docs: #1103 round 2 whole-repo prose sweep - #2415

Please follow the guide below

• You will be asked some questions, please read them carefully and answer honestly

• Put an x into all the boxes [ ] relevant to your pull request (like that [x])

• Use Preview tab to see how your pull request will actually look like

• Searched for similar pull requests

• Followed the coding style (make pylint, make mypy, make isort)

• make test passes, and a test case covers the change

• Added a changelog entry under docs/source/changelog/ and regenerated CHANGELOG.md, if the change is user-visible — N/A, prose only and not user-visible, as for round 1 (docs: #719-style prose sweep after the #1090-1102 defect wave #2408), which carries no entry either

What is the purpose of your pull request?

Tick the commit type your subject line carries.

• fix — corrects a defect
• feat — adds a feature
• perf — changes performance, not behaviour
• refactor — changes neither behaviour nor performance
• test — tests only
• docs — documentation only
• ci — workflows or build tooling
• release — bumps the version or rolls up a distribution
• chore — anything else

Description of your pull request and other information

Round 2 of the #1103 repeating #719-style sweep. Round 1 (#2408) was scoped to one recent PR wave; this round covers the ground that wave did not touch — all of pcapkit/ outside const/ and vendor/, docs/source/, the root documents, util/, examples/ and tests/. 43 files, prose only (docstrings, comments, .rst/.md text), no behaviour change, no renames.

1. Cross-references converged on the defining class

Every pcapkit.protocols.protocol.Protocol.<member> target under pcapkit/ now names ProtocolBase. Protocol declares only __init_subclass__; payload, unpack, alias, info, read, pack, analyze, _file, __header__, _decode_next_layer, _import_next_layer and the rest are all defined on ProtocolBase. This finishes the direction round 1 took in the register/register_protocol docs — before it the tree was split roughly evenly, with the same members (alias, unpack, from_data, analyze, expand_comp, _lookup_registry) spelled both ways in different modules.

Three places already read ProtocolBase.X in their display text over a Protocol.X target, which is the mismatch round 1 fixed in link.py and transport.py: utilities/chardet.py, protocols/data/data.py, internet/ipv6_ext.py. pcapkit.protocols.data.protocol.Protocol.packet is a different class and is left alone.

One thing to rule on: docs/source/ and tests/ still spell it the other way — 26 occurrences across 12 .rst pages and 5 test modules. That is not accidental: docs/source/pcapkit/protocols/protocol.rst renders these members under the Protocol entry and its ProtocolBase section links on to them as :attr:~Protocol.name``. So both targets resolve, and finishing the conversion there means deciding where the members should render, which is a structural docs call rather than a sweep one. Flagged rather than taken.

2. Prose corrected against the code

• schema/internet/hip.py — parameter_padding_len claimed every parameter schema in the module as its caller. LocatorSetParameter uses locator_set_padding_len, which that field's own doc-comment already said.
• conventions/utilities-or-corekit.rst — omitted timestamp conversion from what pcapkit.utilities holds, which pcapkit/utilities/__init__.py's own docstring lists and pcapkit/utilities/datetime.py provides.
• CONTRIBUTING.md — said a red linter will not fail a pull request. The Lint job's actionlint step carries no continue-on-error and ends on exit "$status", as lint.yml's own header records ("Every step but actionlint is advisory").
• protocols/index.rst — the class-hierarchy graph drew HIP single-parented. It is class HIP(IPv6_Ext[...], Internet[...], ...), the only class under protocols/internet/ with a second Internet base, and the graph records AH's and ESP's second parent the same way.

3. Before/after narration → present tense

• internet/mh.py — two EnumLookup notes narrated a rejected get override ("the override was deleted, not widened to accept default"). The reason it would be redundant is kept; the history is dropped.
• data/internet/hip.py — cert_group's doc-comment repeated the Diffie-Hellman-registry history that its own .. versionchanged:: 1.5.0 note already carries.
• tests/project/test_annotation_names.py — no longer dates the trap in months.

4. Counts of codebase items dropped (the ruling on #1103)

• tests/const/test_const_enum_builtin_parity.py cited "113 of the 117 modules" under pcapkit/const/; the tree holds 124, and neither figure is asserted or computed anywhere in the module. The decision and its reasoning are kept.

