Joseph Ferano
c806125742
NEXT.md's queued section becomes a landed one. The headline is not the flag: ASan reaches Flan code only because Emit now attributes every define, and UBSan reaches none of it and has no lever that would, so the shift-UB and float-cast items that section listed are still open and are a compiler feature rather than a flag. The clean result is written with its reach. println.flan pushes a 1100-character string through escaped[1024] on purpose, so that buffer is genuinely covered; scratch[64] never sees more than 20 characters; and the 4K result cap, the dev registry guard, SNAP_MAX/SNAP_NAMES and condition_name[128] are on the daemon path and not in the corpus at all -- read, not tested. Two defects fixed, both found by reading. Three of bounds.flan's six out-of-bounds cases caught with the checks off, with the other three tabulated and explained, and the caveat that ASan sees out-of-object and not out-of-subobject access, so three of six is a ceiling and not a measurement. BUILT.md gets the durable half: the attribute, the absent UBSan lever, why --sanitize does not force -O0 when --debug does, and the -O0/-O2 divergence that earned it.
