diff --git a/.gitignore b/.gitignore
index a4afea36..b7ce58d6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@
 /result-*
 /.tmp
 /.claude/settings.local.json
+*.rlib
diff --git a/hive-c0re/src/forge/mod.rs b/hive-c0re/src/forge/mod.rs
index 3a98c5f4..b7c6c770 100644
--- a/hive-c0re/src/forge/mod.rs
+++ b/hive-c0re/src/forge/mod.rs
@@ -307,6 +307,18 @@ pub async fn ensure_all() {
 ///
 /// Called at startup alongside `knowledge::ensure_webhook`. No-op when the
 /// core token is absent (forge not yet provisioned).
+///
+/// # Errors
+///
+/// Returns an error if:
+/// - `dashboard_port` produces a URL that `url::Url::parse` rejects (should
+///   never happen for a valid port number).
+/// - The Forgejo `org_create_hook` API call fails (transport error, auth
+///   failure, or the `agent-configs` org does not exist).
+/// - The HTTP call times out (10 s limit).
+///
+/// Listing failures are treated as best-effort: they fall through to the
+/// create attempt rather than surfacing an error.
 pub async fn ensure_config_pr_webhook(core_token: &str, dashboard_port: u16) -> Result<()> {
     use forgejo_api::structs::{CreateHookOption, CreateHookOptionConfig, CreateHookOptionType};
     use std::collections::BTreeMap;
diff --git a/libnull.rlib b/libnull.rlib
deleted file mode 100644
index a6c2cdcf..00000000
Binary files a/libnull.rlib and /dev/null differ