Block a user
stability: warn when response body is truncated
stability: validate enum-style string parameters (sort/order/state)
refactor: add request/correlation IDs to logs
refactor: consolidate method-dispatch boilerplate in operation/*
stability: fill test coverage gaps in write-heavy modules
stability: propagate request context end-to-end
stability: redact tokens from logs and error responses
stability: protect pkg/flag globals from concurrent mutation
stability: validate numeric bounds on actions log params
stability: enforce upper bounds on pagination params
stability: wrap errors with %w instead of %v