part #2

docs/modules/airgap/guides/job-sync-offline.md

@@ -180,6 +180,9 @@ services.AddRouterJobSyncTransport();
 services.AddAirGapSyncImportService();
 ```
 
+Notes:
+- File-based transport resolves bundle paths under the configured input/output roots and rejects traversal outside those roots.
+
 ## Operational Runbook
 
 ### Pre-Export Checklist

docs/modules/aoc/guides/guard-library.md

@@ -46,10 +46,10 @@ app.MapPost("/ingest", async (IngestionRequest request, IAocGuard guard, ILogger
         // additional application logic
         return Results.Accepted();
     })
-    .AddEndpointFilter(new AocGuardEndpointFilter<IngestionRequest>(
+    .RequireAocGuard<IngestionRequest>(
         request => new object?[] { request.Payload },
         serializerOptions: null,
-        guardOptions: null))
+        guardOptions: null)
     .ProducesProblem(StatusCodes.Status400BadRequest)
     .WithTags("AOC");
 

docs/modules/replay/guides/DETERMINISTIC_REPLAY.md

@@ -155,7 +155,8 @@ Producer note: default clock values in `StellaOps.Replay.Core` are `UnixEpoch` t
 
 ### 4.1 Environment Normalization
 
-* **Clock:** frozen to `scan.time` unless a rule explicitly requires “now”.
+* **Clock:** frozen to `scan.time` unless a rule explicitly requires “now”.  
+* **Replay engine timestamps:** success and failure outputs must use the injected `TimeProvider` to keep replay timestamps deterministic.
 * **Random seed:** derived as `H(scan.id || MerkleRootAllLayers)`.
 * **Locale/TZ:** enforced per manifest; deviations cause validation error.
 * **Filesystem normalization:**