832c85b233
The pre-existing guard covered only publish(). The attribute/coercion block above it (int()/str()/.metadata.get() on intent+order) was UNGUARDED, and kwarg binding happens before the body runs at all — so a signature skew sailed straight past a defence that existed precisely to prevent this, and orphaned 6 live positions. Everything that can raise now lives inside one try. Failures log loud and are swallowed; the order path is never affected. Proven against: exploding plane, poisoned intent coercion (the formerly-unguarded region), and absent plane. ARCHITECTURAL DEBT (raised by HJ, not fixed here): telemetry has no business being called inline on the exec path at all. Correct shape = fire-and-forget enqueue drained by the M6 journal lane. This commit makes it harmless, not absent. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>