cowork 7f1616f41b Bundle R-CI-extended raise: CI floors lifted post-extensions ...

Final CI threshold raise commit on top of all the *-extended bundles
(J / N.A/B / N.C). Each raise verified to have >=3pp margin below
the current measured package-scoped coverage to absorb the global-run
per-file-average dip vs package-scoped runs.

Raises applied
=================
  internal/connector/issuer/acme/   50 -> 80   (HEAD 85.4% post-J-ext;
                                                Pebble mock + HTTP-01 +
                                                DNS-01 + DNS-PERSIST-01
                                                challenge flows)
  internal/service/                 55 -> 70   (HEAD 73.4% post-N.C-ext;
                                                CertificateService +
                                                AgentService delegator
                                                round-out)
  internal/api/handler/             60 -> 75   (HEAD 79.8% post-N.C-ext;
                                                IssuerHandler ctor +
                                                HealthCheckHandler dispatch)

Held at prior floors (already met; further raises deferred)
=================
  internal/crypto/                  88   (HEAD 88.2%; 92 deferred — needs
                                          rand.Reader / aes.NewCipher
                                          seams for fail-branch testing)
  internal/connector/issuer/local/  86   (HEAD 86.7%; 92 deferred — needs
                                          crypto/x509 signing-error seams)
  internal/pkcs7/                   100% informational (global-run
                                                       measurement artifact)
  internal/connector/issuer/stepca/  80   (HEAD 90.4%; future raise possible)
  internal/mcp/                     85   (HEAD 93.1%; future raise possible)

Verification
=================
  - python3 yaml.safe_load: OK
  - All raised floors verified met by current package-scoped coverage
    (with >=3pp margin)

Audit deliverables
=================
  - extension-progress.md: R-CI-extended marked DONE with raise table
  - CHANGELOG.md: full Bundle R-CI-extended entry

Bundle: R-CI-extended raise (Coverage Audit Extension)

2026-04-27 21:43:08 +00:00

..

workflows

Bundle R-CI-extended raise: CI floors lifted post-extensions

2026-04-27 21:43:08 +00:00