/support/builder.rs, tests/integration/tool_disclosure.rs, tests/CLAUDE.md	The integration builder selects the production default. Coverage verifies tool_search, tool_describe, and tool_call, while excluding github__get_repo.
Backward-compatible test pinning tests/reborn_qa_routines.rs, tests/support/reborn_parity_qa/binary_e2e.rs, crates/app/ironclaw_composition/src/runtime/tests/*, crates/app/ironclaw_composition/tests/*, tests/e2e/*	Existing QA, replay, composition, runtime, WebUI, and Responses API tests explicitly disable tool disclosure.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Sequence Diagram(s)

sequenceDiagram
  participant IntegrationHarness
  participant Runtime
  participant ToolCatalog
  IntegrationHarness->>Runtime: select production-default disclosure mode
  Runtime->>ToolCatalog: submit wide GitHub catalog
  ToolCatalog-->>Runtime: expose tool_search, tool_describe, and tool_call
  Runtime-->>IntegrationHarness: exclude github__get_repo

Loading

Possibly related issues

• Issue 7166 — Covers the same progressive disclosure default and explicit off rollback behavior.

Possibly related PRs

• nearai/ironclaw#6859 — Modifies ToolDisclosureMode defaults and integration coverage.
• nearai/ironclaw#7233 — Updates tool-disclosure integration coverage and harness configuration.
• nearai/ironclaw#7273 — Implements deferred tool discovery used by the production-default bridge surface.

Suggested reviewers: benkurrek

🚥 Pre-merge checks | ✅ 3 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The change implements default-on behavior, fail-closed rollback, threshold handling, and coverage, but lacks evidence for several requirements in #6810.	Add or link rollout metrics, comparison tooling, deterministic recall and quality validation, and health-gate evidence, or track them explicitly as follow-up work for #6810.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title uses Conventional Commits format and accurately states the main change: enabling progressive tool disclosure by default.
Description check	✅ Passed	The description follows the template and documents scope, linked issues, validation, tests, security impact, blast radius, rollback, and follow-through.
Out of Scope Changes check	✅ Passed	The test harness pinning, production-default coverage, runtime changes, and documentation updates directly support the tool-disclosure objectives in #6810.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Started Reborn WebUI v2 live canary for codex/tool-disclosure-default-on at 4bc3c01ed6 with cases qa_3b_endpoint_status_live_chat,qa_9b_routine_dm_delivery_exactly_once,qa_10a_slack_self_attribution: https://github.com/nearai/ironclaw/actions/runs/30631326910

[ironloopai]

🔎 Review · PR #6958

⚫ Cancelled · Target changed

The target changed before this Run could finish.

_{Automatic · PR opened · attempt 0 of 3 · cancelled after <1s}

Run details

• Repository: nearai/ironclaw
• Base: main at 73d45cc
• Head: codex/tool-disclosure-default-on at 4bc3c01
• Created: Jul 31, 2026, 12:42 PM UTC
• Updated: Jul 31, 2026, 12:42 PM UTC
• Run: f608dfa0-0724-4e13-a8a2-23d3bacfcd61

[serrrfirat]

/canary

[serrrfirat]

Live canary comparison

Targeted PR canary 30631326910 completed successfully against the production change at 4bc3c01ed6. The current PR head adds test-only explicit-mode pins; it does not change the shipping binary exercised by this run.

Compared with the matching cases from the newer main canary 30631705598 at a88bcb2522:

Case	Latest main	PR default-on	Delta	Result
qa_3b_endpoint_status_live_chat	1	1	0	Passed; builtin.http in both
qa_9b_routine_dm_delivery_exactly_once	8	7	-1	Passed; PR used 2 ironclaw.tool_describe calls and still delivered exactly once
qa_10a_slack_self_attribution	4	3	-1	Passed; PR used 1 ironclaw.tool_describe call
Total	13	11	-2 (-15.4%)	All matched cases passed

The prior fully successful scheduled-main run 30621834378 also totaled 11 calls across these cases, so the PR is flat versus that baseline and lower than the freshest main sample.

This is a single live sample and model behavior is stochastic, so it is evidence against an obvious day-to-day regression rather than a statistical performance claim. The rollback remains REBORN_TOOL_DISCLOSURE=off.

