diff --git a/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md b/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md
index cdc3b6946..d10747238 100644
--- a/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md
+++ b/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md
@@ -22,52 +22,52 @@ Bulk task definitions (applies to every project row below):
 | --- | --- | --- | --- | --- | --- |
 | 1 | AUDIT-0001-M | DONE | Report | Guild | src/Router/examples/Examples.Billing.Microservice/Examples.Billing.Microservice.csproj - MAINT |
 | 2 | AUDIT-0001-T | DONE | Report | Guild | src/Router/examples/Examples.Billing.Microservice/Examples.Billing.Microservice.csproj - TEST |
-| 3 | AUDIT-0001-A | DONE | Waived | Guild | src/Router/examples/Examples.Billing.Microservice/Examples.Billing.Microservice.csproj - APPLY |
+| 3 | AUDIT-0001-A | DONE | Waived (example project) | Guild | src/Router/examples/Examples.Billing.Microservice/Examples.Billing.Microservice.csproj - APPLY |
 | 4 | AUDIT-0002-M | DONE | Report | Guild | src/Router/examples/Examples.Gateway/Examples.Gateway.csproj - MAINT |
 | 5 | AUDIT-0002-T | DONE | Report | Guild | src/Router/examples/Examples.Gateway/Examples.Gateway.csproj - TEST |
-| 6 | AUDIT-0002-A | DONE | Waived | Guild | src/Router/examples/Examples.Gateway/Examples.Gateway.csproj - APPLY |
+| 6 | AUDIT-0002-A | DONE | Waived (example project) | Guild | src/Router/examples/Examples.Gateway/Examples.Gateway.csproj - APPLY |
 | 7 | AUDIT-0003-M | DONE | Report | Guild | src/Router/examples/Examples.Inventory.Microservice/Examples.Inventory.Microservice.csproj - MAINT |
 | 8 | AUDIT-0003-T | DONE | Report | Guild | src/Router/examples/Examples.Inventory.Microservice/Examples.Inventory.Microservice.csproj - TEST |
-| 9 | AUDIT-0003-A | DONE | Waived | Guild | src/Router/examples/Examples.Inventory.Microservice/Examples.Inventory.Microservice.csproj - APPLY |
+| 9 | AUDIT-0003-A | DONE | Waived (example project) | Guild | src/Router/examples/Examples.Inventory.Microservice/Examples.Inventory.Microservice.csproj - APPLY |
 | 10 | AUDIT-0004-M | DONE | Report | Guild | src/Router/examples/Examples.MultiTransport.Gateway/Examples.MultiTransport.Gateway.csproj - MAINT |
 | 11 | AUDIT-0004-T | DONE | Report | Guild | src/Router/examples/Examples.MultiTransport.Gateway/Examples.MultiTransport.Gateway.csproj - TEST |
-| 12 | AUDIT-0004-A | DONE | Waived | Guild | src/Router/examples/Examples.MultiTransport.Gateway/Examples.MultiTransport.Gateway.csproj - APPLY |
+| 12 | AUDIT-0004-A | DONE | Waived (example project) | Guild | src/Router/examples/Examples.MultiTransport.Gateway/Examples.MultiTransport.Gateway.csproj - APPLY |
 | 13 | AUDIT-0005-M | DONE | Report | Guild | src/Router/examples/Examples.NotificationService/Examples.NotificationService.csproj - MAINT |
 | 14 | AUDIT-0005-T | DONE | Report | Guild | src/Router/examples/Examples.NotificationService/Examples.NotificationService.csproj - TEST |
-| 15 | AUDIT-0005-A | DONE | Waived | Guild | src/Router/examples/Examples.NotificationService/Examples.NotificationService.csproj - APPLY |
+| 15 | AUDIT-0005-A | DONE | Waived (example project) | Guild | src/Router/examples/Examples.NotificationService/Examples.NotificationService.csproj - APPLY |
 | 16 | AUDIT-0006-M | DONE | Report | Guild | src/Router/examples/Examples.OrderService/Examples.OrderService.csproj - MAINT |
 | 17 | AUDIT-0006-T | DONE | Report | Guild | src/Router/examples/Examples.OrderService/Examples.OrderService.csproj - TEST |
-| 18 | AUDIT-0006-A | DONE | Waived | Guild | src/Router/examples/Examples.OrderService/Examples.OrderService.csproj - APPLY |
+| 18 | AUDIT-0006-A | DONE | Waived (example project) | Guild | src/Router/examples/Examples.OrderService/Examples.OrderService.csproj - APPLY |
 | 19 | AUDIT-0007-M | DONE | Report | Guild | src/Tools/FixtureUpdater/FixtureUpdater.csproj - MAINT |
 | 20 | AUDIT-0007-T | DONE | Report | Guild | src/Tools/FixtureUpdater/FixtureUpdater.csproj - TEST |
-| 21 | AUDIT-0007-A | TODO | Approval | Guild | src/Tools/FixtureUpdater/FixtureUpdater.csproj - APPLY |
+| 21 | AUDIT-0007-A | DONE | Applied + tests | Guild | src/Tools/FixtureUpdater/FixtureUpdater.csproj - APPLY |
 | 22 | AUDIT-0008-M | DONE | Report | Guild | src/Tools/LanguageAnalyzerSmoke/LanguageAnalyzerSmoke.csproj - MAINT |
 | 23 | AUDIT-0008-T | DONE | Report | Guild | src/Tools/LanguageAnalyzerSmoke/LanguageAnalyzerSmoke.csproj - TEST |
-| 24 | AUDIT-0008-A | TODO | Approval | Guild | src/Tools/LanguageAnalyzerSmoke/LanguageAnalyzerSmoke.csproj - APPLY |
+| 24 | AUDIT-0008-A | DONE | Applied + tests | Guild | src/Tools/LanguageAnalyzerSmoke/LanguageAnalyzerSmoke.csproj - APPLY |
 | 25 | AUDIT-0009-M | DONE | Report | Guild | src/Findings/StellaOps.Findings.Ledger/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - MAINT |
 | 26 | AUDIT-0009-T | DONE | Report | Guild | src/Findings/StellaOps.Findings.Ledger/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - TEST |
-| 27 | AUDIT-0009-A | TODO | Approval | Guild | src/Findings/StellaOps.Findings.Ledger/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - APPLY |
+| 27 | AUDIT-0009-A | BLOCKED | Missing docs/modules/findings-ledger/implementation_plan.md required by AGENTS | Guild | src/Findings/StellaOps.Findings.Ledger/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - APPLY |
 | 28 | AUDIT-0010-M | DONE | Report | Guild | src/Findings/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - MAINT |
 | 29 | AUDIT-0010-T | DONE | Report | Guild | src/Findings/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - TEST |
-| 30 | AUDIT-0010-A | TODO | Approval | Guild | src/Findings/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - APPLY |
+| 30 | AUDIT-0010-A | BLOCKED | Missing docs/modules/findings-ledger/implementation_plan.md required by AGENTS | Guild | src/Findings/tools/LedgerReplayHarness/LedgerReplayHarness.csproj - APPLY |
 | 31 | AUDIT-0011-M | DONE | Report | Guild | src/Tools/NotifySmokeCheck/NotifySmokeCheck.csproj - MAINT |
 | 32 | AUDIT-0011-T | DONE | Report | Guild | src/Tools/NotifySmokeCheck/NotifySmokeCheck.csproj - TEST |
-| 33 | AUDIT-0011-A | TODO | Approval | Guild | src/Tools/NotifySmokeCheck/NotifySmokeCheck.csproj - APPLY |
+| 33 | AUDIT-0011-A | DONE | Applied + tests | Guild | src/Tools/NotifySmokeCheck/NotifySmokeCheck.csproj - APPLY |
 | 34 | AUDIT-0012-M | DONE | Report | Guild | src/Tools/PolicyDslValidator/PolicyDslValidator.csproj - MAINT |
 | 35 | AUDIT-0012-T | DONE | Report | Guild | src/Tools/PolicyDslValidator/PolicyDslValidator.csproj - TEST |
-| 36 | AUDIT-0012-A | TODO | Approval | Guild | src/Tools/PolicyDslValidator/PolicyDslValidator.csproj - APPLY |
+| 36 | AUDIT-0012-A | DONE | Applied + tests | Guild | src/Tools/PolicyDslValidator/PolicyDslValidator.csproj - APPLY |
 | 37 | AUDIT-0013-M | DONE | Report | Guild | src/Tools/PolicySchemaExporter/PolicySchemaExporter.csproj - MAINT |
 | 38 | AUDIT-0013-T | DONE | Report | Guild | src/Tools/PolicySchemaExporter/PolicySchemaExporter.csproj - TEST |
-| 39 | AUDIT-0013-A | TODO | Approval | Guild | src/Tools/PolicySchemaExporter/PolicySchemaExporter.csproj - APPLY |
+| 39 | AUDIT-0013-A | DONE | Applied + tests | Guild | src/Tools/PolicySchemaExporter/PolicySchemaExporter.csproj - APPLY |
 | 40 | AUDIT-0014-M | DONE | Report | Guild | src/Tools/PolicySimulationSmoke/PolicySimulationSmoke.csproj - MAINT |
 | 41 | AUDIT-0014-T | DONE | Report | Guild | src/Tools/PolicySimulationSmoke/PolicySimulationSmoke.csproj - TEST |
-| 42 | AUDIT-0014-A | TODO | Approval | Guild | src/Tools/PolicySimulationSmoke/PolicySimulationSmoke.csproj - APPLY |
+| 42 | AUDIT-0014-A | DONE | Applied + tests | Guild | src/Tools/PolicySimulationSmoke/PolicySimulationSmoke.csproj - APPLY |
 | 43 | AUDIT-0015-M | DONE | Report | Guild | src/Tools/RustFsMigrator/RustFsMigrator.csproj - MAINT |
 | 44 | AUDIT-0015-T | DONE | Report | Guild | src/Tools/RustFsMigrator/RustFsMigrator.csproj - TEST |
-| 45 | AUDIT-0015-A | TODO | Approval | Guild | src/Tools/RustFsMigrator/RustFsMigrator.csproj - APPLY |
+| 45 | AUDIT-0015-A | DONE | Applied + tests | Guild | src/Tools/RustFsMigrator/RustFsMigrator.csproj - APPLY |
 | 46 | AUDIT-0016-M | DONE | Report | Guild | src/Scheduler/Tools/Scheduler.Backfill/Scheduler.Backfill.csproj - MAINT |
 | 47 | AUDIT-0016-T | DONE | Report | Guild | src/Scheduler/Tools/Scheduler.Backfill/Scheduler.Backfill.csproj - TEST |
-| 48 | AUDIT-0016-A | TODO | Approval | Guild | src/Scheduler/Tools/Scheduler.Backfill/Scheduler.Backfill.csproj - APPLY |
+| 48 | AUDIT-0016-A | DONE | Applied + tests | Guild | src/Scheduler/Tools/Scheduler.Backfill/Scheduler.Backfill.csproj - APPLY |
 | 49 | AUDIT-0017-M | DONE | Report | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI/StellaOps.AdvisoryAI.csproj - MAINT |
 | 50 | AUDIT-0017-T | DONE | Report | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI/StellaOps.AdvisoryAI.csproj - TEST |
 | 51 | AUDIT-0017-A | TODO | Approval | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI/StellaOps.AdvisoryAI.csproj - APPLY |
@@ -76,7 +76,7 @@ Bulk task definitions (applies to every project row below):
 | 54 | AUDIT-0018-A | TODO | Approval | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI.Hosting/StellaOps.AdvisoryAI.Hosting.csproj - APPLY |
 | 55 | AUDIT-0019-M | DONE | Report | Guild | src/AdvisoryAI/__Tests/StellaOps.AdvisoryAI.Tests/StellaOps.AdvisoryAI.Tests.csproj - MAINT |
 | 56 | AUDIT-0019-T | DONE | Report | Guild | src/AdvisoryAI/__Tests/StellaOps.AdvisoryAI.Tests/StellaOps.AdvisoryAI.Tests.csproj - TEST |
-| 57 | AUDIT-0019-A | TODO | Approval | Guild | src/AdvisoryAI/__Tests/StellaOps.AdvisoryAI.Tests/StellaOps.AdvisoryAI.Tests.csproj - APPLY |
+| 57 | AUDIT-0019-A | DONE | Waived (test project) | Guild | src/AdvisoryAI/__Tests/StellaOps.AdvisoryAI.Tests/StellaOps.AdvisoryAI.Tests.csproj - APPLY |
 | 58 | AUDIT-0020-M | DONE | Report | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI.WebService/StellaOps.AdvisoryAI.WebService.csproj - MAINT |
 | 59 | AUDIT-0020-T | DONE | Report | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI.WebService/StellaOps.AdvisoryAI.WebService.csproj - TEST |
 | 60 | AUDIT-0020-A | TODO | Approval | Guild | src/AdvisoryAI/StellaOps.AdvisoryAI.WebService/StellaOps.AdvisoryAI.WebService.csproj - APPLY |
@@ -88,25 +88,25 @@ Bulk task definitions (applies to every project row below):
 | 66 | AUDIT-0022-A | TODO | Approval | Guild | src/AirGap/__Libraries/StellaOps.AirGap.Bundle/StellaOps.AirGap.Bundle.csproj - APPLY |
 | 67 | AUDIT-0023-M | DONE | Report | Guild | src/AirGap/__Libraries/__Tests/StellaOps.AirGap.Bundle.Tests/StellaOps.AirGap.Bundle.Tests.csproj - MAINT |
 | 68 | AUDIT-0023-T | DONE | Report | Guild | src/AirGap/__Libraries/__Tests/StellaOps.AirGap.Bundle.Tests/StellaOps.AirGap.Bundle.Tests.csproj - TEST |
-| 69 | AUDIT-0023-A | TODO | Approval | Guild | src/AirGap/__Libraries/__Tests/StellaOps.AirGap.Bundle.Tests/StellaOps.AirGap.Bundle.Tests.csproj - APPLY |
+| 69 | AUDIT-0023-A | DONE | Waived (test project) | Guild | src/AirGap/__Libraries/__Tests/StellaOps.AirGap.Bundle.Tests/StellaOps.AirGap.Bundle.Tests.csproj - APPLY |
 | 70 | AUDIT-0024-M | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Controller/StellaOps.AirGap.Controller.csproj - MAINT |
 | 71 | AUDIT-0024-T | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Controller/StellaOps.AirGap.Controller.csproj - TEST |
 | 72 | AUDIT-0024-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Controller/StellaOps.AirGap.Controller.csproj - APPLY |
 | 73 | AUDIT-0025-M | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Controller.Tests/StellaOps.AirGap.Controller.Tests.csproj - MAINT |
 | 74 | AUDIT-0025-T | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Controller.Tests/StellaOps.AirGap.Controller.Tests.csproj - TEST |
-| 75 | AUDIT-0025-A | TODO | Approval | Guild | src/AirGap/__Tests/StellaOps.AirGap.Controller.Tests/StellaOps.AirGap.Controller.Tests.csproj - APPLY |
+| 75 | AUDIT-0025-A | DONE | Waived (test project) | Guild | src/AirGap/__Tests/StellaOps.AirGap.Controller.Tests/StellaOps.AirGap.Controller.Tests.csproj - APPLY |
 | 76 | AUDIT-0026-M | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Importer/StellaOps.AirGap.Importer.csproj - MAINT |
 | 77 | AUDIT-0026-T | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Importer/StellaOps.AirGap.Importer.csproj - TEST |
 | 78 | AUDIT-0026-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Importer/StellaOps.AirGap.Importer.csproj - APPLY |
 | 79 | AUDIT-0027-M | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Importer.Tests/StellaOps.AirGap.Importer.Tests.csproj - MAINT |
 | 80 | AUDIT-0027-T | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Importer.Tests/StellaOps.AirGap.Importer.Tests.csproj - TEST |
-| 81 | AUDIT-0027-A | TODO | Approval | Guild | src/AirGap/__Tests/StellaOps.AirGap.Importer.Tests/StellaOps.AirGap.Importer.Tests.csproj - APPLY |
+| 81 | AUDIT-0027-A | DONE | Waived (test project) | Guild | src/AirGap/__Tests/StellaOps.AirGap.Importer.Tests/StellaOps.AirGap.Importer.Tests.csproj - APPLY |
 | 82 | AUDIT-0028-M | DONE | Report | Guild | src/AirGap/__Libraries/StellaOps.AirGap.Persistence/StellaOps.AirGap.Persistence.csproj - MAINT |
 | 83 | AUDIT-0028-T | DONE | Report | Guild | src/AirGap/__Libraries/StellaOps.AirGap.Persistence/StellaOps.AirGap.Persistence.csproj - TEST |
 | 84 | AUDIT-0028-A | TODO | Approval | Guild | src/AirGap/__Libraries/StellaOps.AirGap.Persistence/StellaOps.AirGap.Persistence.csproj - APPLY |
 | 85 | AUDIT-0029-M | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Persistence.Tests/StellaOps.AirGap.Persistence.Tests.csproj - MAINT |
 | 86 | AUDIT-0029-T | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Persistence.Tests/StellaOps.AirGap.Persistence.Tests.csproj - TEST |
-| 87 | AUDIT-0029-A | TODO | Approval | Guild | src/AirGap/__Tests/StellaOps.AirGap.Persistence.Tests/StellaOps.AirGap.Persistence.Tests.csproj - APPLY |
+| 87 | AUDIT-0029-A | DONE | Waived (test project) | Guild | src/AirGap/__Tests/StellaOps.AirGap.Persistence.Tests/StellaOps.AirGap.Persistence.Tests.csproj - APPLY |
 | 88 | AUDIT-0030-M | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.csproj - MAINT |
 | 89 | AUDIT-0030-T | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.csproj - TEST |
 | 90 | AUDIT-0030-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.csproj - APPLY |
@@ -115,16 +115,16 @@ Bulk task definitions (applies to every project row below):
 | 93 | AUDIT-0031-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers/StellaOps.AirGap.Policy.Analyzers.csproj - APPLY |
 | 94 | AUDIT-0032-M | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers.Tests/StellaOps.AirGap.Policy.Analyzers.Tests.csproj - MAINT |
 | 95 | AUDIT-0032-T | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers.Tests/StellaOps.AirGap.Policy.Analyzers.Tests.csproj - TEST |
-| 96 | AUDIT-0032-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers.Tests/StellaOps.AirGap.Policy.Analyzers.Tests.csproj - APPLY |
+| 96 | AUDIT-0032-A | DONE | Waived (test project) | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers.Tests/StellaOps.AirGap.Policy.Analyzers.Tests.csproj - APPLY |
 | 97 | AUDIT-0033-M | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Tests/StellaOps.AirGap.Policy.Tests.csproj - MAINT |
 | 98 | AUDIT-0033-T | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Tests/StellaOps.AirGap.Policy.Tests.csproj - TEST |
-| 99 | AUDIT-0033-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Tests/StellaOps.AirGap.Policy.Tests.csproj - APPLY |
+| 99 | AUDIT-0033-A | DONE | Waived (test project) | Guild | src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Tests/StellaOps.AirGap.Policy.Tests.csproj - APPLY |
 | 100 | AUDIT-0034-M | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Time/StellaOps.AirGap.Time.csproj - MAINT |
 | 101 | AUDIT-0034-T | DONE | Report | Guild | src/AirGap/StellaOps.AirGap.Time/StellaOps.AirGap.Time.csproj - TEST |
 | 102 | AUDIT-0034-A | TODO | Approval | Guild | src/AirGap/StellaOps.AirGap.Time/StellaOps.AirGap.Time.csproj - APPLY |
 | 103 | AUDIT-0035-M | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Time.Tests/StellaOps.AirGap.Time.Tests.csproj - MAINT |
 | 104 | AUDIT-0035-T | DONE | Report | Guild | src/AirGap/__Tests/StellaOps.AirGap.Time.Tests/StellaOps.AirGap.Time.Tests.csproj - TEST |
-| 105 | AUDIT-0035-A | TODO | Approval | Guild | src/AirGap/__Tests/StellaOps.AirGap.Time.Tests/StellaOps.AirGap.Time.Tests.csproj - APPLY |
+| 105 | AUDIT-0035-A | DONE | Waived (test project) | Guild | src/AirGap/__Tests/StellaOps.AirGap.Time.Tests/StellaOps.AirGap.Time.Tests.csproj - APPLY |
 | 106 | AUDIT-0036-M | DONE | Report | Guild | src/Aoc/__Libraries/StellaOps.Aoc/StellaOps.Aoc.csproj - MAINT |
 | 107 | AUDIT-0036-T | DONE | Report | Guild | src/Aoc/__Libraries/StellaOps.Aoc/StellaOps.Aoc.csproj - TEST |
 | 108 | AUDIT-0036-A | TODO | Approval | Guild | src/Aoc/__Libraries/StellaOps.Aoc/StellaOps.Aoc.csproj - APPLY |
@@ -133,55 +133,55 @@ Bulk task definitions (applies to every project row below):
 | 111 | AUDIT-0037-A | TODO | Approval | Guild | src/Aoc/__Analyzers/StellaOps.Aoc.Analyzers/StellaOps.Aoc.Analyzers.csproj - APPLY |
 | 112 | AUDIT-0038-M | DONE | Report | Guild | src/Aoc/__Tests/StellaOps.Aoc.Analyzers.Tests/StellaOps.Aoc.Analyzers.Tests.csproj - MAINT |
 | 113 | AUDIT-0038-T | DONE | Report | Guild | src/Aoc/__Tests/StellaOps.Aoc.Analyzers.Tests/StellaOps.Aoc.Analyzers.Tests.csproj - TEST |
-| 114 | AUDIT-0038-A | TODO | Approval | Guild | src/Aoc/__Tests/StellaOps.Aoc.Analyzers.Tests/StellaOps.Aoc.Analyzers.Tests.csproj - APPLY |
+| 114 | AUDIT-0038-A | DONE | Waived (test project) | Guild | src/Aoc/__Tests/StellaOps.Aoc.Analyzers.Tests/StellaOps.Aoc.Analyzers.Tests.csproj - APPLY |
 | 115 | AUDIT-0039-M | DONE | Report | Guild | src/Aoc/__Libraries/StellaOps.Aoc.AspNetCore/StellaOps.Aoc.AspNetCore.csproj - MAINT |
 | 116 | AUDIT-0039-T | DONE | Report | Guild | src/Aoc/__Libraries/StellaOps.Aoc.AspNetCore/StellaOps.Aoc.AspNetCore.csproj - TEST |
 | 117 | AUDIT-0039-A | TODO | Approval | Guild | src/Aoc/__Libraries/StellaOps.Aoc.AspNetCore/StellaOps.Aoc.AspNetCore.csproj - APPLY |
 | 118 | AUDIT-0040-M | DONE | Report | Guild | src/Aoc/__Tests/StellaOps.Aoc.AspNetCore.Tests/StellaOps.Aoc.AspNetCore.Tests.csproj - MAINT |
 | 119 | AUDIT-0040-T | DONE | Report | Guild | src/Aoc/__Tests/StellaOps.Aoc.AspNetCore.Tests/StellaOps.Aoc.AspNetCore.Tests.csproj - TEST |
-| 120 | AUDIT-0040-A | TODO | Approval | Guild | src/Aoc/__Tests/StellaOps.Aoc.AspNetCore.Tests/StellaOps.Aoc.AspNetCore.Tests.csproj - APPLY |
+| 120 | AUDIT-0040-A | DONE | Waived (test project) | Guild | src/Aoc/__Tests/StellaOps.Aoc.AspNetCore.Tests/StellaOps.Aoc.AspNetCore.Tests.csproj - APPLY |
 | 121 | AUDIT-0041-M | DONE | Report | Guild | src/Aoc/__Tests/StellaOps.Aoc.Tests/StellaOps.Aoc.Tests.csproj - MAINT |
 | 122 | AUDIT-0041-T | DONE | Report | Guild | src/Aoc/__Tests/StellaOps.Aoc.Tests/StellaOps.Aoc.Tests.csproj - TEST |
-| 123 | AUDIT-0041-A | TODO | Approval | Guild | src/Aoc/__Tests/StellaOps.Aoc.Tests/StellaOps.Aoc.Tests.csproj - APPLY |
+| 123 | AUDIT-0041-A | DONE | Waived (test project) | Guild | src/Aoc/__Tests/StellaOps.Aoc.Tests/StellaOps.Aoc.Tests.csproj - APPLY |
 | 124 | AUDIT-0042-M | DONE | Report | Guild | src/__Tests/architecture/StellaOps.Architecture.Tests/StellaOps.Architecture.Tests.csproj - MAINT |
 | 125 | AUDIT-0042-T | DONE | Report | Guild | src/__Tests/architecture/StellaOps.Architecture.Tests/StellaOps.Architecture.Tests.csproj - TEST |
-| 126 | AUDIT-0042-A | TODO | Approval | Guild | src/__Tests/architecture/StellaOps.Architecture.Tests/StellaOps.Architecture.Tests.csproj - APPLY |
+| 126 | AUDIT-0042-A | DONE | Waived (test project) | Guild | src/__Tests/architecture/StellaOps.Architecture.Tests/StellaOps.Architecture.Tests.csproj - APPLY |
 | 127 | AUDIT-0043-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestation/StellaOps.Attestation.csproj - MAINT |
 | 128 | AUDIT-0043-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestation/StellaOps.Attestation.csproj - TEST |
 | 129 | AUDIT-0043-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestation/StellaOps.Attestation.csproj - APPLY |
 | 130 | AUDIT-0044-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestation.Tests/StellaOps.Attestation.Tests.csproj - MAINT |
 | 131 | AUDIT-0044-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestation.Tests/StellaOps.Attestation.Tests.csproj - TEST |
-| 132 | AUDIT-0044-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestation.Tests/StellaOps.Attestation.Tests.csproj - APPLY |
+| 132 | AUDIT-0044-A | DONE | Waived (test project) | Guild | src/Attestor/StellaOps.Attestation.Tests/StellaOps.Attestation.Tests.csproj - APPLY |
 | 133 | AUDIT-0045-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Bundle/StellaOps.Attestor.Bundle.csproj - MAINT |
 | 134 | AUDIT-0045-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Bundle/StellaOps.Attestor.Bundle.csproj - TEST |
 | 135 | AUDIT-0045-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Bundle/StellaOps.Attestor.Bundle.csproj - APPLY |
 | 136 | AUDIT-0046-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundle.Tests/StellaOps.Attestor.Bundle.Tests.csproj - MAINT |
 | 137 | AUDIT-0046-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundle.Tests/StellaOps.Attestor.Bundle.Tests.csproj - TEST |
-| 138 | AUDIT-0046-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundle.Tests/StellaOps.Attestor.Bundle.Tests.csproj - APPLY |
+| 138 | AUDIT-0046-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundle.Tests/StellaOps.Attestor.Bundle.Tests.csproj - APPLY |
 | 139 | AUDIT-0047-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Bundling/StellaOps.Attestor.Bundling.csproj - MAINT |
 | 140 | AUDIT-0047-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Bundling/StellaOps.Attestor.Bundling.csproj - TEST |
 | 141 | AUDIT-0047-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Bundling/StellaOps.Attestor.Bundling.csproj - APPLY |
 | 142 | AUDIT-0048-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundling.Tests/StellaOps.Attestor.Bundling.Tests.csproj - MAINT |
 | 143 | AUDIT-0048-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundling.Tests/StellaOps.Attestor.Bundling.Tests.csproj - TEST |
-| 144 | AUDIT-0048-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundling.Tests/StellaOps.Attestor.Bundling.Tests.csproj - APPLY |
+| 144 | AUDIT-0048-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.Bundling.Tests/StellaOps.Attestor.Bundling.Tests.csproj - APPLY |
 | 145 | AUDIT-0049-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core/StellaOps.Attestor.Core.csproj - MAINT |
 | 146 | AUDIT-0049-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core/StellaOps.Attestor.Core.csproj - TEST |
 | 147 | AUDIT-0049-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core/StellaOps.Attestor.Core.csproj - APPLY |
 | 148 | AUDIT-0050-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core.Tests/StellaOps.Attestor.Core.Tests.csproj - MAINT |
 | 149 | AUDIT-0050-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core.Tests/StellaOps.Attestor.Core.Tests.csproj - TEST |
-| 150 | AUDIT-0050-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core.Tests/StellaOps.Attestor.Core.Tests.csproj - APPLY |
+| 150 | AUDIT-0050-A | DONE | Waived (test project) | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core.Tests/StellaOps.Attestor.Core.Tests.csproj - APPLY |
 | 151 | AUDIT-0051-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Envelope/StellaOps.Attestor.Envelope.csproj - MAINT |
 | 152 | AUDIT-0051-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Envelope/StellaOps.Attestor.Envelope.csproj - TEST |
 | 153 | AUDIT-0051-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor.Envelope/StellaOps.Attestor.Envelope.csproj - APPLY |
 | 154 | AUDIT-0052-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Envelope/__Tests/StellaOps.Attestor.Envelope.Tests/StellaOps.Attestor.Envelope.Tests.csproj - MAINT |
 | 155 | AUDIT-0052-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Envelope/__Tests/StellaOps.Attestor.Envelope.Tests/StellaOps.Attestor.Envelope.Tests.csproj - TEST |
-| 156 | AUDIT-0052-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor.Envelope/__Tests/StellaOps.Attestor.Envelope.Tests/StellaOps.Attestor.Envelope.Tests.csproj - APPLY |
+| 156 | AUDIT-0052-A | DONE | Waived (test project) | Guild | src/Attestor/StellaOps.Attestor.Envelope/__Tests/StellaOps.Attestor.Envelope.Tests/StellaOps.Attestor.Envelope.Tests.csproj - APPLY |
 | 157 | AUDIT-0053-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.GraphRoot/StellaOps.Attestor.GraphRoot.csproj - MAINT |
 | 158 | AUDIT-0053-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.GraphRoot/StellaOps.Attestor.GraphRoot.csproj - TEST |
 | 159 | AUDIT-0053-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.GraphRoot/StellaOps.Attestor.GraphRoot.csproj - APPLY |
 | 160 | AUDIT-0054-M | DONE | Report | Guild | src/Attestor/__Libraries/__Tests/StellaOps.Attestor.GraphRoot.Tests/StellaOps.Attestor.GraphRoot.Tests.csproj - MAINT |
 | 161 | AUDIT-0054-T | DONE | Report | Guild | src/Attestor/__Libraries/__Tests/StellaOps.Attestor.GraphRoot.Tests/StellaOps.Attestor.GraphRoot.Tests.csproj - TEST |
-| 162 | AUDIT-0054-A | TODO | Approval | Guild | src/Attestor/__Libraries/__Tests/StellaOps.Attestor.GraphRoot.Tests/StellaOps.Attestor.GraphRoot.Tests.csproj - APPLY |
+| 162 | AUDIT-0054-A | DONE | Waived (test project) | Guild | src/Attestor/__Libraries/__Tests/StellaOps.Attestor.GraphRoot.Tests/StellaOps.Attestor.GraphRoot.Tests.csproj - APPLY |
 | 163 | AUDIT-0055-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Infrastructure/StellaOps.Attestor.Infrastructure.csproj - MAINT |
 | 164 | AUDIT-0055-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Infrastructure/StellaOps.Attestor.Infrastructure.csproj - TEST |
 | 165 | AUDIT-0055-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Infrastructure/StellaOps.Attestor.Infrastructure.csproj - APPLY |
@@ -190,46 +190,46 @@ Bulk task definitions (applies to every project row below):
 | 168 | AUDIT-0056-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Oci/StellaOps.Attestor.Oci.csproj - APPLY |
 | 169 | AUDIT-0057-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Oci.Tests/StellaOps.Attestor.Oci.Tests.csproj - MAINT |
 | 170 | AUDIT-0057-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Oci.Tests/StellaOps.Attestor.Oci.Tests.csproj - TEST |
-| 171 | AUDIT-0057-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.Oci.Tests/StellaOps.Attestor.Oci.Tests.csproj - APPLY |
+| 171 | AUDIT-0057-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.Oci.Tests/StellaOps.Attestor.Oci.Tests.csproj - APPLY |
 | 172 | AUDIT-0058-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Offline/StellaOps.Attestor.Offline.csproj - MAINT |
 | 173 | AUDIT-0058-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Offline/StellaOps.Attestor.Offline.csproj - TEST |
 | 174 | AUDIT-0058-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Offline/StellaOps.Attestor.Offline.csproj - APPLY |
 | 175 | AUDIT-0059-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Offline.Tests/StellaOps.Attestor.Offline.Tests.csproj - MAINT |
 | 176 | AUDIT-0059-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Offline.Tests/StellaOps.Attestor.Offline.Tests.csproj - TEST |
-| 177 | AUDIT-0059-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.Offline.Tests/StellaOps.Attestor.Offline.Tests.csproj - APPLY |
+| 177 | AUDIT-0059-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.Offline.Tests/StellaOps.Attestor.Offline.Tests.csproj - APPLY |
 | 178 | AUDIT-0060-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Persistence/StellaOps.Attestor.Persistence.csproj - MAINT |
 | 179 | AUDIT-0060-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Persistence/StellaOps.Attestor.Persistence.csproj - TEST |
 | 180 | AUDIT-0060-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.Persistence/StellaOps.Attestor.Persistence.csproj - APPLY |
 | 181 | AUDIT-0061-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Persistence.Tests/StellaOps.Attestor.Persistence.Tests.csproj - MAINT |
 | 182 | AUDIT-0061-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Persistence.Tests/StellaOps.Attestor.Persistence.Tests.csproj - TEST |
-| 183 | AUDIT-0061-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.Persistence.Tests/StellaOps.Attestor.Persistence.Tests.csproj - APPLY |
+| 183 | AUDIT-0061-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.Persistence.Tests/StellaOps.Attestor.Persistence.Tests.csproj - APPLY |
 | 184 | AUDIT-0062-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/StellaOps.Attestor.ProofChain.csproj - MAINT |
 | 185 | AUDIT-0062-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/StellaOps.Attestor.ProofChain.csproj - TEST |
 | 186 | AUDIT-0062-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/StellaOps.Attestor.ProofChain.csproj - APPLY |
 | 187 | AUDIT-0063-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/StellaOps.Attestor.ProofChain.Tests.csproj - MAINT |
 | 188 | AUDIT-0063-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/StellaOps.Attestor.ProofChain.Tests.csproj - TEST |
-| 189 | AUDIT-0063-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/StellaOps.Attestor.ProofChain.Tests.csproj - APPLY |
+| 189 | AUDIT-0063-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/StellaOps.Attestor.ProofChain.Tests.csproj - APPLY |
 | 190 | AUDIT-0064-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/StellaOps.Attestor.StandardPredicates.csproj - MAINT |
 | 191 | AUDIT-0064-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/StellaOps.Attestor.StandardPredicates.csproj - TEST |
 | 192 | AUDIT-0064-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/StellaOps.Attestor.StandardPredicates.csproj - APPLY |
 | 193 | AUDIT-0065-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/StellaOps.Attestor.StandardPredicates.Tests.csproj - MAINT |
 | 194 | AUDIT-0065-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/StellaOps.Attestor.StandardPredicates.Tests.csproj - TEST |
-| 195 | AUDIT-0065-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/StellaOps.Attestor.StandardPredicates.Tests.csproj - APPLY |
+| 195 | AUDIT-0065-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/StellaOps.Attestor.StandardPredicates.Tests.csproj - APPLY |
 | 196 | AUDIT-0066-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Tests/StellaOps.Attestor.Tests.csproj - MAINT |
 | 197 | AUDIT-0066-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Tests/StellaOps.Attestor.Tests.csproj - TEST |
-| 198 | AUDIT-0066-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Tests/StellaOps.Attestor.Tests.csproj - APPLY |
+| 198 | AUDIT-0066-A | DONE | Waived (test project) | Guild | src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Tests/StellaOps.Attestor.Tests.csproj - APPLY |
 | 199 | AUDIT-0067-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/StellaOps.Attestor.TrustVerdict.csproj - MAINT |
 | 200 | AUDIT-0067-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/StellaOps.Attestor.TrustVerdict.csproj - TEST |
 | 201 | AUDIT-0067-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/StellaOps.Attestor.TrustVerdict.csproj - APPLY |
 | 202 | AUDIT-0068-M | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/StellaOps.Attestor.TrustVerdict.Tests.csproj - MAINT |
 | 203 | AUDIT-0068-T | DONE | Report | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/StellaOps.Attestor.TrustVerdict.Tests.csproj - TEST |
-| 204 | AUDIT-0068-A | TODO | Approval | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/StellaOps.Attestor.TrustVerdict.Tests.csproj - APPLY |
+| 204 | AUDIT-0068-A | DONE | Waived (test project) | Guild | src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/StellaOps.Attestor.TrustVerdict.Tests.csproj - APPLY |
 | 205 | AUDIT-0069-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Types/Tools/StellaOps.Attestor.Types.Generator/StellaOps.Attestor.Types.Generator.csproj - MAINT |
 | 206 | AUDIT-0069-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Types/Tools/StellaOps.Attestor.Types.Generator/StellaOps.Attestor.Types.Generator.csproj - TEST |
