## Review Feedback: Missing Runtime Enforcement
The PR adds helpful matchers (`expect_api_success`, etc.) but **does not implement the core requirement**: runtime enforcement to forbid bare `have_http_status` checks.
### Missing from Acceptance Criteria
- ❌ Monkeypatch in spec_helper that **warns/errors** when bare `have_http_status` is used
- ❌ The old pattern `expect(response).to have_http_status(:ok)` still works with no warning
### What's Needed
Add a monkeypatch (in `spec/spec_helper.rb` or similar) that overrides `have_http_status` to detect and warn when it's used without checking `response.body`.
Example from ticket description:
```ruby
# When bare status check detected, show warning:
warn "⚠️ BARE HTTP STATUS CHECK DETECTED"
warn "Use expect_api_success or check response.body instead"
```
The helper methods are good, but agents will still use the old pattern unless it's **actively prevented**.