Codex F6 / pre-release review (#41 deferred). policy_registry_tests uses GLOBAL_ENV_LOCK: Mutex<()> for serialization; secure_git_tests::secure_git_command_strips_all_listed_env_vars and secure_cargo_tests::secure_cargo_command_strips_known_env_vars set env without serialization. Currently passing but race-prone — share a single module-level lock across all env-mutating test mods.
Codex F6 / pre-release review (#41 deferred).
policy_registry_testsusesGLOBAL_ENV_LOCK: Mutex<()>for serialization;secure_git_tests::secure_git_command_strips_all_listed_env_varsandsecure_cargo_tests::secure_cargo_command_strips_known_env_varsset env without serialization. Currently passing but race-prone — share a single module-level lock across all env-mutating test mods.