address comments

Author: kyli87

ffi/src/lib.rs

@@ -402,9 +402,7 @@ mod private {
             let boxed = val.into_boxed_slice();
             let leaked_ptr = Box::leak(boxed).as_mut_ptr();
             // safety: Box::leak always returns a valid, non-null pointer
-            #[allow(clippy::expect_used)]
-            let ptr = NonNull::new(leaked_ptr)
-                .expect("This should never be null please report this bug.");
+            let ptr = unsafe { NonNull::new_unchecked(leaked_ptr) };
             KernelOwnedBytes { ptr, len }
         }
     }

ffi/src/scan.rs

@@ -439,8 +439,8 @@ pub unsafe extern "C" fn scan_physical_schema(scan: Handle<SharedScan>) -> Handl
 /// - [`OptionalValue::Some`] wraps a [`KernelOwnedBytes`](crate::KernelOwnedBytes) buffer holding
 ///   the proto-serialized `delta.kernel.operation.Operation` message (a `QueryPlan`). The engine
 ///   owns the buffer and must free it with [`free_kernel_bytes`](crate::free_kernel_bytes).
-/// - [`OptionalValue::None`] means there is no plan to execute: either the scan's predicate
-///   statically skips all files, or no Delta metadata matches this scan (empty result).
+/// - [`OptionalValue::None`] means there is no plan to execute because the scan's predicate
+///   statically skips all files.
 ///
 /// # Safety
 ///