Add an implementation plan to address the audit findings

This commit is contained in:
2026-08-13 00:00:59 +00:00
parent c3eeb298f0
commit 0b869af75e
3 changed files with 904 additions and 995 deletions

View File

@@ -280,7 +280,7 @@ evidence and the architecture's stated boundaries.
| P3 | `AUD-039`, `AUD-067` through `AUD-072` | Behavior-preserving consolidation and dormant-surface retirement accepted after the behavior they touch is corrected and locked by tests. |
| P4 | `AUD-075`, `AUD-076`, and audit-record retirement | Documentation lifecycle work accepted last, after implemented contracts have durable canonical owners. |
The remediation roadmap's allocation table and 35 stages are the authoritative
The remediation roadmap's allocation table and 56 stages are the authoritative
finding-to-stage mapping. All 74 confirmed findings are accepted now; none is
deferred and none requires a prerequisite decision. Rejected `AUD-001`,
`AUD-022`, and `AUD-032` flow only through `AUD-072`; rejected `AUD-063` flows
@@ -6210,7 +6210,7 @@ directly established.
- Accepted all 74 confirmed findings for implementation. None was priority-
deferred, and the evidence was sufficient to choose a corrective direction
without a separate product or architecture decision.
- Created `docs/roadmap/audit-remediation.md` with 35 independently executable
- Created `docs/roadmap/audit-remediation.md` with 56 independently executable
stages. Each stage names its findings, affected areas, work, locked behavior,
test expectations, canonical documentation owners, and exit commands.
- Allocated every confirmed finding exactly once. Correctness, security, data