docs: cleanup deferred items, security backlog, and add Phase 34

[FSM1]

Summary

• DEFERRED.md: Moved "Structured logging wrapper" from active deferred to implemented (Phase 28). Verified all 12 pending todos — all still genuinely pending.
• LOW-SEVERITY-BACKLOG.md: Audited all 19 items. Marked 7 Phase 9 items (Fix missing return arrow in IPNS publishing sequence diagram #13-19) as resolved — fixes landed across Phases 23, 28, and other work but backlog was never updated. 12 Phase 5 items remain open (all low-severity input validation).
• ROADMAP.md: Added Phase 34 (E2E Test Expansion & Staging Baselines) consolidating 6 testing todos: streaming playback, media preview, batch download, shared teardown, BYO-IPFS load tests, and Faro metrics baselines.

Test plan

• Review DEFERRED.md implemented items table
• Review LOW-SEVERITY-BACKLOG.md resolved markings match actual code state
• Review Phase 34 scope and plan breakdown in ROADMAP.md

🤖 Generated with Claude Code

[coderabbitai]

Warning

Rate limit exceeded

@FSM1 has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 13 minutes and 37 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 13 minutes and 37 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: bc34a9a9-b8b7-4ac3-9294-345c94574d0d

📥 Commits

Reviewing files that changed from the base of the PR and between b5d32e8 and 507f5fb.

📒 Files selected for processing (2)

• .planning/DEFERRED.md
• .planning/ROADMAP.md

Walkthrough

Documentation updates to planning files advancing the date and tracking progress. The DEFERRED.md file was updated to move the "Structured logging wrapper for web app" from deferred to Phase 28 implementation. The LOW-SEVERITY-BACKLOG.md file was updated with a new audit date, expanded phase source references, and marked security backlog items 13–19 as resolved with implementation details.

Changes

Cohort / File(s)	Summary
Planning Documentation .planning/DEFERRED.md	Updated last-updated date to 2026-03-29. Moved "Structured logging wrapper for web app" item from Code Quality deferred table to Items Implemented in Later Phases with Phase 28 designation.
Security Backlog .planning/security/LOW-SEVERITY-BACKLOG.md	Updated header with expanded phase source references, added last-audited date (2026-03-29), changed status to "12 open, 7 resolved." Marked items 13–19 as resolved with concrete implementation notes including throttling, URL encoding, debug removal, and error sanitization.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• docs: capture 3 todos from planning gap review #77 — Shares overlapping planning items related to IPNS sequence issues and removal of debug eprintln statements in desktop FUSE code.
• docs: feature matrix, codebase refresh, E2E todos #380 — Also modifies the repository's DEFERRED.md planning documentation.
• docs: update codebase concerns and structure maps #390 — Updates planning documentation regarding the web app's structured logging wrapper and observability items across deferred and implemented phases.

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title mentions cleanup of deferred items and security backlog, which matches the main changes shown in the raw summary. However, the mention of 'Phase 34' in the title does not correspond to any changes described in the actual pull request content (changes reference Phase 28 and Phase 9 instead).	Update the title to accurately reflect the actual changes: 'docs: cleanup deferred items and security backlog (Phases 28 and 9)' or remove the unrelated phase reference.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/cleanup-deferred-todos

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.planning/DEFERRED.md:
- Line 3: Update the footer timestamp in .planning/DEFERRED.md so the "Deferred
inventory: 2026-03-28" footer matches the "Last updated: 2026-03-29" header;
locate the "Last updated: 2026-03-29" text and the "Deferred inventory:
2026-03-28" footer text and change only the footer date to 2026-03-29 without
altering other rows or content semantics.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: d7346a57-7ea1-4d2f-82f0-53061ec5308e

📥 Commits

Reviewing files that changed from the base of the PR and between 451479b and b5d32e8.

📒 Files selected for processing (2)

• .planning/DEFERRED.md
• .planning/security/LOW-SEVERITY-BACKLOG.md