From 1bd2588788c65837959e8a6807c48ac205e0e7e3 Mon Sep 17 00:00:00 2001
From: "glm-5.3-flash" <glm-5.3-flash@alk.dev>
Date: Wed, 28 Oct 2026 07:22:24 +0000
Subject: [PATCH] =?UTF-8?q?docs(src):=20wave-1=20gate=20polish=20=E2=80=94?=
 =?UTF-8?q?=20rustdoc=20links,=20doc=20typos,=20redundant=20test=20lines?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- resolve 2 rustdoc broken-intra-doc-link warnings (ambiguous
  'async_trait' crate/attribute-macro name) in key_source.rs and
  host_key.rs
- fix stray ')' typo in the HostKeySource docs
- rewrite the stale lib.rs architecture line (dependency surface and
  feature graph are landed, not 'landing with implementation start')
- drop a discarded try_sign probe and a redundant None re-assignment
  in tests

Verification: cargo test 47/47 (default + --all-features), clippy
-D warnings (both feature configs, all targets), fmt --check,
cargo doc --no-deps 0 warnings
---
 src/config.rs     | 1 -
 src/host_key.rs   | 6 +++---
 src/key_source.rs | 5 ++---
 src/lib.rs        | 6 ++++--
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/config.rs b/src/config.rs
index c56a444..8e2adc6 100644
--- a/src/config.rs
+++ b/src/config.rs
@@ -462,7 +462,6 @@ mod tests {
         assert!(!serve.exec_wrapper_configured());
         assert!(!serve.tunnel_configured());
 
-        serve.exec_wrapper_argv = None;
         serve.exec_wrapper_argv = Some(vec!["/bin/sh".into(), "-c".into()]);
         assert!(serve.shell_configured());
         assert!(serve.exec_wrapper_configured());
diff --git a/src/host_key.rs b/src/host_key.rs
index 828b6a2..38c9df6 100644
--- a/src/host_key.rs
+++ b/src/host_key.rs
@@ -70,9 +70,9 @@ pub struct PresentedHostKey {
 ///
 /// The handle shape is the family's injected-handle pattern
 /// (`Arc<dyn HostKeyPolicy>`, the alkcall `IdentityProvider`
-/// precedent): object-safe via [`async_trait`], shared by reference —
-/// learn-and-record policies hold their state by interior mutability
-/// so the same handle serves the dial and any inspection.
+/// precedent): object-safe via `async_trait`, shared by
+/// reference — learn-and-record policies hold their state by interior
+/// mutability so the same handle serves the dial and any inspection.
 ///
 /// **Fail-closed posture**: when a policy cannot decide (its pin
 /// store is unavailable, its prompt failed, its metadata source is
diff --git a/src/key_source.rs b/src/key_source.rs
index 386dec0..ecede45 100644
--- a/src/key_source.rs
+++ b/src/key_source.rs
@@ -59,7 +59,7 @@ use crate::error::KeySourceError;
 ///
 /// The handle shape is the family's injected-handle pattern
 /// (`Arc<dyn KeySource>`, the alkcall `IdentityProvider` precedent):
-/// object-safe via [`async_trait`], shared by reference — the vault
+/// object-safe via `async_trait`, shared by reference — the vault
 /// handle rides the implementation (the assembly clones its
 /// [`VaultServiceHandle`] into its source). The crate's ADR-005
 /// implementation is [`VaultKeySource`]; an assembly may implement the
@@ -85,7 +85,7 @@ pub trait KeySource: Send + Sync + 'static {
 /// [`HostKeySource::load`] when it assembles the server, and a failure
 /// means no server is constructed (POC-2 §5; locked vault at
 /// bootstrap → [`KeySourceError::Locked`] → fail-closed, never a
-/// half-configured server). The crate is policy-blind on host *pin*)
+/// half-configured server). The crate is policy-blind on host *pin*
 /// trust — that is the [`crate::HostKeyPolicy`] seam's business — this
 /// seam is only the *held* material (the client's host pin is public
 /// config, never vault material).
@@ -293,7 +293,6 @@ mod tests {
     }
 
     fn assert_usable_by_russh(key: &russh::keys::PrivateKey) {
-        let _ = key.try_sign(b"alkssh w1 key-source usability probe");
         assert!(
             key.try_sign(b"alkssh w1 key-source usability probe")
                 .is_ok(),
diff --git a/src/lib.rs b/src/lib.rs
index ef12c00..71cde88 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -19,8 +19,10 @@
 //! rest, decrypted at use (ADR-005), never env vars.
 //!
 //! Architecture: `docs/architecture/` (phase 1 — ADRs 001–006 accepted;
-//! the dependency surface and feature graph land with implementation
-//! start). See also `docs/research/` and family ADR-003.
+//! the dependency surface, feature graph, and wave-1 foundations are
+//! landed; the server stack, the mappings, the client direction, and
+//! validation are later implementation waves — wave 2 decomposes after
+//! this gate). See also `docs/research/` and family ADR-003.
 
 mod config;
 mod error;