Defects found while sweeping, reported rather than fixed

These are code, not prose, and are left for their own issues:

1. FTP.make's code branch is unguarded (protocols/application/ftp.py). code_val = int(code) has no type guard, where the sibling cmmd branch got one on fix(ftp): make raises a bare AttributeError for a command that is not str or bytes #2290 and args on fix(application): FTP.make's args rejects bytearray/int with AttributeError instead of ProtocolError #2410. Measured on this branch: FTP.make(obj, code='abc') raises a bare ValueError: invalid literal for int() with base 10, not the ProtocolError the Raises: section promises; code=True is accepted and writes b'001' although the cmmd guard rejects a bool explicitly; code=3.7 is accepted and writes b'003'. (Repro needs FTP.make on an uninitialised instance — FTP().make(code=...) takes the else arm and raises ProtocolError: FTP: invalid packet type.)
2. Deferred.__init__'s proto annotation is too narrow (foundation/reassembly/data/data.py). It is proto: 'TransType' with analyze: 'Callable[[TransType, bytes], ProtocolBase]', but TCP.submit passes (bufid[1], bufid[3]) — a port pair — because Transport.analyze overrides the signature to ports: tuple[int, int]. Behaviour is correct; the annotation and the proto: Payload protocol type. docstring describe only the IP case.
3. test_actionlint_in_lint_1967.py's stated reason does not justify its floor. The docstring says 1.7.12 is needed because "the workflows use YAML anchors, which 1.7.7 cannot read", but lint.yml's own step comment says anchors need 1.7.10 or later. MINIMUM = (1, 7, 12) is what the test asserts, so the real reason for 1.7.12 is recorded nowhere. Not fixed because inventing a reason would be worse.
4. test_file_size_caps_1969.py scans one of two callers. WORKFLOW = 'unit-tests.yml', but grep -rln cap_file_size .github/workflows/ returns unit-tests.yml and experimental.yml, so an uncapped pytest step added to experimental's Linux job fails nothing. (The Windows leg's uncapped step is deliberate — resource is unavailable there.)
5. ext.rst and the conventions pages disagree on HIP's classification. ext.rst's shipped-classes table lists HIP as a plain Internet-layer row beside IPX while MH sits under IPv6 Extension Header, though both derive from IPv6_Ext. Which side of HIP's dual nature that grid should show is a presentation call.

Scope not reached

Honest about the edges, so a round 3 knows where to start: docs/source/contributing/workflows.rst (2055 lines) and releasing.rst (613) got the mechanical passes but no line-by-line read; the per-protocol API pages under docs/source/pcapkit/ were covered by the structural sweeps only; the repetitive per-field #: comments in the largest schema/ and data/ modules were sampled rather than read exhaustively; and the bodies of the largest tests/project/ modules (test_release_gates.py, test_ci_timing.py, test_conventions_doc_claims.py) were swept mechanically rather than read.

Test plan

• AST-structure guard — ast.dump via util/vendor_code_changed.py's code_of, with docstrings and bare string statements stripped: all 40 touched .py files are prose-only against 27c797d35, 0 differences. The 3 remaining files are CONTRIBUTING.md and two .rst pages.
• No added line exceeds the 120-column --max-line-length; format/docstyle findings on the touched files are all pre-existing lines this PR does not touch.
• Docs, contract and project suites — tests/test_docstring_contract.py, tests/test_base_class_contract.py, tests/project/test_conventions_doc_claims.py, test_documentation_claims.py, test_docs_issue_pr_roles_1103_unit.py, test_issue_refs_in_comments.py, test_annotation_names.py, test_docs_glossary_1949_unit.py, test_docs_internal_refs_1940_unit.py, test_docs_internal_refs_1947_unit.py, test_docs_ambiguous_xrefs_1775_unit.py, test_docs_unresolvable_roles_1919_unit.py, test_docs_missing_directives_2234_unit.py, test_docs_warns_xrefs_2094_unit.py, test_pr_template_commit_types_1102_unit.py, test_python_versions_1660.py, test_utilities_import_boundary_1735_unit.py, test_no_moved_name_re_exports_1744_unit.py, tests/const/test_const_enum_builtin_parity.py — 186 passed, 22 skipped, 1604 subtests passed.
• Library suites over every touched package, at make test's exclusions (--ignore=tests/integration --ignore-glob='*_runtime.py' --ignore-glob='*_regression.py') — tests/protocols, tests/foundation, tests/corekit, tests/utilities, tests/interface: 3332 passed, 13 skipped, 29807 subtests passed, 0 failures.