airlock-v2 auto-commit (15min sweep)

agent:    auto-commit-daemon
repo:     /Users/kooshapari/CodeProjects/Phenotype/repos/airlock-v2-smoke-test-90007/../KlipDot
hostname: MacBookPro.lan1
branch:   wip/2026-07-16-0025-auto
created:  2026-07-16T00:25:53.101393+00:00

Background checkpoint created by auto-commit-daemon. The cleanup
daemon will consolidate multiple wip/* into a single consolidated
branch every 8 hours.

[wip-managed]

Author: airlock-v2 [auto-commit]

.devcontainer/devcontainer.json

@@ -0,0 +1,21 @@
+{
+  "name": "KlipDot Rust Development",
+  "image": "mcr.microsoft.com/devcontainers/rust:latest",
+  "features": {
+    "ghcr.io/devcontainers/features/rust:1": {
+      "version": "latest",
+      "profile": "minimal"
+    }
+  },
+  "postCreateCommand": "cargo install cargo-nextest cargo-llvm-cov cargo-deny",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "rust-lang.rust-analyzer",
+        "tamasfe.even-better-toml",
+        "vadimcn.vscode-lldb",
+        "serayuzgur.crates"
+      ]
+    }
+  }
+}

.github/workflows/ci.yml

@@ -141,25 +141,25 @@ jobs:
           pkg-config \
           libasound2-dev
     
-    - name: Install grcov
-      run: cargo install grcov
+    - name: Install cargo-llvm-cov
+      run: cargo install cargo-llvm-cov
 
     - name: Run tests with coverage
       run: |
-        export CARGO_INCREMENTAL=0
-        export RUSTFLAGS="-Cinstrument-coverage"
-        export LLVM_PROFILE_FILE="klipdot-%p-%m.profraw"
-        cargo test --verbose --all-features
-        grcov . --binary-path ./target/debug/deps/ -s . -t lcov --branch --ignore-not-existing --ignore '../*' --ignore "/*" -o coverage.lcov
+        cargo llvm-cov --workspace --all-features --lcov --output-path lcov.info
     
     - name: Upload coverage to Codecov
       uses: codecov/codecov-action@v3
       with:
-        file: ./coverage.lcov
+        file: ./lcov.info
         flags: unittests
         name: codecov-umbrella
         fail_ci_if_error: false
 
+    - name: Coverage gate
+      run: |
+        cargo llvm-cov report --fail-under-lines 70
+
   build:
     name: Build Release
     runs-on: ${{ matrix.os }}

SSOT.md

@@ -0,0 +1,20 @@
+# KlipDot — Single Source of Truth
+
+## Identity
+- **Repo:** KlipDot
+- **Owner:** KooshaPari
+- **Added to fleet:** 2026-06-28 (v55 SSOT gap-fill wave)
+- **Built with:** Cargo
+
+## Scope
+| Scope | Pattern | Notes |
+|-------|---------|-------|
+| Code | `src/` | Primary Rust crate |
+| Config | `deny.toml`, `justfile` | Build/safety config |
+| Docs | `docs/`, `AGENTS.md` | Agent governance |
+
+## References
+- `AGENTS.md` — agent governance
+- `llms.txt` — LLM context
+- `justfile` — build shortcuts
+- `deny.toml` — dependency audit