Sub-ticket of PLUTO-529 No-silent-failure contract: audit + enforce try/catch→appEvents+friendly toast, required-field validation toasts, swallowed-catch elimination, error→live-PM DM · pluto