vault-runtime-reviewlisted

# Vault Runtime Review Perform a read-only, source-backed runtime lens after a Vault scan. ## Workflow 1. Read [checklist.md](references/checklist.md). 2. Independently inventory registered API/RPC triggers, broker consumers and producers, schedules/timers, reconciliation loops, commands, startup, and shutdown. A function name is not registration evidence. 3. Trace happy path, data access, side effects, boundaries, errors, retries, idempotency, concurrency, and observability; reconcile with coverage/flows. 4. Emit only the finding JSON array or `[]`. Later iterations start from the repaired bundle and omit resolved findings. Caller focus adds depth but never waives source registration or failure-path evidence. ## Output contract Output only the shared JSON finding array; an empty clean verdict is exactly `[]`. ## Non-trigger example Do not use for runtime debugging, implementation, or initial authoring.