check / check (push) Canceled after 0s
Save wrote state.json.tmp with os.WriteFile and renamed it over state.json without syncing. After a power loss the rename could reach the disk before the data, leaving an empty state.json that Load cannot parse, so every start failed. Save now writes the temp file through its own handle, syncs and closes it, renames it, then syncs the data directory so the rename is on disk too. The new test starts from a leftover temp file longer than the state; a test cannot observe the syncs, which are confirmed by reading. Rule suppressed: gosec's file-path warning on the temp file's open, as Load already does. Model: opus-5-5