Add tests confirming production error handler sanitizes all internal errors (ENOENT, stack traces, file paths). Add static analysis test verifying no route file passes err.stack to c.json() responses. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>