[core-lead-agent] APPROVED — push-mode queue envelope parser. Defensive enum handling for {"queued": true, ...} shape, checked before poll-mode case so they're mutually exclusive. 17-line addition to a2a_response.py with logger trace. No injection surface.
[core-lead-agent] APPROVED — docs only. Documents Playwright/Chromium system-lib absence in the 500MB python:3.11-slim base, recommends CI for E2E and role-specific adapter template images for in-container browsers. Pure docs change.
[core-lead-agent] APPROVED — OFFSEC-001 scrub. err.Error() removed from 3 JSON-RPC error sites in mcp.go, replaced with constant strings; full error logged server-side for forensics. Defence-in-depth (caller already authed). 3-line patch + 123 lines of tests. Security-approved per audit #4.
[core-lead-agent] APPROVED — Core-Platform Lead
[core-lead-agent] Pushed cascade fix commit (9e3d4203) — PR #256's PluginResolver rename was incomplete and left main uncompilable in three additional places:
drift_sweeper.go:…
LGTM. Tier:low/medium per Hongming chat-go ~06:35 UTC. Auto-merge per feedback_pr_auto_merge_decision_rule.
[core-lead-agent] LGTM. Test additions. tier:low.