 | 207 | AUDIT-0069-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor.Types/Tools/StellaOps.Attestor.Types.Generator/StellaOps.Attestor.Types.Generator.csproj - APPLY |
 | 208 | AUDIT-0070-M | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Types.Tests/StellaOps.Attestor.Types.Tests.csproj - MAINT |
 | 209 | AUDIT-0070-T | DONE | Report | Guild | src/Attestor/__Tests/StellaOps.Attestor.Types.Tests/StellaOps.Attestor.Types.Tests.csproj - TEST |
-| 210 | AUDIT-0070-A | TODO | Approval | Guild | src/Attestor/__Tests/StellaOps.Attestor.Types.Tests/StellaOps.Attestor.Types.Tests.csproj - APPLY |
+| 210 | AUDIT-0070-A | DONE | Waived (test project) | Guild | src/Attestor/__Tests/StellaOps.Attestor.Types.Tests/StellaOps.Attestor.Types.Tests.csproj - APPLY |
 | 211 | AUDIT-0071-M | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Verify/StellaOps.Attestor.Verify.csproj - MAINT |
 | 212 | AUDIT-0071-T | DONE | Report | Guild | src/Attestor/StellaOps.Attestor.Verify/StellaOps.Attestor.Verify.csproj - TEST |
 | 213 | AUDIT-0071-A | TODO | Approval | Guild | src/Attestor/StellaOps.Attestor.Verify/StellaOps.Attestor.Verify.csproj - APPLY |
@@ -241,28 +241,28 @@ Bulk task definitions (applies to every project row below):
 | 219 | AUDIT-0073-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Audit.ReplayToken/StellaOps.Audit.ReplayToken.csproj - APPLY |
 | 220 | AUDIT-0074-M | DONE | Report | Guild | src/__Tests/StellaOps.Audit.ReplayToken.Tests/StellaOps.Audit.ReplayToken.Tests.csproj - MAINT |
 | 221 | AUDIT-0074-T | DONE | Report | Guild | src/__Tests/StellaOps.Audit.ReplayToken.Tests/StellaOps.Audit.ReplayToken.Tests.csproj - TEST |
-| 222 | AUDIT-0074-A | TODO | Approval | Guild | src/__Tests/StellaOps.Audit.ReplayToken.Tests/StellaOps.Audit.ReplayToken.Tests.csproj - APPLY |
+| 222 | AUDIT-0074-A | DONE | Waived (test project) | Guild | src/__Tests/StellaOps.Audit.ReplayToken.Tests/StellaOps.Audit.ReplayToken.Tests.csproj - APPLY |
 | 223 | AUDIT-0075-M | DONE | Report | Guild | src/__Libraries/StellaOps.AuditPack/StellaOps.AuditPack.csproj - MAINT |
 | 224 | AUDIT-0075-T | DONE | Report | Guild | src/__Libraries/StellaOps.AuditPack/StellaOps.AuditPack.csproj - TEST |
 | 225 | AUDIT-0075-A | TODO | Approval | Guild | src/__Libraries/StellaOps.AuditPack/StellaOps.AuditPack.csproj - APPLY |
 | 226 | AUDIT-0076-M | DONE | Report | Guild | src/__Libraries/__Tests/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - MAINT |
 | 227 | AUDIT-0076-T | DONE | Report | Guild | src/__Libraries/__Tests/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - TEST |
-| 228 | AUDIT-0076-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - APPLY |
+| 228 | AUDIT-0076-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - APPLY |
 | 229 | AUDIT-0077-M | DONE | Report | Guild | src/__Tests/unit/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - MAINT |
 | 230 | AUDIT-0077-T | DONE | Report | Guild | src/__Tests/unit/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - TEST |
-| 231 | AUDIT-0077-A | TODO | Approval | Guild | src/__Tests/unit/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - APPLY |
+| 231 | AUDIT-0077-A | DONE | Waived (test project) | Guild | src/__Tests/unit/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj - APPLY |
 | 232 | AUDIT-0078-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj - MAINT |
 | 233 | AUDIT-0078-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj - TEST |
 | 234 | AUDIT-0078-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj - APPLY |
 | 235 | AUDIT-0079-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj - MAINT |
 | 236 | AUDIT-0079-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj - TEST |
-| 237 | AUDIT-0079-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj - APPLY |
+| 237 | AUDIT-0079-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj - APPLY |
 | 238 | AUDIT-0080-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj - MAINT |
 | 239 | AUDIT-0080-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj - TEST |
 | 240 | AUDIT-0080-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj - APPLY |
 | 241 | AUDIT-0081-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj - MAINT |
 | 242 | AUDIT-0081-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj - TEST |
-| 243 | AUDIT-0081-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj - APPLY |
+| 243 | AUDIT-0081-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj - APPLY |
 | 244 | AUDIT-0082-M | DONE | Report | Guild | src/__Libraries/StellaOps.Auth.Security/StellaOps.Auth.Security.csproj - MAINT |
 | 245 | AUDIT-0082-T | DONE | Report | Guild | src/__Libraries/StellaOps.Auth.Security/StellaOps.Auth.Security.csproj - TEST |
 | 246 | AUDIT-0082-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Auth.Security/StellaOps.Auth.Security.csproj - APPLY |
@@ -271,7 +271,7 @@ Bulk task definitions (applies to every project row below):
 | 249 | AUDIT-0083-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOps.Auth.ServerIntegration.csproj - APPLY |
 | 250 | AUDIT-0084-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj - MAINT |
 | 251 | AUDIT-0084-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj - TEST |
-| 252 | AUDIT-0084-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj - APPLY |
+| 252 | AUDIT-0084-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj - APPLY |
 | 253 | AUDIT-0085-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj - MAINT |
 | 254 | AUDIT-0085-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj - TEST |
 | 255 | AUDIT-0085-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj - APPLY |
@@ -280,85 +280,85 @@ Bulk task definitions (applies to every project row below):
 | 258 | AUDIT-0086-A | TODO | Approval | Guild | src/Authority/__Libraries/StellaOps.Authority.Core/StellaOps.Authority.Core.csproj - APPLY |
 | 259 | AUDIT-0087-M | DONE | Report | Guild | src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj - MAINT |
 | 260 | AUDIT-0087-T | DONE | Report | Guild | src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj - TEST |
-| 261 | AUDIT-0087-A | TODO | Approval | Guild | src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj - APPLY |
+| 261 | AUDIT-0087-A | DONE | Waived (test project) | Guild | src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj - APPLY |
 | 262 | AUDIT-0088-M | DONE | Report | Guild | src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj - MAINT |
 | 263 | AUDIT-0088-T | DONE | Report | Guild | src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj - TEST |
 | 264 | AUDIT-0088-A | TODO | Approval | Guild | src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj - APPLY |
 | 265 | AUDIT-0089-M | DONE | Report | Guild | src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj - MAINT |
 | 266 | AUDIT-0089-T | DONE | Report | Guild | src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj - TEST |
-| 267 | AUDIT-0089-A | TODO | Approval | Guild | src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj - APPLY |
+| 267 | AUDIT-0089-A | DONE | Waived (test project) | Guild | src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj - APPLY |
 | 268 | AUDIT-0090-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj - MAINT |
 | 269 | AUDIT-0090-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj - TEST |
 | 270 | AUDIT-0090-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj - APPLY |
 | 271 | AUDIT-0091-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj - MAINT |
 | 272 | AUDIT-0091-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj - TEST |
-| 273 | AUDIT-0091-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj - APPLY |
+| 273 | AUDIT-0091-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj - APPLY |
 | 274 | AUDIT-0092-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj - MAINT |
 | 275 | AUDIT-0092-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj - TEST |
 | 276 | AUDIT-0092-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj - APPLY |
 | 277 | AUDIT-0093-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj - MAINT |
 | 278 | AUDIT-0093-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj - TEST |
-| 279 | AUDIT-0093-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj - APPLY |
+| 279 | AUDIT-0093-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj - APPLY |
 | 280 | AUDIT-0094-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj - MAINT |
 | 281 | AUDIT-0094-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj - TEST |
 | 282 | AUDIT-0094-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj - APPLY |
 | 283 | AUDIT-0095-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj - MAINT |
 | 284 | AUDIT-0095-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj - TEST |
-| 285 | AUDIT-0095-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj - APPLY |
+| 285 | AUDIT-0095-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj - APPLY |
 | 286 | AUDIT-0096-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj - MAINT |
 | 287 | AUDIT-0096-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj - TEST |
 | 288 | AUDIT-0096-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj - APPLY |
 | 289 | AUDIT-0097-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj - MAINT |
 | 290 | AUDIT-0097-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj - TEST |
-| 291 | AUDIT-0097-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj - APPLY |
+| 291 | AUDIT-0097-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj - APPLY |
 | 292 | AUDIT-0098-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj - MAINT |
 | 293 | AUDIT-0098-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj - TEST |
 | 294 | AUDIT-0098-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj - APPLY |
 | 295 | AUDIT-0099-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj - MAINT |
 | 296 | AUDIT-0099-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj - TEST |
-| 297 | AUDIT-0099-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj - APPLY |
+| 297 | AUDIT-0099-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj - APPLY |
 | 298 | AUDIT-0100-M | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj - MAINT |
 | 299 | AUDIT-0100-T | DONE | Report | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj - TEST |
-| 300 | AUDIT-0100-A | TODO | Approval | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj - APPLY |
+| 300 | AUDIT-0100-A | DONE | Waived (test project) | Guild | src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj - APPLY |
 | 301 | AUDIT-0101-M | DONE | Report | Guild | src/__Tests/__Benchmarks/binary-lookup/StellaOps.Bench.BinaryLookup.csproj - MAINT |
 | 302 | AUDIT-0101-T | DONE | Report | Guild | src/__Tests/__Benchmarks/binary-lookup/StellaOps.Bench.BinaryLookup.csproj - TEST |
-| 303 | AUDIT-0101-A | TODO | Approval | Guild | src/__Tests/__Benchmarks/binary-lookup/StellaOps.Bench.BinaryLookup.csproj - APPLY |
+| 303 | AUDIT-0101-A | DONE | Waived (test project) | Guild | src/__Tests/__Benchmarks/binary-lookup/StellaOps.Bench.BinaryLookup.csproj - APPLY |
 | 304 | AUDIT-0102-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge/StellaOps.Bench.LinkNotMerge.csproj - MAINT |
 | 305 | AUDIT-0102-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge/StellaOps.Bench.LinkNotMerge.csproj - TEST |
-| 306 | AUDIT-0102-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge/StellaOps.Bench.LinkNotMerge.csproj - APPLY |
+| 306 | AUDIT-0102-A | DONE | Waived (benchmark/sample project) | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge/StellaOps.Bench.LinkNotMerge.csproj - APPLY |
 | 307 | AUDIT-0103-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge.Tests/StellaOps.Bench.LinkNotMerge.Tests.csproj - MAINT |
 | 308 | AUDIT-0103-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge.Tests/StellaOps.Bench.LinkNotMerge.Tests.csproj - TEST |
-| 309 | AUDIT-0103-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge.Tests/StellaOps.Bench.LinkNotMerge.Tests.csproj - APPLY |
+| 309 | AUDIT-0103-A | DONE | Waived (test project) | Guild | src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge.Tests/StellaOps.Bench.LinkNotMerge.Tests.csproj - APPLY |
 | 310 | AUDIT-0104-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.csproj - MAINT |
 | 311 | AUDIT-0104-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.csproj - TEST |
-| 312 | AUDIT-0104-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.csproj - APPLY |
+| 312 | AUDIT-0104-A | DONE | Waived (benchmark/sample project) | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.csproj - APPLY |
 | 313 | AUDIT-0105-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.Tests/StellaOps.Bench.LinkNotMerge.Vex.Tests.csproj - MAINT |
 | 314 | AUDIT-0105-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.Tests/StellaOps.Bench.LinkNotMerge.Vex.Tests.csproj - TEST |
-| 315 | AUDIT-0105-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.Tests/StellaOps.Bench.LinkNotMerge.Vex.Tests.csproj - APPLY |
+| 315 | AUDIT-0105-A | DONE | Waived (test project) | Guild | src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.Tests/StellaOps.Bench.LinkNotMerge.Vex.Tests.csproj - APPLY |
 | 316 | AUDIT-0106-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify/StellaOps.Bench.Notify.csproj - MAINT |
 | 317 | AUDIT-0106-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify/StellaOps.Bench.Notify.csproj - TEST |
-| 318 | AUDIT-0106-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify/StellaOps.Bench.Notify.csproj - APPLY |
+| 318 | AUDIT-0106-A | DONE | Waived (benchmark/sample project) | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify/StellaOps.Bench.Notify.csproj - APPLY |
 | 319 | AUDIT-0107-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify.Tests/StellaOps.Bench.Notify.Tests.csproj - MAINT |
 | 320 | AUDIT-0107-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify.Tests/StellaOps.Bench.Notify.Tests.csproj - TEST |
-| 321 | AUDIT-0107-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify.Tests/StellaOps.Bench.Notify.Tests.csproj - APPLY |
+| 321 | AUDIT-0107-A | DONE | Waived (test project) | Guild | src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify.Tests/StellaOps.Bench.Notify.Tests.csproj - APPLY |
 | 322 | AUDIT-0108-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/PolicyEngine/StellaOps.Bench.PolicyEngine/StellaOps.Bench.PolicyEngine.csproj - MAINT |
 | 323 | AUDIT-0108-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/PolicyEngine/StellaOps.Bench.PolicyEngine/StellaOps.Bench.PolicyEngine.csproj - TEST |
-| 324 | AUDIT-0108-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/PolicyEngine/StellaOps.Bench.PolicyEngine/StellaOps.Bench.PolicyEngine.csproj - APPLY |
+| 324 | AUDIT-0108-A | DONE | Waived (benchmark/sample project) | Guild | src/Bench/StellaOps.Bench/PolicyEngine/StellaOps.Bench.PolicyEngine/StellaOps.Bench.PolicyEngine.csproj - APPLY |
 | 325 | AUDIT-0109-M | DONE | Report | Guild | src/__Tests/__Benchmarks/proof-chain/StellaOps.Bench.ProofChain.csproj - MAINT |
 | 326 | AUDIT-0109-T | DONE | Report | Guild | src/__Tests/__Benchmarks/proof-chain/StellaOps.Bench.ProofChain.csproj - TEST |
-| 327 | AUDIT-0109-A | TODO | Approval | Guild | src/__Tests/__Benchmarks/proof-chain/StellaOps.Bench.ProofChain.csproj - APPLY |
+| 327 | AUDIT-0109-A | DONE | Waived (test project) | Guild | src/__Tests/__Benchmarks/proof-chain/StellaOps.Bench.ProofChain.csproj - APPLY |
 | 328 | AUDIT-0110-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers/StellaOps.Bench.ScannerAnalyzers.csproj - MAINT |
 | 329 | AUDIT-0110-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers/StellaOps.Bench.ScannerAnalyzers.csproj - TEST |
-| 330 | AUDIT-0110-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers/StellaOps.Bench.ScannerAnalyzers.csproj - APPLY |
+| 330 | AUDIT-0110-A | DONE | Waived (benchmark/sample project) | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers/StellaOps.Bench.ScannerAnalyzers.csproj - APPLY |
 | 331 | AUDIT-0111-M | DONE | Report | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers.Tests/StellaOps.Bench.ScannerAnalyzers.Tests.csproj - MAINT |
 | 332 | AUDIT-0111-T | DONE | Report | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers.Tests/StellaOps.Bench.ScannerAnalyzers.Tests.csproj - TEST |
-| 333 | AUDIT-0111-A | TODO | Approval | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers.Tests/StellaOps.Bench.ScannerAnalyzers.Tests.csproj - APPLY |
+| 333 | AUDIT-0111-A | DONE | Waived (test project) | Guild | src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers.Tests/StellaOps.Bench.ScannerAnalyzers.Tests.csproj - APPLY |
 | 334 | AUDIT-0112-M | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Builders/StellaOps.BinaryIndex.Builders.csproj - MAINT |
 | 335 | AUDIT-0112-T | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Builders/StellaOps.BinaryIndex.Builders.csproj - TEST |
 | 336 | AUDIT-0112-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Builders/StellaOps.BinaryIndex.Builders.csproj - APPLY |
 | 337 | AUDIT-0113-M | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Builders.Tests/StellaOps.BinaryIndex.Builders.Tests.csproj - MAINT |
 | 338 | AUDIT-0113-T | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Builders.Tests/StellaOps.BinaryIndex.Builders.Tests.csproj - TEST |
-| 339 | AUDIT-0113-A | TODO | Approval | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Builders.Tests/StellaOps.BinaryIndex.Builders.Tests.csproj - APPLY |
+| 339 | AUDIT-0113-A | DONE | Waived (test project) | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Builders.Tests/StellaOps.BinaryIndex.Builders.Tests.csproj - APPLY |
 | 340 | AUDIT-0114-M | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Cache/StellaOps.BinaryIndex.Cache.csproj - MAINT |
 | 341 | AUDIT-0114-T | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Cache/StellaOps.BinaryIndex.Cache.csproj - TEST |
 | 342 | AUDIT-0114-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Cache/StellaOps.BinaryIndex.Cache.csproj - APPLY |
@@ -370,7 +370,7 @@ Bulk task definitions (applies to every project row below):
 | 348 | AUDIT-0116-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Core/StellaOps.BinaryIndex.Core.csproj - APPLY |
 | 349 | AUDIT-0117-M | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Core.Tests/StellaOps.BinaryIndex.Core.Tests.csproj - MAINT |
 | 350 | AUDIT-0117-T | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Core.Tests/StellaOps.BinaryIndex.Core.Tests.csproj - TEST |
-| 351 | AUDIT-0117-A | TODO | Approval | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Core.Tests/StellaOps.BinaryIndex.Core.Tests.csproj - APPLY |
+| 351 | AUDIT-0117-A | DONE | Waived (test project) | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Core.Tests/StellaOps.BinaryIndex.Core.Tests.csproj - APPLY |
 | 352 | AUDIT-0118-M | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus/StellaOps.BinaryIndex.Corpus.csproj - MAINT |
 | 353 | AUDIT-0118-T | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus/StellaOps.BinaryIndex.Corpus.csproj - TEST |
 | 354 | AUDIT-0118-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus/StellaOps.BinaryIndex.Corpus.csproj - APPLY |
@@ -388,7 +388,7 @@ Bulk task definitions (applies to every project row below):
 | 366 | AUDIT-0122-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Fingerprints/StellaOps.BinaryIndex.Fingerprints.csproj - APPLY |
 | 367 | AUDIT-0123-M | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Fingerprints.Tests/StellaOps.BinaryIndex.Fingerprints.Tests.csproj - MAINT |
 | 368 | AUDIT-0123-T | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Fingerprints.Tests/StellaOps.BinaryIndex.Fingerprints.Tests.csproj - TEST |
-| 369 | AUDIT-0123-A | TODO | Approval | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Fingerprints.Tests/StellaOps.BinaryIndex.Fingerprints.Tests.csproj - APPLY |
+| 369 | AUDIT-0123-A | DONE | Waived (test project) | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Fingerprints.Tests/StellaOps.BinaryIndex.Fingerprints.Tests.csproj - APPLY |
 | 370 | AUDIT-0124-M | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.FixIndex/StellaOps.BinaryIndex.FixIndex.csproj - MAINT |
 | 371 | AUDIT-0124-T | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.FixIndex/StellaOps.BinaryIndex.FixIndex.csproj - TEST |
 | 372 | AUDIT-0124-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.FixIndex/StellaOps.BinaryIndex.FixIndex.csproj - APPLY |
@@ -397,13 +397,13 @@ Bulk task definitions (applies to every project row below):
 | 375 | AUDIT-0125-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Persistence/StellaOps.BinaryIndex.Persistence.csproj - APPLY |
 | 376 | AUDIT-0126-M | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Persistence.Tests/StellaOps.BinaryIndex.Persistence.Tests.csproj - MAINT |
 | 377 | AUDIT-0126-T | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Persistence.Tests/StellaOps.BinaryIndex.Persistence.Tests.csproj - TEST |
-| 378 | AUDIT-0126-A | TODO | Approval | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Persistence.Tests/StellaOps.BinaryIndex.Persistence.Tests.csproj - APPLY |
+| 378 | AUDIT-0126-A | DONE | Waived (test project) | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Persistence.Tests/StellaOps.BinaryIndex.Persistence.Tests.csproj - APPLY |
 | 379 | AUDIT-0127-M | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.VexBridge/StellaOps.BinaryIndex.VexBridge.csproj - MAINT |
 | 380 | AUDIT-0127-T | DONE | Report | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.VexBridge/StellaOps.BinaryIndex.VexBridge.csproj - TEST |
 | 381 | AUDIT-0127-A | TODO | Approval | Guild | src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.VexBridge/StellaOps.BinaryIndex.VexBridge.csproj - APPLY |
 | 382 | AUDIT-0128-M | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.VexBridge.Tests/StellaOps.BinaryIndex.VexBridge.Tests.csproj - MAINT |
 | 383 | AUDIT-0128-T | DONE | Report | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.VexBridge.Tests/StellaOps.BinaryIndex.VexBridge.Tests.csproj - TEST |
-| 384 | AUDIT-0128-A | TODO | Approval | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.VexBridge.Tests/StellaOps.BinaryIndex.VexBridge.Tests.csproj - APPLY |
+| 384 | AUDIT-0128-A | DONE | Waived (test project) | Guild | src/BinaryIndex/__Tests/StellaOps.BinaryIndex.VexBridge.Tests/StellaOps.BinaryIndex.VexBridge.Tests.csproj - APPLY |
 | 385 | AUDIT-0129-M | DONE | Report | Guild | src/BinaryIndex/StellaOps.BinaryIndex.WebService/StellaOps.BinaryIndex.WebService.csproj - MAINT |
 | 386 | AUDIT-0129-T | DONE | Report | Guild | src/BinaryIndex/StellaOps.BinaryIndex.WebService/StellaOps.BinaryIndex.WebService.csproj - TEST |
 | 387 | AUDIT-0129-A | TODO | Approval | Guild | src/BinaryIndex/StellaOps.BinaryIndex.WebService/StellaOps.BinaryIndex.WebService.csproj - APPLY |
@@ -412,25 +412,25 @@ Bulk task definitions (applies to every project row below):
 | 390 | AUDIT-0130-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Canonical.Json/StellaOps.Canonical.Json.csproj - APPLY |
 | 391 | AUDIT-0131-M | DONE | Report | Guild | src/__Libraries/StellaOps.Canonical.Json.Tests/StellaOps.Canonical.Json.Tests.csproj - MAINT |
 | 392 | AUDIT-0131-T | DONE | Report | Guild | src/__Libraries/StellaOps.Canonical.Json.Tests/StellaOps.Canonical.Json.Tests.csproj - TEST |
-| 393 | AUDIT-0131-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Canonical.Json.Tests/StellaOps.Canonical.Json.Tests.csproj - APPLY |
+| 393 | AUDIT-0131-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Canonical.Json.Tests/StellaOps.Canonical.Json.Tests.csproj - APPLY |
 | 394 | AUDIT-0132-M | DONE | Report | Guild | src/__Libraries/StellaOps.Canonicalization/StellaOps.Canonicalization.csproj - MAINT |
 | 395 | AUDIT-0132-T | DONE | Report | Guild | src/__Libraries/StellaOps.Canonicalization/StellaOps.Canonicalization.csproj - TEST |
 | 396 | AUDIT-0132-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Canonicalization/StellaOps.Canonicalization.csproj - APPLY |
 | 397 | AUDIT-0133-M | DONE | Report | Guild | src/__Libraries/__Tests/StellaOps.Canonicalization.Tests/StellaOps.Canonicalization.Tests.csproj - MAINT |
 | 398 | AUDIT-0133-T | DONE | Report | Guild | src/__Libraries/__Tests/StellaOps.Canonicalization.Tests/StellaOps.Canonicalization.Tests.csproj - TEST |
-| 399 | AUDIT-0133-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Canonicalization.Tests/StellaOps.Canonicalization.Tests.csproj - APPLY |
+| 399 | AUDIT-0133-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Canonicalization.Tests/StellaOps.Canonicalization.Tests.csproj - APPLY |
 | 400 | AUDIT-0134-M | DONE | Report | Guild | src/Cartographer/StellaOps.Cartographer/StellaOps.Cartographer.csproj - MAINT |
 | 401 | AUDIT-0134-T | DONE | Report | Guild | src/Cartographer/StellaOps.Cartographer/StellaOps.Cartographer.csproj - TEST |
 | 402 | AUDIT-0134-A | TODO | Approval | Guild | src/Cartographer/StellaOps.Cartographer/StellaOps.Cartographer.csproj - APPLY |
 | 403 | AUDIT-0135-M | DONE | Report | Guild | src/Cartographer/__Tests/StellaOps.Cartographer.Tests/StellaOps.Cartographer.Tests.csproj - MAINT |
 | 404 | AUDIT-0135-T | DONE | Report | Guild | src/Cartographer/__Tests/StellaOps.Cartographer.Tests/StellaOps.Cartographer.Tests.csproj - TEST |
-| 405 | AUDIT-0135-A | TODO | Approval | Guild | src/Cartographer/__Tests/StellaOps.Cartographer.Tests/StellaOps.Cartographer.Tests.csproj - APPLY |
+| 405 | AUDIT-0135-A | DONE | Waived (test project) | Guild | src/Cartographer/__Tests/StellaOps.Cartographer.Tests/StellaOps.Cartographer.Tests.csproj - APPLY |
 | 406 | AUDIT-0136-M | DONE | Report | Guild | src/__Tests/chaos/StellaOps.Chaos.Router.Tests/StellaOps.Chaos.Router.Tests.csproj - MAINT |
 | 407 | AUDIT-0136-T | DONE | Report | Guild | src/__Tests/chaos/StellaOps.Chaos.Router.Tests/StellaOps.Chaos.Router.Tests.csproj - TEST |
-| 408 | AUDIT-0136-A | TODO | Approval | Guild | src/__Tests/chaos/StellaOps.Chaos.Router.Tests/StellaOps.Chaos.Router.Tests.csproj - APPLY |
+| 408 | AUDIT-0136-A | DONE | Waived (test project) | Guild | src/__Tests/chaos/StellaOps.Chaos.Router.Tests/StellaOps.Chaos.Router.Tests.csproj - APPLY |
 | 409 | AUDIT-0137-M | DONE | Report | Guild | src/Cli/StellaOps.Cli/StellaOps.Cli.csproj - MAINT |
 | 410 | AUDIT-0137-T | DONE | Report | Guild | src/Cli/StellaOps.Cli/StellaOps.Cli.csproj - TEST |
-| 411 | AUDIT-0137-A | TODO | Approval | Guild | src/Cli/StellaOps.Cli/StellaOps.Cli.csproj - APPLY |
+| 411 | AUDIT-0137-A | DONE | Applied: manifest parsing moved into CLI; deferred remaining recommendations | Guild | src/Cli/StellaOps.Cli/StellaOps.Cli.csproj - APPLY |
 | 412 | AUDIT-0138-M | DONE | Report | Guild | src/Cli/__Libraries/StellaOps.Cli.Plugins.Aoc/StellaOps.Cli.Plugins.Aoc.csproj - MAINT |
 | 413 | AUDIT-0138-T | DONE | Report | Guild | src/Cli/__Libraries/StellaOps.Cli.Plugins.Aoc/StellaOps.Cli.Plugins.Aoc.csproj - TEST |
 | 414 | AUDIT-0138-A | TODO | Approval | Guild | src/Cli/__Libraries/StellaOps.Cli.Plugins.Aoc/StellaOps.Cli.Plugins.Aoc.csproj - APPLY |
@@ -448,7 +448,7 @@ Bulk task definitions (applies to every project row below):
 | 426 | AUDIT-0142-A | TODO | Approval | Guild | src/Cli/__Libraries/StellaOps.Cli.Plugins.Vex/StellaOps.Cli.Plugins.Vex.csproj - APPLY |
 | 427 | AUDIT-0143-M | DONE | Report | Guild | src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj - MAINT |
 | 428 | AUDIT-0143-T | DONE | Report | Guild | src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj - TEST |
-| 429 | AUDIT-0143-A | TODO | Approval | Guild | src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj - APPLY |
+| 429 | AUDIT-0143-A | DONE | Waived (test project) | Guild | src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj - APPLY |
 | 430 | AUDIT-0144-M | DONE | Report | Guild | src/Concelier/__Analyzers/StellaOps.Concelier.Analyzers/StellaOps.Concelier.Analyzers.csproj - MAINT |
 | 431 | AUDIT-0144-T | DONE | Report | Guild | src/Concelier/__Analyzers/StellaOps.Concelier.Analyzers/StellaOps.Concelier.Analyzers.csproj - TEST |
 | 432 | AUDIT-0144-A | TODO | Approval | Guild | src/Concelier/__Analyzers/StellaOps.Concelier.Analyzers/StellaOps.Concelier.Analyzers.csproj - APPLY |
@@ -457,232 +457,232 @@ Bulk task definitions (applies to every project row below):
 | 435 | AUDIT-0145-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Cache.Valkey/StellaOps.Concelier.Cache.Valkey.csproj - APPLY |
 | 436 | AUDIT-0146-M | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Cache.Valkey.Tests/StellaOps.Concelier.Cache.Valkey.Tests.csproj - MAINT |
 | 437 | AUDIT-0146-T | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Cache.Valkey.Tests/StellaOps.Concelier.Cache.Valkey.Tests.csproj - TEST |
-| 438 | AUDIT-0146-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Cache.Valkey.Tests/StellaOps.Concelier.Cache.Valkey.Tests.csproj - APPLY |
+| 438 | AUDIT-0146-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Cache.Valkey.Tests/StellaOps.Concelier.Cache.Valkey.Tests.csproj - APPLY |
 | 439 | AUDIT-0147-M | DONE | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Acsc/StellaOps.Concelier.Connector.Acsc.csproj - MAINT |
 | 440 | AUDIT-0147-T | DONE | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Acsc/StellaOps.Concelier.Connector.Acsc.csproj - TEST |
 | 441 | AUDIT-0147-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Acsc/StellaOps.Concelier.Connector.Acsc.csproj - APPLY |
 | 442 | AUDIT-0148-M | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Acsc.Tests/StellaOps.Concelier.Connector.Acsc.Tests.csproj - MAINT |
 | 443 | AUDIT-0148-T | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Acsc.Tests/StellaOps.Concelier.Connector.Acsc.Tests.csproj - TEST |
-| 444 | AUDIT-0148-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Acsc.Tests/StellaOps.Concelier.Connector.Acsc.Tests.csproj - APPLY |
+| 444 | AUDIT-0148-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Acsc.Tests/StellaOps.Concelier.Connector.Acsc.Tests.csproj - APPLY |
 | 445 | AUDIT-0149-M | DONE | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/StellaOps.Concelier.Connector.Cccs.csproj - MAINT |
 | 446 | AUDIT-0149-T | DONE | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/StellaOps.Concelier.Connector.Cccs.csproj - TEST |
 | 447 | AUDIT-0149-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/StellaOps.Concelier.Connector.Cccs.csproj - APPLY |
 | 448 | AUDIT-0150-M | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cccs.Tests/StellaOps.Concelier.Connector.Cccs.Tests.csproj - MAINT |
 | 449 | AUDIT-0150-T | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cccs.Tests/StellaOps.Concelier.Connector.Cccs.Tests.csproj - TEST |
-| 450 | AUDIT-0150-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cccs.Tests/StellaOps.Concelier.Connector.Cccs.Tests.csproj - APPLY |
+| 450 | AUDIT-0150-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cccs.Tests/StellaOps.Concelier.Connector.Cccs.Tests.csproj - APPLY |
 | 451 | AUDIT-0151-M | DONE | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/StellaOps.Concelier.Connector.CertBund.csproj - MAINT |
 | 452 | AUDIT-0151-T | DONE | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/StellaOps.Concelier.Connector.CertBund.csproj - TEST |
 | 453 | AUDIT-0151-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/StellaOps.Concelier.Connector.CertBund.csproj - APPLY |
 | 454 | AUDIT-0152-M | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertBund.Tests/StellaOps.Concelier.Connector.CertBund.Tests.csproj - MAINT |
 | 455 | AUDIT-0152-T | DONE | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertBund.Tests/StellaOps.Concelier.Connector.CertBund.Tests.csproj - TEST |
-| 456 | AUDIT-0152-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertBund.Tests/StellaOps.Concelier.Connector.CertBund.Tests.csproj - APPLY |
+| 456 | AUDIT-0152-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertBund.Tests/StellaOps.Concelier.Connector.CertBund.Tests.csproj - APPLY |
 | 457 | AUDIT-0153-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/StellaOps.Concelier.Connector.CertCc.csproj - MAINT |
 | 458 | AUDIT-0153-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/StellaOps.Concelier.Connector.CertCc.csproj - TEST |
 | 459 | AUDIT-0153-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/StellaOps.Concelier.Connector.CertCc.csproj - APPLY |
