[dkwolf1]

Summary

This prepares Codex Lifeboat v3.4.10 with two related safety improvements.

Reviewed dependency exclusions

• Scans every reachable .chatgpt-projects/**/work/_deps path before backup.
• Reports all access-denied dependency files and directory subtrees in one review.
• Requires explicit approval of the exact exclusion set.
• Repeats the preflight before copying and rejects changed exclusions.
• Keeps conversations, project registrations, ordinary project data, sharing violations, non-permission errors, and paths outside work/_deps mandatory.
• Writes hash-protected dependency preflight and exclusion reports.

Large restore safety

• Includes logical bytes, the target volume's allocation unit, per-file allocation overhead, and a safety reserve in peak-space planning.
• Refreshes free-space requirements immediately before restore.
• Rechecks the reserve during session rewrites and periodically during large project copies.
• Ensures that an ENOSPC failure while updating the error journal cannot prevent automatic rollback from being attempted.
• Preserves the original failure as the primary cause.

Validation

• 95/95 source checks pass.
• 12/12 automated Windows compatibility scenarios pass.
• Ruff passes.
• Source, packaged EXE, and extracted portable ZIP tests pass.
• Regression coverage includes inaccessible PIL and pillow-*.dist-info subtrees, changed approval scope, ordinary-data failures, peak-space allocation overhead, runtime reserves, and rollback after failure-journal ENOSPC.

Scope

The incident-specific rescue utility, automatic Defender changes, experimental performance targets, and unreviewed nested-project/long-path patches from issue #8 are not incorporated. Issue #8 remains open for those remaining findings.