fix/tariff-cov

pairTablesToZones silently falls back to positional pairing on partial labelling

services/utility/tariffs/cfe/src/handlers/tariff-collector.lambda.ts

When SOME (not all) tables have <h3> headings, labelled.length < tables.length so the name-based branch is skipped silently and positional pairing runs. This is the original transposition hazard — if CFE reorders tables or partially migrates its template, two of three Valle de México zones get each other's prices with no failure recorded. The code comment documents only the all-or-nothing expectation; partial labelling is not handled.

describeSkip warning message names the wrong month

services/utility/tariffs/cfe/src/handlers/tariff-persist.lambda.ts

The wrote:true message reads 'CFE published ${skip.baselineYearMonth} WITHOUT X' — but baselineYearMonth is the PRIOR month (the baseline). The intended meaning is 'the NEW month's publication dropped X relative to the prior month'. An operator triaging a RATE_SHAPE_CHANGED alert at 3am reads this as 'the old month is missing X' and investigates the wrong period.

sanitizePipelineError does not redact /var/runtime/ Lambda paths

services/utility/tariffs/cfe/src/handlers/tariff-transition.lambda.ts

The path pattern /(var\/task|opt|tmp)\/\S+/g does not cover /var/runtime/ (appears in every Lambda stack trace as /var/runtime/index.mjs:NNN). These paths are written to tariff_jobs.result JSONB visible to tenants. No credentials exposed, but runtime file paths are leaked. Fix: extend to (var\/task|var\/runtime|opt|tmp).

valle-real-page.test.ts does not cover partial-labelling branch

services/utility/tariffs/cfe/__tests__/valle-real-page.test.ts

pairTablesToZones has three reachable branches: (1) all tables labelled → name-match, (2) zero tables labelled → positional, (3) some tables labelled — falls through to positional silently. The test covers (1) and (2) but not (3). The partial-labelling case is exactly the scenario where name-based pairing would have been useful but is skipped. A synthetic fixture with mixed labelling would close this gap.

ScrapedRateSkip reused as warning type for rows that WERE written

domains/utility/src/tariff-rate/tariff-rate.decisions.ts

ScrapedRateWrite.warning is typed as ScrapedRateSkip | null, and PersistScrapedRatesResult.warnings is ScrapedRateSkip[]. A type named 'Skip' used for anomalous writes is semantically wrong — wrote:boolean is a compensating patch jammed into a refusal type. Consider a separate ScrapedRateAnomaly type for the ComponentRegression warning path so skips are always non-writes and anomalies are always writes.

auditedYearMonth parameter name diverges from pipeline vocabulary

domains/utility/src/tariff-rate/tariff-rate.decisions.ts

The pipeline consistently uses yearMonth for 'the month being processed'. The new parameter is named auditedYearMonth — 'audited' is a finance/QA term not used elsewhere. The shell passes input.yearMonth; the ASL uses yearMonth. Consider renaming to yearMonth or targetYearMonth for consistency with the surrounding code.

2000-char intermediate slice security rationale undocumented

services/utility/tariffs/cfe/src/handlers/tariff-transition.lambda.ts

The comment justifies the 2000-char pre-truncation only via performance (prevents O(n²) backtracking). The security reason is also load-bearing: a credential at positions 450–530 would survive the 500-char final slice but would be missed if truncation ran first. The 2000-char window ensures redaction runs over the credential before it is cut off. The comment should explain both reasons.

PERSIST_RESULT_KEYS coupling to PersistScrapedRatesResult undocumented

infra/cdk/src/stacks/services/utility/tariffs/cfe/pipeline-definition.ts

PERSIST_RESULT_KEYS is hand-maintained alongside the ASL. Its values must match PersistScrapedRatesResult field names in tariff-rate.shells.ts — but infra/cdk cannot import service types, so this is a manual constraint. A comment naming the shell type as the source of truth would catch renames at code-review time without requiring a structural change.