---
id: TASK-26
title: Finalize audit generation hardening and catch-all failure handling
status: Done
assignee: []
created_date: '2026-06-05 08:37'
updated_date: '2026-06-05 09:04'
labels: []
dependencies: []
priority: high
ordinal: 28000
---

## Description

<!-- SECTION:DESCRIPTION:BEGIN -->
Implement P1/P2/P3 audit-generation code-quality fixes with regression-safe behavior.
<!-- SECTION:DESCRIPTION:END -->

## Acceptance Criteria
<!-- AC:BEGIN -->
- [x] #1 processAuditGeneration catches all late failures and marks run failed
- [x] #2 outreach_ready patch is guarded by terminal contact status
- [x] #3 truncateWithMarker is byte-safe and source tests cover byte behavior
- [x] #4 action/persistence sanitizer masks env-backed secret values
- [x] #5 model profile flags are used for model params and supportsImages
- [x] #6 reachability to deterministic outreach upsert behaviour for empty values
<!-- AC:END -->

## Implementation Plan

<!-- SECTION:PLAN:BEGIN -->
1. Add source-level regression tests for P1/P2/P3 points
2. Implement action-level robust failure handling and guarded lead status transition
3. Fix byte-aware truncation and shared sanitization paths in action/persistence
4. Rework model-profile driven generation config and multimodal gating
5. Add deterministic outreach upsert behavior and run full checks
<!-- SECTION:PLAN:END -->

## Implementation Notes

<!-- SECTION:NOTES:BEGIN -->
Verified as TASK-11 final hardening follow-up. Fixed action-level catch/failure finish, terminal-status guard for outreach_ready, UTF-8 byte-safe truncation, env-backed secret redaction, model-profile params/supportsImages usage, and deterministic outreach upsert for explicit empty values. Verification passed with TASK-11 final checks; task remains In Progress pending user confirmation.
<!-- SECTION:NOTES:END -->

## Final Summary

<!-- SECTION:FINAL_SUMMARY:BEGIN -->
Shipped final audit-generation hardening: catch-all post-start failure handling, terminal lead-status guard, byte-safe truncation, env-backed secret redaction, model-profile driven parameters/supportsImages, and deterministic outreach upsert behavior. Verified together with TASK-11 final checks.
<!-- SECTION:FINAL_SUMMARY:END -->