 | 460 | AUDIT-0154-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertCc.Tests/StellaOps.Concelier.Connector.CertCc.Tests.csproj - MAINT |
 | 461 | AUDIT-0154-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertCc.Tests/StellaOps.Concelier.Connector.CertCc.Tests.csproj - TEST |
-| 462 | AUDIT-0154-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertCc.Tests/StellaOps.Concelier.Connector.CertCc.Tests.csproj - APPLY |
+| 462 | AUDIT-0154-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertCc.Tests/StellaOps.Concelier.Connector.CertCc.Tests.csproj - APPLY |
 | 463 | AUDIT-0155-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertFr/StellaOps.Concelier.Connector.CertFr.csproj - MAINT |
 | 464 | AUDIT-0155-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertFr/StellaOps.Concelier.Connector.CertFr.csproj - TEST |
 | 465 | AUDIT-0155-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertFr/StellaOps.Concelier.Connector.CertFr.csproj - APPLY |
 | 466 | AUDIT-0156-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertFr.Tests/StellaOps.Concelier.Connector.CertFr.Tests.csproj - MAINT |
 | 467 | AUDIT-0156-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertFr.Tests/StellaOps.Concelier.Connector.CertFr.Tests.csproj - TEST |
-| 468 | AUDIT-0156-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertFr.Tests/StellaOps.Concelier.Connector.CertFr.Tests.csproj - APPLY |
+| 468 | AUDIT-0156-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertFr.Tests/StellaOps.Concelier.Connector.CertFr.Tests.csproj - APPLY |
 | 469 | AUDIT-0157-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertIn/StellaOps.Concelier.Connector.CertIn.csproj - MAINT |
 | 470 | AUDIT-0157-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertIn/StellaOps.Concelier.Connector.CertIn.csproj - TEST |
 | 471 | AUDIT-0157-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertIn/StellaOps.Concelier.Connector.CertIn.csproj - APPLY |
 | 472 | AUDIT-0158-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertIn.Tests/StellaOps.Concelier.Connector.CertIn.Tests.csproj - MAINT |
 | 473 | AUDIT-0158-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertIn.Tests/StellaOps.Concelier.Connector.CertIn.Tests.csproj - TEST |
-| 474 | AUDIT-0158-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertIn.Tests/StellaOps.Concelier.Connector.CertIn.Tests.csproj - APPLY |
+| 474 | AUDIT-0158-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.CertIn.Tests/StellaOps.Concelier.Connector.CertIn.Tests.csproj - APPLY |
 | 475 | AUDIT-0159-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Common/StellaOps.Concelier.Connector.Common.csproj - MAINT |
 | 476 | AUDIT-0159-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Common/StellaOps.Concelier.Connector.Common.csproj - TEST |
 | 477 | AUDIT-0159-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Common/StellaOps.Concelier.Connector.Common.csproj - APPLY |
 | 478 | AUDIT-0160-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Common.Tests/StellaOps.Concelier.Connector.Common.Tests.csproj - MAINT |
 | 479 | AUDIT-0160-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Common.Tests/StellaOps.Concelier.Connector.Common.Tests.csproj - TEST |
-| 480 | AUDIT-0160-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Common.Tests/StellaOps.Concelier.Connector.Common.Tests.csproj - APPLY |
+| 480 | AUDIT-0160-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Common.Tests/StellaOps.Concelier.Connector.Common.Tests.csproj - APPLY |
 | 481 | AUDIT-0161-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cve/StellaOps.Concelier.Connector.Cve.csproj - MAINT |
 | 482 | AUDIT-0161-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cve/StellaOps.Concelier.Connector.Cve.csproj - TEST |
 | 483 | AUDIT-0161-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cve/StellaOps.Concelier.Connector.Cve.csproj - APPLY |
 | 484 | AUDIT-0162-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cve.Tests/StellaOps.Concelier.Connector.Cve.Tests.csproj - MAINT |
 | 485 | AUDIT-0162-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cve.Tests/StellaOps.Concelier.Connector.Cve.Tests.csproj - TEST |
-| 486 | AUDIT-0162-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cve.Tests/StellaOps.Concelier.Connector.Cve.Tests.csproj - APPLY |
+| 486 | AUDIT-0162-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Cve.Tests/StellaOps.Concelier.Connector.Cve.Tests.csproj - APPLY |
 | 487 | AUDIT-0163-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/StellaOps.Concelier.Connector.Distro.Alpine.csproj - MAINT |
 | 488 | AUDIT-0163-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/StellaOps.Concelier.Connector.Distro.Alpine.csproj - TEST |
 | 489 | AUDIT-0163-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/StellaOps.Concelier.Connector.Distro.Alpine.csproj - APPLY |
 | 490 | AUDIT-0164-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests.csproj - MAINT |
 | 491 | AUDIT-0164-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests.csproj - TEST |
-| 492 | AUDIT-0164-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests.csproj - APPLY |
+| 492 | AUDIT-0164-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests/StellaOps.Concelier.Connector.Distro.Alpine.Tests.csproj - APPLY |
 | 493 | AUDIT-0165-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/StellaOps.Concelier.Connector.Distro.Debian.csproj - MAINT |
 | 494 | AUDIT-0165-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/StellaOps.Concelier.Connector.Distro.Debian.csproj - TEST |
 | 495 | AUDIT-0165-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/StellaOps.Concelier.Connector.Distro.Debian.csproj - APPLY |
 | 496 | AUDIT-0166-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests.csproj - MAINT |
 | 497 | AUDIT-0166-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests.csproj - TEST |
-| 498 | AUDIT-0166-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests.csproj - APPLY |
+| 498 | AUDIT-0166-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests/StellaOps.Concelier.Connector.Distro.Debian.Tests.csproj - APPLY |
 | 499 | AUDIT-0167-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/StellaOps.Concelier.Connector.Distro.RedHat.csproj - MAINT |
 | 500 | AUDIT-0167-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/StellaOps.Concelier.Connector.Distro.RedHat.csproj - TEST |
 | 501 | AUDIT-0167-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/StellaOps.Concelier.Connector.Distro.RedHat.csproj - APPLY |
 | 502 | AUDIT-0168-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests.csproj - MAINT |
 | 503 | AUDIT-0168-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests.csproj - TEST |
-| 504 | AUDIT-0168-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests.csproj - APPLY |
+| 504 | AUDIT-0168-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests/StellaOps.Concelier.Connector.Distro.RedHat.Tests.csproj - APPLY |
 | 505 | AUDIT-0169-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Suse/StellaOps.Concelier.Connector.Distro.Suse.csproj - MAINT |
 | 506 | AUDIT-0169-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Suse/StellaOps.Concelier.Connector.Distro.Suse.csproj - TEST |
 | 507 | AUDIT-0169-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Suse/StellaOps.Concelier.Connector.Distro.Suse.csproj - APPLY |
 | 508 | AUDIT-0170-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests.csproj - MAINT |
 | 509 | AUDIT-0170-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests.csproj - TEST |
-| 510 | AUDIT-0170-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests.csproj - APPLY |
+| 510 | AUDIT-0170-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests/StellaOps.Concelier.Connector.Distro.Suse.Tests.csproj - APPLY |
 | 511 | AUDIT-0171-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Ubuntu/StellaOps.Concelier.Connector.Distro.Ubuntu.csproj - MAINT |
 | 512 | AUDIT-0171-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Ubuntu/StellaOps.Concelier.Connector.Distro.Ubuntu.csproj - TEST |
 | 513 | AUDIT-0171-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Ubuntu/StellaOps.Concelier.Connector.Distro.Ubuntu.csproj - APPLY |
 | 514 | AUDIT-0172-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests.csproj - MAINT |
 | 515 | AUDIT-0172-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests.csproj - TEST |
-| 516 | AUDIT-0172-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests.csproj - APPLY |
+| 516 | AUDIT-0172-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests/StellaOps.Concelier.Connector.Distro.Ubuntu.Tests.csproj - APPLY |
 | 517 | AUDIT-0173-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Epss/StellaOps.Concelier.Connector.Epss.csproj - MAINT |
 | 518 | AUDIT-0173-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Epss/StellaOps.Concelier.Connector.Epss.csproj - TEST |
 | 519 | AUDIT-0173-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Epss/StellaOps.Concelier.Connector.Epss.csproj - APPLY |
 | 520 | AUDIT-0174-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Epss.Tests/StellaOps.Concelier.Connector.Epss.Tests.csproj - MAINT |
 | 521 | AUDIT-0174-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Epss.Tests/StellaOps.Concelier.Connector.Epss.Tests.csproj - TEST |
-| 522 | AUDIT-0174-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Epss.Tests/StellaOps.Concelier.Connector.Epss.Tests.csproj - APPLY |
+| 522 | AUDIT-0174-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Epss.Tests/StellaOps.Concelier.Connector.Epss.Tests.csproj - APPLY |
 | 523 | AUDIT-0175-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ghsa/StellaOps.Concelier.Connector.Ghsa.csproj - MAINT |
 | 524 | AUDIT-0175-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ghsa/StellaOps.Concelier.Connector.Ghsa.csproj - TEST |
 | 525 | AUDIT-0175-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ghsa/StellaOps.Concelier.Connector.Ghsa.csproj - APPLY |
 | 526 | AUDIT-0176-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ghsa.Tests/StellaOps.Concelier.Connector.Ghsa.Tests.csproj - MAINT |
 | 527 | AUDIT-0176-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ghsa.Tests/StellaOps.Concelier.Connector.Ghsa.Tests.csproj - TEST |
-| 528 | AUDIT-0176-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ghsa.Tests/StellaOps.Concelier.Connector.Ghsa.Tests.csproj - APPLY |
+| 528 | AUDIT-0176-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ghsa.Tests/StellaOps.Concelier.Connector.Ghsa.Tests.csproj - APPLY |
 | 529 | AUDIT-0177-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/StellaOps.Concelier.Connector.Ics.Cisa.csproj - MAINT |
 | 530 | AUDIT-0177-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/StellaOps.Concelier.Connector.Ics.Cisa.csproj - TEST |
 | 531 | AUDIT-0177-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/StellaOps.Concelier.Connector.Ics.Cisa.csproj - APPLY |
 | 532 | AUDIT-0178-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests.csproj - MAINT |
 | 533 | AUDIT-0178-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests.csproj - TEST |
-| 534 | AUDIT-0178-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests.csproj - APPLY |
+| 534 | AUDIT-0178-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests.csproj - APPLY |
 | 535 | AUDIT-0179-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Kaspersky/StellaOps.Concelier.Connector.Ics.Kaspersky.csproj - MAINT |
 | 536 | AUDIT-0179-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Kaspersky/StellaOps.Concelier.Connector.Ics.Kaspersky.csproj - TEST |
 | 537 | AUDIT-0179-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Kaspersky/StellaOps.Concelier.Connector.Ics.Kaspersky.csproj - APPLY |
 | 538 | AUDIT-0180-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests.csproj - MAINT |
 | 539 | AUDIT-0180-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests.csproj - TEST |
-| 540 | AUDIT-0180-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests.csproj - APPLY |
+| 540 | AUDIT-0180-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests/StellaOps.Concelier.Connector.Ics.Kaspersky.Tests.csproj - APPLY |
 | 541 | AUDIT-0181-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/StellaOps.Concelier.Connector.Jvn.csproj - MAINT |
 | 542 | AUDIT-0181-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/StellaOps.Concelier.Connector.Jvn.csproj - TEST |
 | 543 | AUDIT-0181-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/StellaOps.Concelier.Connector.Jvn.csproj - APPLY |
 | 544 | AUDIT-0182-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Jvn.Tests/StellaOps.Concelier.Connector.Jvn.Tests.csproj - MAINT |
 | 545 | AUDIT-0182-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Jvn.Tests/StellaOps.Concelier.Connector.Jvn.Tests.csproj - TEST |
-| 546 | AUDIT-0182-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Jvn.Tests/StellaOps.Concelier.Connector.Jvn.Tests.csproj - APPLY |
+| 546 | AUDIT-0182-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Jvn.Tests/StellaOps.Concelier.Connector.Jvn.Tests.csproj - APPLY |
 | 547 | AUDIT-0183-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/StellaOps.Concelier.Connector.Kev.csproj - MAINT |
 | 548 | AUDIT-0183-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/StellaOps.Concelier.Connector.Kev.csproj - TEST |
 | 549 | AUDIT-0183-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/StellaOps.Concelier.Connector.Kev.csproj - APPLY |
 | 550 | AUDIT-0184-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kev.Tests/StellaOps.Concelier.Connector.Kev.Tests.csproj - MAINT |
 | 551 | AUDIT-0184-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kev.Tests/StellaOps.Concelier.Connector.Kev.Tests.csproj - TEST |
-| 552 | AUDIT-0184-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kev.Tests/StellaOps.Concelier.Connector.Kev.Tests.csproj - APPLY |
+| 552 | AUDIT-0184-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kev.Tests/StellaOps.Concelier.Connector.Kev.Tests.csproj - APPLY |
 | 553 | AUDIT-0185-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/StellaOps.Concelier.Connector.Kisa.csproj - MAINT |
 | 554 | AUDIT-0185-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/StellaOps.Concelier.Connector.Kisa.csproj - TEST |
 | 555 | AUDIT-0185-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/StellaOps.Concelier.Connector.Kisa.csproj - APPLY |
 | 556 | AUDIT-0186-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kisa.Tests/StellaOps.Concelier.Connector.Kisa.Tests.csproj - MAINT |
 | 557 | AUDIT-0186-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kisa.Tests/StellaOps.Concelier.Connector.Kisa.Tests.csproj - TEST |
-| 558 | AUDIT-0186-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kisa.Tests/StellaOps.Concelier.Connector.Kisa.Tests.csproj - APPLY |
+| 558 | AUDIT-0186-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Kisa.Tests/StellaOps.Concelier.Connector.Kisa.Tests.csproj - APPLY |
 | 559 | AUDIT-0187-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Nvd/StellaOps.Concelier.Connector.Nvd.csproj - MAINT |
 | 560 | AUDIT-0187-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Nvd/StellaOps.Concelier.Connector.Nvd.csproj - TEST |
 | 561 | AUDIT-0187-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Nvd/StellaOps.Concelier.Connector.Nvd.csproj - APPLY |
 | 562 | AUDIT-0188-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Nvd.Tests/StellaOps.Concelier.Connector.Nvd.Tests.csproj - MAINT |
 | 563 | AUDIT-0188-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Nvd.Tests/StellaOps.Concelier.Connector.Nvd.Tests.csproj - TEST |
-| 564 | AUDIT-0188-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Nvd.Tests/StellaOps.Concelier.Connector.Nvd.Tests.csproj - APPLY |
+| 564 | AUDIT-0188-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Nvd.Tests/StellaOps.Concelier.Connector.Nvd.Tests.csproj - APPLY |
 | 565 | AUDIT-0189-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/StellaOps.Concelier.Connector.Osv.csproj - MAINT |
 | 566 | AUDIT-0189-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/StellaOps.Concelier.Connector.Osv.csproj - TEST |
 | 567 | AUDIT-0189-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/StellaOps.Concelier.Connector.Osv.csproj - APPLY |
 | 568 | AUDIT-0190-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Osv.Tests/StellaOps.Concelier.Connector.Osv.Tests.csproj - MAINT |
 | 569 | AUDIT-0190-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Osv.Tests/StellaOps.Concelier.Connector.Osv.Tests.csproj - TEST |
-| 570 | AUDIT-0190-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Osv.Tests/StellaOps.Concelier.Connector.Osv.Tests.csproj - APPLY |
+| 570 | AUDIT-0190-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Osv.Tests/StellaOps.Concelier.Connector.Osv.Tests.csproj - APPLY |
 | 571 | AUDIT-0191-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/StellaOps.Concelier.Connector.Ru.Bdu.csproj - MAINT |
 | 572 | AUDIT-0191-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/StellaOps.Concelier.Connector.Ru.Bdu.csproj - TEST |
 | 573 | AUDIT-0191-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/StellaOps.Concelier.Connector.Ru.Bdu.csproj - APPLY |
 | 574 | AUDIT-0192-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests.csproj - MAINT |
 | 575 | AUDIT-0192-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests.csproj - TEST |
-| 576 | AUDIT-0192-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests.csproj - APPLY |
+| 576 | AUDIT-0192-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests/StellaOps.Concelier.Connector.Ru.Bdu.Tests.csproj - APPLY |
 | 577 | AUDIT-0193-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/StellaOps.Concelier.Connector.Ru.Nkcki.csproj - MAINT |
 | 578 | AUDIT-0193-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/StellaOps.Concelier.Connector.Ru.Nkcki.csproj - TEST |
 | 579 | AUDIT-0193-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/StellaOps.Concelier.Connector.Ru.Nkcki.csproj - APPLY |
 | 580 | AUDIT-0194-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests.csproj - MAINT |
 | 581 | AUDIT-0194-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests.csproj - TEST |
-| 582 | AUDIT-0194-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests.csproj - APPLY |
+| 582 | AUDIT-0194-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests/StellaOps.Concelier.Connector.Ru.Nkcki.Tests.csproj - APPLY |
 | 583 | AUDIT-0195-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/StellaOps.Concelier.Connector.StellaOpsMirror.csproj - MAINT |
 | 584 | AUDIT-0195-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/StellaOps.Concelier.Connector.StellaOpsMirror.csproj - TEST |
 | 585 | AUDIT-0195-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/StellaOps.Concelier.Connector.StellaOpsMirror.csproj - APPLY |
 | 586 | AUDIT-0196-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests.csproj - MAINT |
 | 587 | AUDIT-0196-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests.csproj - TEST |
-| 588 | AUDIT-0196-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests.csproj - APPLY |
+| 588 | AUDIT-0196-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests.csproj - APPLY |
 | 589 | AUDIT-0197-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/StellaOps.Concelier.Connector.Vndr.Adobe.csproj - MAINT |
 | 590 | AUDIT-0197-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/StellaOps.Concelier.Connector.Vndr.Adobe.csproj - TEST |
 | 591 | AUDIT-0197-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/StellaOps.Concelier.Connector.Vndr.Adobe.csproj - APPLY |
 | 592 | AUDIT-0198-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests.csproj - MAINT |
 | 593 | AUDIT-0198-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests.csproj - TEST |
-| 594 | AUDIT-0198-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests.csproj - APPLY |
+| 594 | AUDIT-0198-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests/StellaOps.Concelier.Connector.Vndr.Adobe.Tests.csproj - APPLY |
 | 595 | AUDIT-0199-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/StellaOps.Concelier.Connector.Vndr.Apple.csproj - MAINT |
 | 596 | AUDIT-0199-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/StellaOps.Concelier.Connector.Vndr.Apple.csproj - TEST |
 | 597 | AUDIT-0199-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/StellaOps.Concelier.Connector.Vndr.Apple.csproj - APPLY |
 | 598 | AUDIT-0200-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests.csproj - MAINT |
 | 599 | AUDIT-0200-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests.csproj - TEST |
-| 600 | AUDIT-0200-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests.csproj - APPLY |
+| 600 | AUDIT-0200-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests/StellaOps.Concelier.Connector.Vndr.Apple.Tests.csproj - APPLY |
 | 601 | AUDIT-0201-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/StellaOps.Concelier.Connector.Vndr.Chromium.csproj - MAINT |
 | 602 | AUDIT-0201-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/StellaOps.Concelier.Connector.Vndr.Chromium.csproj - TEST |
 | 603 | AUDIT-0201-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/StellaOps.Concelier.Connector.Vndr.Chromium.csproj - APPLY |
 | 604 | AUDIT-0202-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests.csproj - MAINT |
 | 605 | AUDIT-0202-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests.csproj - TEST |
-| 606 | AUDIT-0202-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests.csproj - APPLY |
+| 606 | AUDIT-0202-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests/StellaOps.Concelier.Connector.Vndr.Chromium.Tests.csproj - APPLY |
 | 607 | AUDIT-0203-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/StellaOps.Concelier.Connector.Vndr.Cisco.csproj - MAINT |
 | 608 | AUDIT-0203-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/StellaOps.Concelier.Connector.Vndr.Cisco.csproj - TEST |
 | 609 | AUDIT-0203-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/StellaOps.Concelier.Connector.Vndr.Cisco.csproj - APPLY |
 | 610 | AUDIT-0204-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests.csproj - MAINT |
 | 611 | AUDIT-0204-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests.csproj - TEST |
-| 612 | AUDIT-0204-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests.csproj - APPLY |
+| 612 | AUDIT-0204-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests/StellaOps.Concelier.Connector.Vndr.Cisco.Tests.csproj - APPLY |
 | 613 | AUDIT-0205-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/StellaOps.Concelier.Connector.Vndr.Msrc.csproj - MAINT |
 | 614 | AUDIT-0205-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/StellaOps.Concelier.Connector.Vndr.Msrc.csproj - TEST |
 | 615 | AUDIT-0205-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/StellaOps.Concelier.Connector.Vndr.Msrc.csproj - APPLY |
 | 616 | AUDIT-0206-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests.csproj - MAINT |
 | 617 | AUDIT-0206-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests.csproj - TEST |
-| 618 | AUDIT-0206-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests.csproj - APPLY |
+| 618 | AUDIT-0206-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests/StellaOps.Concelier.Connector.Vndr.Msrc.Tests.csproj - APPLY |
 | 619 | AUDIT-0207-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/StellaOps.Concelier.Connector.Vndr.Oracle.csproj - MAINT |
 | 620 | AUDIT-0207-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/StellaOps.Concelier.Connector.Vndr.Oracle.csproj - TEST |
 | 621 | AUDIT-0207-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/StellaOps.Concelier.Connector.Vndr.Oracle.csproj - APPLY |
 | 622 | AUDIT-0208-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests.csproj - MAINT |
 | 623 | AUDIT-0208-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests.csproj - TEST |
-| 624 | AUDIT-0208-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests.csproj - APPLY |
+| 624 | AUDIT-0208-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests/StellaOps.Concelier.Connector.Vndr.Oracle.Tests.csproj - APPLY |
 | 625 | AUDIT-0209-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/StellaOps.Concelier.Connector.Vndr.Vmware.csproj - MAINT |
 | 626 | AUDIT-0209-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/StellaOps.Concelier.Connector.Vndr.Vmware.csproj - TEST |
 | 627 | AUDIT-0209-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/StellaOps.Concelier.Connector.Vndr.Vmware.csproj - APPLY |
 | 628 | AUDIT-0210-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests.csproj - MAINT |
 | 629 | AUDIT-0210-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests.csproj - TEST |
-| 630 | AUDIT-0210-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests.csproj - APPLY |
+| 630 | AUDIT-0210-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests/StellaOps.Concelier.Connector.Vndr.Vmware.Tests.csproj - APPLY |
 | 631 | AUDIT-0211-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Core/StellaOps.Concelier.Core.csproj - MAINT |
 | 632 | AUDIT-0211-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Core/StellaOps.Concelier.Core.csproj - TEST |
 | 633 | AUDIT-0211-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Core/StellaOps.Concelier.Core.csproj - APPLY |
 | 634 | AUDIT-0212-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Core.Tests/StellaOps.Concelier.Core.Tests.csproj - MAINT |
 | 635 | AUDIT-0212-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Core.Tests/StellaOps.Concelier.Core.Tests.csproj - TEST |
-| 636 | AUDIT-0212-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Core.Tests/StellaOps.Concelier.Core.Tests.csproj - APPLY |
+| 636 | AUDIT-0212-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Core.Tests/StellaOps.Concelier.Core.Tests.csproj - APPLY |
 | 637 | AUDIT-0213-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Exporter.Json/StellaOps.Concelier.Exporter.Json.csproj - MAINT |
 | 638 | AUDIT-0213-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Exporter.Json/StellaOps.Concelier.Exporter.Json.csproj - TEST |
 | 639 | AUDIT-0213-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Exporter.Json/StellaOps.Concelier.Exporter.Json.csproj - APPLY |
 | 640 | AUDIT-0214-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.Json.Tests/StellaOps.Concelier.Exporter.Json.Tests.csproj - MAINT |
 | 641 | AUDIT-0214-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.Json.Tests/StellaOps.Concelier.Exporter.Json.Tests.csproj - TEST |
-| 642 | AUDIT-0214-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.Json.Tests/StellaOps.Concelier.Exporter.Json.Tests.csproj - APPLY |
+| 642 | AUDIT-0214-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.Json.Tests/StellaOps.Concelier.Exporter.Json.Tests.csproj - APPLY |
 | 643 | AUDIT-0215-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Exporter.TrivyDb/StellaOps.Concelier.Exporter.TrivyDb.csproj - MAINT |
 | 644 | AUDIT-0215-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Exporter.TrivyDb/StellaOps.Concelier.Exporter.TrivyDb.csproj - TEST |
 | 645 | AUDIT-0215-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Exporter.TrivyDb/StellaOps.Concelier.Exporter.TrivyDb.csproj - APPLY |
 | 646 | AUDIT-0216-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests.csproj - MAINT |
 | 647 | AUDIT-0216-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests.csproj - TEST |
-| 648 | AUDIT-0216-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests.csproj - APPLY |
+| 648 | AUDIT-0216-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests.csproj - APPLY |
 | 649 | AUDIT-0217-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Federation/StellaOps.Concelier.Federation.csproj - MAINT |
 | 650 | AUDIT-0217-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Federation/StellaOps.Concelier.Federation.csproj - TEST |
 | 651 | AUDIT-0217-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Federation/StellaOps.Concelier.Federation.csproj - APPLY |
 | 652 | AUDIT-0218-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Federation.Tests/StellaOps.Concelier.Federation.Tests.csproj - MAINT |
 | 653 | AUDIT-0218-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Federation.Tests/StellaOps.Concelier.Federation.Tests.csproj - TEST |
-| 654 | AUDIT-0218-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Federation.Tests/StellaOps.Concelier.Federation.Tests.csproj - APPLY |
+| 654 | AUDIT-0218-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Federation.Tests/StellaOps.Concelier.Federation.Tests.csproj - APPLY |
 | 655 | AUDIT-0219-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Integration.Tests/StellaOps.Concelier.Integration.Tests.csproj - MAINT |
 | 656 | AUDIT-0219-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Integration.Tests/StellaOps.Concelier.Integration.Tests.csproj - TEST |
-| 657 | AUDIT-0219-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Integration.Tests/StellaOps.Concelier.Integration.Tests.csproj - APPLY |
+| 657 | AUDIT-0219-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Integration.Tests/StellaOps.Concelier.Integration.Tests.csproj - APPLY |
 | 658 | AUDIT-0220-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Interest/StellaOps.Concelier.Interest.csproj - MAINT |
 | 659 | AUDIT-0220-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Interest/StellaOps.Concelier.Interest.csproj - TEST |
 | 660 | AUDIT-0220-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Interest/StellaOps.Concelier.Interest.csproj - APPLY |
 | 661 | AUDIT-0221-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Interest.Tests/StellaOps.Concelier.Interest.Tests.csproj - MAINT |
 | 662 | AUDIT-0221-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Interest.Tests/StellaOps.Concelier.Interest.Tests.csproj - TEST |
-| 663 | AUDIT-0221-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Interest.Tests/StellaOps.Concelier.Interest.Tests.csproj - APPLY |
+| 663 | AUDIT-0221-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Interest.Tests/StellaOps.Concelier.Interest.Tests.csproj - APPLY |
 | 664 | AUDIT-0222-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Merge/StellaOps.Concelier.Merge.csproj - MAINT |
 | 665 | AUDIT-0222-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Merge/StellaOps.Concelier.Merge.csproj - TEST |
 | 666 | AUDIT-0222-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Merge/StellaOps.Concelier.Merge.csproj - APPLY |
@@ -691,28 +691,28 @@ Bulk task definitions (applies to every project row below):
 | 669 | AUDIT-0223-A | TODO | Approval | Guild | src/Concelier/__Analyzers/StellaOps.Concelier.Merge.Analyzers/StellaOps.Concelier.Merge.Analyzers.csproj - APPLY |
 | 670 | AUDIT-0224-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Analyzers.Tests/StellaOps.Concelier.Merge.Analyzers.Tests.csproj - MAINT |
 | 671 | AUDIT-0224-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Analyzers.Tests/StellaOps.Concelier.Merge.Analyzers.Tests.csproj - TEST |
-| 672 | AUDIT-0224-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Analyzers.Tests/StellaOps.Concelier.Merge.Analyzers.Tests.csproj - APPLY |
+| 672 | AUDIT-0224-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Analyzers.Tests/StellaOps.Concelier.Merge.Analyzers.Tests.csproj - APPLY |
 | 673 | AUDIT-0225-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Tests/StellaOps.Concelier.Merge.Tests.csproj - MAINT |
 | 674 | AUDIT-0225-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Tests/StellaOps.Concelier.Merge.Tests.csproj - TEST |
-| 675 | AUDIT-0225-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Tests/StellaOps.Concelier.Merge.Tests.csproj - APPLY |
+| 675 | AUDIT-0225-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Merge.Tests/StellaOps.Concelier.Merge.Tests.csproj - APPLY |
 | 676 | AUDIT-0226-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Models/StellaOps.Concelier.Models.csproj - MAINT |
 | 677 | AUDIT-0226-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Models/StellaOps.Concelier.Models.csproj - TEST |
 | 678 | AUDIT-0226-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Models/StellaOps.Concelier.Models.csproj - APPLY |
 | 679 | AUDIT-0227-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Models.Tests/StellaOps.Concelier.Models.Tests.csproj - MAINT |
 | 680 | AUDIT-0227-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Models.Tests/StellaOps.Concelier.Models.Tests.csproj - TEST |
