Location: THREAT_MODEL.md:48
Finding: The T6 mitigation entry links MetricsProvider to can_optional.go. The interface is actually defined in optional.go — can_optional.go doesn't exist in the repository. This is a stale/dead link, presumably from a rename that wasn't propagated to the doc.
Recommendation: Update the link target to optional.go.
Filed from the 2026-07-29 ecosystem audit register; independently re-verified against current HEAD before filing.
Location:
THREAT_MODEL.md:48Finding: The T6 mitigation entry links
MetricsProvidertocan_optional.go. The interface is actually defined inoptional.go—can_optional.godoesn't exist in the repository. This is a stale/dead link, presumably from a rename that wasn't propagated to the doc.Recommendation: Update the link target to
optional.go.Filed from the 2026-07-29 ecosystem audit register; independently re-verified against current HEAD before filing.