handle access like other handlers (avoid throwing before doFatalSFTPError). - bare-openssh-sftp: enqueueSftpReply(reqid, fn) sends SSH_FX_FAILURE on handler throw/reject; defensive READ path (buffer/finite offsets). - Document regression (bad_optional_access / -fno-exceptions) in comments; add packages/bare-os-openssh/CHANGELOG.md Unreleased entry.