[serrrfirat]

/canary all

[github-actions]

Started Reborn WebUI v2 live canary for codex/tool-disclosure-default-on at 5886468f06 with cases all: https://github.com/nearai/ironclaw/actions/runs/30636283879

[github-actions]

Coverage ratchet

Ratchet mode: ENFORCING

RATCHET PASS: global
  observed: 85.8% (320228 / 373238 lines)
  floor:    85.11% (tolerance 0.5pp -> effective floor 84.61%)
  denominator: 373238 lines now vs 375097 at floor capture (-1859 lines, -0.5%) — not a material change

RATCHET PASS: ironclaw_runner
  observed: 86% (15127 / 17590 lines)
  floor:    85.55% (tolerance 0.5pp -> effective floor 85.05%)
  floor_covered_lines: 14658 (tolerance 20 lines -> effective floor 14638)
  denominator: 17590 lines now vs 17133 at floor capture (+457 lines, +2.67%) — not a material change

RATCHET PASS: ironclaw_processes
  observed: 88.79% (5891 / 6635 lines)
  floor:    88.07% (tolerance 0.5pp -> effective floor 87.57%)
  floor_covered_lines: 5839 (tolerance 20 lines -> effective floor 5819)
  denominator: 6635 lines now vs 6630 at floor capture (+5 lines, +0.08%) — not a material change

RATCHET PASS: ironclaw_turns
  observed: 86.54% (9863 / 11397 lines)
  floor:    85.11% (tolerance 0.5pp -> effective floor 84.61%)
  floor_covered_lines: 9515 (tolerance 20 lines -> effective floor 9495)
  denominator: 11397 lines now vs 11179 at floor capture (+218 lines, +1.95%) — not a material change

RATCHET PASS: ironclaw_authorization
  observed: 86.59% (723 / 835 lines)
  floor:    62.51% (tolerance 0.5pp -> effective floor 62.01%)
  floor_covered_lines: 612 (tolerance 20 lines -> effective floor 592)
  denominator: 835 lines now vs 979 at floor capture (-144 lines, -14.71%) — material change (>5%)

RATCHET PASS: ironclaw_approvals
  observed: 91.05% (1820 / 1999 lines)
  floor:    85.86% (tolerance 0.5pp -> effective floor 85.36%)
  floor_covered_lines: 1822 (tolerance 20 lines -> effective floor 1802)
  denominator: 1999 lines now vs 2122 at floor capture (-123 lines, -5.8%) — material change (>5%)

RATCHET PASS: ironclaw_secrets
  observed: 85.77% (2887 / 3366 lines)
  floor:    84.01% (tolerance 0.5pp -> effective floor 83.51%)
  floor_covered_lines: 2795 (tolerance 20 lines -> effective floor 2775)
  denominator: 3366 lines now vs 3327 at floor capture (+39 lines, +1.17%) — not a material change

RATCHET PASS: ironclaw_filesystem
  observed: 76.23% (5849 / 7673 lines)
  floor:    75.93% (tolerance 0.5pp -> effective floor 75.43%)
  floor_covered_lines: 5826 (tolerance 20 lines -> effective floor 5806)
  denominator: 7673 lines now vs 7673 at floor capture (+0 lines, +0%) — not a material change

RATCHET PASS: ironclaw_llm
  observed: 79.96% (22644 / 28318 lines)
  floor:    79.92% (tolerance 0.5pp -> effective floor 79.42%)
  floor_covered_lines: 22566 (tolerance 20 lines -> effective floor 22546)
  denominator: 28318 lines now vs 28235 at floor capture (+83 lines, +0.29%) — not a material change

RATCHET PASS: ironclaw_triggers
  observed: 94.88% (3092 / 3259 lines)
  floor:    86.04% (tolerance 0.5pp -> effective floor 85.54%)
  floor_covered_lines: 2804 (tolerance 20 lines -> effective floor 2784)
  denominator: 3259 lines now vs 3259 at floor capture (+0 lines, +0%) — not a material change

RATCHET PASS: ironclaw_product
  observed: 87.49% (22827 / 26090 lines)
  floor:    86.94% (tolerance 0.5pp -> effective floor 86.44%)
  floor_covered_lines: 21367 (tolerance 20 lines -> effective floor 21347)
  denominator: 26090 lines now vs 24576 at floor capture (+1514 lines, +6.16%) — material change (>5%)

RATCHET PASS: ironclaw_outbound
  observed: 94.68% (4271 / 4511 lines)
  floor:    93.49% (tolerance 0.5pp -> effective floor 92.99%)
  floor_covered_lines: 4105 (tolerance 20 lines -> effective floor 4085)
  denominator: 4511 lines now vs 4391 at floor capture (+120 lines, +2.73%) — not a material change

RATCHET PASS: ironclaw_extension_host
  observed: 83.82% (22271 / 26569 lines)
  floor:    83.82% (tolerance 0.5pp -> effective floor 83.32%)
  floor_covered_lines: 22271 (tolerance 20 lines -> effective floor 22251)
  denominator: 26569 lines now vs 26569 at floor capture (+0 lines, +0%) — not a material change

