Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@clients/haskell/sdk/Io/Superposition/Model/GetConfigInput.hs`:
- Line 146: The If-Modified-Since header is being serialized from a UTCTime via
(if_modified_since self) using Io.Superposition.Utility.serHeader, but HTTP
requires RFC7231 format; update the code so the value passed to
Io.Superposition.Utility.serHeader is an HTTPDate (or a formatted RFC7231
string) instead of raw UTCTime: either change the field type to HTTPDate where
GetConfigInput defines if_modified_since or call the existing
formatHTTPDate/HTTPDate conversion function on (if_modified_since self) just
before passing it to Io.Superposition.Utility.serHeader so the header uses
formatHTTPDate output.

In `@clients/haskell/sdk/Io/Superposition/Model/GetConfigOutput.hs`:
- Line 16: GetConfigOutput's audit_id field and setAuditId accessor were
intentionally removed; update any code that expects audit_id on the
GetConfigOutput model (and any callers of setAuditId) to stop accessing or
setting that field. Search for references to GetConfigOutput.audit_id,
setAuditId, or variables named auditId in code paths handling GetConfigOutput
and remove or conditionally gate those usages—if the audit id is still needed
for GetResolvedConfig/GetResolvedConfigWithIdentifier flows, move access to
those models or to the HTTP header handling layer that parses the optional audit
header. Also update affected tests and documentation to reflect that
GetConfigOutput no longer contains audit_id.

In `@clients/haskell/sdk/Io/Superposition/Model/ListExperimentGroupsInput.hs`:
- Line 248: The If-Modified-Since header is being serialized using the UTCTime
JSON SerDe (encodeTrimQuotes/quoteAndDecode) which produces RFC3339 instead of
the required RFC2822 HTTP-date; update the UTCTime SerDe (the SerDe instance for
UTCTime in Utility.hs) or create a header-specific codec so that
Io.Superposition.Utility.serHeader emits HTTP-date formatted timestamps (use
formatTime/parseTimeM with defaultTimeLocale and the RFC2822 pattern or reuse
the existing HTTPDate type/its SerDe), and change the call sites that build the
"If-Modified-Since" header (e.g., the code that calls
Io.Superposition.Utility.serHeader "If-Modified-Since" in
ListExperimentGroupsInput, ListExperimentInput, GetConfigInput) to use this
HTTP-date serializer instead of the JSON encoder.

In `@clients/haskell/sdk/Io/Superposition/Model/ListExperimentGroupsOutput.hs`:
- Around line 115-123: The SDK currently hardcodes expectedStatus = status200
for ListExperimentGroups which prevents 304 responses from being treated as a
valid outcome; update the operation's response parsing so that parseOutput (and
the expectedStatus handling) accepts 304 as a valid status and maps it to a
distinct outcome instead of routing to getErrorParser. Concretely, modify the
code that sets expectedStatus for the ListExperimentGroups operation to accept
both status200 and status304 (or add an alternate response constructor) and
update the ListExperimentGroupsOutput parsing logic (the
ListExperimentGroupsOutput constructor/parseOutput path referenced in
Io.Superposition.Model.ListExperimentGroupsOutput and the
parseOutput/getErrorParser flow) to return a 304-specific result (or a union
variant) so callers can detect and handle Not Modified separately. Ensure the
metadata still contains raw status and preserve existing behavior for 200.

In `@clients/haskell/sdk/Io/Superposition/Model/ListExperimentOutput.hs`:
- Around line 115-123: The last-modified header is RFC7231 HTTP-date, so update
the ListExperimentOutput model to use Io.Superposition.Utility.HTTPDate for the
last_modified_at field (instead of Data.Time.UTCTime) and change its
deserialization in the deSerHeader "last-modified" call to produce an HTTPDate
(either by using the utility's HTTP-date-aware header deserializer or by calling
Io.Superposition.Utility.parseHTTPDate on the header string before assigning to
last_modified_at); ensure you update the type reference (last_modified_at) and
the deserialization site (the var0 assignment from deSerHeader "last-modified")
to use Io.Superposition.Utility.HTTPDate/parseHTTPDate so valid RFC7231 dates
parse at runtime.

In `@clients/python/sdk/superposition_sdk/_private/schemas.py`:
- Around line 1720-1728: The timestamp members like if_modified_since that
target DATE_TIME are being serialized as RFC3339 because DATE_TIME is annotated
with `@timestampFormat`("date-time"); update each member-level definition (e.g.,
the if_modified_since member) to add a member-level
`@timestampFormat`("http-date") annotation or change the member target to the
HttpDate shape so the generated client emits RFC2822/http-date for headers like
If-Modified-Since and Last-Modified, then regenerate the Smithy-generated code;
look for other similar members that target DATE_TIME (the other occurrences
flagged in the review) and apply the same per-member
`@timestampFormat`("http-date") fix.

