V9.14.022.2026.06.11: enforce secret and cleanup safeguards

lib/lib_trap_on_exit.sh

@@ -49,8 +49,6 @@ trap_on_exit() {
 
     print_scr_exit "${errcode}"
 
-    exit "${errcode}"
-
   else
 
     if [[ "${ERRTRAP}" != "true" ]]; then
@@ -63,9 +61,16 @@ trap_on_exit() {
 
     fi
 
-    exit "${errcode}"
-
   fi
+
+  if ! sanitize_debug_logs; then
+    printf "\e[93m⚠ Final debug-log sanitisation failed; preserving original exit status %s. \e[0m\n" "${errcode}" >&2
+    if [[ -n "${LOG_ERROR:-}" && -f "${LOG_ERROR}" && ! -L "${LOG_ERROR}" ]]; then
+      printf "⚠ Final debug-log sanitisation failed; original exit status: %s.\n" "${errcode}" >> "${LOG_ERROR}" || true
+    fi
+  fi
+
+  exit "${errcode}"
 }
 ### Prevents accidental 'unset -f'.
 # shellcheck disable=SC2034