Development record

The preflight's govulncheck scan warns, rather than stops, on a finding when the branch changes neither go.mod nor go.sum, taking that to mean the finding stands on the default branch; govulncheck judges reachability, so a branch that adds a call newly reaching a vulnerable symbol in a module already required is only warned about, and with govulncheck not a required check its pull request can land with the finding.