Summary

• feat(orchestration): validate verify_provider at DagScheduler construction time #2238 — validate verify_provider at DagScheduler construction time via validate_verify_config(&[&str]); returns InvalidConfig error naming the missing provider and listing available ones; fails early instead of silently returning complete=true
• security(orchestration): task output not sanitized before inclusion in PlanVerifier prompt #2239 — sanitize task output through ContentSanitizer (spotlight_untrusted=false) before inclusion in PlanVerifier prompt to prevent information disclosure to third-party verify endpoints
• security(orchestration): gap descriptions from verify LLM flow into replan prompt verbatim #2240 — cap gap descriptions at 500 Unicode scalar values (.chars().take(500)) before replan prompt assembly to close second-order prompt injection surface; truncation applied before sanitization

Files changed

• crates/zeph-orchestration/src/error.rs — new InvalidConfig(String) variant
• crates/zeph-orchestration/src/verifier.rs — ContentSanitizer field, sanitization in build_verify_prompt(), MAX_GAP_DESCRIPTION_LEN constant, truncation in build_replan_prompt()
• crates/zeph-orchestration/src/scheduler.rs — validate_verify_config() method
• crates/zeph-core/src/agent/mod.rs — call validate_verify_config with provider pool names at build_dag_scheduler()
• CHANGELOG.md — updated [Unreleased] section

Test plan

• cargo nextest run -p zeph-orchestration --lib — 252 passed (+16 new tests)
• New tests cover: valid provider, missing provider, empty provider name, empty pool, whitespace trimming, output sanitization, gap truncation at boundary (500/501 chars), multibyte UTF-8 truncation

Closes #2238
Closes #2239
Closes #2240