Findings & artifacts

Control gaps across every repo, highest severity first. Each is a flag for human review — not a legal conclusion. Pick a repo to export its auditor artifacts.