From b9080466a24010fe18398a85c05d1f90a7749e6b Mon Sep 17 00:00:00 2001 From: Eric Rakestraw Date: Thu, 13 Aug 2026 04:31:31 +0000 Subject: [PATCH] Document audit record retirement checklist --- docs/roadmap/audit-plan.md | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/docs/roadmap/audit-plan.md b/docs/roadmap/audit-plan.md index 870704d..30193b3 100644 --- a/docs/roadmap/audit-plan.md +++ b/docs/roadmap/audit-plan.md @@ -990,3 +990,34 @@ The audit is complete when: artifacts; and - accepted work is represented by a dependency-ordered, one-prompt-per-stage remediation roadmap. + +## Record Retirement Checklist + +Completion review confirmed that every accepted finding has one completed +remediation, while the four rejected findings remain consolidated into their +recorded owners. The retired remediation roadmap had one allocation for each +of the 74 confirmed findings, with no duplicate or unassigned IDs. Its +completed changes, including retirement of the completed comparison roadmaps, +are present in repository history. + +The durable current-state owners already retain the implemented contracts and +rationale: the [architecture policy](../policy/architecture.md) and accepted +[stateless-execution ADR](../adr/0001-stateless-execution.md) own system +boundaries; the CLI, configuration, operations, and integration documents own +their public contracts; focused internal documents own implementation flows; +and the testing policy owns test-maintenance guidance. No additional canonical +document needs an audit-specific summary. + +When retiring these temporary records: + +1. Keep `docs/roadmap/future.md` as the only remaining roadmap and leave the + development guide's general roadmap routing in place. +2. Remove this audit plan and the audit ledger. The remediation roadmap has + already been retired. +3. Do not alter ADRs, release notes, executable code, tests, dependencies, + schemas, or current-state contract documentation as part of record removal. +4. Confirm no remaining Markdown link targets either audit record; links + between the two records disappear with them. +5. Re-run repository link, fence, and secret-pattern checks; the full default + and race-enabled test suites; both CLI help commands; `go vet`; and + `git diff --check`.