style(test): ruff noqa: B010 setattr sweep on hardening modules

Sibling session's hardening money contract commits (b1d54fe,
e2f413b and the rest of the 8-commit hardening series) used
direct attribute assignment (`fn._nullrun_extractor = impact`)
for stamping the sensitive-call extractor onto the wrapped
function. ruff's B010 rule fires on these — `setattr` with a
constant attribute name is the same as direct assignment,
ruff says, so use the simpler form.

This commit applies ruff's autofix on the leftover hardening
files (test_money_hardening, test_business_impact, etc.) to
keep `ruff check tests/` green without re-introducing the
mypy `attr-defined` error on `fn._nullrun_extractor = impact`
(which is why decorators.py uses `setattr` + `# noqa: B010`
in the same commit as the 0.14.0 bump).

Mechanical ruff --fix output. No behaviour change.

Verified:
  ruff check src/ tests/   → All checks passed
  mypy src/                → Success: no issues found in 36 source files

Author: maltsev-dev

src/nullrun/business_impact.py

@@ -35,7 +35,6 @@
 from dataclasses import dataclass, field
 from typing import Any, Optional
 
-
 DIGEST_PREFIX = b"nullrun/v1/business_impact:"
 
 
@@ -130,7 +129,7 @@ def to_wire_dict(self) -> dict[str, Any]:
         }
 
 
-def business_impact_to_dict(impact: "BusinessImpact") -> dict[str, Any]:
+def business_impact_to_dict(impact: BusinessImpact) -> dict[str, Any]:
     """Top-level wire dict for `GateRequest.business_impact`.
 
     Returns an empty string key discriminator for the backend's
@@ -173,7 +172,7 @@ def money(
         direction: str,
         amount_minor: int,
         currency: str = "USD",
-    ) -> "BusinessImpact":
+    ) -> BusinessImpact:
         m = MoneyImpact(
             direction=direction,
             amount_minor=amount_minor,

tests/test_approval_money_flow.py

@@ -39,10 +39,10 @@ class that returns exactly what `gate_internal` would return
 import pytest
 
 from nullrun.business_impact import (
-    BusinessImpact,
-    MoneyImpact,
     INFLOW,
     OUTFLOW,
+    BusinessImpact,
+    MoneyImpact,
     compute_action_digest,
 )
 from nullrun.extractor import (
@@ -71,15 +71,15 @@ class ApprovalSimulator:
     backend's `gate_internal` output for the same inputs.
     """
 
-    def __init__(self, *, stored_digest: Optional[str], expires_in: int = 600,
+    def __init__(self, *, stored_digest: str | None, expires_in: int = 600,
                  consumed: bool = False, status: str = "APPROVED") -> None:
         self.stored_digest = stored_digest
         self.expires_at = time.monotonic() + expires_in
         self.consumed = consumed
         self.status = status
-        self.last_decision: Optional[str] = None
+        self.last_decision: str | None = None
 
-    def decide(self, business_impact: Optional[BusinessImpact]) -> str:
+    def decide(self, business_impact: BusinessImpact | None) -> str:
         """Mirror `gate_internal` grant-consume path.
 
         Returns the wire-level decision: "allow", "block:..." or

tests/test_business_impact.py

@@ -40,16 +40,15 @@
 import pytest
 
 from nullrun.business_impact import (
-    BusinessImpact,
     INFLOW,
-    MoneyImpact,
     OUTFLOW,
+    BusinessImpact,
+    MoneyImpact,
     business_impact_to_dict,
     compute_action_digest,
 )
 from nullrun.extractor import money_outflow
 
-
 # Canonical pin shared with the backend's golden test. Any
 # change to the canonical-JSON algorithm on either side breaks
 # this test before a customer runtime sees the regression.

tests/test_drift_fixes_2026_07_04.py

@@ -251,7 +251,7 @@ def test_enrich_event_stamps_parent_trace_id_from_contextvar(self):
         must stamp the field from the active span contextvar so the
         wire shape is consistent regardless of caller integration.
         """
-        from nullrun.context import set_trace_id, clear_trace_id
+        from nullrun.context import clear_trace_id, set_trace_id
         from nullrun.runtime import NullRunRuntime
 
         # Pin the trace contextvar to a known value (mimics
@@ -297,7 +297,7 @@ def test_enrich_event_contextvar_overrides_caller_set_parent_trace_id(self):
         trace_id=cccccccc-... parent_trace_id=NULL on backend
         cost_events).
         """
-        from nullrun.context import set_trace_id, clear_trace_id
+        from nullrun.context import clear_trace_id, set_trace_id
         from nullrun.runtime import NullRunRuntime
 
         # Contextvar holds the chain's trace. Even though the
@@ -360,7 +360,7 @@ def test_enrich_event_omits_empty_string_parent_trace_id(self):
         parser would otherwise reject the field or store empty
         string in a UUID column, depending on path).
         """
-        from nullrun.context import set_trace_id, clear_trace_id
+        from nullrun.context import clear_trace_id, set_trace_id
         from nullrun.runtime import NullRunRuntime
 
         set_trace_id("")  # boundary value
@@ -386,7 +386,7 @@ def test_enrich_event_parent_trace_id_matches_existing_trace_id_field(
         the backend's JOIN from drifting — see
         ``db/mod.rs::get_execution_records_for_workflow``.
         """
-        from nullrun.context import set_trace_id, clear_trace_id
+        from nullrun.context import clear_trace_id, set_trace_id
         from nullrun.runtime import NullRunRuntime
 