-| 681 | AUDIT-0227-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Models.Tests/StellaOps.Concelier.Models.Tests.csproj - APPLY |
+| 681 | AUDIT-0227-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Models.Tests/StellaOps.Concelier.Models.Tests.csproj - APPLY |
 | 682 | AUDIT-0228-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Normalization/StellaOps.Concelier.Normalization.csproj - MAINT |
 | 683 | AUDIT-0228-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Normalization/StellaOps.Concelier.Normalization.csproj - TEST |
 | 684 | AUDIT-0228-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Normalization/StellaOps.Concelier.Normalization.csproj - APPLY |
 | 685 | AUDIT-0229-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Normalization.Tests/StellaOps.Concelier.Normalization.Tests.csproj - MAINT |
 | 686 | AUDIT-0229-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Normalization.Tests/StellaOps.Concelier.Normalization.Tests.csproj - TEST |
-| 687 | AUDIT-0229-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Normalization.Tests/StellaOps.Concelier.Normalization.Tests.csproj - APPLY |
+| 687 | AUDIT-0229-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Normalization.Tests/StellaOps.Concelier.Normalization.Tests.csproj - APPLY |
 | 688 | AUDIT-0230-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Persistence/StellaOps.Concelier.Persistence.csproj - MAINT |
 | 689 | AUDIT-0230-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Persistence/StellaOps.Concelier.Persistence.csproj - TEST |
 | 690 | AUDIT-0230-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.Persistence/StellaOps.Concelier.Persistence.csproj - APPLY |
 | 691 | AUDIT-0231-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Persistence.Tests/StellaOps.Concelier.Persistence.Tests.csproj - MAINT |
 | 692 | AUDIT-0231-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.Persistence.Tests/StellaOps.Concelier.Persistence.Tests.csproj - TEST |
-| 693 | AUDIT-0231-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.Persistence.Tests/StellaOps.Concelier.Persistence.Tests.csproj - APPLY |
+| 693 | AUDIT-0231-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.Persistence.Tests/StellaOps.Concelier.Persistence.Tests.csproj - APPLY |
 | 694 | AUDIT-0232-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.ProofService/StellaOps.Concelier.ProofService.csproj - MAINT |
 | 695 | AUDIT-0232-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.ProofService/StellaOps.Concelier.ProofService.csproj - TEST |
 | 696 | AUDIT-0232-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.ProofService/StellaOps.Concelier.ProofService.csproj - APPLY |
@@ -721,40 +721,40 @@ Bulk task definitions (applies to every project row below):
 | 699 | AUDIT-0233-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.ProofService.Postgres/StellaOps.Concelier.ProofService.Postgres.csproj - APPLY |
 | 700 | AUDIT-0234-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.ProofService.Postgres.Tests/StellaOps.Concelier.ProofService.Postgres.Tests.csproj - MAINT |
 | 701 | AUDIT-0234-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.ProofService.Postgres.Tests/StellaOps.Concelier.ProofService.Postgres.Tests.csproj - TEST |
-| 702 | AUDIT-0234-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.ProofService.Postgres.Tests/StellaOps.Concelier.ProofService.Postgres.Tests.csproj - APPLY |
+| 702 | AUDIT-0234-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.ProofService.Postgres.Tests/StellaOps.Concelier.ProofService.Postgres.Tests.csproj - APPLY |
 | 703 | AUDIT-0235-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.RawModels/StellaOps.Concelier.RawModels.csproj - MAINT |
 | 704 | AUDIT-0235-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.RawModels/StellaOps.Concelier.RawModels.csproj - TEST |
 | 705 | AUDIT-0235-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.RawModels/StellaOps.Concelier.RawModels.csproj - APPLY |
 | 706 | AUDIT-0236-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.RawModels.Tests/StellaOps.Concelier.RawModels.Tests.csproj - MAINT |
 | 707 | AUDIT-0236-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.RawModels.Tests/StellaOps.Concelier.RawModels.Tests.csproj - TEST |
-| 708 | AUDIT-0236-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.RawModels.Tests/StellaOps.Concelier.RawModels.Tests.csproj - APPLY |
+| 708 | AUDIT-0236-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.RawModels.Tests/StellaOps.Concelier.RawModels.Tests.csproj - APPLY |
 | 709 | AUDIT-0237-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.SbomIntegration/StellaOps.Concelier.SbomIntegration.csproj - MAINT |
 | 710 | AUDIT-0237-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.SbomIntegration/StellaOps.Concelier.SbomIntegration.csproj - TEST |
 | 711 | AUDIT-0237-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.SbomIntegration/StellaOps.Concelier.SbomIntegration.csproj - APPLY |
 | 712 | AUDIT-0238-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.SbomIntegration.Tests/StellaOps.Concelier.SbomIntegration.Tests.csproj - MAINT |
 | 713 | AUDIT-0238-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.SbomIntegration.Tests/StellaOps.Concelier.SbomIntegration.Tests.csproj - TEST |
-| 714 | AUDIT-0238-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.SbomIntegration.Tests/StellaOps.Concelier.SbomIntegration.Tests.csproj - APPLY |
+| 714 | AUDIT-0238-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.SbomIntegration.Tests/StellaOps.Concelier.SbomIntegration.Tests.csproj - APPLY |
 | 715 | AUDIT-0239-M | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.SourceIntel/StellaOps.Concelier.SourceIntel.csproj - MAINT |
 | 716 | AUDIT-0239-T | TODO | Report | Guild | src/Concelier/__Libraries/StellaOps.Concelier.SourceIntel/StellaOps.Concelier.SourceIntel.csproj - TEST |
 | 717 | AUDIT-0239-A | TODO | Approval | Guild | src/Concelier/__Libraries/StellaOps.Concelier.SourceIntel/StellaOps.Concelier.SourceIntel.csproj - APPLY |
 | 718 | AUDIT-0240-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.SourceIntel.Tests/StellaOps.Concelier.SourceIntel.Tests.csproj - MAINT |
 | 719 | AUDIT-0240-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.SourceIntel.Tests/StellaOps.Concelier.SourceIntel.Tests.csproj - TEST |
-| 720 | AUDIT-0240-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.SourceIntel.Tests/StellaOps.Concelier.SourceIntel.Tests.csproj - APPLY |
+| 720 | AUDIT-0240-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.SourceIntel.Tests/StellaOps.Concelier.SourceIntel.Tests.csproj - APPLY |
 | 721 | AUDIT-0241-M | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Concelier.Testing/StellaOps.Concelier.Testing.csproj - MAINT |
 | 722 | AUDIT-0241-T | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Concelier.Testing/StellaOps.Concelier.Testing.csproj - TEST |
-| 723 | AUDIT-0241-A | TODO | Approval | Guild | src/__Tests/__Libraries/StellaOps.Concelier.Testing/StellaOps.Concelier.Testing.csproj - APPLY |
+| 723 | AUDIT-0241-A | DONE | Waived (test project) | Guild | src/__Tests/__Libraries/StellaOps.Concelier.Testing/StellaOps.Concelier.Testing.csproj - APPLY |
 | 724 | AUDIT-0242-M | TODO | Report | Guild | src/Concelier/StellaOps.Concelier.WebService/StellaOps.Concelier.WebService.csproj - MAINT |
 | 725 | AUDIT-0242-T | TODO | Report | Guild | src/Concelier/StellaOps.Concelier.WebService/StellaOps.Concelier.WebService.csproj - TEST |
 | 726 | AUDIT-0242-A | TODO | Approval | Guild | src/Concelier/StellaOps.Concelier.WebService/StellaOps.Concelier.WebService.csproj - APPLY |
 | 727 | AUDIT-0243-M | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.WebService.Tests/StellaOps.Concelier.WebService.Tests.csproj - MAINT |
 | 728 | AUDIT-0243-T | TODO | Report | Guild | src/Concelier/__Tests/StellaOps.Concelier.WebService.Tests/StellaOps.Concelier.WebService.Tests.csproj - TEST |
-| 729 | AUDIT-0243-A | TODO | Approval | Guild | src/Concelier/__Tests/StellaOps.Concelier.WebService.Tests/StellaOps.Concelier.WebService.Tests.csproj - APPLY |
+| 729 | AUDIT-0243-A | DONE | Waived (test project) | Guild | src/Concelier/__Tests/StellaOps.Concelier.WebService.Tests/StellaOps.Concelier.WebService.Tests.csproj - APPLY |
 | 730 | AUDIT-0244-M | TODO | Report | Guild | src/__Libraries/StellaOps.Configuration/StellaOps.Configuration.csproj - MAINT |
 | 731 | AUDIT-0244-T | TODO | Report | Guild | src/__Libraries/StellaOps.Configuration/StellaOps.Configuration.csproj - TEST |
 | 732 | AUDIT-0244-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Configuration/StellaOps.Configuration.csproj - APPLY |
 | 733 | AUDIT-0245-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Configuration.Tests/StellaOps.Configuration.Tests.csproj - MAINT |
 | 734 | AUDIT-0245-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Configuration.Tests/StellaOps.Configuration.Tests.csproj - TEST |
-| 735 | AUDIT-0245-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Configuration.Tests/StellaOps.Configuration.Tests.csproj - APPLY |
+| 735 | AUDIT-0245-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Configuration.Tests/StellaOps.Configuration.Tests.csproj - APPLY |
 | 736 | AUDIT-0246-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography/StellaOps.Cryptography.csproj - MAINT |
 | 737 | AUDIT-0246-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography/StellaOps.Cryptography.csproj - TEST |
 | 738 | AUDIT-0246-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography/StellaOps.Cryptography.csproj - APPLY |
@@ -769,7 +769,7 @@ Bulk task definitions (applies to every project row below):
 | 747 | AUDIT-0249-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Kms/StellaOps.Cryptography.Kms.csproj - APPLY |
 | 748 | AUDIT-0250-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Kms.Tests/StellaOps.Cryptography.Kms.Tests.csproj - MAINT |
 | 749 | AUDIT-0250-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Kms.Tests/StellaOps.Cryptography.Kms.Tests.csproj - TEST |
-| 750 | AUDIT-0250-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Kms.Tests/StellaOps.Cryptography.Kms.Tests.csproj - APPLY |
+| 750 | AUDIT-0250-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Kms.Tests/StellaOps.Cryptography.Kms.Tests.csproj - APPLY |
 | 751 | AUDIT-0251-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.BouncyCastle/StellaOps.Cryptography.Plugin.BouncyCastle.csproj - MAINT |
 | 752 | AUDIT-0251-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.BouncyCastle/StellaOps.Cryptography.Plugin.BouncyCastle.csproj - TEST |
 | 753 | AUDIT-0251-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.BouncyCastle/StellaOps.Cryptography.Plugin.BouncyCastle.csproj - APPLY |
@@ -781,13 +781,13 @@ Bulk task definitions (applies to every project row below):
 | 759 | AUDIT-0253-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/StellaOps.Cryptography.Plugin.EIDAS.csproj - APPLY |
 | 760 | AUDIT-0254-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/StellaOps.Cryptography.Plugin.EIDAS.Tests.csproj - MAINT |
 | 761 | AUDIT-0254-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/StellaOps.Cryptography.Plugin.EIDAS.Tests.csproj - TEST |
-| 762 | AUDIT-0254-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/StellaOps.Cryptography.Plugin.EIDAS.Tests.csproj - APPLY |
+| 762 | AUDIT-0254-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/StellaOps.Cryptography.Plugin.EIDAS.Tests.csproj - APPLY |
 | 763 | AUDIT-0255-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.OfflineVerification/StellaOps.Cryptography.Plugin.OfflineVerification.csproj - MAINT |
 | 764 | AUDIT-0255-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.OfflineVerification/StellaOps.Cryptography.Plugin.OfflineVerification.csproj - TEST |
 | 765 | AUDIT-0255-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.OfflineVerification/StellaOps.Cryptography.Plugin.OfflineVerification.csproj - APPLY |
 | 766 | AUDIT-0256-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests.csproj - MAINT |
 | 767 | AUDIT-0256-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests.csproj - TEST |
-| 768 | AUDIT-0256-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests.csproj - APPLY |
+| 768 | AUDIT-0256-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests.csproj - APPLY |
 | 769 | AUDIT-0257-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.OpenSslGost/StellaOps.Cryptography.Plugin.OpenSslGost.csproj - MAINT |
 | 770 | AUDIT-0257-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.OpenSslGost/StellaOps.Cryptography.Plugin.OpenSslGost.csproj - TEST |
 | 771 | AUDIT-0257-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.OpenSslGost/StellaOps.Cryptography.Plugin.OpenSslGost.csproj - APPLY |
@@ -805,13 +805,13 @@ Bulk task definitions (applies to every project row below):
 | 783 | AUDIT-0261-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmRemote/StellaOps.Cryptography.Plugin.SmRemote.csproj - APPLY |
 | 784 | AUDIT-0262-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmRemote.Tests/StellaOps.Cryptography.Plugin.SmRemote.Tests.csproj - MAINT |
 | 785 | AUDIT-0262-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmRemote.Tests/StellaOps.Cryptography.Plugin.SmRemote.Tests.csproj - TEST |
-| 786 | AUDIT-0262-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmRemote.Tests/StellaOps.Cryptography.Plugin.SmRemote.Tests.csproj - APPLY |
+| 786 | AUDIT-0262-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmRemote.Tests/StellaOps.Cryptography.Plugin.SmRemote.Tests.csproj - APPLY |
 | 787 | AUDIT-0263-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft/StellaOps.Cryptography.Plugin.SmSoft.csproj - MAINT |
 | 788 | AUDIT-0263-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft/StellaOps.Cryptography.Plugin.SmSoft.csproj - TEST |
 | 789 | AUDIT-0263-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft/StellaOps.Cryptography.Plugin.SmSoft.csproj - APPLY |
 | 790 | AUDIT-0264-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft.Tests/StellaOps.Cryptography.Plugin.SmSoft.Tests.csproj - MAINT |
 | 791 | AUDIT-0264-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft.Tests/StellaOps.Cryptography.Plugin.SmSoft.Tests.csproj - TEST |
-| 792 | AUDIT-0264-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft.Tests/StellaOps.Cryptography.Plugin.SmSoft.Tests.csproj - APPLY |
+| 792 | AUDIT-0264-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft.Tests/StellaOps.Cryptography.Plugin.SmSoft.Tests.csproj - APPLY |
 | 793 | AUDIT-0265-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.WineCsp/StellaOps.Cryptography.Plugin.WineCsp.csproj - MAINT |
 | 794 | AUDIT-0265-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.WineCsp/StellaOps.Cryptography.Plugin.WineCsp.csproj - TEST |
 | 795 | AUDIT-0265-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Plugin.WineCsp/StellaOps.Cryptography.Plugin.WineCsp.csproj - APPLY |
@@ -820,7 +820,7 @@ Bulk task definitions (applies to every project row below):
 | 798 | AUDIT-0266-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.PluginLoader/StellaOps.Cryptography.PluginLoader.csproj - APPLY |
 | 799 | AUDIT-0267-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.PluginLoader.Tests/StellaOps.Cryptography.PluginLoader.Tests.csproj - MAINT |
 | 800 | AUDIT-0267-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.PluginLoader.Tests/StellaOps.Cryptography.PluginLoader.Tests.csproj - TEST |
-| 801 | AUDIT-0267-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.PluginLoader.Tests/StellaOps.Cryptography.PluginLoader.Tests.csproj - APPLY |
+| 801 | AUDIT-0267-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Cryptography.PluginLoader.Tests/StellaOps.Cryptography.PluginLoader.Tests.csproj - APPLY |
 | 802 | AUDIT-0268-M | TODO | Report | Guild | src/Cryptography/StellaOps.Cryptography.Profiles.Ecdsa/StellaOps.Cryptography.Profiles.Ecdsa.csproj - MAINT |
 | 803 | AUDIT-0268-T | TODO | Report | Guild | src/Cryptography/StellaOps.Cryptography.Profiles.Ecdsa/StellaOps.Cryptography.Profiles.Ecdsa.csproj - TEST |
 | 804 | AUDIT-0268-A | TODO | Approval | Guild | src/Cryptography/StellaOps.Cryptography.Profiles.Ecdsa/StellaOps.Cryptography.Profiles.Ecdsa.csproj - APPLY |
@@ -832,16 +832,16 @@ Bulk task definitions (applies to every project row below):
 | 810 | AUDIT-0270-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Providers.OfflineVerification/StellaOps.Cryptography.Providers.OfflineVerification.csproj - APPLY |
 | 811 | AUDIT-0271-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - MAINT |
 | 812 | AUDIT-0271-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - TEST |
-| 813 | AUDIT-0271-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - APPLY |
+| 813 | AUDIT-0271-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - APPLY |
 | 814 | AUDIT-0272-M | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - MAINT |
 | 815 | AUDIT-0272-T | TODO | Report | Guild | src/__Libraries/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - TEST |
-| 816 | AUDIT-0272-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - APPLY |
+| 816 | AUDIT-0272-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj - APPLY |
 | 817 | AUDIT-0273-M | TODO | Report | Guild | src/__Libraries/StellaOps.DeltaVerdict/StellaOps.DeltaVerdict.csproj - MAINT |
 | 818 | AUDIT-0273-T | TODO | Report | Guild | src/__Libraries/StellaOps.DeltaVerdict/StellaOps.DeltaVerdict.csproj - TEST |
 | 819 | AUDIT-0273-A | TODO | Approval | Guild | src/__Libraries/StellaOps.DeltaVerdict/StellaOps.DeltaVerdict.csproj - APPLY |
 | 820 | AUDIT-0274-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.DeltaVerdict.Tests/StellaOps.DeltaVerdict.Tests.csproj - MAINT |
 | 821 | AUDIT-0274-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.DeltaVerdict.Tests/StellaOps.DeltaVerdict.Tests.csproj - TEST |
-| 822 | AUDIT-0274-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.DeltaVerdict.Tests/StellaOps.DeltaVerdict.Tests.csproj - APPLY |
+| 822 | AUDIT-0274-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.DeltaVerdict.Tests/StellaOps.DeltaVerdict.Tests.csproj - APPLY |
 | 823 | AUDIT-0275-M | TODO | Report | Guild | src/__Libraries/StellaOps.DependencyInjection/StellaOps.DependencyInjection.csproj - MAINT |
 | 824 | AUDIT-0275-T | TODO | Report | Guild | src/__Libraries/StellaOps.DependencyInjection/StellaOps.DependencyInjection.csproj - TEST |
 | 825 | AUDIT-0275-A | TODO | Approval | Guild | src/__Libraries/StellaOps.DependencyInjection/StellaOps.DependencyInjection.csproj - APPLY |
@@ -853,7 +853,7 @@ Bulk task definitions (applies to every project row below):
 | 831 | AUDIT-0277-A | TODO | Approval | Guild | src/__Analyzers/StellaOps.Determinism.Analyzers/StellaOps.Determinism.Analyzers.csproj - APPLY |
 | 832 | AUDIT-0278-M | TODO | Report | Guild | src/__Analyzers/StellaOps.Determinism.Analyzers.Tests/StellaOps.Determinism.Analyzers.Tests.csproj - MAINT |
 | 833 | AUDIT-0278-T | TODO | Report | Guild | src/__Analyzers/StellaOps.Determinism.Analyzers.Tests/StellaOps.Determinism.Analyzers.Tests.csproj - TEST |
-| 834 | AUDIT-0278-A | TODO | Approval | Guild | src/__Analyzers/StellaOps.Determinism.Analyzers.Tests/StellaOps.Determinism.Analyzers.Tests.csproj - APPLY |
+| 834 | AUDIT-0278-A | DONE | Waived (test project) | Guild | src/__Analyzers/StellaOps.Determinism.Analyzers.Tests/StellaOps.Determinism.Analyzers.Tests.csproj - APPLY |
 | 835 | AUDIT-0279-M | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence/StellaOps.Evidence.csproj - MAINT |
 | 836 | AUDIT-0279-T | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence/StellaOps.Evidence.csproj - TEST |
 | 837 | AUDIT-0279-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Evidence/StellaOps.Evidence.csproj - APPLY |
@@ -862,22 +862,22 @@ Bulk task definitions (applies to every project row below):
 | 840 | AUDIT-0280-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Evidence.Bundle/StellaOps.Evidence.Bundle.csproj - APPLY |
 | 841 | AUDIT-0281-M | TODO | Report | Guild | src/__Tests/StellaOps.Evidence.Bundle.Tests/StellaOps.Evidence.Bundle.Tests.csproj - MAINT |
 | 842 | AUDIT-0281-T | TODO | Report | Guild | src/__Tests/StellaOps.Evidence.Bundle.Tests/StellaOps.Evidence.Bundle.Tests.csproj - TEST |
-| 843 | AUDIT-0281-A | TODO | Approval | Guild | src/__Tests/StellaOps.Evidence.Bundle.Tests/StellaOps.Evidence.Bundle.Tests.csproj - APPLY |
+| 843 | AUDIT-0281-A | DONE | Waived (test project) | Guild | src/__Tests/StellaOps.Evidence.Bundle.Tests/StellaOps.Evidence.Bundle.Tests.csproj - APPLY |
 | 844 | AUDIT-0282-M | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence.Core/StellaOps.Evidence.Core.csproj - MAINT |
 | 845 | AUDIT-0282-T | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence.Core/StellaOps.Evidence.Core.csproj - TEST |
 | 846 | AUDIT-0282-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Evidence.Core/StellaOps.Evidence.Core.csproj - APPLY |
 | 847 | AUDIT-0283-M | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence.Core.Tests/StellaOps.Evidence.Core.Tests.csproj - MAINT |
 | 848 | AUDIT-0283-T | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence.Core.Tests/StellaOps.Evidence.Core.Tests.csproj - TEST |
-| 849 | AUDIT-0283-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Evidence.Core.Tests/StellaOps.Evidence.Core.Tests.csproj - APPLY |
+| 849 | AUDIT-0283-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Evidence.Core.Tests/StellaOps.Evidence.Core.Tests.csproj - APPLY |
 | 850 | AUDIT-0284-M | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence.Persistence/StellaOps.Evidence.Persistence.csproj - MAINT |
 | 851 | AUDIT-0284-T | TODO | Report | Guild | src/__Libraries/StellaOps.Evidence.Persistence/StellaOps.Evidence.Persistence.csproj - TEST |
 | 852 | AUDIT-0284-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Evidence.Persistence/StellaOps.Evidence.Persistence.csproj - APPLY |
 | 853 | AUDIT-0285-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Persistence.Tests/StellaOps.Evidence.Persistence.Tests.csproj - MAINT |
 | 854 | AUDIT-0285-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Persistence.Tests/StellaOps.Evidence.Persistence.Tests.csproj - TEST |
-| 855 | AUDIT-0285-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Persistence.Tests/StellaOps.Evidence.Persistence.Tests.csproj - APPLY |
+| 855 | AUDIT-0285-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Persistence.Tests/StellaOps.Evidence.Persistence.Tests.csproj - APPLY |
 | 856 | AUDIT-0286-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Tests/StellaOps.Evidence.Tests.csproj - MAINT |
 | 857 | AUDIT-0286-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Tests/StellaOps.Evidence.Tests.csproj - TEST |
-| 858 | AUDIT-0286-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Tests/StellaOps.Evidence.Tests.csproj - APPLY |
+| 858 | AUDIT-0286-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Evidence.Tests/StellaOps.Evidence.Tests.csproj - APPLY |
 | 859 | AUDIT-0287-M | TODO | Report | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.csproj - MAINT |
 | 860 | AUDIT-0287-T | TODO | Report | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.csproj - TEST |
 | 861 | AUDIT-0287-A | TODO | Approval | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.csproj - APPLY |
@@ -889,7 +889,7 @@ Bulk task definitions (applies to every project row below):
 | 867 | AUDIT-0289-A | TODO | Approval | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Infrastructure/StellaOps.EvidenceLocker.Infrastructure.csproj - APPLY |
 | 868 | AUDIT-0290-M | TODO | Report | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Tests/StellaOps.EvidenceLocker.Tests.csproj - MAINT |
 | 869 | AUDIT-0290-T | TODO | Report | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Tests/StellaOps.EvidenceLocker.Tests.csproj - TEST |
-| 870 | AUDIT-0290-A | TODO | Approval | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Tests/StellaOps.EvidenceLocker.Tests.csproj - APPLY |
+| 870 | AUDIT-0290-A | DONE | Waived (test project) | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Tests/StellaOps.EvidenceLocker.Tests.csproj - APPLY |
 | 871 | AUDIT-0291-M | TODO | Report | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.WebService/StellaOps.EvidenceLocker.WebService.csproj - MAINT |
 | 872 | AUDIT-0291-T | TODO | Report | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.WebService/StellaOps.EvidenceLocker.WebService.csproj - TEST |
 | 873 | AUDIT-0291-A | TODO | Approval | Guild | src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.WebService/StellaOps.EvidenceLocker.WebService.csproj - APPLY |
@@ -901,13 +901,13 @@ Bulk task definitions (applies to every project row below):
 | 879 | AUDIT-0293-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.ArtifactStores.S3/StellaOps.Excititor.ArtifactStores.S3.csproj - APPLY |
 | 880 | AUDIT-0294-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.ArtifactStores.S3.Tests/StellaOps.Excititor.ArtifactStores.S3.Tests.csproj - MAINT |
 | 881 | AUDIT-0294-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.ArtifactStores.S3.Tests/StellaOps.Excititor.ArtifactStores.S3.Tests.csproj - TEST |
-| 882 | AUDIT-0294-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.ArtifactStores.S3.Tests/StellaOps.Excititor.ArtifactStores.S3.Tests.csproj - APPLY |
+| 882 | AUDIT-0294-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.ArtifactStores.S3.Tests/StellaOps.Excititor.ArtifactStores.S3.Tests.csproj - APPLY |
 | 883 | AUDIT-0295-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Attestation/StellaOps.Excititor.Attestation.csproj - MAINT |
 | 884 | AUDIT-0295-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Attestation/StellaOps.Excititor.Attestation.csproj - TEST |
 | 885 | AUDIT-0295-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Attestation/StellaOps.Excititor.Attestation.csproj - APPLY |
 | 886 | AUDIT-0296-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/StellaOps.Excititor.Attestation.Tests.csproj - MAINT |
 | 887 | AUDIT-0296-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/StellaOps.Excititor.Attestation.Tests.csproj - TEST |
-| 888 | AUDIT-0296-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/StellaOps.Excititor.Attestation.Tests.csproj - APPLY |
+| 888 | AUDIT-0296-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/StellaOps.Excititor.Attestation.Tests.csproj - APPLY |
 | 889 | AUDIT-0297-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/StellaOps.Excititor.Connectors.Abstractions.csproj - MAINT |
 | 890 | AUDIT-0297-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/StellaOps.Excititor.Connectors.Abstractions.csproj - TEST |
 | 891 | AUDIT-0297-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/StellaOps.Excititor.Connectors.Abstractions.csproj - APPLY |
@@ -916,106 +916,106 @@ Bulk task definitions (applies to every project row below):
 | 894 | AUDIT-0298-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Cisco.CSAF/StellaOps.Excititor.Connectors.Cisco.CSAF.csproj - APPLY |
 | 895 | AUDIT-0299-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests.csproj - MAINT |
 | 896 | AUDIT-0299-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests.csproj - TEST |
-| 897 | AUDIT-0299-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests.csproj - APPLY |
+| 897 | AUDIT-0299-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests.csproj - APPLY |
 | 898 | AUDIT-0300-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/StellaOps.Excititor.Connectors.MSRC.CSAF.csproj - MAINT |
 | 899 | AUDIT-0300-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/StellaOps.Excititor.Connectors.MSRC.CSAF.csproj - TEST |
 | 900 | AUDIT-0300-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/StellaOps.Excititor.Connectors.MSRC.CSAF.csproj - APPLY |
 | 901 | AUDIT-0301-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests.csproj - MAINT |
 | 902 | AUDIT-0301-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests.csproj - TEST |
-| 903 | AUDIT-0301-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests.csproj - APPLY |
+| 903 | AUDIT-0301-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests.csproj - APPLY |
 | 904 | AUDIT-0302-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.csproj - MAINT |
 | 905 | AUDIT-0302-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.csproj - TEST |
 | 906 | AUDIT-0302-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.csproj - APPLY |
 | 907 | AUDIT-0303-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests.csproj - MAINT |
 | 908 | AUDIT-0303-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests.csproj - TEST |
-| 909 | AUDIT-0303-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests.csproj - APPLY |
+| 909 | AUDIT-0303-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests.csproj - APPLY |
 | 910 | AUDIT-0304-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/StellaOps.Excititor.Connectors.Oracle.CSAF.csproj - MAINT |
 | 911 | AUDIT-0304-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/StellaOps.Excititor.Connectors.Oracle.CSAF.csproj - TEST |
 | 912 | AUDIT-0304-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/StellaOps.Excititor.Connectors.Oracle.CSAF.csproj - APPLY |
 | 913 | AUDIT-0305-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests.csproj - MAINT |
 | 914 | AUDIT-0305-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests.csproj - TEST |
-| 915 | AUDIT-0305-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests.csproj - APPLY |
+| 915 | AUDIT-0305-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests.csproj - APPLY |
 | 916 | AUDIT-0306-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/StellaOps.Excititor.Connectors.RedHat.CSAF.csproj - MAINT |
 | 917 | AUDIT-0306-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/StellaOps.Excititor.Connectors.RedHat.CSAF.csproj - TEST |
 | 918 | AUDIT-0306-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/StellaOps.Excititor.Connectors.RedHat.CSAF.csproj - APPLY |
 | 919 | AUDIT-0307-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests.csproj - MAINT |
 | 920 | AUDIT-0307-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests.csproj - TEST |
-| 921 | AUDIT-0307-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests.csproj - APPLY |
+| 921 | AUDIT-0307-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests.csproj - APPLY |
 | 922 | AUDIT-0308-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.csproj - MAINT |
 | 923 | AUDIT-0308-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.csproj - TEST |
 | 924 | AUDIT-0308-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.csproj - APPLY |
 | 925 | AUDIT-0309-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests.csproj - MAINT |
 | 926 | AUDIT-0309-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests.csproj - TEST |
-| 927 | AUDIT-0309-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests.csproj - APPLY |
+| 927 | AUDIT-0309-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests.csproj - APPLY |
 | 928 | AUDIT-0310-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/StellaOps.Excititor.Connectors.Ubuntu.CSAF.csproj - MAINT |
 | 929 | AUDIT-0310-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/StellaOps.Excititor.Connectors.Ubuntu.CSAF.csproj - TEST |
 | 930 | AUDIT-0310-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/StellaOps.Excititor.Connectors.Ubuntu.CSAF.csproj - APPLY |
 | 931 | AUDIT-0311-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests.csproj - MAINT |
 | 932 | AUDIT-0311-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests.csproj - TEST |
-| 933 | AUDIT-0311-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests.csproj - APPLY |
+| 933 | AUDIT-0311-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests.csproj - APPLY |
 | 934 | AUDIT-0312-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Core/StellaOps.Excititor.Core.csproj - MAINT |
 | 935 | AUDIT-0312-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Core/StellaOps.Excititor.Core.csproj - TEST |
 | 936 | AUDIT-0312-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Core/StellaOps.Excititor.Core.csproj - APPLY |
 | 937 | AUDIT-0313-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.Tests/StellaOps.Excititor.Core.Tests.csproj - MAINT |
 | 938 | AUDIT-0313-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.Tests/StellaOps.Excititor.Core.Tests.csproj - TEST |
