milestone 16: behavioral fixes for silent failures, locks, counters and the query log

specs/milestone-16.md

@@ -318,6 +318,14 @@ from the rotating log.
 - Add `.tls_server` to `isDedupScope` (logging.zig:103-108) and to its
   membership test (:637-644).
 
+**Scope widened during implementation (orchestrator ruling):** the level
+choice also applies to the `ssl_read` and `ssl_write` report sites, not only
+the two named ones. Ruling 15's "cause stashed for logging" wording requires
+the read site to consume the level, and an unconditional warn on the write
+half would keep the same spam vector open through `close` → `flush` against
+a dead peer. Peer-class causes are decided by pure helpers (`isPeerCause`,
+`causeLevel`); `check` still passes warn.
+
 ### 17. The query log heals its own gaps
 
 `web/src/features/queries/QueryLogPage.tsx`: the hand-rolled accumulation