         set_trace_id("77777777-8888-9999-aaaa-bbbbbbbbbbbb")
@@ -522,7 +522,7 @@ def test_enrich_event_sets_parent_trace_id_when_chain_contextvar_set(self):
         parent_trace_id=NULL on the prod VPS during the diagnostic
         run on 2026-07-12 08:51 UTC.
         """
-        from nullrun.context import set_trace_id, clear_trace_id
+        from nullrun.context import clear_trace_id, set_trace_id
         from nullrun.runtime import NullRunRuntime
         set_trace_id("cccccccc-1111-2222-3333-444444444444")
         try:
@@ -553,7 +553,7 @@ def test_enrich_event_parent_trace_id_matches_trace_id_in_chain_mode(self):
         the event sits inside the chain contextvar (chain trace
         spans share the same trace_id across child spans).
         """
-        from nullrun.context import set_trace_id, clear_trace_id
+        from nullrun.context import clear_trace_id, set_trace_id
         from nullrun.runtime import NullRunRuntime
         set_trace_id("99999999-aaaa-bbbb-cccc-000000000000")
         try:

tests/test_money_hardening.py

@@ -42,24 +42,23 @@
 
 import pytest
 
+from nullrun.business_impact import (
+    OUTFLOW,
+    BusinessImpact,
+    compute_action_digest,
+)
 from nullrun.extractor import (
+    UNIT_MAJOR,
+    UNIT_MINOR,
     InvalidCurrencyError,
     InvalidMoneyAmountError,
     InvalidMoneyPrecisionError,
-    UNIT_MAJOR,
-    UNIT_MINOR,
     _to_minor_units,
     business_cap_minor,
     currency_minor_digits,
     money_outflow,
     normalize_currency,
 )
-from nullrun.business_impact import (
-    BusinessImpact,
-    OUTFLOW,
-    compute_action_digest,
-)
-
 
 GOLDEN_HEX_USD_50_DOLLARS_OUTFLOW = (
     "dfc96387ca539b7130caebe705e042f2e34e52ab44352ae5e527bcef64f0df27"
@@ -277,37 +276,31 @@ class TestCurrencyWhitelist:
     """
 
     def test_known_currency_exact(self) -> None:
-        from nullrun.extractor import normalize_currency
         for code in ("USD", "EUR", "JPY", "KWD", "BHD", "OMR",
                      "GBP", "CHF", "CAD", "AUD"):
             assert normalize_currency(code) == code
 
     def test_lowercase_currency_rejected(self) -> None:
-        from nullrun.extractor import normalize_currency
         with pytest.raises(InvalidCurrencyError) as info:
             normalize_currency("usd")
         assert info.value.received == "usd"
         assert "uppercase" in str(info.value)
 
     def test_mixed_case_currency_rejected(self) -> None:
-        from nullrun.extractor import normalize_currency
         with pytest.raises(InvalidCurrencyError) as info:
             normalize_currency("Usd")
         assert info.value.received == "Usd"
 
     def test_four_letter_currency_rejected(self) -> None:
-        from nullrun.extractor import normalize_currency
         with pytest.raises(InvalidCurrencyError) as info:
             normalize_currency("USDX")
         assert "length 4" in str(info.value) or "3-letter" in str(info.value)
 
     def test_empty_currency_rejected(self) -> None:
-        from nullrun.extractor import normalize_currency
         with pytest.raises(InvalidCurrencyError):
             normalize_currency("")
 
     def test_digits_in_currency_rejected(self) -> None:
-        from nullrun.extractor import normalize_currency
         with pytest.raises(InvalidCurrencyError):
             normalize_currency("US1")
 
@@ -328,12 +321,10 @@ def test_currency_minor_digits_known_value_exact(self) -> None:
         assert currency_minor_digits("KWD") == 3
 
     def test_business_cap_lookup_propagates_currency_error(self) -> None:
-        from nullrun.extractor import business_cap_minor
         with pytest.raises(InvalidCurrencyError):
             business_cap_minor("XYZ")
 
     def test_business_cap_known_value_exact(self) -> None:
-        from nullrun.extractor import business_cap_minor
         assert business_cap_minor("USD") == 100_000_000
         assert business_cap_minor("JPY") == 100_000_000
         assert business_cap_minor("KWD") == 100_000_000

tests/test_sensitive_extractor.py

@@ -22,16 +22,15 @@
 
 import pytest
 
+from nullrun._registry import get_registry
 from nullrun.business_impact import (
-    BusinessImpact,
     OUTFLOW,
+    BusinessImpact,
     compute_action_digest,
 )
-from nullrun.extractor import money_outflow
 from nullrun.decorators import _enforce_sensitive_tool
+from nullrun.extractor import money_outflow
 from nullrun.runtime import NullRunRuntime
-from nullrun._registry import get_registry
-
 
 # ---------------------------------------------------------------------------
 # Wire payload capture

tests/test_units_discriminator.py

@@ -30,14 +30,13 @@
 
 import pytest
 
+from nullrun.business_impact import INFLOW, OUTFLOW, BusinessImpact
 from nullrun.extractor import (
     UNIT_MAJOR,
     UNIT_MINOR,
     _to_minor_units,
     money_outflow,
 )
-from nullrun.business_impact import BusinessImpact, OUTFLOW, INFLOW
-
 
 # Golden cross-language pin shared with the backend's golden
 # test (and pinned in tests/test_business_impact.py). The wire

tests/test_webhook_backoff.py

@@ -33,7 +33,6 @@
 
 from nullrun.actions import ActionHandler, WebhookConfig
 
-
 pytestmark = pytest.mark.slow_sleep