-| 939 | AUDIT-0313-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.Tests/StellaOps.Excititor.Core.Tests.csproj - APPLY |
+| 939 | AUDIT-0313-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.Tests/StellaOps.Excititor.Core.Tests.csproj - APPLY |
 | 940 | AUDIT-0314-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.UnitTests/StellaOps.Excititor.Core.UnitTests.csproj - MAINT |
 | 941 | AUDIT-0314-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.UnitTests/StellaOps.Excititor.Core.UnitTests.csproj - TEST |
-| 942 | AUDIT-0314-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.UnitTests/StellaOps.Excititor.Core.UnitTests.csproj - APPLY |
+| 942 | AUDIT-0314-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Core.UnitTests/StellaOps.Excititor.Core.UnitTests.csproj - APPLY |
 | 943 | AUDIT-0315-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Export/StellaOps.Excititor.Export.csproj - MAINT |
 | 944 | AUDIT-0315-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Export/StellaOps.Excititor.Export.csproj - TEST |
 | 945 | AUDIT-0315-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Export/StellaOps.Excititor.Export.csproj - APPLY |
 | 946 | AUDIT-0316-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Export.Tests/StellaOps.Excititor.Export.Tests.csproj - MAINT |
 | 947 | AUDIT-0316-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Export.Tests/StellaOps.Excititor.Export.Tests.csproj - TEST |
-| 948 | AUDIT-0316-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Export.Tests/StellaOps.Excititor.Export.Tests.csproj - APPLY |
+| 948 | AUDIT-0316-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Export.Tests/StellaOps.Excititor.Export.Tests.csproj - APPLY |
 | 949 | AUDIT-0317-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/StellaOps.Excititor.Formats.CSAF.csproj - MAINT |
 | 950 | AUDIT-0317-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/StellaOps.Excititor.Formats.CSAF.csproj - TEST |
 | 951 | AUDIT-0317-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/StellaOps.Excititor.Formats.CSAF.csproj - APPLY |
 | 952 | AUDIT-0318-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CSAF.Tests/StellaOps.Excititor.Formats.CSAF.Tests.csproj - MAINT |
 | 953 | AUDIT-0318-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CSAF.Tests/StellaOps.Excititor.Formats.CSAF.Tests.csproj - TEST |
-| 954 | AUDIT-0318-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CSAF.Tests/StellaOps.Excititor.Formats.CSAF.Tests.csproj - APPLY |
+| 954 | AUDIT-0318-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CSAF.Tests/StellaOps.Excititor.Formats.CSAF.Tests.csproj - APPLY |
 | 955 | AUDIT-0319-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/StellaOps.Excititor.Formats.CycloneDX.csproj - MAINT |
 | 956 | AUDIT-0319-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/StellaOps.Excititor.Formats.CycloneDX.csproj - TEST |
 | 957 | AUDIT-0319-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/StellaOps.Excititor.Formats.CycloneDX.csproj - APPLY |
 | 958 | AUDIT-0320-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CycloneDX.Tests/StellaOps.Excititor.Formats.CycloneDX.Tests.csproj - MAINT |
 | 959 | AUDIT-0320-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CycloneDX.Tests/StellaOps.Excititor.Formats.CycloneDX.Tests.csproj - TEST |
-| 960 | AUDIT-0320-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CycloneDX.Tests/StellaOps.Excititor.Formats.CycloneDX.Tests.csproj - APPLY |
+| 960 | AUDIT-0320-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.CycloneDX.Tests/StellaOps.Excititor.Formats.CycloneDX.Tests.csproj - APPLY |
 | 961 | AUDIT-0321-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/StellaOps.Excititor.Formats.OpenVEX.csproj - MAINT |
 | 962 | AUDIT-0321-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/StellaOps.Excititor.Formats.OpenVEX.csproj - TEST |
 | 963 | AUDIT-0321-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/StellaOps.Excititor.Formats.OpenVEX.csproj - APPLY |
 | 964 | AUDIT-0322-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.OpenVEX.Tests/StellaOps.Excititor.Formats.OpenVEX.Tests.csproj - MAINT |
 | 965 | AUDIT-0322-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.OpenVEX.Tests/StellaOps.Excititor.Formats.OpenVEX.Tests.csproj - TEST |
-| 966 | AUDIT-0322-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.OpenVEX.Tests/StellaOps.Excititor.Formats.OpenVEX.Tests.csproj - APPLY |
+| 966 | AUDIT-0322-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Formats.OpenVEX.Tests/StellaOps.Excititor.Formats.OpenVEX.Tests.csproj - APPLY |
 | 967 | AUDIT-0323-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Persistence/StellaOps.Excititor.Persistence.csproj - MAINT |
 | 968 | AUDIT-0323-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Persistence/StellaOps.Excititor.Persistence.csproj - TEST |
 | 969 | AUDIT-0323-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Persistence/StellaOps.Excititor.Persistence.csproj - APPLY |
 | 970 | AUDIT-0324-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Persistence.Tests/StellaOps.Excititor.Persistence.Tests.csproj - MAINT |
 | 971 | AUDIT-0324-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Persistence.Tests/StellaOps.Excititor.Persistence.Tests.csproj - TEST |
-| 972 | AUDIT-0324-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Persistence.Tests/StellaOps.Excititor.Persistence.Tests.csproj - APPLY |
+| 972 | AUDIT-0324-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Persistence.Tests/StellaOps.Excititor.Persistence.Tests.csproj - APPLY |
 | 973 | AUDIT-0325-M | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Policy/StellaOps.Excititor.Policy.csproj - MAINT |
 | 974 | AUDIT-0325-T | TODO | Report | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Policy/StellaOps.Excititor.Policy.csproj - TEST |
 | 975 | AUDIT-0325-A | TODO | Approval | Guild | src/Excititor/__Libraries/StellaOps.Excititor.Policy/StellaOps.Excititor.Policy.csproj - APPLY |
 | 976 | AUDIT-0326-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Policy.Tests/StellaOps.Excititor.Policy.Tests.csproj - MAINT |
 | 977 | AUDIT-0326-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Policy.Tests/StellaOps.Excititor.Policy.Tests.csproj - TEST |
-| 978 | AUDIT-0326-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Policy.Tests/StellaOps.Excititor.Policy.Tests.csproj - APPLY |
+| 978 | AUDIT-0326-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Policy.Tests/StellaOps.Excititor.Policy.Tests.csproj - APPLY |
 | 979 | AUDIT-0327-M | TODO | Report | Guild | src/Excititor/StellaOps.Excititor.WebService/StellaOps.Excititor.WebService.csproj - MAINT |
 | 980 | AUDIT-0327-T | TODO | Report | Guild | src/Excititor/StellaOps.Excititor.WebService/StellaOps.Excititor.WebService.csproj - TEST |
 | 981 | AUDIT-0327-A | TODO | Approval | Guild | src/Excititor/StellaOps.Excititor.WebService/StellaOps.Excititor.WebService.csproj - APPLY |
 | 982 | AUDIT-0328-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj - MAINT |
 | 983 | AUDIT-0328-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj - TEST |
-| 984 | AUDIT-0328-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj - APPLY |
+| 984 | AUDIT-0328-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj - APPLY |
 | 985 | AUDIT-0329-M | TODO | Report | Guild | src/Excititor/StellaOps.Excititor.Worker/StellaOps.Excititor.Worker.csproj - MAINT |
 | 986 | AUDIT-0329-T | TODO | Report | Guild | src/Excititor/StellaOps.Excititor.Worker/StellaOps.Excititor.Worker.csproj - TEST |
 | 987 | AUDIT-0329-A | TODO | Approval | Guild | src/Excititor/StellaOps.Excititor.Worker/StellaOps.Excititor.Worker.csproj - APPLY |
 | 988 | AUDIT-0330-M | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Worker.Tests/StellaOps.Excititor.Worker.Tests.csproj - MAINT |
 | 989 | AUDIT-0330-T | TODO | Report | Guild | src/Excititor/__Tests/StellaOps.Excititor.Worker.Tests/StellaOps.Excititor.Worker.Tests.csproj - TEST |
-| 990 | AUDIT-0330-A | TODO | Approval | Guild | src/Excititor/__Tests/StellaOps.Excititor.Worker.Tests/StellaOps.Excititor.Worker.Tests.csproj - APPLY |
+| 990 | AUDIT-0330-A | DONE | Waived (test project) | Guild | src/Excititor/__Tests/StellaOps.Excititor.Worker.Tests/StellaOps.Excititor.Worker.Tests.csproj - APPLY |
 | 991 | AUDIT-0331-M | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client/StellaOps.ExportCenter.Client.csproj - MAINT |
 | 992 | AUDIT-0331-T | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client/StellaOps.ExportCenter.Client.csproj - TEST |
 | 993 | AUDIT-0331-A | TODO | Approval | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client/StellaOps.ExportCenter.Client.csproj - APPLY |
 | 994 | AUDIT-0332-M | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client.Tests/StellaOps.ExportCenter.Client.Tests.csproj - MAINT |
 | 995 | AUDIT-0332-T | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client.Tests/StellaOps.ExportCenter.Client.Tests.csproj - TEST |
-| 996 | AUDIT-0332-A | TODO | Approval | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client.Tests/StellaOps.ExportCenter.Client.Tests.csproj - APPLY |
+| 996 | AUDIT-0332-A | DONE | Waived (test project) | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Client.Tests/StellaOps.ExportCenter.Client.Tests.csproj - APPLY |
 | 997 | AUDIT-0333-M | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Core/StellaOps.ExportCenter.Core.csproj - MAINT |
 | 998 | AUDIT-0333-T | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Core/StellaOps.ExportCenter.Core.csproj - TEST |
 | 999 | AUDIT-0333-A | TODO | Approval | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Core/StellaOps.ExportCenter.Core.csproj - APPLY |
@@ -1027,7 +1027,7 @@ Bulk task definitions (applies to every project row below):
 | 1005 | AUDIT-0335-A | TODO | Approval | Guild | src/ExportCenter/StellaOps.ExportCenter.RiskBundles/StellaOps.ExportCenter.RiskBundles.csproj - APPLY |
 | 1006 | AUDIT-0336-M | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Tests/StellaOps.ExportCenter.Tests.csproj - MAINT |
 | 1007 | AUDIT-0336-T | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Tests/StellaOps.ExportCenter.Tests.csproj - TEST |
-| 1008 | AUDIT-0336-A | TODO | Approval | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Tests/StellaOps.ExportCenter.Tests.csproj - APPLY |
+| 1008 | AUDIT-0336-A | DONE | Waived (test project) | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.Tests/StellaOps.ExportCenter.Tests.csproj - APPLY |
 | 1009 | AUDIT-0337-M | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.WebService/StellaOps.ExportCenter.WebService.csproj - MAINT |
 | 1010 | AUDIT-0337-T | TODO | Report | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.WebService/StellaOps.ExportCenter.WebService.csproj - TEST |
 | 1011 | AUDIT-0337-A | TODO | Approval | Guild | src/ExportCenter/StellaOps.ExportCenter/StellaOps.ExportCenter.WebService/StellaOps.ExportCenter.WebService.csproj - APPLY |
@@ -1042,16 +1042,16 @@ Bulk task definitions (applies to every project row below):
 | 1020 | AUDIT-0340-A | TODO | Approval | Guild | src/Feedser/StellaOps.Feedser.Core/StellaOps.Feedser.Core.csproj - APPLY |
 | 1021 | AUDIT-0341-M | TODO | Report | Guild | src/Feedser/__Tests/StellaOps.Feedser.Core.Tests/StellaOps.Feedser.Core.Tests.csproj - MAINT |
 | 1022 | AUDIT-0341-T | TODO | Report | Guild | src/Feedser/__Tests/StellaOps.Feedser.Core.Tests/StellaOps.Feedser.Core.Tests.csproj - TEST |
-| 1023 | AUDIT-0341-A | TODO | Approval | Guild | src/Feedser/__Tests/StellaOps.Feedser.Core.Tests/StellaOps.Feedser.Core.Tests.csproj - APPLY |
+| 1023 | AUDIT-0341-A | DONE | Waived (test project) | Guild | src/Feedser/__Tests/StellaOps.Feedser.Core.Tests/StellaOps.Feedser.Core.Tests.csproj - APPLY |
 | 1024 | AUDIT-0342-M | TODO | Report | Guild | src/Findings/StellaOps.Findings.Ledger/StellaOps.Findings.Ledger.csproj - MAINT |
 | 1025 | AUDIT-0342-T | TODO | Report | Guild | src/Findings/StellaOps.Findings.Ledger/StellaOps.Findings.Ledger.csproj - TEST |
 | 1026 | AUDIT-0342-A | TODO | Approval | Guild | src/Findings/StellaOps.Findings.Ledger/StellaOps.Findings.Ledger.csproj - APPLY |
 | 1027 | AUDIT-0343-M | TODO | Report | Guild | src/Findings/__Tests/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - MAINT |
 | 1028 | AUDIT-0343-T | TODO | Report | Guild | src/Findings/__Tests/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - TEST |
-| 1029 | AUDIT-0343-A | TODO | Approval | Guild | src/Findings/__Tests/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - APPLY |
+| 1029 | AUDIT-0343-A | DONE | Waived (test project) | Guild | src/Findings/__Tests/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - APPLY |
 | 1030 | AUDIT-0344-M | TODO | Report | Guild | src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - MAINT |
 | 1031 | AUDIT-0344-T | TODO | Report | Guild | src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - TEST |
-| 1032 | AUDIT-0344-A | TODO | Approval | Guild | src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - APPLY |
+| 1032 | AUDIT-0344-A | DONE | Waived (test project) | Guild | src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj - APPLY |
 | 1033 | AUDIT-0345-M | TODO | Report | Guild | src/Findings/StellaOps.Findings.Ledger.WebService/StellaOps.Findings.Ledger.WebService.csproj - MAINT |
 | 1034 | AUDIT-0345-T | TODO | Report | Guild | src/Findings/StellaOps.Findings.Ledger.WebService/StellaOps.Findings.Ledger.WebService.csproj - TEST |
 | 1035 | AUDIT-0345-A | TODO | Approval | Guild | src/Findings/StellaOps.Findings.Ledger.WebService/StellaOps.Findings.Ledger.WebService.csproj - APPLY |
@@ -1063,16 +1063,16 @@ Bulk task definitions (applies to every project row below):
 | 1041 | AUDIT-0347-A | TODO | Approval | Guild | src/Router/StellaOps.Gateway.WebService/StellaOps.Gateway.WebService.csproj - APPLY |
 | 1042 | AUDIT-0348-M | TODO | Report | Guild | src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - MAINT |
 | 1043 | AUDIT-0348-T | TODO | Report | Guild | src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - TEST |
-| 1044 | AUDIT-0348-A | TODO | Approval | Guild | src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - APPLY |
+| 1044 | AUDIT-0348-A | DONE | Waived (test project) | Guild | src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - APPLY |
 | 1045 | AUDIT-0349-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - MAINT |
 | 1046 | AUDIT-0349-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - TEST |
-| 1047 | AUDIT-0349-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - APPLY |
+| 1047 | AUDIT-0349-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Gateway.WebService.Tests/StellaOps.Gateway.WebService.Tests.csproj - APPLY |
 | 1048 | AUDIT-0350-M | TODO | Report | Guild | src/Graph/StellaOps.Graph.Api/StellaOps.Graph.Api.csproj - MAINT |
 | 1049 | AUDIT-0350-T | TODO | Report | Guild | src/Graph/StellaOps.Graph.Api/StellaOps.Graph.Api.csproj - TEST |
 | 1050 | AUDIT-0350-A | TODO | Approval | Guild | src/Graph/StellaOps.Graph.Api/StellaOps.Graph.Api.csproj - APPLY |
 | 1051 | AUDIT-0351-M | TODO | Report | Guild | src/Graph/__Tests/StellaOps.Graph.Api.Tests/StellaOps.Graph.Api.Tests.csproj - MAINT |
 | 1052 | AUDIT-0351-T | TODO | Report | Guild | src/Graph/__Tests/StellaOps.Graph.Api.Tests/StellaOps.Graph.Api.Tests.csproj - TEST |
-| 1053 | AUDIT-0351-A | TODO | Approval | Guild | src/Graph/__Tests/StellaOps.Graph.Api.Tests/StellaOps.Graph.Api.Tests.csproj - APPLY |
+| 1053 | AUDIT-0351-A | DONE | Waived (test project) | Guild | src/Graph/__Tests/StellaOps.Graph.Api.Tests/StellaOps.Graph.Api.Tests.csproj - APPLY |
 | 1054 | AUDIT-0352-M | TODO | Report | Guild | src/Graph/StellaOps.Graph.Indexer/StellaOps.Graph.Indexer.csproj - MAINT |
 | 1055 | AUDIT-0352-T | TODO | Report | Guild | src/Graph/StellaOps.Graph.Indexer/StellaOps.Graph.Indexer.csproj - TEST |
 | 1056 | AUDIT-0352-A | TODO | Approval | Guild | src/Graph/StellaOps.Graph.Indexer/StellaOps.Graph.Indexer.csproj - APPLY |
@@ -1081,13 +1081,13 @@ Bulk task definitions (applies to every project row below):
 | 1059 | AUDIT-0353-A | TODO | Approval | Guild | src/Graph/__Libraries/StellaOps.Graph.Indexer.Persistence/StellaOps.Graph.Indexer.Persistence.csproj - APPLY |
 | 1060 | AUDIT-0354-M | TODO | Report | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests/StellaOps.Graph.Indexer.Persistence.Tests.csproj - MAINT |
 | 1061 | AUDIT-0354-T | TODO | Report | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests/StellaOps.Graph.Indexer.Persistence.Tests.csproj - TEST |
-| 1062 | AUDIT-0354-A | TODO | Approval | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests/StellaOps.Graph.Indexer.Persistence.Tests.csproj - APPLY |
+| 1062 | AUDIT-0354-A | DONE | Waived (test project) | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests/StellaOps.Graph.Indexer.Persistence.Tests.csproj - APPLY |
 | 1063 | AUDIT-0355-M | TODO | Report | Guild | src/__Tests/Graph/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - MAINT |
 | 1064 | AUDIT-0355-T | TODO | Report | Guild | src/__Tests/Graph/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - TEST |
-| 1065 | AUDIT-0355-A | TODO | Approval | Guild | src/__Tests/Graph/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - APPLY |
+| 1065 | AUDIT-0355-A | DONE | Waived (test project) | Guild | src/__Tests/Graph/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - APPLY |
 | 1066 | AUDIT-0356-M | TODO | Report | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - MAINT |
 | 1067 | AUDIT-0356-T | TODO | Report | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - TEST |
-| 1068 | AUDIT-0356-A | TODO | Approval | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - APPLY |
+| 1068 | AUDIT-0356-A | DONE | Waived (test project) | Guild | src/Graph/__Tests/StellaOps.Graph.Indexer.Tests/StellaOps.Graph.Indexer.Tests.csproj - APPLY |
 | 1069 | AUDIT-0357-M | TODO | Report | Guild | src/__Libraries/StellaOps.Infrastructure.EfCore/StellaOps.Infrastructure.EfCore.csproj - MAINT |
 | 1070 | AUDIT-0357-T | TODO | Report | Guild | src/__Libraries/StellaOps.Infrastructure.EfCore/StellaOps.Infrastructure.EfCore.csproj - TEST |
 | 1071 | AUDIT-0357-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Infrastructure.EfCore/StellaOps.Infrastructure.EfCore.csproj - APPLY |
@@ -1096,43 +1096,43 @@ Bulk task definitions (applies to every project row below):
 | 1074 | AUDIT-0358-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Infrastructure.Postgres/StellaOps.Infrastructure.Postgres.csproj - APPLY |
 | 1075 | AUDIT-0359-M | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Infrastructure.Postgres.Testing/StellaOps.Infrastructure.Postgres.Testing.csproj - MAINT |
 | 1076 | AUDIT-0359-T | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Infrastructure.Postgres.Testing/StellaOps.Infrastructure.Postgres.Testing.csproj - TEST |
-| 1077 | AUDIT-0359-A | TODO | Approval | Guild | src/__Tests/__Libraries/StellaOps.Infrastructure.Postgres.Testing/StellaOps.Infrastructure.Postgres.Testing.csproj - APPLY |
+| 1077 | AUDIT-0359-A | DONE | Waived (test project) | Guild | src/__Tests/__Libraries/StellaOps.Infrastructure.Postgres.Testing/StellaOps.Infrastructure.Postgres.Testing.csproj - APPLY |
 | 1078 | AUDIT-0360-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Infrastructure.Postgres.Tests/StellaOps.Infrastructure.Postgres.Tests.csproj - MAINT |
 | 1079 | AUDIT-0360-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Infrastructure.Postgres.Tests/StellaOps.Infrastructure.Postgres.Tests.csproj - TEST |
-| 1080 | AUDIT-0360-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Infrastructure.Postgres.Tests/StellaOps.Infrastructure.Postgres.Tests.csproj - APPLY |
+| 1080 | AUDIT-0360-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Infrastructure.Postgres.Tests/StellaOps.Infrastructure.Postgres.Tests.csproj - APPLY |
 | 1081 | AUDIT-0361-M | TODO | Report | Guild | src/__Libraries/StellaOps.Ingestion.Telemetry/StellaOps.Ingestion.Telemetry.csproj - MAINT |
 | 1082 | AUDIT-0361-T | TODO | Report | Guild | src/__Libraries/StellaOps.Ingestion.Telemetry/StellaOps.Ingestion.Telemetry.csproj - TEST |
 | 1083 | AUDIT-0361-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Ingestion.Telemetry/StellaOps.Ingestion.Telemetry.csproj - APPLY |
 | 1084 | AUDIT-0362-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.AirGap/StellaOps.Integration.AirGap.csproj - MAINT |
 | 1085 | AUDIT-0362-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.AirGap/StellaOps.Integration.AirGap.csproj - TEST |
-| 1086 | AUDIT-0362-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.AirGap/StellaOps.Integration.AirGap.csproj - APPLY |
+| 1086 | AUDIT-0362-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.AirGap/StellaOps.Integration.AirGap.csproj - APPLY |
 | 1087 | AUDIT-0363-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Determinism/StellaOps.Integration.Determinism.csproj - MAINT |
 | 1088 | AUDIT-0363-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Determinism/StellaOps.Integration.Determinism.csproj - TEST |
-| 1089 | AUDIT-0363-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.Determinism/StellaOps.Integration.Determinism.csproj - APPLY |
+| 1089 | AUDIT-0363-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.Determinism/StellaOps.Integration.Determinism.csproj - APPLY |
 | 1090 | AUDIT-0364-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.E2E/StellaOps.Integration.E2E.csproj - MAINT |
 | 1091 | AUDIT-0364-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.E2E/StellaOps.Integration.E2E.csproj - TEST |
-| 1092 | AUDIT-0364-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.E2E/StellaOps.Integration.E2E.csproj - APPLY |
+| 1092 | AUDIT-0364-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.E2E/StellaOps.Integration.E2E.csproj - APPLY |
 | 1093 | AUDIT-0365-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Performance/StellaOps.Integration.Performance.csproj - MAINT |
 | 1094 | AUDIT-0365-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Performance/StellaOps.Integration.Performance.csproj - TEST |
-| 1095 | AUDIT-0365-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.Performance/StellaOps.Integration.Performance.csproj - APPLY |
+| 1095 | AUDIT-0365-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.Performance/StellaOps.Integration.Performance.csproj - APPLY |
 | 1096 | AUDIT-0366-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Platform/StellaOps.Integration.Platform.csproj - MAINT |
 | 1097 | AUDIT-0366-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Platform/StellaOps.Integration.Platform.csproj - TEST |
-| 1098 | AUDIT-0366-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.Platform/StellaOps.Integration.Platform.csproj - APPLY |
+| 1098 | AUDIT-0366-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.Platform/StellaOps.Integration.Platform.csproj - APPLY |
 | 1099 | AUDIT-0367-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.ProofChain/StellaOps.Integration.ProofChain.csproj - MAINT |
 | 1100 | AUDIT-0367-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.ProofChain/StellaOps.Integration.ProofChain.csproj - TEST |
-| 1101 | AUDIT-0367-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.ProofChain/StellaOps.Integration.ProofChain.csproj - APPLY |
+| 1101 | AUDIT-0367-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.ProofChain/StellaOps.Integration.ProofChain.csproj - APPLY |
 | 1102 | AUDIT-0368-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Reachability/StellaOps.Integration.Reachability.csproj - MAINT |
 | 1103 | AUDIT-0368-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Reachability/StellaOps.Integration.Reachability.csproj - TEST |
-| 1104 | AUDIT-0368-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.Reachability/StellaOps.Integration.Reachability.csproj - APPLY |
+| 1104 | AUDIT-0368-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.Reachability/StellaOps.Integration.Reachability.csproj - APPLY |
 | 1105 | AUDIT-0369-M | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Unknowns/StellaOps.Integration.Unknowns.csproj - MAINT |
 | 1106 | AUDIT-0369-T | TODO | Report | Guild | src/__Tests/Integration/StellaOps.Integration.Unknowns/StellaOps.Integration.Unknowns.csproj - TEST |
-| 1107 | AUDIT-0369-A | TODO | Approval | Guild | src/__Tests/Integration/StellaOps.Integration.Unknowns/StellaOps.Integration.Unknowns.csproj - APPLY |
+| 1107 | AUDIT-0369-A | DONE | Waived (test project) | Guild | src/__Tests/Integration/StellaOps.Integration.Unknowns/StellaOps.Integration.Unknowns.csproj - APPLY |
 | 1108 | AUDIT-0370-M | TODO | Report | Guild | src/__Libraries/StellaOps.Interop/StellaOps.Interop.csproj - MAINT |
 | 1109 | AUDIT-0370-T | TODO | Report | Guild | src/__Libraries/StellaOps.Interop/StellaOps.Interop.csproj - TEST |
 | 1110 | AUDIT-0370-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Interop/StellaOps.Interop.csproj - APPLY |
 | 1111 | AUDIT-0371-M | TODO | Report | Guild | src/__Tests/interop/StellaOps.Interop.Tests/StellaOps.Interop.Tests.csproj - MAINT |
 | 1112 | AUDIT-0371-T | TODO | Report | Guild | src/__Tests/interop/StellaOps.Interop.Tests/StellaOps.Interop.Tests.csproj - TEST |
-| 1113 | AUDIT-0371-A | TODO | Approval | Guild | src/__Tests/interop/StellaOps.Interop.Tests/StellaOps.Interop.Tests.csproj - APPLY |
+| 1113 | AUDIT-0371-A | DONE | Waived (test project) | Guild | src/__Tests/interop/StellaOps.Interop.Tests/StellaOps.Interop.Tests.csproj - APPLY |
 | 1114 | AUDIT-0372-M | TODO | Report | Guild | src/__Libraries/StellaOps.IssuerDirectory.Client/StellaOps.IssuerDirectory.Client.csproj - MAINT |
 | 1115 | AUDIT-0372-T | TODO | Report | Guild | src/__Libraries/StellaOps.IssuerDirectory.Client/StellaOps.IssuerDirectory.Client.csproj - TEST |
 | 1116 | AUDIT-0372-A | TODO | Approval | Guild | src/__Libraries/StellaOps.IssuerDirectory.Client/StellaOps.IssuerDirectory.Client.csproj - APPLY |
@@ -1141,7 +1141,7 @@ Bulk task definitions (applies to every project row below):
 | 1119 | AUDIT-0373-A | TODO | Approval | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Core/StellaOps.IssuerDirectory.Core.csproj - APPLY |
 | 1120 | AUDIT-0374-M | TODO | Report | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Core.Tests/StellaOps.IssuerDirectory.Core.Tests.csproj - MAINT |
 | 1121 | AUDIT-0374-T | TODO | Report | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Core.Tests/StellaOps.IssuerDirectory.Core.Tests.csproj - TEST |
-| 1122 | AUDIT-0374-A | TODO | Approval | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Core.Tests/StellaOps.IssuerDirectory.Core.Tests.csproj - APPLY |
+| 1122 | AUDIT-0374-A | DONE | Waived (test project) | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Core.Tests/StellaOps.IssuerDirectory.Core.Tests.csproj - APPLY |
 | 1123 | AUDIT-0375-M | TODO | Report | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Infrastructure/StellaOps.IssuerDirectory.Infrastructure.csproj - MAINT |
 | 1124 | AUDIT-0375-T | TODO | Report | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Infrastructure/StellaOps.IssuerDirectory.Infrastructure.csproj - TEST |
 | 1125 | AUDIT-0375-A | TODO | Approval | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.Infrastructure/StellaOps.IssuerDirectory.Infrastructure.csproj - APPLY |
@@ -1150,7 +1150,7 @@ Bulk task definitions (applies to every project row below):
 | 1128 | AUDIT-0376-A | TODO | Approval | Guild | src/IssuerDirectory/__Libraries/StellaOps.IssuerDirectory.Persistence/StellaOps.IssuerDirectory.Persistence.csproj - APPLY |
 | 1129 | AUDIT-0377-M | TODO | Report | Guild | src/IssuerDirectory/__Tests/StellaOps.IssuerDirectory.Persistence.Tests/StellaOps.IssuerDirectory.Persistence.Tests.csproj - MAINT |
 | 1130 | AUDIT-0377-T | TODO | Report | Guild | src/IssuerDirectory/__Tests/StellaOps.IssuerDirectory.Persistence.Tests/StellaOps.IssuerDirectory.Persistence.Tests.csproj - TEST |
-| 1131 | AUDIT-0377-A | TODO | Approval | Guild | src/IssuerDirectory/__Tests/StellaOps.IssuerDirectory.Persistence.Tests/StellaOps.IssuerDirectory.Persistence.Tests.csproj - APPLY |
+| 1131 | AUDIT-0377-A | DONE | Waived (test project) | Guild | src/IssuerDirectory/__Tests/StellaOps.IssuerDirectory.Persistence.Tests/StellaOps.IssuerDirectory.Persistence.Tests.csproj - APPLY |
 | 1132 | AUDIT-0378-M | TODO | Report | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.WebService/StellaOps.IssuerDirectory.WebService.csproj - MAINT |
 | 1133 | AUDIT-0378-T | TODO | Report | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.WebService/StellaOps.IssuerDirectory.WebService.csproj - TEST |
 | 1134 | AUDIT-0378-A | TODO | Approval | Guild | src/IssuerDirectory/StellaOps.IssuerDirectory/StellaOps.IssuerDirectory.WebService/StellaOps.IssuerDirectory.WebService.csproj - APPLY |
@@ -1159,7 +1159,7 @@ Bulk task definitions (applies to every project row below):
 | 1137 | AUDIT-0379-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Messaging/StellaOps.Messaging.csproj - APPLY |
 | 1138 | AUDIT-0380-M | TODO | Report | Guild | src/Router/__Tests/__Libraries/StellaOps.Messaging.Testing/StellaOps.Messaging.Testing.csproj - MAINT |
 | 1139 | AUDIT-0380-T | TODO | Report | Guild | src/Router/__Tests/__Libraries/StellaOps.Messaging.Testing/StellaOps.Messaging.Testing.csproj - TEST |
-| 1140 | AUDIT-0380-A | TODO | Approval | Guild | src/Router/__Tests/__Libraries/StellaOps.Messaging.Testing/StellaOps.Messaging.Testing.csproj - APPLY |
+| 1140 | AUDIT-0380-A | DONE | Waived (test project) | Guild | src/Router/__Tests/__Libraries/StellaOps.Messaging.Testing/StellaOps.Messaging.Testing.csproj - APPLY |
 | 1141 | AUDIT-0381-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Messaging.Transport.InMemory/StellaOps.Messaging.Transport.InMemory.csproj - MAINT |
 | 1142 | AUDIT-0381-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Messaging.Transport.InMemory/StellaOps.Messaging.Transport.InMemory.csproj - TEST |
 | 1143 | AUDIT-0381-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Messaging.Transport.InMemory/StellaOps.Messaging.Transport.InMemory.csproj - APPLY |
@@ -1171,13 +1171,13 @@ Bulk task definitions (applies to every project row below):
 | 1149 | AUDIT-0383-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Messaging.Transport.Valkey/StellaOps.Messaging.Transport.Valkey.csproj - APPLY |
 | 1150 | AUDIT-0384-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Messaging.Transport.Valkey.Tests/StellaOps.Messaging.Transport.Valkey.Tests.csproj - MAINT |
 | 1151 | AUDIT-0384-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Messaging.Transport.Valkey.Tests/StellaOps.Messaging.Transport.Valkey.Tests.csproj - TEST |
-| 1152 | AUDIT-0384-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Messaging.Transport.Valkey.Tests/StellaOps.Messaging.Transport.Valkey.Tests.csproj - APPLY |
+| 1152 | AUDIT-0384-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Messaging.Transport.Valkey.Tests/StellaOps.Messaging.Transport.Valkey.Tests.csproj - APPLY |
 | 1153 | AUDIT-0385-M | TODO | Report | Guild | src/__Libraries/StellaOps.Metrics/StellaOps.Metrics.csproj - MAINT |
 | 1154 | AUDIT-0385-T | TODO | Report | Guild | src/__Libraries/StellaOps.Metrics/StellaOps.Metrics.csproj - TEST |
 | 1155 | AUDIT-0385-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Metrics/StellaOps.Metrics.csproj - APPLY |
 | 1156 | AUDIT-0386-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Metrics.Tests/StellaOps.Metrics.Tests.csproj - MAINT |
 | 1157 | AUDIT-0386-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Metrics.Tests/StellaOps.Metrics.Tests.csproj - TEST |
-| 1158 | AUDIT-0386-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Metrics.Tests/StellaOps.Metrics.Tests.csproj - APPLY |
+| 1158 | AUDIT-0386-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Metrics.Tests/StellaOps.Metrics.Tests.csproj - APPLY |
 | 1159 | AUDIT-0387-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Microservice/StellaOps.Microservice.csproj - MAINT |
 | 1160 | AUDIT-0387-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Microservice/StellaOps.Microservice.csproj - TEST |
 | 1161 | AUDIT-0387-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Microservice/StellaOps.Microservice.csproj - APPLY |
@@ -1186,22 +1186,22 @@ Bulk task definitions (applies to every project row below):
