[HIGH] **Regex compilation on cache refresh without async bounds** — `refresh_event_c

[ironclaw-ci]

[HIGH:95] Issue Found by Staging CI Review

Severity: HIGH
Confidence: 95/100
PR comment: #1359 (comment)

Description

Regex compilation on cache refresh without async bounds — refresh_event_cache() synchronously compiles regexes inside async loop. Regex compilation is CPU-bound and blocks async runtime with many event routines. No timeout or async cancellation.

---

Auto-created by staging-ci Claude Code review

[henrypark133]

Closing as invalid. Manual code review confirms this is a false positive.

refresh_event_cache() is async but the regex compilation is synchronous CPU work that is NOT inside any .await point — it doesn't block the async runtime. Additionally:

• Regex compilation has a 64KB size_limit preventing pathological patterns
• This runs only during cache refresh (startup/periodic), not in a hot loop
• The compilation is bounded by the number of event routines

This is acceptable and idiomatic for async Rust code that does brief CPU work.