SLO-208D — Add OpenAPI merge-order semantic rule

README.md

@@ -111,7 +111,7 @@ slopgate ships around 140 rules. `slopgate --list-rules` prints the authoritativ
 | Core diff checks | `SLP001`–`SLP070` | test quality, code hygiene, safety, API and data smells |
 | Go AST checks | `SLP071`–`SLP080` | Go semantic hazards — nil, SQL injection, races, ignored errors |
 | Extended checks | `SLP081`–`SLP152` | framework, API, auth, audit, pagination, concurrency, dead-code, and test-completeness patterns |
-| Semantic bug checks | `SLP202`, `SLP203`, `SLP204`, `SLP207` | high-signal runtime bugs — nil dereference, DB constraints, swallowed promise failures, missing rollbacks |
+| Semantic bug checks | `SLP202`, `SLP203`, `SLP204`, `SLP205`, `SLP207` | high-signal runtime bugs — nil dereference, DB constraints, OpenAPI merge-order overrides, swallowed promise failures, missing rollbacks |
 
 Rules `SLP081` and `SLP033` handle React/TypeScript JSX import behavior for the modern automatic runtime. `SLP081` allows plain JSX without a `React` import, but still flags explicit `React.*` namespace usage unless the file imports `React` through a default or namespace binding. `SLP033` checks import availability using visible diff context and the file snapshot when the import sits outside the changed hunk.
 

pkg/rules/registry.go

@@ -162,6 +162,8 @@ func Default() *Registry {
 	r.Register(SLP203{})
 	// P1: Close Sentry bug gap — silent promise failure mask.
 	r.Register(SLP204{})
+	// P1: Close Sentry bug gap — OpenAPI path merge-order override.
+	r.Register(SLP205{})
 	// P1: Close Sentry bug gap — transaction missing explicit rollback.
 	r.Register(SLP207{})
 	return r

pkg/rules/registry_test.go

@@ -135,6 +135,7 @@ func TestDefault_RegistersAllV001Rules(t *testing.T) {
 		"SLP142": false,
 		"SLP203": false,
 		"SLP204": false,
+		"SLP205": false,
 		"SLP207": false,
 	}
 	for _, rule := range r.All() {
@@ -152,8 +153,8 @@ func TestDefault_RegistersAllV001Rules(t *testing.T) {
 func TestDefault_NoExtraRules(t *testing.T) {
 	r := Default()
 
-	// Includes SLP202, SLP203, SLP204, SLP207 and the P3 rules SLP151, SLP152.
-	wantCount := 140
+	// Includes SLP202-SLP205, SLP207 and the P3 rules SLP151, SLP152.
+	wantCount := 141
 	if got := len(r.All()); got != wantCount {
 		t.Errorf("Default registry has %d rules, want %d", got, wantCount)
 	}
@@ -183,6 +184,7 @@ func TestDefault_NoExtraRules(t *testing.T) {
 		"SLP202",
 		"SLP203",
 		"SLP204",
+		"SLP205",
 		"SLP207",
 	}
 	for _, id := range newRules {