[mblua]

Accept optional id_hash_debug arrays on base-agent and profile-cell records. Standalone decoding preserves complete string arrays, including empty arrays and strings, while absent, null, wrong-kind or mixed values become None; invalid real configuration still fails. Serialize the exact snake-case key and omit None.

Exclude only this diagnostic metadata from existing comparisons, gap detection, profile events and the two specified raw identity-projection locations. Existing hashes and nested unknown fields retain their behavior. Effective refreshes clear supplied debug in this phase; derivation and physical persistence follow in P03. Hash/preimage functions and physical writers remain unchanged. This P02 change touches only settings.rs and commands/config.rs.

Validation on 1d10fbcf2a1882b9a0a1d940b96ed9c684ec1908 (tree f60598cad7b69b36f32c81c884ae6b4eddaa647f):

• Locked all-target Cargo check and read-only formatting check passed.
• Five serial library filters passed 25/3/11/4/18 selections; three layering guards passed 1/5/3, for 70 selections with possible overlap.
• Actual-base PRE versus final POST: complete cyclic SCC sets/counts equal (one known SCC, 89 members), 1,211 unique module arcs with zero additions/removals, and generated records byte-identical to PRE and the committed baseline. Existing static-analysis limitations remain; this is not a cycle-free claim.
• Rust Grinch independently returned CODE_AND_PROOF_REVIEW_PASS, including the five-hunk formatting correction and final raw test/structural evidence. Review artifact SHA256: 873F7C1B676219A26834EDA3138DBE51A39C37C86172716A51FDC9A006804949.

Frozen specification: plans/3097-id-hash-debug/p02-v3-metadata-schema.md, SHA256 A5DDCDC2336FACE9C3A4B7113AD31A5D03987B605FB347231A060053A306DACB. Actual base 01456f151b3b61cfc55709b30c49984146966f0e includes merged dependency PR #3105. Fresh main ancestry and exact approved identity mapping verified. Epic #3097 remains open for P03/P04; no packaged artifact was requested.

Closes #3099

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[mblua]

Step 9.5 stale-base review: incoming main advanced from 01456f151b3b61cfc55709b30c49984146966f0e to ee7ff1706f941cf3a5c2041340ad5dae9ab00fbe through PR #3104 (four incoming commits).

The complete delta changes docs/reference/cli.md, src-tauri/src/cli/mod.rs, src-tauri/src/cli/telegram_send_image.rs, src-tauri/src/commands/telegram.rs, and src-tauri/tests/cli_behavior_contract.rs. Rust Grinch independently classified it UNRELATED_NO_UPDATE: the new command reads only telegram_bots through an existing loader import; it does not read the agent/profile metadata changed by P02. The new helper and isolated CLI rejection tests do not exercise P02 symbols or selected suites. Neither P02 file, dependencies/build configuration, manifests/locks, workflows, structural scripts nor accepted baselines changed.

Retain the tested head 1d10fbcf2a1882b9a0a1d940b96ed9c684ec1908 without a branch update or CI rerun. Its local checks, 70 selected passes, structural proof and independent code/proof review remain applicable. The completed CI run 39099527179 succeeded on that exact head. The actual tier log says run_number=3413 full=false; all 13 executed rollup checks succeeded, and the seven skipped groups follow the workflow's full-tier condition. All 14 configured required contexts are individually mapped in the delivery receipt, including matrix children omitted by that condition.

Independent delta report SHA256: 4E3D82A3D9C0F6B60A6678E9A81EF3DD285ABC217F93111D32F59A432B2FC45F. Complete incoming diff SHA256: 1EA31B6CCE3A6604A2487C752DB5CCC0F3A2D4F31734D6E820C88A5CD5A526BD. The planned admin merge will preserve both the incoming Telegram work and the reviewed P02 changes.