RATCHET FAIL: ironclaw_events
  observed: 80.55% (1197 / 1486 lines)
  floor:    81.04% (tolerance 0.5pp -> effective floor 80.54%)
  floor_covered_lines: 1252 (tolerance 20 lines -> effective floor 1232)
  denominator: 1486 lines now vs 1545 at floor capture (-59 lines, -3.82%) — not a material change
  To fix:
    - If this is a real coverage regression: add tests, don't touch the floor file.
    - If this is a legitimate denominator/numerator shift EITHER direction —
      growth (new/renamed module entering instrumentation, e.g. #5656) OR
      shrinkage (a code+test deletion legitimately lowering covered lines,
      even when the denominator barely moves): update
      tests/integration/coverage-floor.toml's [[crate]] entry for
      ironclaw_events IN THIS PR — bump (or lower) captured_total_lines and
      floor_percent/floor_covered_lines to the new observed numbers, set
      captured_date, and add a one-line rationale + issue link.
      See the file's own header for the schema.

RATCHET PASS: ironclaw_safety
  observed: 92.75% (4468 / 4817 lines)
  floor:    92.44% (tolerance 0.5pp -> effective floor 91.94%)
  floor_covered_lines: 3973 (tolerance 20 lines -> effective floor 3953)
  denominator: 4817 lines now vs 4298 at floor capture (+519 lines, +12.08%) — material change (>5%)

RATCHET PASS: ironclaw_host_runtime
  observed: 88.38% (21083 / 23855 lines)
  floor:    88.23% (tolerance 0.5pp -> effective floor 87.73%)
  floor_covered_lines: 20538 (tolerance 20 lines -> effective floor 20518)
  denominator: 23855 lines now vs 23277 at floor capture (+578 lines, +2.48%) — not a material change

Reborn integration-tier coverage

Line coverage (Reborn crates): 85.8% — 320228 / 373238 lines

Per-crate breakdown (60 crates, lowest-covered first)

Crate	Line %	Covered / Total
ironclaw_host_ingress	42.5%	17 / 40
ironclaw_memory	53.48%	630 / 1178
ironclaw_projects	72.36%	233 / 322
ironclaw_trust	73.71%	670 / 909
ironclaw_capabilities	74.7%	2884 / 3861
ironclaw_extractors	75.88%	538 / 709
ironclaw_reborn_cli	76.1%	11084 / 14566
ironclaw_observability	76.19%	32 / 42
ironclaw_filesystem	76.23%	5849 / 7673
ironclaw_wasm	78.84%	704 / 893
ironclaw_llm	79.96%	22644 / 28318
ironclaw_events	80.55%	1197 / 1486
ironclaw_auth	82.03%	5960 / 7266
ironclaw_first_party_extensions	82.57%	6784 / 8216
ironclaw_memory_native	82.85%	2850 / 3440
ironclaw_libsql_runtime	83.3%	384 / 461
ironclaw_host_api	83.42%	9718 / 11649
ironclaw_extension_host	83.82%	22271 / 26569
ironclaw_operator	84.47%	5309 / 6285
ironclaw_hooks	84.58%	9906 / 11712
ironclaw_event_projections	84.81%	854 / 1007
ironclaw_network	84.92%	890 / 1048
ironclaw_reborn_event_store	84.93%	1206 / 1420
ironclaw_reborn_config	85.29%	2110 / 2474
ironclaw_reborn_composition	85.51%	21781 / 25473
ironclaw_secrets	85.77%	2887 / 3366
ironclaw_runner	86%	15127 / 17590
ironclaw_turns	86.54%	9863 / 11397
ironclaw_authorization	86.59%	723 / 835
ironclaw_webui	86.93%	11821 / 13598
ironclaw_wasm_limiter	87.06%	74 / 85
ironclaw_common	87.33%	1641 / 1879
ironclaw_product	87.49%	22827 / 26090
ironclaw_reborn_traces	87.61%	11720 / 13377
ironclaw_extensions	87.84%	4870 / 5544
ironclaw_scripts	87.87%	420 / 478
ironclaw_skills	88.13%	2770 / 3143
ironclaw_threads	88.14%	5189 / 5887
ironclaw_host_runtime	88.38%	21083 / 23855
ironclaw_telegram_extension	88.52%	586 / 662
ironclaw_process_sandbox	88.64%	281 / 317
ironclaw_processes	88.79%	5891 / 6635
ironclaw_reborn_openai_compat	89.4%	3644 / 4076
ironclaw_telegram_v2_adapter	89.43%	1573 / 1759
ironclaw_loop_host	90.47%	18045 / 19946
ironclaw_resources	90.76%	4084 / 4500
ironclaw_approvals	91.05%	1820 / 1999
ironclaw_reborn_identity	91.3%	451 / 494
ironclaw_mcp	91.91%	1318 / 1434
ironclaw_conversations	92.08%	2383 / 2588
ironclaw_event_streams	92.5%	1048 / 1133
ironclaw_safety	92.75%	4468 / 4817
ironclaw_agent_loop	93.52%	10428 / 11151
ironclaw_slack_extension	93.94%	3689 / 3927
ironclaw_first_party_extension_ports	94.66%	3758 / 3970
ironclaw_outbound	94.68%	4271 / 4511
ironclaw_triggers	94.88%	3092 / 3259
ironclaw_prompt_envelope	97.46%	192 / 197
ironclaw_runtime_policy	97.6%	855 / 876
ironclaw_attachments	98.23%	831 / 846

