The issue record validator (internal/core/issuerecord) prints stored values unquoted in its error messages, schema_version among them, and those errors reach --json payloads and refusal reasons on several verbs, so a record carrying a control or bidi rune in a stored value puts it raw on those streams.

The issue record validator (internal/core/issuerecord) prints stored values unquoted in its error messages, schema_version among them, and those errors reach --json payloads and refusal reasons on several verbs, so a record carrying a control or bidi rune in a stored value puts it raw on those streams.

Security scope (abcd-fixes-what-it-adds): the route does not exist without abcd. The text is echoed by abcd's own --json surface, so abcd added the route and fixes it at the boundary the text enters by; a fix changes nothing about how the repository works.