## Summary
## Type of change
- [ ] `feat` -- new user-facing feature
- [ ] `fix` -- bug fix
- [ ] `docs` -- documentation only
- [ ] `refactor` -- code restructuring, no behavior change
- [ ] `chore` -- dependency bump, build config, CI
- [ ] `BREAKING CHANGE` -- incompatible API change (pre-1.0 allowed via `feat!:` or footer)
## Testing
- [ ] `cargo test --workspace` passes locally
- [ ] `cargo clippy --workspace --all-targets -- -D warnings` clean
- [ ] `cargo fmt --all --check` clean
- [ ] `lefthook run pre-commit` clean (gitleaks + ripsecrets + fmt + clippy)
## DCO sign-off
- [ ] Every commit is signed off with `Signed-off-by: Name <email>` (`git commit -s`)
## AI-agent disclosure
- [ ] If any commit was authored by an AI agent, a human contributor has
reviewed the diff and verified the testing claims
## Related issues