This table itself is informational and never gates the PR on its own — not the percentage, not the per-crate holes, not the 0-coverage callout. A separate coverage ratchet (dry-run until enforce=true; see tests/integration/coverage-floor.toml) can fail the build on specific configured floors.

Exemptions (17 entry/entries excluded from the accounting above)

Module / Crate	Reason	Issue
crate: ironclaw_gateway	v1-only: consumed only by root ironclaw (src/channels/web/platform/static_files.rs, src/channels/web/handlers/frontend.rs); no crates/* dependents. Covered by "Tests (Legacy)".	#5657
crate: ironclaw_tui	v1-only: consumed only by root ironclaw (src/main.rs, src/channels/tui.rs); no crates/* dependents. Crate's own doc comment confirms it bridges INTO v1, not Reborn. Covered by "Tests (Legacy)".	#5657
crates/ironclaw_attachments/src/lib.rs	Declarative crate facade: module declarations, constants, and re-exports only; executable attachment modules remain covered.	#6524
crates/ironclaw_extension_host/src/ingress/mod.rs	Declarative ingress module facade and documentation only; executable router modules remain covered.	#6524
crates/ironclaw_host_api/src/lib.rs	Declarative crate facade: module declarations and re-exports only; executable host API modules remain covered.	#6524
crates/ironclaw_host_api/src/product_adapter/mod.rs	Declarative product-adapter facade: module declarations and re-exports only; executable adapter modules remain covered.	#6524
crates/ironclaw_llm/src/rig_adapter/tests/finish_reason_tests.rs	Test-only module stored under src/ for private adapter access; cargo-llvm-cov omits test harness source from production LCOV while the exercised rig_adapter.rs production lines remain coverage-gated.	#6284
crates/ironclaw_outbound/src/error.rs	Declarative error vocabulary only; variants have no LLVM-instrumentable production statements.	#6524
crates/ironclaw_outbound/src/lib.rs	Declarative crate facade: module declarations and re-exports only; executable outbound modules remain covered.	#6524
crates/ironclaw_product/src/lib.rs	Declaration-only public facade with no executable Rust statements; rustc emits no LCOV source record. Executable product behavior remains covered in the owned implementation modules.	#6524
crates/ironclaw_product/src/lib.rs	Declarative crate facade: module declarations and re-exports only; executable product modules remain covered.	#6524
crates/ironclaw_product/src/scoped_fs/mod.rs	Declarative scoped-filesystem facade and documentation only; executable scoped filesystem modules remain covered.	#6524
crates/ironclaw_reborn_composition/src/support/fs/mod.rs	Declarative composition support facade: module declarations and re-exports only; executable filesystem adapters remain covered.	#6524
crates/ironclaw_slack_extension/src/lib.rs	Declarative Slack crate facade: module declarations and re-exports only; executable Slack modules remain covered.	#6524
crates/ironclaw_telegram_extension/src/lib.rs	Declarative Telegram crate facade: module declarations and re-exports only; executable Telegram modules remain covered.	#6524
crates/ironclaw_threads/src/lib.rs	Declaration-only public facade with no executable Rust statements; rustc emits no LCOV source record. Executable thread behavior remains covered in the owned implementation modules.	#6524
crates/ironclaw_webui/src/webui_v2/mod.rs	Declaration-only WebUI v2 facade with no executable Rust statements; rustc emits no LCOV source record. Executable route behavior remains covered in the owned implementation modules.	#6524

[serrrfirat]

/canary all

[github-actions]

Started Reborn WebUI v2 live canary for codex/tool-disclosure-default-on at ace0caeabf with cases all: https://github.com/nearai/ironclaw/actions/runs/30639369563

[coderabbitai]

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.