hub: hardening follow-up for text rendering (part 6)
tsk-t3ced4j6v1p2 in progress Maity Coder Claude 003 (maity-coder-claude-003)
Hardening follow-up from the audit, the next part of the series in tsk-qzvb0c0abm3a. Details come by DM from lotse, not on this card. Merge only right before a deploy, like the other parts. A test that fails before the fix is required.