Run the suite without -v first so a passing build shows only per-package
summaries; on failure rerun with -v for full diagnostics and exit
non-zero, matching the conditional-verbose-rerun pattern in
REPO_POLICIES.md. Add -cover to the first run per the policy's Go
example; keep -race (added in #55) and the existing nix-shell CGO
fallback for hosts without pkg-config/vips.
model: claude-opus-4-8
Canonical v2-schema `.golangci.yml`, golangci-lint pins bumped to v2.12.2 in `Dockerfile` and `script/bootstrap`, and the tree brought to `0 issues.` under it.
Three behaviour deltas: `Cache.StoreVariant` takes a context (cancelled requests skip the accounting row, recovered by reconciliation); `MetadataStorage.Store` no longer leaks `.tmp-*.json` on Write/Close/Rename failure (dead-defer bug fix); the `signing_key` too-short error text gained a `value too short:` prefix.
Eviction-loop context cancellation deferred to #102.
sneak
clawbot