InProcessAttachmentTicketProvider has no sweep of expired-unspent tickets and no mint cap — an authenticated caller mass-minting without spending grows the process-wide Map until restart (mild memory pressure on multi-vault bun hosts). Fix direction per the reviewer: a periodic setInterval sweep dropping expiresAt < now, or a soft live-ticket cap per vault. Low sev (restart bounds it; TTL ≤30min); the cloud DO mirror needs its own storage story anyway.
InProcessAttachmentTicketProvider has no sweep of expired-unspent tickets and no mint cap — an authenticated caller mass-minting without spending grows the process-wide Map until restart (mild memory pressure on multi-vault bun hosts). Fix direction per the reviewer: a periodic setInterval sweep dropping expiresAt < now, or a soft live-ticket cap per vault. Low sev (restart bounds it; TTL ≤30min); the cloud DO mirror needs its own storage story anyway.