In `@crates/experimentation_platform/src/api/experiment_groups/handlers.rs`:
- Around line 336-352: The cache key used for both the list payload and the
last-modified timestamp causes type confusion because read_through_cache is
storing an Option<DateTime<Utc>> under the same key used to cache
PaginatedResponse<ExperimentGroup>; change the storage so the last-modified
value uses its own distinct key (e.g. suffix like
EXPERIMENT_GROUPS_LAST_MODIFIED_KEY) or always read the timestamp directly from
the DB instead of reusing EXPERIMENT_GROUPS_LIST_KEY_SUFFIX, update locations
using read_through_cache (the call at
read_through_cache::<Option<DateTime<Utc>>> and the later read of the list) to
use the new key or DB fetch, and ensure put_experiment_groups_in_redis
invalidates or sets both keys consistently so deserialization never sees the
wrong payload type.
- Around line 369-375: The shared Redis fast path is incorrectly used for
requests that include context-filtered dimension_params (populated for non-GET
via body.and_then(...).context), causing context-specific subsets to be cached
globally; update the logic that decides to reuse the workspace-wide list cache
(the condition around the Redis fast path at/after where Lines 381-402 are
evaluated) to also require that dimension_params is empty (e.g., check
dimension_params.is_empty()) before using the shared cache so any request with a
non-empty dimension_params bypasses Redis and uses the per-request path.

In `@crates/superposition_sdk/src/protocol_serde/shape_get_config.rs`:
- Around line 80-91: The generated code is using
::aws_smithy_types::date_time::Format::DateTime for the if_modified_since
header; change the Smithy model so the timestamp member "if_modified_since" is
defined with the HTTP-date timestamp format (e.g. set timestampFormat =
"http-date" or the equivalent HttpDate trait on that member) so the generated
code will use ::aws_smithy_types::date_time::Format::HttpDate; update the Smithy
shape for the request/input that contains the if_modified_since member and then
regenerate the Rust code to pick up the new format.

In `@docs/docs/api/Superposition.openapi.json`:
- Around line 172-180: Remove the "If-Modified-Since" header from the POST
operation definitions (the header object named "If-Modified-Since" in
Superposition.openapi.json) and stop documenting 304 responses for those POST
endpoints; instead, move any cache revalidation semantics to the corresponding
GET/HEAD routes or define a POST-specific contract (e.g., explicit conditional
request/response fields) that does not rely on If-Modified-Since/304 per RFC
9110. Ensure all occurrences of the "If-Modified-Since" header and any
referenced 304 response entries in the file (including the other ranges noted)
are deleted or relocated to GET/HEAD operation objects and update the operation
descriptions to reflect the change.

In `@smithy/models/config.smithy`:
- Around line 87-90: Add the `@timestampFormat`("http-date") annotation to the
if_modified_since DateTime header field so it is serialized as an HTTP-date
(RFC2822) rather than RFC3339; update the field declaration for
if_modified_since (the one annotated with `@httpHeader`("If-Modified-Since") and
`@notProperty`) in the models for the GetConfig, ListExperiment, and
ListExperimentGroups operations to include `@timestampFormat`("http-date") so
Python/Rust/JS SDKs emit the correct format.

In `@smithy/models/experiments.smithy`:
- Line 321: The API contract for the ListExperiment operation was changed from
GET /experiments to POST /experiments/list which is a breaking change; update
the service and client surface to avoid breaking consumers by either (a)
restoring/supporting the old GET /experiments endpoint in the backend routing
(and keep the new POST /experiments/list) during a transition, (b) update all
SDKs/clients, docs, and integration tests to use the new POST endpoint and
prepare a major version bump, and/or (c) add explicit migration notices in the
API changelog and README; locate the smithy operation definition for
ListExperiment (the `@http`(method: "POST", uri: "/experiments/list") annotation)
and ensure corresponding server routes, SDK generation, tests, and documentation
are updated to reflect the chosen migration strategy.

---

Outside diff comments:
In `@clients/haskell/sdk/Io/Superposition/Model/GetConfigInput.hs`:
- Around line 137-148: The request builder for GetConfigInput currently sends an
"If-Modified-Since" header (see IntoRequestBuilder/GetConfigInput and
intoRequestBuilder calling serHeader "If-Modified-Since") but there is no 304
handling; update the response parsing for this operation (the GetConfigOutput
parse function or parseOutput for GetConfigInput/GetConfigOutput) to explicitly
handle HTTP 304 by returning an appropriate cached/empty/default GetConfigOutput
(or a sentinel indicating "NotModified") instead of treating 304 as an
unexpected status, or if conditional requests are not supported, remove the
serHeader "If-Modified-Since" from intoRequestBuilder to avoid sending
conditional requests altogether. Ensure you reference and update the parse
function that currently rejects non-2xx responses so it treats 304 as a valid
branch.

