forcetypeassert 6→0（缓存 list 断言、relay/flared 中间件契约断言、图片压缩 flight 断言，全部带检查+安全失败路径）；errname 1→0；prealloc 2 处（另 1 处与 repo mnd 冲突，用命名常量解决）。nilnil 保留（not-found/可选结果惯例，含接口契约注释）。

Result: {"status":"keep","total_issues":15,"golint_canonicalheader":0,"golint_errname":0,"golint_errorlint":1,"golint_forcetypeassert":0,"golint_gosec":0,"golint_intrange":0,"golint_modernize":3,"golint_nilnil":3,"golint_perfsprint":0,"golint_prealloc":0,"golint_recvcheck":7,"golint_usestdlibvars":0,"golint_wastedassign":0,"golint_total":14,"eslint_problems":1,"eslint_errors":0,"eslint_warnings":1,"tsc_errors":0,"measure_s":43}

internal/apps/openflare/geoip/runtime.go

@@ -26,7 +26,7 @@ const (
 
 var (
 	runtimeOnce       sync.Once
-	runtimeInitErr    error
+	errRuntimeInit    error
 	currentProviderMu sync.RWMutex
 	currentProvider   string
 )
@@ -34,9 +34,9 @@ var (
 // EnsureRuntimeProvider loads GeoIP provider config from SystemConfig.
 func EnsureRuntimeProvider(ctx context.Context) error {
 	runtimeOnce.Do(func() {
-		runtimeInitErr = applyProviderFromSystemConfig(ctx)
+		errRuntimeInit = applyProviderFromSystemConfig(ctx)
 	})
-	return runtimeInitErr
+	return errRuntimeInit
 }
 
 // RefreshRuntimeProvider reapplies GeoIPProvider after config updates.
@@ -115,7 +115,7 @@ func ensureServerMMDB() (string, error) {
 // ResetRuntimeForTest clears lazy-init state for unit tests.
 func ResetRuntimeForTest() {
 	runtimeOnce = sync.Once{}
-	runtimeInitErr = nil
+	errRuntimeInit = nil
 	currentProviderMu.Lock()
 	currentProvider = ""
 	currentProviderMu.Unlock()