fix: address v11 Copilot review comments

- testing.md: Add import requirements to code examples
- testing.md: Fix safe_read_file docstring for accuracy
- security.md: Soften Pydantic requirement to typed validators
- security.md: Clarify exception swallowing allows documented helpers
- rigor.md: Fix task-<task-id> to <task-id> to avoid duplication

Signed-off-by: jason poley <jason.poley@gmail.com>

Author: jpoley

.claude/rules/rigor.md

@@ -54,7 +54,7 @@ Configure in `.flowspec/rigor-config.yml` (optional, created per-project) or acc
 backlog task edit <task-id> --plan $'1. Research\n2. Implement\n3. Test'
 
 # EXEC-001: Git worktree required
-BRANCH="$(hostname -s | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9-]/-/g')/task-<task-id>/slug"
+BRANCH="$(hostname -s | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9-]/-/g')/<task-id>/slug"
 git worktree add "../$(basename "$BRANCH")" "$BRANCH"
 
 # EXEC-003: Decision logging required

.claude/rules/security.md

@@ -15,11 +15,11 @@ Use environment variables or secret managers instead.
 ## Input Validation
 
 - Validate all external inputs at boundaries
-- Use Pydantic models for request validation
+- Use typed validators (Pydantic, dataclasses, or similar)
 - Never trust user input
 
 ```python
-# Good: Use typed validators
+# Good: Use typed validators (Pydantic example)
 from pydantic import BaseModel, EmailStr, Field
 
 class UserCreate(BaseModel):
@@ -56,7 +56,7 @@ When writing heuristic classifiers or security scanners:
 
 - Log exceptions with context using `logger.warning()` or `logger.error()`
 - Include relevant data (truncated to reasonable size)
-- Never silently swallow exceptions
+- Avoid silent swallowing (exception: documented helpers like `safe_read_file`)
 
 ```python
 # Good: Log exceptions (requires: import httpx, logging; logger = logging.getLogger(__name__))

.claude/rules/testing.md

@@ -44,6 +44,7 @@ Every API function needs tests for:
 Every test that reads files MUST include:
 
 ```python
+# Requires: from pathlib import Path
 def get_project_root() -> Path:
     """Get the project root directory reliably."""
     return Path(__file__).resolve().parent.parent
@@ -54,8 +55,9 @@ Never use relative paths like `Path(".claude/agents/...")`.
 ## Safe File Reading
 
 ```python
+# Requires: from pathlib import Path; from typing import Optional
 def safe_read_file(file_path: Path) -> Optional[str]:
-    """Safely read a file, returning None if it doesn't exist."""
+    """Safely read file, returning None on missing/error."""
     try:
         if file_path.exists() and file_path.is_file():
             return file_path.read_text(encoding="utf-8")