fix(coverage): measure operational trace helpers

[seonghobae]

Purpose

Advance #84 with a bounded test-first slice on protected main 2d9d4e26a81d043a1985fc2244efb2a311fcf1d0. This slice removes jsonResponse, trustedTraceHeader, and traceIdFromRequest from the first broad V8 exclusion while leaving the remaining Region A helpers and the credential/OIDC/GitHub App Region B unchanged.

RED -> GREEN evidence

• RED head: 9dd731588168e776bd07295385db15f5ffbbbefe added a deterministic source contract rejecting broad exclusion of the three named helpers. Protected source violated that contract.
• Behavior-test head: 4e17cdda73a54019d2849a3ffd9d5fb96a047e19 added real Request/Response regressions proving valid x-request-id propagation and invalid-request-id fallback to a valid x-correlation-id.
• Current GREEN source head: 30dd9bc0e61a6f2304298cdb3ba9fff5e95e0fa0. Its only production diff moves the existing /* v8 ignore start */ boundary from before jsonResponse to immediately before safeHash; runtime behavior is otherwise unchanged.

The source contract is now satisfied on the exact current head. Full repository acceptance remains fail closed until fresh exact-head ci, reviewer-ci, and protected-base central Security Scan complete successfully and configured owned-production statements/branches/functions/lines remain exactly 100% with zero valid unresolved findings. At the last refetch these runs were queued, which is non-passing.

Safety boundary

• Branch parent/base remains exact protected main at construction; no force push or destructive rebase was used.
• Stale docs(api): inventory and document non-conflicting TypeScript API #86 still has exact unchanged head 1d8b9a3fafc07f0df6e79a286f141d21e22bc1f9 and has not moved since 2026-08-10; this slice changes only private operational coverage instrumentation plus focused tests. Freeze this lane if docs(api): inventory and document non-conflicting TypeScript API #86 moves.
• fix(security): claim verified OIDC replay before token mint #270 replay-before-token-mint behavior is already protected truth; this slice neither claims nor duplicates that security repair.
• No workflow mutation, gate weakening, secret/reviewer invention, self-approval, release, deployment, persistence, or outbound-license decision.

Keep Draft while any exact-head required evidence is pending, queued, skipped, absent, neutral, failed, cancelled, stale, predecessor-only, status-only, model-only, or rate-limited.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e8c49d34-0028-4d28-ae0a-bd44b1afbdec

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}