In `@clients/haskell/sdk/SuperpositionSDK.cabal`:
- Line 3: The package still lists "version: 0.0.1" in SuperpositionSDK.cabal
despite removing modules from exposed-modules (a breaking public API change);
update the version field in SuperpositionSDK.cabal to the next release version
appropriate for a breaking change (per your release policy) so downstream
consumers can detect the change, e.g., replace "version: 0.0.1" with the new
version string.

In `@crates/experimentation_platform/src/api/experiments/handlers.rs`:
- Around line 1021-1029: The current If-Modified-Since header parsing only tries
RFC2822 via DateTime::parse_from_rfc2822, which misses RFC3339 timestamps (used
by Smithy/POST clients); update the parsing code that sets last_modified to
first attempt parse_from_rfc2822 and if that fails attempt
DateTime::parse_from_rfc3339 (converting to Utc) so both formats are accepted,
and apply the same change to the equivalent parsing block referenced for the
POST/Smithy flow (the code using DateTime::parse_from_rfc2822 and the
last_modified variable).

In `@crates/frontend/src/pages/experiment_group_listing/filter.rs`:
- Around line 371-378: The reset handler currently only clears classic filters
(filters_rws, filters_buffer_rws) and resets pagination, but leaves the new
context/dimension state intact; update the on_click closure that calls
close_drawer(...) so it also clears dimension_params_rws, dimension_buffer_rws,
and context_rws (e.g., set them to their defaults or empty state) alongside
calling ExpGroupFilters::default() and pagination_params_rws.update(|f|
f.reset_page()) to fully reset both classic and new context/dimension filters.

In `@smithy/patches/python.patch`:
- Line 10: The project currently relies on the Hatch dynamic version key dynamic
= ["version"] which fails when VERSION is not set for local uv build; fix by
providing a safe fallback for VERSION in the Hatch configuration (so dynamic
resolution uses a default like a dev/0.0.0 value when the VERSION env var is
absent) or alternatively add a clear note in the SDK README that developers must
export VERSION before running uv build; update the hatch config entry that
references dynamic = ["version"] and/or the README to ensure local builds do not
fail.

---

Nitpick comments:
In `@crates/frontend/src/pages/experiment_group_listing.rs`:
- Around line 258-277: The current use of .unwrap_or_default() on
experiment_groups::list and dimensions::list silently swallows API errors;
update the async block so each call to experiment_groups::list and
dimensions::list is handled via match (or ? if the surrounding function returns
Result) and on Err(e) call a logging macro (e.g., logging::error!) with a clear
message including the error and context (filters/pagination/workspace/org_id),
then return a sensible default (e.g., PaginatedResponse::default()) or propagate
the error up so the UI can surface it; adjust CombinedResource construction
accordingly to use the handled results.

In `@crates/service_utils/src/service/types.rs`:
- Around line 41-75: In AppHeader::add_config_version the .clone() on the i64 is
unnecessary; change the insert_header call to pass val.to_string() (or
&val.to_string()) without cloning the i64 so you don't clone the integer, i.e.
update the code in add_config_version that references config_version / val and
XConfigVersion to remove .clone() before to_string() while keeping the same
resp_builder.insert_header(...) usage with HttpResponseBuilder.

    private static final List<Schema>$COLLECTION_OPERATIONS = List.of(UpdateOverridesExperiment.$SCHEMA,
        ConcludeExperiment.$SCHEMA,
        DiscardExperiment.$SCHEMA,
        RampExperiment.$SCHEMA,
        PauseExperiment.$SCHEMA,
        ResumeExperiment.$SCHEMA);
    private static final List<Schema> $OPERATIONS = List.of(UpdateOverridesExperiment.$SCHEMA,
        ConcludeExperiment.$SCHEMA,
        DiscardExperiment.$SCHEMA,
        RampExperiment.$SCHEMA,
        PauseExperiment.$SCHEMA,
        ResumeExperiment.$SCHEMA);
    private static final Schema $SCHEMA = Schema.createResource($ID);

    /**
     * Get an instance of this {@code ApiResource}.
     *
     * @return An instance of this class.
     */
    public static Experiments instance() {
        return $INSTANCE;
    }

    private Experiments() {}

    @Override
    public Schema schema() {
        return $SCHEMA;
    }

    @Override
    public Map<String, Schema> identifiers() {
        return $IDENTIFIERS;
    }

    @Override
    public Map<String, Schema> properties() {
        return $PROPERTIES;
    }

    @Override
    public Schema create() {
        return CreateExperiment.$SCHEMA;
    }

    @Override
    public Schema read() {
        return GetExperiment.$SCHEMA;
    }

    @Override
    public List<Schema> collectionOperations() {
        return $COLLECTION_OPERATIONS;
    }
    @Override
    public List<Schema> operations() {
        return $OPERATIONS;
    }