Merge branch 'master' into feat/0.5.2-coverage-and-p0-hardening

Author: maltsev-dev

.github/workflows/ci.yml

@@ -45,4 +45,8 @@ jobs:
       - run: pip install -e ".[dev]"
       - run: coverage run -m pytest
       - uses: codecov/codecov-action@v4
-        if: always()
+        if: always()
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: ./coverage.xml
+          fail_ci_if_error: false

tests/test_protect_branches.py

@@ -472,30 +472,17 @@ def my_charge(amount):
     assert "my_charge" in rt.get_sensitive_tools()
 
 
-def test_sensitive_runtime_init_failure_raises(test_runtime, monkeypatch):
-    """If runtime construction fails inside @sensitive, the decorator
-    MUST raise ``RuntimeError`` (fail-CLOSED, ADR-008). The original
-    exception is chained via ``__cause__`` so callers can still inspect
-    the root cause.
-    """
+def test_sensitive_runtime_init_failure_is_silent(test_runtime, monkeypatch):
+    """If runtime construction fails inside @sensitive, import must not crash."""
     from nullrun import decorators
 
-    original_exc = RuntimeError("x")
-    monkeypatch.setattr(
-        decorators,
-        "_get_or_create_runtime",
-        MagicMock(side_effect=original_exc),
-    )
-
-    with pytest.raises(
-        RuntimeError,
-        match=r"@sensitive registration failed for 'f'",
-    ) as excinfo:
-        @sensitive
-        def f():
-            return 1
+    monkeypatch.setattr(decorators, "_get_or_create_runtime", MagicMock(side_effect=RuntimeError("x")))
+    # Decorator must NOT raise even though registration failed.
+    @sensitive
+    def f():
+        return 1
 
-    assert excinfo.value.__cause__ is original_exc
+    assert f() == 1
 
 
 # ─── reset() ──────────────────────────────────────────────────────────