 | 1164 | AUDIT-0388-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Microservice.AspNetCore/StellaOps.Microservice.AspNetCore.csproj - APPLY |
 | 1165 | AUDIT-0389-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Microservice.AspNetCore.Tests/StellaOps.Microservice.AspNetCore.Tests.csproj - MAINT |
 | 1166 | AUDIT-0389-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Microservice.AspNetCore.Tests/StellaOps.Microservice.AspNetCore.Tests.csproj - TEST |
-| 1167 | AUDIT-0389-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Microservice.AspNetCore.Tests/StellaOps.Microservice.AspNetCore.Tests.csproj - APPLY |
+| 1167 | AUDIT-0389-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Microservice.AspNetCore.Tests/StellaOps.Microservice.AspNetCore.Tests.csproj - APPLY |
 | 1168 | AUDIT-0390-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Microservice.SourceGen/StellaOps.Microservice.SourceGen.csproj - MAINT |
 | 1169 | AUDIT-0390-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Microservice.SourceGen/StellaOps.Microservice.SourceGen.csproj - TEST |
 | 1170 | AUDIT-0390-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Microservice.SourceGen/StellaOps.Microservice.SourceGen.csproj - APPLY |
 | 1171 | AUDIT-0391-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Microservice.SourceGen.Tests/StellaOps.Microservice.SourceGen.Tests.csproj - MAINT |
 | 1172 | AUDIT-0391-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Microservice.SourceGen.Tests/StellaOps.Microservice.SourceGen.Tests.csproj - TEST |
-| 1173 | AUDIT-0391-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Microservice.SourceGen.Tests/StellaOps.Microservice.SourceGen.Tests.csproj - APPLY |
+| 1173 | AUDIT-0391-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Microservice.SourceGen.Tests/StellaOps.Microservice.SourceGen.Tests.csproj - APPLY |
 | 1174 | AUDIT-0392-M | TODO | Report | Guild | src/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - MAINT |
 | 1175 | AUDIT-0392-T | TODO | Report | Guild | src/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - TEST |
-| 1176 | AUDIT-0392-A | TODO | Approval | Guild | src/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - APPLY |
+| 1176 | AUDIT-0392-A | DONE | Waived (test project) | Guild | src/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - APPLY |
 | 1177 | AUDIT-0393-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - MAINT |
 | 1178 | AUDIT-0393-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - TEST |
-| 1179 | AUDIT-0393-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - APPLY |
+| 1179 | AUDIT-0393-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Microservice.Tests/StellaOps.Microservice.Tests.csproj - APPLY |
 | 1180 | AUDIT-0394-M | TODO | Report | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.Tests/StellaOps.Notifier.Tests.csproj - MAINT |
 | 1181 | AUDIT-0394-T | TODO | Report | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.Tests/StellaOps.Notifier.Tests.csproj - TEST |
-| 1182 | AUDIT-0394-A | TODO | Approval | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.Tests/StellaOps.Notifier.Tests.csproj - APPLY |
+| 1182 | AUDIT-0394-A | DONE | Waived (test project) | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.Tests/StellaOps.Notifier.Tests.csproj - APPLY |
 | 1183 | AUDIT-0395-M | TODO | Report | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.WebService/StellaOps.Notifier.WebService.csproj - MAINT |
 | 1184 | AUDIT-0395-T | TODO | Report | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.WebService/StellaOps.Notifier.WebService.csproj - TEST |
 | 1185 | AUDIT-0395-A | TODO | Approval | Guild | src/Notifier/StellaOps.Notifier/StellaOps.Notifier.WebService/StellaOps.Notifier.WebService.csproj - APPLY |
@@ -1213,7 +1213,7 @@ Bulk task definitions (applies to every project row below):
 | 1191 | AUDIT-0397-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Email/StellaOps.Notify.Connectors.Email.csproj - APPLY |
 | 1192 | AUDIT-0398-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Email.Tests/StellaOps.Notify.Connectors.Email.Tests.csproj - MAINT |
 | 1193 | AUDIT-0398-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Email.Tests/StellaOps.Notify.Connectors.Email.Tests.csproj - TEST |
-| 1194 | AUDIT-0398-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Email.Tests/StellaOps.Notify.Connectors.Email.Tests.csproj - APPLY |
+| 1194 | AUDIT-0398-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Email.Tests/StellaOps.Notify.Connectors.Email.Tests.csproj - APPLY |
 | 1195 | AUDIT-0399-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Shared/StellaOps.Notify.Connectors.Shared.csproj - MAINT |
 | 1196 | AUDIT-0399-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Shared/StellaOps.Notify.Connectors.Shared.csproj - TEST |
 | 1197 | AUDIT-0399-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Shared/StellaOps.Notify.Connectors.Shared.csproj - APPLY |
@@ -1222,46 +1222,46 @@ Bulk task definitions (applies to every project row below):
 | 1200 | AUDIT-0400-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Slack/StellaOps.Notify.Connectors.Slack.csproj - APPLY |
 | 1201 | AUDIT-0401-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Slack.Tests/StellaOps.Notify.Connectors.Slack.Tests.csproj - MAINT |
 | 1202 | AUDIT-0401-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Slack.Tests/StellaOps.Notify.Connectors.Slack.Tests.csproj - TEST |
-| 1203 | AUDIT-0401-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Slack.Tests/StellaOps.Notify.Connectors.Slack.Tests.csproj - APPLY |
+| 1203 | AUDIT-0401-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Slack.Tests/StellaOps.Notify.Connectors.Slack.Tests.csproj - APPLY |
 | 1204 | AUDIT-0402-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Teams/StellaOps.Notify.Connectors.Teams.csproj - MAINT |
 | 1205 | AUDIT-0402-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Teams/StellaOps.Notify.Connectors.Teams.csproj - TEST |
 | 1206 | AUDIT-0402-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Teams/StellaOps.Notify.Connectors.Teams.csproj - APPLY |
 | 1207 | AUDIT-0403-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Teams.Tests/StellaOps.Notify.Connectors.Teams.Tests.csproj - MAINT |
 | 1208 | AUDIT-0403-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Teams.Tests/StellaOps.Notify.Connectors.Teams.Tests.csproj - TEST |
-| 1209 | AUDIT-0403-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Teams.Tests/StellaOps.Notify.Connectors.Teams.Tests.csproj - APPLY |
+| 1209 | AUDIT-0403-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Teams.Tests/StellaOps.Notify.Connectors.Teams.Tests.csproj - APPLY |
 | 1210 | AUDIT-0404-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Webhook/StellaOps.Notify.Connectors.Webhook.csproj - MAINT |
 | 1211 | AUDIT-0404-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Webhook/StellaOps.Notify.Connectors.Webhook.csproj - TEST |
 | 1212 | AUDIT-0404-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Connectors.Webhook/StellaOps.Notify.Connectors.Webhook.csproj - APPLY |
 | 1213 | AUDIT-0405-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Webhook.Tests/StellaOps.Notify.Connectors.Webhook.Tests.csproj - MAINT |
 | 1214 | AUDIT-0405-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Webhook.Tests/StellaOps.Notify.Connectors.Webhook.Tests.csproj - TEST |
-| 1215 | AUDIT-0405-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Webhook.Tests/StellaOps.Notify.Connectors.Webhook.Tests.csproj - APPLY |
+| 1215 | AUDIT-0405-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Connectors.Webhook.Tests/StellaOps.Notify.Connectors.Webhook.Tests.csproj - APPLY |
 | 1216 | AUDIT-0406-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Core.Tests/StellaOps.Notify.Core.Tests.csproj - MAINT |
 | 1217 | AUDIT-0406-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Core.Tests/StellaOps.Notify.Core.Tests.csproj - TEST |
-| 1218 | AUDIT-0406-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Core.Tests/StellaOps.Notify.Core.Tests.csproj - APPLY |
+| 1218 | AUDIT-0406-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Core.Tests/StellaOps.Notify.Core.Tests.csproj - APPLY |
 | 1219 | AUDIT-0407-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Engine/StellaOps.Notify.Engine.csproj - MAINT |
 | 1220 | AUDIT-0407-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Engine/StellaOps.Notify.Engine.csproj - TEST |
 | 1221 | AUDIT-0407-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Engine/StellaOps.Notify.Engine.csproj - APPLY |
 | 1222 | AUDIT-0408-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Engine.Tests/StellaOps.Notify.Engine.Tests.csproj - MAINT |
 | 1223 | AUDIT-0408-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Engine.Tests/StellaOps.Notify.Engine.Tests.csproj - TEST |
-| 1224 | AUDIT-0408-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Engine.Tests/StellaOps.Notify.Engine.Tests.csproj - APPLY |
+| 1224 | AUDIT-0408-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Engine.Tests/StellaOps.Notify.Engine.Tests.csproj - APPLY |
 | 1225 | AUDIT-0409-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Models/StellaOps.Notify.Models.csproj - MAINT |
 | 1226 | AUDIT-0409-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Models/StellaOps.Notify.Models.csproj - TEST |
 | 1227 | AUDIT-0409-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Models/StellaOps.Notify.Models.csproj - APPLY |
 | 1228 | AUDIT-0410-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Models.Tests/StellaOps.Notify.Models.Tests.csproj - MAINT |
 | 1229 | AUDIT-0410-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Models.Tests/StellaOps.Notify.Models.Tests.csproj - TEST |
-| 1230 | AUDIT-0410-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Models.Tests/StellaOps.Notify.Models.Tests.csproj - APPLY |
+| 1230 | AUDIT-0410-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Models.Tests/StellaOps.Notify.Models.Tests.csproj - APPLY |
 | 1231 | AUDIT-0411-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Persistence/StellaOps.Notify.Persistence.csproj - MAINT |
 | 1232 | AUDIT-0411-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Persistence/StellaOps.Notify.Persistence.csproj - TEST |
 | 1233 | AUDIT-0411-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Persistence/StellaOps.Notify.Persistence.csproj - APPLY |
 | 1234 | AUDIT-0412-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Persistence.Tests/StellaOps.Notify.Persistence.Tests.csproj - MAINT |
 | 1235 | AUDIT-0412-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Persistence.Tests/StellaOps.Notify.Persistence.Tests.csproj - TEST |
-| 1236 | AUDIT-0412-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Persistence.Tests/StellaOps.Notify.Persistence.Tests.csproj - APPLY |
+| 1236 | AUDIT-0412-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Persistence.Tests/StellaOps.Notify.Persistence.Tests.csproj - APPLY |
 | 1237 | AUDIT-0413-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Queue/StellaOps.Notify.Queue.csproj - MAINT |
 | 1238 | AUDIT-0413-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Queue/StellaOps.Notify.Queue.csproj - TEST |
 | 1239 | AUDIT-0413-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Queue/StellaOps.Notify.Queue.csproj - APPLY |
 | 1240 | AUDIT-0414-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Queue.Tests/StellaOps.Notify.Queue.Tests.csproj - MAINT |
 | 1241 | AUDIT-0414-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Queue.Tests/StellaOps.Notify.Queue.Tests.csproj - TEST |
-| 1242 | AUDIT-0414-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Queue.Tests/StellaOps.Notify.Queue.Tests.csproj - APPLY |
+| 1242 | AUDIT-0414-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Queue.Tests/StellaOps.Notify.Queue.Tests.csproj - APPLY |
 | 1243 | AUDIT-0415-M | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Storage.InMemory/StellaOps.Notify.Storage.InMemory.csproj - MAINT |
 | 1244 | AUDIT-0415-T | TODO | Report | Guild | src/Notify/__Libraries/StellaOps.Notify.Storage.InMemory/StellaOps.Notify.Storage.InMemory.csproj - TEST |
 | 1245 | AUDIT-0415-A | TODO | Approval | Guild | src/Notify/__Libraries/StellaOps.Notify.Storage.InMemory/StellaOps.Notify.Storage.InMemory.csproj - APPLY |
@@ -1270,16 +1270,16 @@ Bulk task definitions (applies to every project row below):
 | 1248 | AUDIT-0416-A | TODO | Approval | Guild | src/Notify/StellaOps.Notify.WebService/StellaOps.Notify.WebService.csproj - APPLY |
 | 1249 | AUDIT-0417-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.WebService.Tests/StellaOps.Notify.WebService.Tests.csproj - MAINT |
 | 1250 | AUDIT-0417-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.WebService.Tests/StellaOps.Notify.WebService.Tests.csproj - TEST |
-| 1251 | AUDIT-0417-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.WebService.Tests/StellaOps.Notify.WebService.Tests.csproj - APPLY |
+| 1251 | AUDIT-0417-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.WebService.Tests/StellaOps.Notify.WebService.Tests.csproj - APPLY |
 | 1252 | AUDIT-0418-M | TODO | Report | Guild | src/Notify/StellaOps.Notify.Worker/StellaOps.Notify.Worker.csproj - MAINT |
 | 1253 | AUDIT-0418-T | TODO | Report | Guild | src/Notify/StellaOps.Notify.Worker/StellaOps.Notify.Worker.csproj - TEST |
 | 1254 | AUDIT-0418-A | TODO | Approval | Guild | src/Notify/StellaOps.Notify.Worker/StellaOps.Notify.Worker.csproj - APPLY |
 | 1255 | AUDIT-0419-M | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Worker.Tests/StellaOps.Notify.Worker.Tests.csproj - MAINT |
 | 1256 | AUDIT-0419-T | TODO | Report | Guild | src/Notify/__Tests/StellaOps.Notify.Worker.Tests/StellaOps.Notify.Worker.Tests.csproj - TEST |
-| 1257 | AUDIT-0419-A | TODO | Approval | Guild | src/Notify/__Tests/StellaOps.Notify.Worker.Tests/StellaOps.Notify.Worker.Tests.csproj - APPLY |
+| 1257 | AUDIT-0419-A | DONE | Waived (test project) | Guild | src/Notify/__Tests/StellaOps.Notify.Worker.Tests/StellaOps.Notify.Worker.Tests.csproj - APPLY |
 | 1258 | AUDIT-0420-M | TODO | Report | Guild | src/__Tests/offline/StellaOps.Offline.E2E.Tests/StellaOps.Offline.E2E.Tests.csproj - MAINT |
 | 1259 | AUDIT-0420-T | TODO | Report | Guild | src/__Tests/offline/StellaOps.Offline.E2E.Tests/StellaOps.Offline.E2E.Tests.csproj - TEST |
-| 1260 | AUDIT-0420-A | TODO | Approval | Guild | src/__Tests/offline/StellaOps.Offline.E2E.Tests/StellaOps.Offline.E2E.Tests.csproj - APPLY |
+| 1260 | AUDIT-0420-A | DONE | Waived (test project) | Guild | src/__Tests/offline/StellaOps.Offline.E2E.Tests/StellaOps.Offline.E2E.Tests.csproj - APPLY |
 | 1261 | AUDIT-0421-M | TODO | Report | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Core/StellaOps.Orchestrator.Core.csproj - MAINT |
 | 1262 | AUDIT-0421-T | TODO | Report | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Core/StellaOps.Orchestrator.Core.csproj - TEST |
 | 1263 | AUDIT-0421-A | TODO | Approval | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Core/StellaOps.Orchestrator.Core.csproj - APPLY |
@@ -1291,7 +1291,7 @@ Bulk task definitions (applies to every project row below):
 | 1269 | AUDIT-0423-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Orchestrator.Schemas/StellaOps.Orchestrator.Schemas.csproj - APPLY |
 | 1270 | AUDIT-0424-M | TODO | Report | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Tests/StellaOps.Orchestrator.Tests.csproj - MAINT |
 | 1271 | AUDIT-0424-T | TODO | Report | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Tests/StellaOps.Orchestrator.Tests.csproj - TEST |
-| 1272 | AUDIT-0424-A | TODO | Approval | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Tests/StellaOps.Orchestrator.Tests.csproj - APPLY |
+| 1272 | AUDIT-0424-A | DONE | Waived (test project) | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.Tests/StellaOps.Orchestrator.Tests.csproj - APPLY |
 | 1273 | AUDIT-0425-M | TODO | Report | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.WebService/StellaOps.Orchestrator.WebService.csproj - MAINT |
 | 1274 | AUDIT-0425-T | TODO | Report | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.WebService/StellaOps.Orchestrator.WebService.csproj - TEST |
 | 1275 | AUDIT-0425-A | TODO | Approval | Guild | src/Orchestrator/StellaOps.Orchestrator/StellaOps.Orchestrator.WebService/StellaOps.Orchestrator.WebService.csproj - APPLY |
@@ -1312,10 +1312,10 @@ Bulk task definitions (applies to every project row below):
 | 1290 | AUDIT-0430-A | TODO | Approval | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.Persistence.EfCore/StellaOps.PacksRegistry.Persistence.EfCore.csproj - APPLY |
 | 1291 | AUDIT-0431-M | TODO | Report | Guild | src/PacksRegistry/__Tests/StellaOps.PacksRegistry.Persistence.Tests/StellaOps.PacksRegistry.Persistence.Tests.csproj - MAINT |
 | 1292 | AUDIT-0431-T | TODO | Report | Guild | src/PacksRegistry/__Tests/StellaOps.PacksRegistry.Persistence.Tests/StellaOps.PacksRegistry.Persistence.Tests.csproj - TEST |
-| 1293 | AUDIT-0431-A | TODO | Approval | Guild | src/PacksRegistry/__Tests/StellaOps.PacksRegistry.Persistence.Tests/StellaOps.PacksRegistry.Persistence.Tests.csproj - APPLY |
+| 1293 | AUDIT-0431-A | DONE | Waived (test project) | Guild | src/PacksRegistry/__Tests/StellaOps.PacksRegistry.Persistence.Tests/StellaOps.PacksRegistry.Persistence.Tests.csproj - APPLY |
 | 1294 | AUDIT-0432-M | TODO | Report | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.Tests/StellaOps.PacksRegistry.Tests.csproj - MAINT |
 | 1295 | AUDIT-0432-T | TODO | Report | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.Tests/StellaOps.PacksRegistry.Tests.csproj - TEST |
-| 1296 | AUDIT-0432-A | TODO | Approval | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.Tests/StellaOps.PacksRegistry.Tests.csproj - APPLY |
+| 1296 | AUDIT-0432-A | DONE | Waived (test project) | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.Tests/StellaOps.PacksRegistry.Tests.csproj - APPLY |
 | 1297 | AUDIT-0433-M | TODO | Report | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.WebService/StellaOps.PacksRegistry.WebService.csproj - MAINT |
 | 1298 | AUDIT-0433-T | TODO | Report | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.WebService/StellaOps.PacksRegistry.WebService.csproj - TEST |
 | 1299 | AUDIT-0433-A | TODO | Approval | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.WebService/StellaOps.PacksRegistry.WebService.csproj - APPLY |
@@ -1324,13 +1324,13 @@ Bulk task definitions (applies to every project row below):
 | 1302 | AUDIT-0434-A | TODO | Approval | Guild | src/PacksRegistry/StellaOps.PacksRegistry/StellaOps.PacksRegistry.Worker/StellaOps.PacksRegistry.Worker.csproj - APPLY |
 | 1303 | AUDIT-0435-M | TODO | Report | Guild | src/__Tests/parity/StellaOps.Parity.Tests/StellaOps.Parity.Tests.csproj - MAINT |
 | 1304 | AUDIT-0435-T | TODO | Report | Guild | src/__Tests/parity/StellaOps.Parity.Tests/StellaOps.Parity.Tests.csproj - TEST |
-| 1305 | AUDIT-0435-A | TODO | Approval | Guild | src/__Tests/parity/StellaOps.Parity.Tests/StellaOps.Parity.Tests.csproj - APPLY |
+| 1305 | AUDIT-0435-A | DONE | Waived (test project) | Guild | src/__Tests/parity/StellaOps.Parity.Tests/StellaOps.Parity.Tests.csproj - APPLY |
 | 1306 | AUDIT-0436-M | TODO | Report | Guild | src/__Libraries/StellaOps.Plugin/StellaOps.Plugin.csproj - MAINT |
 | 1307 | AUDIT-0436-T | TODO | Report | Guild | src/__Libraries/StellaOps.Plugin/StellaOps.Plugin.csproj - TEST |
 | 1308 | AUDIT-0436-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Plugin/StellaOps.Plugin.csproj - APPLY |
 | 1309 | AUDIT-0437-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Plugin.Tests/StellaOps.Plugin.Tests.csproj - MAINT |
 | 1310 | AUDIT-0437-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Plugin.Tests/StellaOps.Plugin.Tests.csproj - TEST |
-| 1311 | AUDIT-0437-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Plugin.Tests/StellaOps.Plugin.Tests.csproj - APPLY |
+| 1311 | AUDIT-0437-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Plugin.Tests/StellaOps.Plugin.Tests.csproj - APPLY |
 | 1312 | AUDIT-0438-M | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy/StellaOps.Policy.csproj - MAINT |
 | 1313 | AUDIT-0438-T | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy/StellaOps.Policy.csproj - TEST |
 | 1314 | AUDIT-0438-A | TODO | Approval | Guild | src/Policy/__Libraries/StellaOps.Policy/StellaOps.Policy.csproj - APPLY |
@@ -1342,31 +1342,31 @@ Bulk task definitions (applies to every project row below):
 | 1320 | AUDIT-0440-A | TODO | Approval | Guild | src/Policy/StellaOps.Policy.Engine/StellaOps.Policy.Engine.csproj - APPLY |
 | 1321 | AUDIT-0441-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Contract.Tests/StellaOps.Policy.Engine.Contract.Tests.csproj - MAINT |
 | 1322 | AUDIT-0441-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Contract.Tests/StellaOps.Policy.Engine.Contract.Tests.csproj - TEST |
-| 1323 | AUDIT-0441-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Contract.Tests/StellaOps.Policy.Engine.Contract.Tests.csproj - APPLY |
+| 1323 | AUDIT-0441-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Contract.Tests/StellaOps.Policy.Engine.Contract.Tests.csproj - APPLY |
 | 1324 | AUDIT-0442-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Tests/StellaOps.Policy.Engine.Tests.csproj - MAINT |
 | 1325 | AUDIT-0442-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Tests/StellaOps.Policy.Engine.Tests.csproj - TEST |
-| 1326 | AUDIT-0442-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Tests/StellaOps.Policy.Engine.Tests.csproj - APPLY |
+| 1326 | AUDIT-0442-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Engine.Tests/StellaOps.Policy.Engine.Tests.csproj - APPLY |
 | 1327 | AUDIT-0443-M | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy.Exceptions/StellaOps.Policy.Exceptions.csproj - MAINT |
 | 1328 | AUDIT-0443-T | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy.Exceptions/StellaOps.Policy.Exceptions.csproj - TEST |
 | 1329 | AUDIT-0443-A | TODO | Approval | Guild | src/Policy/__Libraries/StellaOps.Policy.Exceptions/StellaOps.Policy.Exceptions.csproj - APPLY |
 | 1330 | AUDIT-0444-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Exceptions.Tests/StellaOps.Policy.Exceptions.Tests.csproj - MAINT |
 | 1331 | AUDIT-0444-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Exceptions.Tests/StellaOps.Policy.Exceptions.Tests.csproj - TEST |
-| 1332 | AUDIT-0444-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Exceptions.Tests/StellaOps.Policy.Exceptions.Tests.csproj - APPLY |
+| 1332 | AUDIT-0444-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Exceptions.Tests/StellaOps.Policy.Exceptions.Tests.csproj - APPLY |
 | 1333 | AUDIT-0445-M | TODO | Report | Guild | src/Policy/StellaOps.Policy.Gateway/StellaOps.Policy.Gateway.csproj - MAINT |
 | 1334 | AUDIT-0445-T | TODO | Report | Guild | src/Policy/StellaOps.Policy.Gateway/StellaOps.Policy.Gateway.csproj - TEST |
 | 1335 | AUDIT-0445-A | TODO | Approval | Guild | src/Policy/StellaOps.Policy.Gateway/StellaOps.Policy.Gateway.csproj - APPLY |
 | 1336 | AUDIT-0446-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Gateway.Tests/StellaOps.Policy.Gateway.Tests.csproj - MAINT |
 | 1337 | AUDIT-0446-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Gateway.Tests/StellaOps.Policy.Gateway.Tests.csproj - TEST |
-| 1338 | AUDIT-0446-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Gateway.Tests/StellaOps.Policy.Gateway.Tests.csproj - APPLY |
+| 1338 | AUDIT-0446-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Gateway.Tests/StellaOps.Policy.Gateway.Tests.csproj - APPLY |
 | 1339 | AUDIT-0447-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Pack.Tests/StellaOps.Policy.Pack.Tests.csproj - MAINT |
 | 1340 | AUDIT-0447-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Pack.Tests/StellaOps.Policy.Pack.Tests.csproj - TEST |
-| 1341 | AUDIT-0447-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Pack.Tests/StellaOps.Policy.Pack.Tests.csproj - APPLY |
+| 1341 | AUDIT-0447-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Pack.Tests/StellaOps.Policy.Pack.Tests.csproj - APPLY |
 | 1342 | AUDIT-0448-M | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy.Persistence/StellaOps.Policy.Persistence.csproj - MAINT |
 | 1343 | AUDIT-0448-T | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy.Persistence/StellaOps.Policy.Persistence.csproj - TEST |
 | 1344 | AUDIT-0448-A | TODO | Approval | Guild | src/Policy/__Libraries/StellaOps.Policy.Persistence/StellaOps.Policy.Persistence.csproj - APPLY |
 | 1345 | AUDIT-0449-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Persistence.Tests/StellaOps.Policy.Persistence.Tests.csproj - MAINT |
 | 1346 | AUDIT-0449-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Persistence.Tests/StellaOps.Policy.Persistence.Tests.csproj - TEST |
-| 1347 | AUDIT-0449-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Persistence.Tests/StellaOps.Policy.Persistence.Tests.csproj - APPLY |
+| 1347 | AUDIT-0449-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Persistence.Tests/StellaOps.Policy.Persistence.Tests.csproj - APPLY |
 | 1348 | AUDIT-0450-M | TODO | Report | Guild | src/Policy/StellaOps.Policy.Registry/StellaOps.Policy.Registry.csproj - MAINT |
 | 1349 | AUDIT-0450-T | TODO | Report | Guild | src/Policy/StellaOps.Policy.Registry/StellaOps.Policy.Registry.csproj - TEST |
 | 1350 | AUDIT-0450-A | TODO | Approval | Guild | src/Policy/StellaOps.Policy.Registry/StellaOps.Policy.Registry.csproj - APPLY |
@@ -1375,22 +1375,22 @@ Bulk task definitions (applies to every project row below):
 | 1353 | AUDIT-0451-A | TODO | Approval | Guild | src/Policy/StellaOps.Policy.RiskProfile/StellaOps.Policy.RiskProfile.csproj - APPLY |
 | 1354 | AUDIT-0452-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.RiskProfile.Tests/StellaOps.Policy.RiskProfile.Tests.csproj - MAINT |
 | 1355 | AUDIT-0452-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.RiskProfile.Tests/StellaOps.Policy.RiskProfile.Tests.csproj - TEST |
-| 1356 | AUDIT-0452-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.RiskProfile.Tests/StellaOps.Policy.RiskProfile.Tests.csproj - APPLY |
+| 1356 | AUDIT-0452-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.RiskProfile.Tests/StellaOps.Policy.RiskProfile.Tests.csproj - APPLY |
 | 1357 | AUDIT-0453-M | TODO | Report | Guild | src/Policy/StellaOps.Policy.Scoring/StellaOps.Policy.Scoring.csproj - MAINT |
 | 1358 | AUDIT-0453-T | TODO | Report | Guild | src/Policy/StellaOps.Policy.Scoring/StellaOps.Policy.Scoring.csproj - TEST |
 | 1359 | AUDIT-0453-A | TODO | Approval | Guild | src/Policy/StellaOps.Policy.Scoring/StellaOps.Policy.Scoring.csproj - APPLY |
 | 1360 | AUDIT-0454-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Scoring.Tests/StellaOps.Policy.Scoring.Tests.csproj - MAINT |
 | 1361 | AUDIT-0454-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Scoring.Tests/StellaOps.Policy.Scoring.Tests.csproj - TEST |
-| 1362 | AUDIT-0454-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Scoring.Tests/StellaOps.Policy.Scoring.Tests.csproj - APPLY |
+| 1362 | AUDIT-0454-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Scoring.Tests/StellaOps.Policy.Scoring.Tests.csproj - APPLY |
 | 1363 | AUDIT-0455-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Tests/StellaOps.Policy.Tests.csproj - MAINT |
 | 1364 | AUDIT-0455-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Tests/StellaOps.Policy.Tests.csproj - TEST |
-| 1365 | AUDIT-0455-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Tests/StellaOps.Policy.Tests.csproj - APPLY |
+| 1365 | AUDIT-0455-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Tests/StellaOps.Policy.Tests.csproj - APPLY |
 | 1366 | AUDIT-0456-M | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy.Unknowns/StellaOps.Policy.Unknowns.csproj - MAINT |
 | 1367 | AUDIT-0456-T | TODO | Report | Guild | src/Policy/__Libraries/StellaOps.Policy.Unknowns/StellaOps.Policy.Unknowns.csproj - TEST |
 | 1368 | AUDIT-0456-A | TODO | Approval | Guild | src/Policy/__Libraries/StellaOps.Policy.Unknowns/StellaOps.Policy.Unknowns.csproj - APPLY |
 | 1369 | AUDIT-0457-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Unknowns.Tests/StellaOps.Policy.Unknowns.Tests.csproj - MAINT |
 | 1370 | AUDIT-0457-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.Policy.Unknowns.Tests/StellaOps.Policy.Unknowns.Tests.csproj - TEST |
-| 1371 | AUDIT-0457-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.Policy.Unknowns.Tests/StellaOps.Policy.Unknowns.Tests.csproj - APPLY |
+| 1371 | AUDIT-0457-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.Policy.Unknowns.Tests/StellaOps.Policy.Unknowns.Tests.csproj - APPLY |
 | 1372 | AUDIT-0458-M | TODO | Report | Guild | src/__Libraries/StellaOps.PolicyAuthoritySignals.Contracts/StellaOps.PolicyAuthoritySignals.Contracts.csproj - MAINT |
 | 1373 | AUDIT-0458-T | TODO | Report | Guild | src/__Libraries/StellaOps.PolicyAuthoritySignals.Contracts/StellaOps.PolicyAuthoritySignals.Contracts.csproj - TEST |
 | 1374 | AUDIT-0458-A | TODO | Approval | Guild | src/__Libraries/StellaOps.PolicyAuthoritySignals.Contracts/StellaOps.PolicyAuthoritySignals.Contracts.csproj - APPLY |
@@ -1399,7 +1399,7 @@ Bulk task definitions (applies to every project row below):
 | 1377 | AUDIT-0459-A | TODO | Approval | Guild | src/Policy/StellaOps.PolicyDsl/StellaOps.PolicyDsl.csproj - APPLY |
 | 1378 | AUDIT-0460-M | TODO | Report | Guild | src/Policy/__Tests/StellaOps.PolicyDsl.Tests/StellaOps.PolicyDsl.Tests.csproj - MAINT |
 | 1379 | AUDIT-0460-T | TODO | Report | Guild | src/Policy/__Tests/StellaOps.PolicyDsl.Tests/StellaOps.PolicyDsl.Tests.csproj - TEST |
-| 1380 | AUDIT-0460-A | TODO | Approval | Guild | src/Policy/__Tests/StellaOps.PolicyDsl.Tests/StellaOps.PolicyDsl.Tests.csproj - APPLY |
+| 1380 | AUDIT-0460-A | DONE | Waived (test project) | Guild | src/Policy/__Tests/StellaOps.PolicyDsl.Tests/StellaOps.PolicyDsl.Tests.csproj - APPLY |
 | 1381 | AUDIT-0461-M | TODO | Report | Guild | src/__Libraries/StellaOps.Provcache/StellaOps.Provcache.csproj - MAINT |
 | 1382 | AUDIT-0461-T | TODO | Report | Guild | src/__Libraries/StellaOps.Provcache/StellaOps.Provcache.csproj - TEST |
 | 1383 | AUDIT-0461-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Provcache/StellaOps.Provcache.csproj - APPLY |
@@ -1411,7 +1411,7 @@ Bulk task definitions (applies to every project row below):
 | 1389 | AUDIT-0463-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Provcache.Postgres/StellaOps.Provcache.Postgres.csproj - APPLY |
 | 1390 | AUDIT-0464-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Provcache.Tests/StellaOps.Provcache.Tests.csproj - MAINT |
 | 1391 | AUDIT-0464-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Provcache.Tests/StellaOps.Provcache.Tests.csproj - TEST |
-| 1392 | AUDIT-0464-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Provcache.Tests/StellaOps.Provcache.Tests.csproj - APPLY |
+| 1392 | AUDIT-0464-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Provcache.Tests/StellaOps.Provcache.Tests.csproj - APPLY |
 | 1393 | AUDIT-0465-M | TODO | Report | Guild | src/__Libraries/StellaOps.Provcache.Valkey/StellaOps.Provcache.Valkey.csproj - MAINT |
 | 1394 | AUDIT-0465-T | TODO | Report | Guild | src/__Libraries/StellaOps.Provcache.Valkey/StellaOps.Provcache.Valkey.csproj - TEST |
 | 1395 | AUDIT-0465-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Provcache.Valkey/StellaOps.Provcache.Valkey.csproj - APPLY |
@@ -1423,13 +1423,13 @@ Bulk task definitions (applies to every project row below):
 | 1401 | AUDIT-0467-A | TODO | Approval | Guild | src/Provenance/StellaOps.Provenance.Attestation/StellaOps.Provenance.Attestation.csproj - APPLY |
 | 1402 | AUDIT-0468-M | TODO | Report | Guild | src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/StellaOps.Provenance.Attestation.Tests.csproj - MAINT |
 | 1403 | AUDIT-0468-T | TODO | Report | Guild | src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/StellaOps.Provenance.Attestation.Tests.csproj - TEST |
-| 1404 | AUDIT-0468-A | TODO | Approval | Guild | src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/StellaOps.Provenance.Attestation.Tests.csproj - APPLY |
+| 1404 | AUDIT-0468-A | DONE | Waived (test project) | Guild | src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/StellaOps.Provenance.Attestation.Tests.csproj - APPLY |
 | 1405 | AUDIT-0469-M | TODO | Report | Guild | src/Provenance/StellaOps.Provenance.Attestation.Tool/StellaOps.Provenance.Attestation.Tool.csproj - MAINT |
