[dmoliveira]

Summary

• anchor event-journal appends to validated directory descriptors and reject unsafe retirement, loop, state, or journal entries
• accept existing journals only at 0600 or legacy 0644, normalize successful appends to 0600, and preserve established error/False precedence
• retry short writes, propagate file write/fsync failures, and retain best-effort parent-directory fsync and cleanup behavior
• add adversarial coverage for unsafe entry types, modes, replacement races, partial writes, fsync failures, and descriptor cleanup

Validation

• uv run --frozen ruff check .
• uv run python -m py_compile src/ailoop/state.py tests/test_state_safety.py
• focused: 194 passed
• full suite: 553 passed, 85% coverage
• Oracle: GO
• Reviewer: APPROVE

Runtime-Session: ses_057afdc3effemiOJ2zfmjJiDqe

[dmoliveira]

Temporarily closing and reopening to retrigger the missing pull_request CI event. Runtime-Session: ses_057afdc3effemiOJ2zfmjJiDqe