ScottW514 637fb67007 docs: the audit's follow-through closes, its last finding stands alone ...

Three items in Next work tracked the 2026-09-01 audit: the remediation
follow-through, the PIC readings, and the deferred six. All three are
done, on one image, and the campaign the release gate asks for passed on
it, so they belong in the record rather than the open list.

What remains of the audit is one finding, the request-body cap, which is
now fixed and host-proven and needs an image and a campaign. It takes
their place as item 9.

forgectrl.auth gains the case that guards it: an oversized body from an
unauthenticated client is refused and the daemon is still serving after.

2026-09-03 18:41:46 -04:00

..

BRINGUP.md

docs: the audit's follow-through closes, its last finding stands alone

2026-09-03 18:41:46 -04:00

CAMPAIGN-LOG.md

docs: the full campaign on 20260903211413, 56 of 56, authorized

2026-09-03 18:09:05 -04:00