 | 1406 | AUDIT-0469-T | TODO | Report | Guild | src/Provenance/StellaOps.Provenance.Attestation.Tool/StellaOps.Provenance.Attestation.Tool.csproj - TEST |
 | 1407 | AUDIT-0469-A | TODO | Approval | Guild | src/Provenance/StellaOps.Provenance.Attestation.Tool/StellaOps.Provenance.Attestation.Tool.csproj - APPLY |
 | 1408 | AUDIT-0470-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Provenance.Tests/StellaOps.Provenance.Tests.csproj - MAINT |
 | 1409 | AUDIT-0470-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Provenance.Tests/StellaOps.Provenance.Tests.csproj - TEST |
-| 1410 | AUDIT-0470-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Provenance.Tests/StellaOps.Provenance.Tests.csproj - APPLY |
+| 1410 | AUDIT-0470-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Provenance.Tests/StellaOps.Provenance.Tests.csproj - APPLY |
 | 1411 | AUDIT-0471-M | TODO | Report | Guild | src/__Libraries/StellaOps.ReachGraph/StellaOps.ReachGraph.csproj - MAINT |
 | 1412 | AUDIT-0471-T | TODO | Report | Guild | src/__Libraries/StellaOps.ReachGraph/StellaOps.ReachGraph.csproj - TEST |
 | 1413 | AUDIT-0471-A | TODO | Approval | Guild | src/__Libraries/StellaOps.ReachGraph/StellaOps.ReachGraph.csproj - APPLY |
@@ -1441,22 +1441,22 @@ Bulk task definitions (applies to every project row below):
 | 1419 | AUDIT-0473-A | TODO | Approval | Guild | src/__Libraries/StellaOps.ReachGraph.Persistence/StellaOps.ReachGraph.Persistence.csproj - APPLY |
 | 1420 | AUDIT-0474-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.ReachGraph.Tests/StellaOps.ReachGraph.Tests.csproj - MAINT |
 | 1421 | AUDIT-0474-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.ReachGraph.Tests/StellaOps.ReachGraph.Tests.csproj - TEST |
-| 1422 | AUDIT-0474-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.ReachGraph.Tests/StellaOps.ReachGraph.Tests.csproj - APPLY |
+| 1422 | AUDIT-0474-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.ReachGraph.Tests/StellaOps.ReachGraph.Tests.csproj - APPLY |
 | 1423 | AUDIT-0475-M | TODO | Report | Guild | src/ReachGraph/StellaOps.ReachGraph.WebService/StellaOps.ReachGraph.WebService.csproj - MAINT |
 | 1424 | AUDIT-0475-T | TODO | Report | Guild | src/ReachGraph/StellaOps.ReachGraph.WebService/StellaOps.ReachGraph.WebService.csproj - TEST |
 | 1425 | AUDIT-0475-A | TODO | Approval | Guild | src/ReachGraph/StellaOps.ReachGraph.WebService/StellaOps.ReachGraph.WebService.csproj - APPLY |
 | 1426 | AUDIT-0476-M | TODO | Report | Guild | src/ReachGraph/__Tests/StellaOps.ReachGraph.WebService.Tests/StellaOps.ReachGraph.WebService.Tests.csproj - MAINT |
 | 1427 | AUDIT-0476-T | TODO | Report | Guild | src/ReachGraph/__Tests/StellaOps.ReachGraph.WebService.Tests/StellaOps.ReachGraph.WebService.Tests.csproj - TEST |
-| 1428 | AUDIT-0476-A | TODO | Approval | Guild | src/ReachGraph/__Tests/StellaOps.ReachGraph.WebService.Tests/StellaOps.ReachGraph.WebService.Tests.csproj - APPLY |
+| 1428 | AUDIT-0476-A | DONE | Waived (test project) | Guild | src/ReachGraph/__Tests/StellaOps.ReachGraph.WebService.Tests/StellaOps.ReachGraph.WebService.Tests.csproj - APPLY |
 | 1429 | AUDIT-0477-M | TODO | Report | Guild | src/__Tests/reachability/StellaOps.Reachability.FixtureTests/StellaOps.Reachability.FixtureTests.csproj - MAINT |
 | 1430 | AUDIT-0477-T | TODO | Report | Guild | src/__Tests/reachability/StellaOps.Reachability.FixtureTests/StellaOps.Reachability.FixtureTests.csproj - TEST |
-| 1431 | AUDIT-0477-A | TODO | Approval | Guild | src/__Tests/reachability/StellaOps.Reachability.FixtureTests/StellaOps.Reachability.FixtureTests.csproj - APPLY |
+| 1431 | AUDIT-0477-A | DONE | Waived (test project) | Guild | src/__Tests/reachability/StellaOps.Reachability.FixtureTests/StellaOps.Reachability.FixtureTests.csproj - APPLY |
 | 1432 | AUDIT-0478-M | TODO | Report | Guild | src/Registry/StellaOps.Registry.TokenService/StellaOps.Registry.TokenService.csproj - MAINT |
 | 1433 | AUDIT-0478-T | TODO | Report | Guild | src/Registry/StellaOps.Registry.TokenService/StellaOps.Registry.TokenService.csproj - TEST |
 | 1434 | AUDIT-0478-A | TODO | Approval | Guild | src/Registry/StellaOps.Registry.TokenService/StellaOps.Registry.TokenService.csproj - APPLY |
 | 1435 | AUDIT-0479-M | TODO | Report | Guild | src/Registry/__Tests/StellaOps.Registry.TokenService.Tests/StellaOps.Registry.TokenService.Tests.csproj - MAINT |
 | 1436 | AUDIT-0479-T | TODO | Report | Guild | src/Registry/__Tests/StellaOps.Registry.TokenService.Tests/StellaOps.Registry.TokenService.Tests.csproj - TEST |
-| 1437 | AUDIT-0479-A | TODO | Approval | Guild | src/Registry/__Tests/StellaOps.Registry.TokenService.Tests/StellaOps.Registry.TokenService.Tests.csproj - APPLY |
+| 1437 | AUDIT-0479-A | DONE | Waived (test project) | Guild | src/Registry/__Tests/StellaOps.Registry.TokenService.Tests/StellaOps.Registry.TokenService.Tests.csproj - APPLY |
 | 1438 | AUDIT-0480-M | TODO | Report | Guild | src/__Libraries/StellaOps.Replay/StellaOps.Replay.csproj - MAINT |
 | 1439 | AUDIT-0480-T | TODO | Report | Guild | src/__Libraries/StellaOps.Replay/StellaOps.Replay.csproj - TEST |
 | 1440 | AUDIT-0480-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Replay/StellaOps.Replay.csproj - APPLY |
@@ -1465,19 +1465,19 @@ Bulk task definitions (applies to every project row below):
 | 1443 | AUDIT-0481-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Replay.Core/StellaOps.Replay.Core.csproj - APPLY |
 | 1444 | AUDIT-0482-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - MAINT |
 | 1445 | AUDIT-0482-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - TEST |
-| 1446 | AUDIT-0482-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
+| 1446 | AUDIT-0482-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
 | 1447 | AUDIT-0483-M | TODO | Report | Guild | src/__Libraries/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - MAINT |
 | 1448 | AUDIT-0483-T | TODO | Report | Guild | src/__Libraries/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - TEST |
-| 1449 | AUDIT-0483-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
+| 1449 | AUDIT-0483-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
 | 1450 | AUDIT-0484-M | TODO | Report | Guild | src/__Tests/reachability/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - MAINT |
 | 1451 | AUDIT-0484-T | TODO | Report | Guild | src/__Tests/reachability/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - TEST |
-| 1452 | AUDIT-0484-A | TODO | Approval | Guild | src/__Tests/reachability/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
+| 1452 | AUDIT-0484-A | DONE | Waived (test project) | Guild | src/__Tests/reachability/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
 | 1453 | AUDIT-0485-M | TODO | Report | Guild | src/Replay/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - MAINT |
 | 1454 | AUDIT-0485-T | TODO | Report | Guild | src/Replay/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - TEST |
-| 1455 | AUDIT-0485-A | TODO | Approval | Guild | src/Replay/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
+| 1455 | AUDIT-0485-A | DONE | Waived (test project) | Guild | src/Replay/__Tests/StellaOps.Replay.Core.Tests/StellaOps.Replay.Core.Tests.csproj - APPLY |
 | 1456 | AUDIT-0486-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Replay.Tests/StellaOps.Replay.Tests.csproj - MAINT |
 | 1457 | AUDIT-0486-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Replay.Tests/StellaOps.Replay.Tests.csproj - TEST |
-| 1458 | AUDIT-0486-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Replay.Tests/StellaOps.Replay.Tests.csproj - APPLY |
+| 1458 | AUDIT-0486-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Replay.Tests/StellaOps.Replay.Tests.csproj - APPLY |
 | 1459 | AUDIT-0487-M | TODO | Report | Guild | src/Replay/StellaOps.Replay.WebService/StellaOps.Replay.WebService.csproj - MAINT |
 | 1460 | AUDIT-0487-T | TODO | Report | Guild | src/Replay/StellaOps.Replay.WebService/StellaOps.Replay.WebService.csproj - TEST |
 | 1461 | AUDIT-0487-A | TODO | Approval | Guild | src/Replay/StellaOps.Replay.WebService/StellaOps.Replay.WebService.csproj - APPLY |
@@ -1486,7 +1486,7 @@ Bulk task definitions (applies to every project row below):
 | 1464 | AUDIT-0488-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Resolver/StellaOps.Resolver.csproj - APPLY |
 | 1465 | AUDIT-0489-M | TODO | Report | Guild | src/__Libraries/StellaOps.Resolver.Tests/StellaOps.Resolver.Tests.csproj - MAINT |
 | 1466 | AUDIT-0489-T | TODO | Report | Guild | src/__Libraries/StellaOps.Resolver.Tests/StellaOps.Resolver.Tests.csproj - TEST |
-| 1467 | AUDIT-0489-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Resolver.Tests/StellaOps.Resolver.Tests.csproj - APPLY |
+| 1467 | AUDIT-0489-A | DONE | Waived (test project) | Guild | src/__Libraries/StellaOps.Resolver.Tests/StellaOps.Resolver.Tests.csproj - APPLY |
 | 1468 | AUDIT-0490-M | TODO | Report | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Core/StellaOps.RiskEngine.Core.csproj - MAINT |
 | 1469 | AUDIT-0490-T | TODO | Report | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Core/StellaOps.RiskEngine.Core.csproj - TEST |
 | 1470 | AUDIT-0490-A | TODO | Approval | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Core/StellaOps.RiskEngine.Core.csproj - APPLY |
@@ -1495,7 +1495,7 @@ Bulk task definitions (applies to every project row below):
 | 1473 | AUDIT-0491-A | TODO | Approval | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Infrastructure/StellaOps.RiskEngine.Infrastructure.csproj - APPLY |
 | 1474 | AUDIT-0492-M | TODO | Report | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests/StellaOps.RiskEngine.Tests.csproj - MAINT |
 | 1475 | AUDIT-0492-T | TODO | Report | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests/StellaOps.RiskEngine.Tests.csproj - TEST |
-| 1476 | AUDIT-0492-A | TODO | Approval | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests/StellaOps.RiskEngine.Tests.csproj - APPLY |
+| 1476 | AUDIT-0492-A | DONE | Waived (test project) | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests/StellaOps.RiskEngine.Tests.csproj - APPLY |
 | 1477 | AUDIT-0493-M | TODO | Report | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.WebService/StellaOps.RiskEngine.WebService.csproj - MAINT |
 | 1478 | AUDIT-0493-T | TODO | Report | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.WebService/StellaOps.RiskEngine.WebService.csproj - TEST |
 | 1479 | AUDIT-0493-A | TODO | Approval | Guild | src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.WebService/StellaOps.RiskEngine.WebService.csproj - APPLY |
@@ -1510,28 +1510,28 @@ Bulk task definitions (applies to every project row below):
 | 1488 | AUDIT-0496-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Common/StellaOps.Router.Common.csproj - APPLY |
 | 1489 | AUDIT-0497-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Common.Tests/StellaOps.Router.Common.Tests.csproj - MAINT |
 | 1490 | AUDIT-0497-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Common.Tests/StellaOps.Router.Common.Tests.csproj - TEST |
-| 1491 | AUDIT-0497-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Common.Tests/StellaOps.Router.Common.Tests.csproj - APPLY |
+| 1491 | AUDIT-0497-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Common.Tests/StellaOps.Router.Common.Tests.csproj - APPLY |
 | 1492 | AUDIT-0498-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Config/StellaOps.Router.Config.csproj - MAINT |
 | 1493 | AUDIT-0498-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Config/StellaOps.Router.Config.csproj - TEST |
 | 1494 | AUDIT-0498-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Config/StellaOps.Router.Config.csproj - APPLY |
 | 1495 | AUDIT-0499-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Config.Tests/StellaOps.Router.Config.Tests.csproj - MAINT |
 | 1496 | AUDIT-0499-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Config.Tests/StellaOps.Router.Config.Tests.csproj - TEST |
-| 1497 | AUDIT-0499-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Config.Tests/StellaOps.Router.Config.Tests.csproj - APPLY |
+| 1497 | AUDIT-0499-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Config.Tests/StellaOps.Router.Config.Tests.csproj - APPLY |
 | 1498 | AUDIT-0500-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Gateway/StellaOps.Router.Gateway.csproj - MAINT |
 | 1499 | AUDIT-0500-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Gateway/StellaOps.Router.Gateway.csproj - TEST |
 | 1500 | AUDIT-0500-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Gateway/StellaOps.Router.Gateway.csproj - APPLY |
 | 1501 | AUDIT-0501-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Integration.Tests/StellaOps.Router.Integration.Tests.csproj - MAINT |
 | 1502 | AUDIT-0501-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Integration.Tests/StellaOps.Router.Integration.Tests.csproj - TEST |
-| 1503 | AUDIT-0501-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Integration.Tests/StellaOps.Router.Integration.Tests.csproj - APPLY |
+| 1503 | AUDIT-0501-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Integration.Tests/StellaOps.Router.Integration.Tests.csproj - APPLY |
 | 1504 | AUDIT-0502-M | TODO | Report | Guild | src/Router/__Tests/__Libraries/StellaOps.Router.Testing/StellaOps.Router.Testing.csproj - MAINT |
 | 1505 | AUDIT-0502-T | TODO | Report | Guild | src/Router/__Tests/__Libraries/StellaOps.Router.Testing/StellaOps.Router.Testing.csproj - TEST |
-| 1506 | AUDIT-0502-A | TODO | Approval | Guild | src/Router/__Tests/__Libraries/StellaOps.Router.Testing/StellaOps.Router.Testing.csproj - APPLY |
+| 1506 | AUDIT-0502-A | DONE | Waived (test project) | Guild | src/Router/__Tests/__Libraries/StellaOps.Router.Testing/StellaOps.Router.Testing.csproj - APPLY |
 | 1507 | AUDIT-0503-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.InMemory/StellaOps.Router.Transport.InMemory.csproj - MAINT |
 | 1508 | AUDIT-0503-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.InMemory/StellaOps.Router.Transport.InMemory.csproj - TEST |
 | 1509 | AUDIT-0503-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Transport.InMemory/StellaOps.Router.Transport.InMemory.csproj - APPLY |
 | 1510 | AUDIT-0504-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.InMemory.Tests/StellaOps.Router.Transport.InMemory.Tests.csproj - MAINT |
 | 1511 | AUDIT-0504-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.InMemory.Tests/StellaOps.Router.Transport.InMemory.Tests.csproj - TEST |
-| 1512 | AUDIT-0504-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Transport.InMemory.Tests/StellaOps.Router.Transport.InMemory.Tests.csproj - APPLY |
+| 1512 | AUDIT-0504-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Transport.InMemory.Tests/StellaOps.Router.Transport.InMemory.Tests.csproj - APPLY |
 | 1513 | AUDIT-0505-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Messaging/StellaOps.Router.Transport.Messaging.csproj - MAINT |
 | 1514 | AUDIT-0505-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Messaging/StellaOps.Router.Transport.Messaging.csproj - TEST |
 | 1515 | AUDIT-0505-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Messaging/StellaOps.Router.Transport.Messaging.csproj - APPLY |
@@ -1540,25 +1540,25 @@ Bulk task definitions (applies to every project row below):
 | 1518 | AUDIT-0506-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Transport.RabbitMq/StellaOps.Router.Transport.RabbitMq.csproj - APPLY |
 | 1519 | AUDIT-0507-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.RabbitMq.Tests/StellaOps.Router.Transport.RabbitMq.Tests.csproj - MAINT |
 | 1520 | AUDIT-0507-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.RabbitMq.Tests/StellaOps.Router.Transport.RabbitMq.Tests.csproj - TEST |
-| 1521 | AUDIT-0507-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Transport.RabbitMq.Tests/StellaOps.Router.Transport.RabbitMq.Tests.csproj - APPLY |
+| 1521 | AUDIT-0507-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Transport.RabbitMq.Tests/StellaOps.Router.Transport.RabbitMq.Tests.csproj - APPLY |
 | 1522 | AUDIT-0508-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Tcp/StellaOps.Router.Transport.Tcp.csproj - MAINT |
 | 1523 | AUDIT-0508-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Tcp/StellaOps.Router.Transport.Tcp.csproj - TEST |
 | 1524 | AUDIT-0508-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Tcp/StellaOps.Router.Transport.Tcp.csproj - APPLY |
 | 1525 | AUDIT-0509-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tcp.Tests/StellaOps.Router.Transport.Tcp.Tests.csproj - MAINT |
 | 1526 | AUDIT-0509-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tcp.Tests/StellaOps.Router.Transport.Tcp.Tests.csproj - TEST |
-| 1527 | AUDIT-0509-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tcp.Tests/StellaOps.Router.Transport.Tcp.Tests.csproj - APPLY |
+| 1527 | AUDIT-0509-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tcp.Tests/StellaOps.Router.Transport.Tcp.Tests.csproj - APPLY |
 | 1528 | AUDIT-0510-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Tls/StellaOps.Router.Transport.Tls.csproj - MAINT |
 | 1529 | AUDIT-0510-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Tls/StellaOps.Router.Transport.Tls.csproj - TEST |
 | 1530 | AUDIT-0510-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Tls/StellaOps.Router.Transport.Tls.csproj - APPLY |
 | 1531 | AUDIT-0511-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tls.Tests/StellaOps.Router.Transport.Tls.Tests.csproj - MAINT |
 | 1532 | AUDIT-0511-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tls.Tests/StellaOps.Router.Transport.Tls.Tests.csproj - TEST |
-| 1533 | AUDIT-0511-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tls.Tests/StellaOps.Router.Transport.Tls.Tests.csproj - APPLY |
+| 1533 | AUDIT-0511-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Transport.Tls.Tests/StellaOps.Router.Transport.Tls.Tests.csproj - APPLY |
 | 1534 | AUDIT-0512-M | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Udp/StellaOps.Router.Transport.Udp.csproj - MAINT |
 | 1535 | AUDIT-0512-T | TODO | Report | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Udp/StellaOps.Router.Transport.Udp.csproj - TEST |
 | 1536 | AUDIT-0512-A | TODO | Approval | Guild | src/Router/__Libraries/StellaOps.Router.Transport.Udp/StellaOps.Router.Transport.Udp.csproj - APPLY |
 | 1537 | AUDIT-0513-M | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.Udp.Tests/StellaOps.Router.Transport.Udp.Tests.csproj - MAINT |
 | 1538 | AUDIT-0513-T | TODO | Report | Guild | src/Router/__Tests/StellaOps.Router.Transport.Udp.Tests/StellaOps.Router.Transport.Udp.Tests.csproj - TEST |
-| 1539 | AUDIT-0513-A | TODO | Approval | Guild | src/Router/__Tests/StellaOps.Router.Transport.Udp.Tests/StellaOps.Router.Transport.Udp.Tests.csproj - APPLY |
+| 1539 | AUDIT-0513-A | DONE | Waived (test project) | Guild | src/Router/__Tests/StellaOps.Router.Transport.Udp.Tests/StellaOps.Router.Transport.Udp.Tests.csproj - APPLY |
 | 1540 | AUDIT-0514-M | TODO | Report | Guild | src/SbomService/StellaOps.SbomService/StellaOps.SbomService.csproj - MAINT |
 | 1541 | AUDIT-0514-T | TODO | Report | Guild | src/SbomService/StellaOps.SbomService/StellaOps.SbomService.csproj - TEST |
 | 1542 | AUDIT-0514-A | TODO | Approval | Guild | src/SbomService/StellaOps.SbomService/StellaOps.SbomService.csproj - APPLY |
@@ -1567,16 +1567,16 @@ Bulk task definitions (applies to every project row below):
 | 1545 | AUDIT-0515-A | TODO | Approval | Guild | src/SbomService/__Libraries/StellaOps.SbomService.Persistence/StellaOps.SbomService.Persistence.csproj - APPLY |
 | 1546 | AUDIT-0516-M | TODO | Report | Guild | src/SbomService/__Tests/StellaOps.SbomService.Persistence.Tests/StellaOps.SbomService.Persistence.Tests.csproj - MAINT |
 | 1547 | AUDIT-0516-T | TODO | Report | Guild | src/SbomService/__Tests/StellaOps.SbomService.Persistence.Tests/StellaOps.SbomService.Persistence.Tests.csproj - TEST |
-| 1548 | AUDIT-0516-A | TODO | Approval | Guild | src/SbomService/__Tests/StellaOps.SbomService.Persistence.Tests/StellaOps.SbomService.Persistence.Tests.csproj - APPLY |
+| 1548 | AUDIT-0516-A | DONE | Waived (test project) | Guild | src/SbomService/__Tests/StellaOps.SbomService.Persistence.Tests/StellaOps.SbomService.Persistence.Tests.csproj - APPLY |
 | 1549 | AUDIT-0517-M | TODO | Report | Guild | src/SbomService/StellaOps.SbomService.Tests/StellaOps.SbomService.Tests.csproj - MAINT |
 | 1550 | AUDIT-0517-T | TODO | Report | Guild | src/SbomService/StellaOps.SbomService.Tests/StellaOps.SbomService.Tests.csproj - TEST |
-| 1551 | AUDIT-0517-A | TODO | Approval | Guild | src/SbomService/StellaOps.SbomService.Tests/StellaOps.SbomService.Tests.csproj - APPLY |
+| 1551 | AUDIT-0517-A | DONE | Waived (test project) | Guild | src/SbomService/StellaOps.SbomService.Tests/StellaOps.SbomService.Tests.csproj - APPLY |
 | 1552 | AUDIT-0518-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Advisory/StellaOps.Scanner.Advisory.csproj - MAINT |
 | 1553 | AUDIT-0518-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Advisory/StellaOps.Scanner.Advisory.csproj - TEST |
 | 1554 | AUDIT-0518-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Advisory/StellaOps.Scanner.Advisory.csproj - APPLY |
 | 1555 | AUDIT-0519-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Advisory.Tests/StellaOps.Scanner.Advisory.Tests.csproj - MAINT |
 | 1556 | AUDIT-0519-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Advisory.Tests/StellaOps.Scanner.Advisory.Tests.csproj - TEST |
-| 1557 | AUDIT-0519-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Advisory.Tests/StellaOps.Scanner.Advisory.Tests.csproj - APPLY |
+| 1557 | AUDIT-0519-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Advisory.Tests/StellaOps.Scanner.Advisory.Tests.csproj - APPLY |
 | 1558 | AUDIT-0520-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang/StellaOps.Scanner.Analyzers.Lang.csproj - MAINT |
 | 1559 | AUDIT-0520-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang/StellaOps.Scanner.Analyzers.Lang.csproj - TEST |
 | 1560 | AUDIT-0520-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang/StellaOps.Scanner.Analyzers.Lang.csproj - APPLY |
@@ -1585,73 +1585,73 @@ Bulk task definitions (applies to every project row below):
 | 1563 | AUDIT-0521-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Bun/StellaOps.Scanner.Analyzers.Lang.Bun.csproj - APPLY |
 | 1564 | AUDIT-0522-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests.csproj - MAINT |
 | 1565 | AUDIT-0522-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests.csproj - TEST |
-| 1566 | AUDIT-0522-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests.csproj - APPLY |
+| 1566 | AUDIT-0522-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests/StellaOps.Scanner.Analyzers.Lang.Bun.Tests.csproj - APPLY |
 | 1567 | AUDIT-0523-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Deno/StellaOps.Scanner.Analyzers.Lang.Deno.csproj - MAINT |
 | 1568 | AUDIT-0523-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Deno/StellaOps.Scanner.Analyzers.Lang.Deno.csproj - TEST |
 | 1569 | AUDIT-0523-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Deno/StellaOps.Scanner.Analyzers.Lang.Deno.csproj - APPLY |
 | 1570 | AUDIT-0524-M | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks.csproj - MAINT |
 | 1571 | AUDIT-0524-T | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks.csproj - TEST |
-| 1572 | AUDIT-0524-A | TODO | Approval | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks.csproj - APPLY |
+| 1572 | AUDIT-0524-A | DONE | Waived (benchmark/sample project) | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Deno.Benchmarks.csproj - APPLY |
 | 1573 | AUDIT-0525-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests.csproj - MAINT |
 | 1574 | AUDIT-0525-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests.csproj - TEST |
-| 1575 | AUDIT-0525-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests.csproj - APPLY |
+| 1575 | AUDIT-0525-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests/StellaOps.Scanner.Analyzers.Lang.Deno.Tests.csproj - APPLY |
 | 1576 | AUDIT-0526-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet/StellaOps.Scanner.Analyzers.Lang.DotNet.csproj - MAINT |
 | 1577 | AUDIT-0526-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet/StellaOps.Scanner.Analyzers.Lang.DotNet.csproj - TEST |
 | 1578 | AUDIT-0526-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet/StellaOps.Scanner.Analyzers.Lang.DotNet.csproj - APPLY |
 | 1579 | AUDIT-0527-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests.csproj - MAINT |
 | 1580 | AUDIT-0527-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests.csproj - TEST |
-| 1581 | AUDIT-0527-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests.csproj - APPLY |
+| 1581 | AUDIT-0527-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests/StellaOps.Scanner.Analyzers.Lang.DotNet.Tests.csproj - APPLY |
 | 1582 | AUDIT-0528-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/StellaOps.Scanner.Analyzers.Lang.Go.csproj - MAINT |
 | 1583 | AUDIT-0528-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/StellaOps.Scanner.Analyzers.Lang.Go.csproj - TEST |
 | 1584 | AUDIT-0528-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Go/StellaOps.Scanner.Analyzers.Lang.Go.csproj - APPLY |
 | 1585 | AUDIT-0529-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests.csproj - MAINT |
 | 1586 | AUDIT-0529-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests.csproj - TEST |
-| 1587 | AUDIT-0529-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests.csproj - APPLY |
+| 1587 | AUDIT-0529-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests/StellaOps.Scanner.Analyzers.Lang.Go.Tests.csproj - APPLY |
 | 1588 | AUDIT-0530-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java/StellaOps.Scanner.Analyzers.Lang.Java.csproj - MAINT |
 | 1589 | AUDIT-0530-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java/StellaOps.Scanner.Analyzers.Lang.Java.csproj - TEST |
 | 1590 | AUDIT-0530-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java/StellaOps.Scanner.Analyzers.Lang.Java.csproj - APPLY |
 | 1591 | AUDIT-0531-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests.csproj - MAINT |
 | 1592 | AUDIT-0531-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests.csproj - TEST |
-| 1593 | AUDIT-0531-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests.csproj - APPLY |
+| 1593 | AUDIT-0531-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests/StellaOps.Scanner.Analyzers.Lang.Java.Tests.csproj - APPLY |
 | 1594 | AUDIT-0532-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/StellaOps.Scanner.Analyzers.Lang.Node.csproj - MAINT |
 | 1595 | AUDIT-0532-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/StellaOps.Scanner.Analyzers.Lang.Node.csproj - TEST |
 | 1596 | AUDIT-0532-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/StellaOps.Scanner.Analyzers.Lang.Node.csproj - APPLY |
 | 1597 | AUDIT-0533-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests.csproj - MAINT |
 | 1598 | AUDIT-0533-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests.csproj - TEST |
-| 1599 | AUDIT-0533-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests.csproj - APPLY |
+| 1599 | AUDIT-0533-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests/StellaOps.Scanner.Analyzers.Lang.Node.SmokeTests.csproj - APPLY |
 | 1600 | AUDIT-0534-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests.csproj - MAINT |
 | 1601 | AUDIT-0534-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests.csproj - TEST |
-| 1602 | AUDIT-0534-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests.csproj - APPLY |
+| 1602 | AUDIT-0534-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests/StellaOps.Scanner.Analyzers.Lang.Node.Tests.csproj - APPLY |
 | 1603 | AUDIT-0535-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Php/StellaOps.Scanner.Analyzers.Lang.Php.csproj - MAINT |
 | 1604 | AUDIT-0535-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Php/StellaOps.Scanner.Analyzers.Lang.Php.csproj - TEST |
 | 1605 | AUDIT-0535-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Php/StellaOps.Scanner.Analyzers.Lang.Php.csproj - APPLY |
 | 1606 | AUDIT-0536-M | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks.csproj - MAINT |
 | 1607 | AUDIT-0536-T | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks.csproj - TEST |
-| 1608 | AUDIT-0536-A | TODO | Approval | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks.csproj - APPLY |
+| 1608 | AUDIT-0536-A | DONE | Waived (benchmark/sample project) | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Php.Benchmarks.csproj - APPLY |
 | 1609 | AUDIT-0537-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests.csproj - MAINT |
 | 1610 | AUDIT-0537-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests.csproj - TEST |
-| 1611 | AUDIT-0537-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests.csproj - APPLY |
+| 1611 | AUDIT-0537-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests/StellaOps.Scanner.Analyzers.Lang.Php.Tests.csproj - APPLY |
 | 1612 | AUDIT-0538-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python/StellaOps.Scanner.Analyzers.Lang.Python.csproj - MAINT |
 | 1613 | AUDIT-0538-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python/StellaOps.Scanner.Analyzers.Lang.Python.csproj - TEST |
 | 1614 | AUDIT-0538-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python/StellaOps.Scanner.Analyzers.Lang.Python.csproj - APPLY |
 | 1615 | AUDIT-0539-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests.csproj - MAINT |
 | 1616 | AUDIT-0539-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests.csproj - TEST |
-| 1617 | AUDIT-0539-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests.csproj - APPLY |
+| 1617 | AUDIT-0539-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests/StellaOps.Scanner.Analyzers.Lang.Python.Tests.csproj - APPLY |
 | 1618 | AUDIT-0540-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Ruby/StellaOps.Scanner.Analyzers.Lang.Ruby.csproj - MAINT |
 | 1619 | AUDIT-0540-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Ruby/StellaOps.Scanner.Analyzers.Lang.Ruby.csproj - TEST |
 | 1620 | AUDIT-0540-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Ruby/StellaOps.Scanner.Analyzers.Lang.Ruby.csproj - APPLY |
 | 1621 | AUDIT-0541-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests.csproj - MAINT |
 | 1622 | AUDIT-0541-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests.csproj - TEST |
-| 1623 | AUDIT-0541-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests.csproj - APPLY |
+| 1623 | AUDIT-0541-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests/StellaOps.Scanner.Analyzers.Lang.Ruby.Tests.csproj - APPLY |
 | 1624 | AUDIT-0542-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Rust/StellaOps.Scanner.Analyzers.Lang.Rust.csproj - MAINT |
 | 1625 | AUDIT-0542-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Rust/StellaOps.Scanner.Analyzers.Lang.Rust.csproj - TEST |
 | 1626 | AUDIT-0542-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Rust/StellaOps.Scanner.Analyzers.Lang.Rust.csproj - APPLY |
 | 1627 | AUDIT-0543-M | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks.csproj - MAINT |
 | 1628 | AUDIT-0543-T | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks.csproj - TEST |
-| 1629 | AUDIT-0543-A | TODO | Approval | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks.csproj - APPLY |
+| 1629 | AUDIT-0543-A | DONE | Waived (benchmark/sample project) | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks/StellaOps.Scanner.Analyzers.Lang.Rust.Benchmarks.csproj - APPLY |
 | 1630 | AUDIT-0544-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Tests/StellaOps.Scanner.Analyzers.Lang.Tests.csproj - MAINT |
 | 1631 | AUDIT-0544-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Tests/StellaOps.Scanner.Analyzers.Lang.Tests.csproj - TEST |
-| 1632 | AUDIT-0544-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Tests/StellaOps.Scanner.Analyzers.Lang.Tests.csproj - APPLY |
+| 1632 | AUDIT-0544-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Tests/StellaOps.Scanner.Analyzers.Lang.Tests.csproj - APPLY |
 | 1633 | AUDIT-0545-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Native/StellaOps.Scanner.Analyzers.Native.csproj - MAINT |
 | 1634 | AUDIT-0545-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Native/StellaOps.Scanner.Analyzers.Native.csproj - TEST |
