SDK-provider update() error-wrapping coverage matrix

For every SDK provider class declaring update(), walks from update() through this.x() delegation edges and classifies whether every reachable AWS send is enclosed by a ProvisioningError wrap — and whether that wrap re-throws cdkd-typed errors untouched (the deploy engine matches ResourceUpdateNotSupportedError BY CLASS to fall back to replacement).

Summary

• Provider classes with update(): 86
• Wrapped: 80
• No AWS call in update(): 6
• Unwrapped-send gaps (blocks CI): 0
• Unguarded wraps (blocks CI): 0
• Allow-listed known gaps (does NOT block CI): 0
• Unresolved-callee (verdict not trustworthy): 0

Gaps

None. Every provider update() either makes no AWS call or wraps every reachable send in a ProvisioningError, with typed errors passed through.

Full classification