Status: IN
Input validation is systematically absent across configuration and API boundaries: the WAL accepts arbitrary strings as sync mode (silently disabling all durability guarantees), truncate accepts out-of-range sequence numbers (silently deleting all data), compaction strategy selection silently falls through to leveled on any unrecognized string, and Merkle proof direction is never validated — misconfiguration produces incorrect behavior rather than failing fast.
Four independent modules silently accept invalid inputs at critical API boundaries
Depends on (SL): wal-sync-mode-unvalidated, wal-truncate-no-bounds-check, strategy-selection-is-binary, verify-proof-direction-unvalidated