Lab — All Issues

version-drift check (from #236) is a raw string-inequality, false-positives on multi-model manifests and metadata-only bumps

globalArgs fields leak into method arguments when a method's arguments schema is a bare z.record()

open method fails for password-auth hosts: SSHPASS env set but ssh call never wrapped in sshpass

apps sync/lookup fail with 'partial() cannot be used on object schemas containing refinements'

Docker-related model types/workflows would benefit from first-class dry-run/plan support