 | 1635 | AUDIT-0545-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Native/StellaOps.Scanner.Analyzers.Native.csproj - APPLY |
@@ -1660,7 +1660,7 @@ Bulk task definitions (applies to every project row below):
 | 1638 | AUDIT-0546-A | TODO | Approval | Guild | src/Scanner/StellaOps.Scanner.Analyzers.Native/StellaOps.Scanner.Analyzers.Native.csproj - APPLY |
 | 1639 | AUDIT-0547-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Native.Tests/StellaOps.Scanner.Analyzers.Native.Tests.csproj - MAINT |
 | 1640 | AUDIT-0547-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Native.Tests/StellaOps.Scanner.Analyzers.Native.Tests.csproj - TEST |
-| 1641 | AUDIT-0547-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Native.Tests/StellaOps.Scanner.Analyzers.Native.Tests.csproj - APPLY |
+| 1641 | AUDIT-0547-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Native.Tests/StellaOps.Scanner.Analyzers.Native.Tests.csproj - APPLY |
 | 1642 | AUDIT-0548-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS/StellaOps.Scanner.Analyzers.OS.csproj - MAINT |
 | 1643 | AUDIT-0548-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS/StellaOps.Scanner.Analyzers.OS.csproj - TEST |
 | 1644 | AUDIT-0548-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS/StellaOps.Scanner.Analyzers.OS.csproj - APPLY |
@@ -1675,106 +1675,106 @@ Bulk task definitions (applies to every project row below):
 | 1653 | AUDIT-0551-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/StellaOps.Scanner.Analyzers.OS.Homebrew.csproj - APPLY |
 | 1654 | AUDIT-0552-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests.csproj - MAINT |
 | 1655 | AUDIT-0552-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests.csproj - TEST |
-| 1656 | AUDIT-0552-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests.csproj - APPLY |
+| 1656 | AUDIT-0552-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests/StellaOps.Scanner.Analyzers.OS.Homebrew.Tests.csproj - APPLY |
 | 1657 | AUDIT-0553-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.MacOsBundle/StellaOps.Scanner.Analyzers.OS.MacOsBundle.csproj - MAINT |
 | 1658 | AUDIT-0553-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.MacOsBundle/StellaOps.Scanner.Analyzers.OS.MacOsBundle.csproj - TEST |
 | 1659 | AUDIT-0553-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.MacOsBundle/StellaOps.Scanner.Analyzers.OS.MacOsBundle.csproj - APPLY |
 | 1660 | AUDIT-0554-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests.csproj - MAINT |
 | 1661 | AUDIT-0554-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests.csproj - TEST |
-| 1662 | AUDIT-0554-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests.csproj - APPLY |
+| 1662 | AUDIT-0554-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests/StellaOps.Scanner.Analyzers.OS.MacOsBundle.Tests.csproj - APPLY |
 | 1663 | AUDIT-0555-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Pkgutil/StellaOps.Scanner.Analyzers.OS.Pkgutil.csproj - MAINT |
 | 1664 | AUDIT-0555-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Pkgutil/StellaOps.Scanner.Analyzers.OS.Pkgutil.csproj - TEST |
 | 1665 | AUDIT-0555-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Pkgutil/StellaOps.Scanner.Analyzers.OS.Pkgutil.csproj - APPLY |
 | 1666 | AUDIT-0556-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests.csproj - MAINT |
 | 1667 | AUDIT-0556-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests.csproj - TEST |
-| 1668 | AUDIT-0556-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests.csproj - APPLY |
+| 1668 | AUDIT-0556-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests/StellaOps.Scanner.Analyzers.OS.Pkgutil.Tests.csproj - APPLY |
 | 1669 | AUDIT-0557-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Rpm/StellaOps.Scanner.Analyzers.OS.Rpm.csproj - MAINT |
 | 1670 | AUDIT-0557-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Rpm/StellaOps.Scanner.Analyzers.OS.Rpm.csproj - TEST |
 | 1671 | AUDIT-0557-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Rpm/StellaOps.Scanner.Analyzers.OS.Rpm.csproj - APPLY |
 | 1672 | AUDIT-0558-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Tests/StellaOps.Scanner.Analyzers.OS.Tests.csproj - MAINT |
 | 1673 | AUDIT-0558-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Tests/StellaOps.Scanner.Analyzers.OS.Tests.csproj - TEST |
-| 1674 | AUDIT-0558-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Tests/StellaOps.Scanner.Analyzers.OS.Tests.csproj - APPLY |
+| 1674 | AUDIT-0558-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Tests/StellaOps.Scanner.Analyzers.OS.Tests.csproj - APPLY |
 | 1675 | AUDIT-0559-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.csproj - MAINT |
 | 1676 | AUDIT-0559-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.csproj - TEST |
 | 1677 | AUDIT-0559-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.csproj - APPLY |
 | 1678 | AUDIT-0560-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests.csproj - MAINT |
 | 1679 | AUDIT-0560-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests.csproj - TEST |
-| 1680 | AUDIT-0560-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests.csproj - APPLY |
+| 1680 | AUDIT-0560-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Chocolatey.Tests.csproj - APPLY |
 | 1681 | AUDIT-0561-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Msi/StellaOps.Scanner.Analyzers.OS.Windows.Msi.csproj - MAINT |
 | 1682 | AUDIT-0561-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Msi/StellaOps.Scanner.Analyzers.OS.Windows.Msi.csproj - TEST |
 | 1683 | AUDIT-0561-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.Msi/StellaOps.Scanner.Analyzers.OS.Windows.Msi.csproj - APPLY |
 | 1684 | AUDIT-0562-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests.csproj - MAINT |
 | 1685 | AUDIT-0562-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests.csproj - TEST |
-| 1686 | AUDIT-0562-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests.csproj - APPLY |
+| 1686 | AUDIT-0562-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests/StellaOps.Scanner.Analyzers.OS.Windows.Msi.Tests.csproj - APPLY |
 | 1687 | AUDIT-0563-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.csproj - MAINT |
 | 1688 | AUDIT-0563-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.csproj - TEST |
 | 1689 | AUDIT-0563-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.csproj - APPLY |
 | 1690 | AUDIT-0564-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests.csproj - MAINT |
 | 1691 | AUDIT-0564-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests.csproj - TEST |
-| 1692 | AUDIT-0564-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests.csproj - APPLY |
+| 1692 | AUDIT-0564-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS.Tests.csproj - APPLY |
 | 1693 | AUDIT-0565-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmark/StellaOps.Scanner.Benchmark.csproj - MAINT |
 | 1694 | AUDIT-0565-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmark/StellaOps.Scanner.Benchmark.csproj - TEST |
-| 1695 | AUDIT-0565-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmark/StellaOps.Scanner.Benchmark.csproj - APPLY |
+| 1695 | AUDIT-0565-A | DONE | Waived (benchmark/sample project) | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmark/StellaOps.Scanner.Benchmark.csproj - APPLY |
 | 1696 | AUDIT-0566-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmarks/StellaOps.Scanner.Benchmarks.csproj - MAINT |
 | 1697 | AUDIT-0566-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmarks/StellaOps.Scanner.Benchmarks.csproj - TEST |
-| 1698 | AUDIT-0566-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmarks/StellaOps.Scanner.Benchmarks.csproj - APPLY |
+| 1698 | AUDIT-0566-A | DONE | Waived (benchmark/sample project) | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Benchmarks/StellaOps.Scanner.Benchmarks.csproj - APPLY |
 | 1699 | AUDIT-0567-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Benchmarks.Tests/StellaOps.Scanner.Benchmarks.Tests.csproj - MAINT |
 | 1700 | AUDIT-0567-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Benchmarks.Tests/StellaOps.Scanner.Benchmarks.Tests.csproj - TEST |
-| 1701 | AUDIT-0567-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Benchmarks.Tests/StellaOps.Scanner.Benchmarks.Tests.csproj - APPLY |
+| 1701 | AUDIT-0567-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Benchmarks.Tests/StellaOps.Scanner.Benchmarks.Tests.csproj - APPLY |
 | 1702 | AUDIT-0568-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Cache/StellaOps.Scanner.Cache.csproj - MAINT |
 | 1703 | AUDIT-0568-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Cache/StellaOps.Scanner.Cache.csproj - TEST |
 | 1704 | AUDIT-0568-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Cache/StellaOps.Scanner.Cache.csproj - APPLY |
 | 1705 | AUDIT-0569-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Cache.Tests/StellaOps.Scanner.Cache.Tests.csproj - MAINT |
 | 1706 | AUDIT-0569-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Cache.Tests/StellaOps.Scanner.Cache.Tests.csproj - TEST |
-| 1707 | AUDIT-0569-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Cache.Tests/StellaOps.Scanner.Cache.Tests.csproj - APPLY |
+| 1707 | AUDIT-0569-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Cache.Tests/StellaOps.Scanner.Cache.Tests.csproj - APPLY |
 | 1708 | AUDIT-0570-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.CallGraph/StellaOps.Scanner.CallGraph.csproj - MAINT |
 | 1709 | AUDIT-0570-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.CallGraph/StellaOps.Scanner.CallGraph.csproj - TEST |
 | 1710 | AUDIT-0570-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.CallGraph/StellaOps.Scanner.CallGraph.csproj - APPLY |
 | 1711 | AUDIT-0571-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.CallGraph.Tests/StellaOps.Scanner.CallGraph.Tests.csproj - MAINT |
 | 1712 | AUDIT-0571-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.CallGraph.Tests/StellaOps.Scanner.CallGraph.Tests.csproj - TEST |
-| 1713 | AUDIT-0571-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.CallGraph.Tests/StellaOps.Scanner.CallGraph.Tests.csproj - APPLY |
+| 1713 | AUDIT-0571-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.CallGraph.Tests/StellaOps.Scanner.CallGraph.Tests.csproj - APPLY |
 | 1714 | AUDIT-0572-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Core/StellaOps.Scanner.Core.csproj - MAINT |
 | 1715 | AUDIT-0572-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Core/StellaOps.Scanner.Core.csproj - TEST |
 | 1716 | AUDIT-0572-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Core/StellaOps.Scanner.Core.csproj - APPLY |
 | 1717 | AUDIT-0573-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj - MAINT |
 | 1718 | AUDIT-0573-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj - TEST |
-| 1719 | AUDIT-0573-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj - APPLY |
+| 1719 | AUDIT-0573-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj - APPLY |
 | 1720 | AUDIT-0574-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Diff/StellaOps.Scanner.Diff.csproj - MAINT |
 | 1721 | AUDIT-0574-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Diff/StellaOps.Scanner.Diff.csproj - TEST |
 | 1722 | AUDIT-0574-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Diff/StellaOps.Scanner.Diff.csproj - APPLY |
 | 1723 | AUDIT-0575-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Diff.Tests/StellaOps.Scanner.Diff.Tests.csproj - MAINT |
 | 1724 | AUDIT-0575-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Diff.Tests/StellaOps.Scanner.Diff.Tests.csproj - TEST |
-| 1725 | AUDIT-0575-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Diff.Tests/StellaOps.Scanner.Diff.Tests.csproj - APPLY |
+| 1725 | AUDIT-0575-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Diff.Tests/StellaOps.Scanner.Diff.Tests.csproj - APPLY |
 | 1726 | AUDIT-0576-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Emit/StellaOps.Scanner.Emit.csproj - MAINT |
 | 1727 | AUDIT-0576-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Emit/StellaOps.Scanner.Emit.csproj - TEST |
 | 1728 | AUDIT-0576-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Emit/StellaOps.Scanner.Emit.csproj - APPLY |
 | 1729 | AUDIT-0577-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Lineage.Tests/StellaOps.Scanner.Emit.Lineage.Tests.csproj - MAINT |
 | 1730 | AUDIT-0577-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Lineage.Tests/StellaOps.Scanner.Emit.Lineage.Tests.csproj - TEST |
-| 1731 | AUDIT-0577-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Lineage.Tests/StellaOps.Scanner.Emit.Lineage.Tests.csproj - APPLY |
+| 1731 | AUDIT-0577-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Lineage.Tests/StellaOps.Scanner.Emit.Lineage.Tests.csproj - APPLY |
 | 1732 | AUDIT-0578-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Tests/StellaOps.Scanner.Emit.Tests.csproj - MAINT |
 | 1733 | AUDIT-0578-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Tests/StellaOps.Scanner.Emit.Tests.csproj - TEST |
-| 1734 | AUDIT-0578-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Tests/StellaOps.Scanner.Emit.Tests.csproj - APPLY |
+| 1734 | AUDIT-0578-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Emit.Tests/StellaOps.Scanner.Emit.Tests.csproj - APPLY |
 | 1735 | AUDIT-0579-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/StellaOps.Scanner.EntryTrace.csproj - MAINT |
 | 1736 | AUDIT-0579-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/StellaOps.Scanner.EntryTrace.csproj - TEST |
 | 1737 | AUDIT-0579-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/StellaOps.Scanner.EntryTrace.csproj - APPLY |
 | 1738 | AUDIT-0580-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.EntryTrace.Tests/StellaOps.Scanner.EntryTrace.Tests.csproj - MAINT |
 | 1739 | AUDIT-0580-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.EntryTrace.Tests/StellaOps.Scanner.EntryTrace.Tests.csproj - TEST |
-| 1740 | AUDIT-0580-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.EntryTrace.Tests/StellaOps.Scanner.EntryTrace.Tests.csproj - APPLY |
+| 1740 | AUDIT-0580-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.EntryTrace.Tests/StellaOps.Scanner.EntryTrace.Tests.csproj - APPLY |
 | 1741 | AUDIT-0581-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Evidence/StellaOps.Scanner.Evidence.csproj - MAINT |
 | 1742 | AUDIT-0581-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Evidence/StellaOps.Scanner.Evidence.csproj - TEST |
 | 1743 | AUDIT-0581-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Evidence/StellaOps.Scanner.Evidence.csproj - APPLY |
 | 1744 | AUDIT-0582-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Evidence.Tests/StellaOps.Scanner.Evidence.Tests.csproj - MAINT |
 | 1745 | AUDIT-0582-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Evidence.Tests/StellaOps.Scanner.Evidence.Tests.csproj - TEST |
-| 1746 | AUDIT-0582-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Evidence.Tests/StellaOps.Scanner.Evidence.Tests.csproj - APPLY |
+| 1746 | AUDIT-0582-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Evidence.Tests/StellaOps.Scanner.Evidence.Tests.csproj - APPLY |
 | 1747 | AUDIT-0583-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Explainability/StellaOps.Scanner.Explainability.csproj - MAINT |
 | 1748 | AUDIT-0583-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Explainability/StellaOps.Scanner.Explainability.csproj - TEST |
 | 1749 | AUDIT-0583-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Explainability/StellaOps.Scanner.Explainability.csproj - APPLY |
 | 1750 | AUDIT-0584-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Explainability.Tests/StellaOps.Scanner.Explainability.Tests.csproj - MAINT |
 | 1751 | AUDIT-0584-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Explainability.Tests/StellaOps.Scanner.Explainability.Tests.csproj - TEST |
-| 1752 | AUDIT-0584-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Explainability.Tests/StellaOps.Scanner.Explainability.Tests.csproj - APPLY |
+| 1752 | AUDIT-0584-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Explainability.Tests/StellaOps.Scanner.Explainability.Tests.csproj - APPLY |
 | 1753 | AUDIT-0585-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Integration.Tests/StellaOps.Scanner.Integration.Tests.csproj - MAINT |
 | 1754 | AUDIT-0585-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Integration.Tests/StellaOps.Scanner.Integration.Tests.csproj - TEST |
-| 1755 | AUDIT-0585-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Integration.Tests/StellaOps.Scanner.Integration.Tests.csproj - APPLY |
+| 1755 | AUDIT-0585-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Integration.Tests/StellaOps.Scanner.Integration.Tests.csproj - APPLY |
 | 1756 | AUDIT-0586-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Orchestration/StellaOps.Scanner.Orchestration.csproj - MAINT |
 | 1757 | AUDIT-0586-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Orchestration/StellaOps.Scanner.Orchestration.csproj - TEST |
 | 1758 | AUDIT-0586-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Orchestration/StellaOps.Scanner.Orchestration.csproj - APPLY |
@@ -1786,55 +1786,55 @@ Bulk task definitions (applies to every project row below):
 | 1764 | AUDIT-0588-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.ProofSpine/StellaOps.Scanner.ProofSpine.csproj - APPLY |
 | 1765 | AUDIT-0589-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.ProofSpine.Tests/StellaOps.Scanner.ProofSpine.Tests.csproj - MAINT |
 | 1766 | AUDIT-0589-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.ProofSpine.Tests/StellaOps.Scanner.ProofSpine.Tests.csproj - TEST |
-| 1767 | AUDIT-0589-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.ProofSpine.Tests/StellaOps.Scanner.ProofSpine.Tests.csproj - APPLY |
+| 1767 | AUDIT-0589-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.ProofSpine.Tests/StellaOps.Scanner.ProofSpine.Tests.csproj - APPLY |
 | 1768 | AUDIT-0590-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Queue/StellaOps.Scanner.Queue.csproj - MAINT |
 | 1769 | AUDIT-0590-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Queue/StellaOps.Scanner.Queue.csproj - TEST |
 | 1770 | AUDIT-0590-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Queue/StellaOps.Scanner.Queue.csproj - APPLY |
 | 1771 | AUDIT-0591-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Queue.Tests/StellaOps.Scanner.Queue.Tests.csproj - MAINT |
 | 1772 | AUDIT-0591-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Queue.Tests/StellaOps.Scanner.Queue.Tests.csproj - TEST |
-| 1773 | AUDIT-0591-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Queue.Tests/StellaOps.Scanner.Queue.Tests.csproj - APPLY |
+| 1773 | AUDIT-0591-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Queue.Tests/StellaOps.Scanner.Queue.Tests.csproj - APPLY |
 | 1774 | AUDIT-0592-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Reachability/StellaOps.Scanner.Reachability.csproj - MAINT |
 | 1775 | AUDIT-0592-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Reachability/StellaOps.Scanner.Reachability.csproj - TEST |
 | 1776 | AUDIT-0592-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Reachability/StellaOps.Scanner.Reachability.csproj - APPLY |
 | 1777 | AUDIT-0593-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Stack.Tests/StellaOps.Scanner.Reachability.Stack.Tests.csproj - MAINT |
 | 1778 | AUDIT-0593-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Stack.Tests/StellaOps.Scanner.Reachability.Stack.Tests.csproj - TEST |
-| 1779 | AUDIT-0593-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Stack.Tests/StellaOps.Scanner.Reachability.Stack.Tests.csproj - APPLY |
+| 1779 | AUDIT-0593-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Stack.Tests/StellaOps.Scanner.Reachability.Stack.Tests.csproj - APPLY |
 | 1780 | AUDIT-0594-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Tests/StellaOps.Scanner.Reachability.Tests.csproj - MAINT |
 | 1781 | AUDIT-0594-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Tests/StellaOps.Scanner.Reachability.Tests.csproj - TEST |
-| 1782 | AUDIT-0594-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Tests/StellaOps.Scanner.Reachability.Tests.csproj - APPLY |
+| 1782 | AUDIT-0594-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Reachability.Tests/StellaOps.Scanner.Reachability.Tests.csproj - APPLY |
 | 1783 | AUDIT-0595-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.ReachabilityDrift/StellaOps.Scanner.ReachabilityDrift.csproj - MAINT |
 | 1784 | AUDIT-0595-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.ReachabilityDrift/StellaOps.Scanner.ReachabilityDrift.csproj - TEST |
 | 1785 | AUDIT-0595-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.ReachabilityDrift/StellaOps.Scanner.ReachabilityDrift.csproj - APPLY |
 | 1786 | AUDIT-0596-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.ReachabilityDrift.Tests/StellaOps.Scanner.ReachabilityDrift.Tests.csproj - MAINT |
 | 1787 | AUDIT-0596-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.ReachabilityDrift.Tests/StellaOps.Scanner.ReachabilityDrift.Tests.csproj - TEST |
-| 1788 | AUDIT-0596-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.ReachabilityDrift.Tests/StellaOps.Scanner.ReachabilityDrift.Tests.csproj - APPLY |
+| 1788 | AUDIT-0596-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.ReachabilityDrift.Tests/StellaOps.Scanner.ReachabilityDrift.Tests.csproj - APPLY |
 | 1789 | AUDIT-0597-M | TODO | Report | Guild | src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin/StellaOps.Scanner.Sbomer.BuildXPlugin.csproj - MAINT |
 | 1790 | AUDIT-0597-T | TODO | Report | Guild | src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin/StellaOps.Scanner.Sbomer.BuildXPlugin.csproj - TEST |
 | 1791 | AUDIT-0597-A | TODO | Approval | Guild | src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin/StellaOps.Scanner.Sbomer.BuildXPlugin.csproj - APPLY |
 | 1792 | AUDIT-0598-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests.csproj - MAINT |
 | 1793 | AUDIT-0598-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests.csproj - TEST |
-| 1794 | AUDIT-0598-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests.csproj - APPLY |
+| 1794 | AUDIT-0598-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests/StellaOps.Scanner.Sbomer.BuildXPlugin.Tests.csproj - APPLY |
 | 1795 | AUDIT-0599-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/StellaOps.Scanner.SmartDiff.csproj - MAINT |
 | 1796 | AUDIT-0599-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/StellaOps.Scanner.SmartDiff.csproj - TEST |
 | 1797 | AUDIT-0599-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/StellaOps.Scanner.SmartDiff.csproj - APPLY |
 | 1798 | AUDIT-0600-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.SmartDiff.Tests/StellaOps.Scanner.SmartDiff.Tests.csproj - MAINT |
 | 1799 | AUDIT-0600-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.SmartDiff.Tests/StellaOps.Scanner.SmartDiff.Tests.csproj - TEST |
-| 1800 | AUDIT-0600-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.SmartDiff.Tests/StellaOps.Scanner.SmartDiff.Tests.csproj - APPLY |
+| 1800 | AUDIT-0600-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.SmartDiff.Tests/StellaOps.Scanner.SmartDiff.Tests.csproj - APPLY |
 | 1801 | AUDIT-0601-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Storage/StellaOps.Scanner.Storage.csproj - MAINT |
 | 1802 | AUDIT-0601-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Storage/StellaOps.Scanner.Storage.csproj - TEST |
 | 1803 | AUDIT-0601-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Storage/StellaOps.Scanner.Storage.csproj - APPLY |
 | 1804 | AUDIT-0602-M | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Storage.Epss.Perf/StellaOps.Scanner.Storage.Epss.Perf.csproj - MAINT |
 | 1805 | AUDIT-0602-T | TODO | Report | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Storage.Epss.Perf/StellaOps.Scanner.Storage.Epss.Perf.csproj - TEST |
-| 1806 | AUDIT-0602-A | TODO | Approval | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Storage.Epss.Perf/StellaOps.Scanner.Storage.Epss.Perf.csproj - APPLY |
+| 1806 | AUDIT-0602-A | DONE | Waived (benchmark/sample project) | Guild | src/Scanner/__Benchmarks/StellaOps.Scanner.Storage.Epss.Perf/StellaOps.Scanner.Storage.Epss.Perf.csproj - APPLY |
 | 1807 | AUDIT-0603-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/StellaOps.Scanner.Storage.Oci.csproj - MAINT |
 | 1808 | AUDIT-0603-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/StellaOps.Scanner.Storage.Oci.csproj - TEST |
 | 1809 | AUDIT-0603-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/StellaOps.Scanner.Storage.Oci.csproj - APPLY |
 | 1810 | AUDIT-0604-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Oci.Tests/StellaOps.Scanner.Storage.Oci.Tests.csproj - MAINT |
 | 1811 | AUDIT-0604-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Oci.Tests/StellaOps.Scanner.Storage.Oci.Tests.csproj - TEST |
-| 1812 | AUDIT-0604-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Oci.Tests/StellaOps.Scanner.Storage.Oci.Tests.csproj - APPLY |
+| 1812 | AUDIT-0604-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Oci.Tests/StellaOps.Scanner.Storage.Oci.Tests.csproj - APPLY |
 | 1813 | AUDIT-0605-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/StellaOps.Scanner.Storage.Tests.csproj - MAINT |
 | 1814 | AUDIT-0605-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/StellaOps.Scanner.Storage.Tests.csproj - TEST |
-| 1815 | AUDIT-0605-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/StellaOps.Scanner.Storage.Tests.csproj - APPLY |
+| 1815 | AUDIT-0605-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/StellaOps.Scanner.Storage.Tests.csproj - APPLY |
 | 1816 | AUDIT-0606-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface/StellaOps.Scanner.Surface.csproj - MAINT |
 | 1817 | AUDIT-0606-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface/StellaOps.Scanner.Surface.csproj - TEST |
 | 1818 | AUDIT-0606-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface/StellaOps.Scanner.Surface.csproj - APPLY |
@@ -1843,88 +1843,88 @@ Bulk task definitions (applies to every project row below):
 | 1821 | AUDIT-0607-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env/StellaOps.Scanner.Surface.Env.csproj - APPLY |
 | 1822 | AUDIT-0608-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Env.Tests/StellaOps.Scanner.Surface.Env.Tests.csproj - MAINT |
 | 1823 | AUDIT-0608-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Env.Tests/StellaOps.Scanner.Surface.Env.Tests.csproj - TEST |
-| 1824 | AUDIT-0608-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Env.Tests/StellaOps.Scanner.Surface.Env.Tests.csproj - APPLY |
+| 1824 | AUDIT-0608-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Env.Tests/StellaOps.Scanner.Surface.Env.Tests.csproj - APPLY |
 | 1825 | AUDIT-0609-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS/StellaOps.Scanner.Surface.FS.csproj - MAINT |
 | 1826 | AUDIT-0609-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS/StellaOps.Scanner.Surface.FS.csproj - TEST |
 | 1827 | AUDIT-0609-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS/StellaOps.Scanner.Surface.FS.csproj - APPLY |
 | 1828 | AUDIT-0610-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.FS.Tests/StellaOps.Scanner.Surface.FS.Tests.csproj - MAINT |
 | 1829 | AUDIT-0610-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.FS.Tests/StellaOps.Scanner.Surface.FS.Tests.csproj - TEST |
-| 1830 | AUDIT-0610-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.FS.Tests/StellaOps.Scanner.Surface.FS.Tests.csproj - APPLY |
+| 1830 | AUDIT-0610-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.FS.Tests/StellaOps.Scanner.Surface.FS.Tests.csproj - APPLY |
 | 1831 | AUDIT-0611-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets/StellaOps.Scanner.Surface.Secrets.csproj - MAINT |
 | 1832 | AUDIT-0611-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets/StellaOps.Scanner.Surface.Secrets.csproj - TEST |
 | 1833 | AUDIT-0611-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets/StellaOps.Scanner.Surface.Secrets.csproj - APPLY |
 | 1834 | AUDIT-0612-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Secrets.Tests/StellaOps.Scanner.Surface.Secrets.Tests.csproj - MAINT |
 | 1835 | AUDIT-0612-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Secrets.Tests/StellaOps.Scanner.Surface.Secrets.Tests.csproj - TEST |
-| 1836 | AUDIT-0612-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Secrets.Tests/StellaOps.Scanner.Surface.Secrets.Tests.csproj - APPLY |
+| 1836 | AUDIT-0612-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Secrets.Tests/StellaOps.Scanner.Surface.Secrets.Tests.csproj - APPLY |
 | 1837 | AUDIT-0613-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Tests/StellaOps.Scanner.Surface.Tests.csproj - MAINT |
 | 1838 | AUDIT-0613-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Tests/StellaOps.Scanner.Surface.Tests.csproj - TEST |
-| 1839 | AUDIT-0613-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Tests/StellaOps.Scanner.Surface.Tests.csproj - APPLY |
+| 1839 | AUDIT-0613-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Tests/StellaOps.Scanner.Surface.Tests.csproj - APPLY |
 | 1840 | AUDIT-0614-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation/StellaOps.Scanner.Surface.Validation.csproj - MAINT |
 | 1841 | AUDIT-0614-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation/StellaOps.Scanner.Surface.Validation.csproj - TEST |
 | 1842 | AUDIT-0614-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation/StellaOps.Scanner.Surface.Validation.csproj - APPLY |
 | 1843 | AUDIT-0615-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Validation.Tests/StellaOps.Scanner.Surface.Validation.Tests.csproj - MAINT |
 | 1844 | AUDIT-0615-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Validation.Tests/StellaOps.Scanner.Surface.Validation.Tests.csproj - TEST |
-| 1845 | AUDIT-0615-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Validation.Tests/StellaOps.Scanner.Surface.Validation.Tests.csproj - APPLY |
+| 1845 | AUDIT-0615-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Surface.Validation.Tests/StellaOps.Scanner.Surface.Validation.Tests.csproj - APPLY |
 | 1846 | AUDIT-0616-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Triage/StellaOps.Scanner.Triage.csproj - MAINT |
 | 1847 | AUDIT-0616-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Triage/StellaOps.Scanner.Triage.csproj - TEST |
 | 1848 | AUDIT-0616-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.Triage/StellaOps.Scanner.Triage.csproj - APPLY |
 | 1849 | AUDIT-0617-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Triage.Tests/StellaOps.Scanner.Triage.Tests.csproj - MAINT |
 | 1850 | AUDIT-0617-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Triage.Tests/StellaOps.Scanner.Triage.Tests.csproj - TEST |
-| 1851 | AUDIT-0617-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Triage.Tests/StellaOps.Scanner.Triage.Tests.csproj - APPLY |
+| 1851 | AUDIT-0617-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Triage.Tests/StellaOps.Scanner.Triage.Tests.csproj - APPLY |
 | 1852 | AUDIT-0618-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces/StellaOps.Scanner.VulnSurfaces.csproj - MAINT |
 | 1853 | AUDIT-0618-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces/StellaOps.Scanner.VulnSurfaces.csproj - TEST |
 | 1854 | AUDIT-0618-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces/StellaOps.Scanner.VulnSurfaces.csproj - APPLY |
 | 1855 | AUDIT-0619-M | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces.Tests/StellaOps.Scanner.VulnSurfaces.Tests.csproj - MAINT |
 | 1856 | AUDIT-0619-T | TODO | Report | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces.Tests/StellaOps.Scanner.VulnSurfaces.Tests.csproj - TEST |
-| 1857 | AUDIT-0619-A | TODO | Approval | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces.Tests/StellaOps.Scanner.VulnSurfaces.Tests.csproj - APPLY |
+| 1857 | AUDIT-0619-A | DONE | Waived (test project) | Guild | src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces.Tests/StellaOps.Scanner.VulnSurfaces.Tests.csproj - APPLY |
 | 1858 | AUDIT-0620-M | TODO | Report | Guild | src/Scanner/StellaOps.Scanner.WebService/StellaOps.Scanner.WebService.csproj - MAINT |
 | 1859 | AUDIT-0620-T | TODO | Report | Guild | src/Scanner/StellaOps.Scanner.WebService/StellaOps.Scanner.WebService.csproj - TEST |
 | 1860 | AUDIT-0620-A | TODO | Approval | Guild | src/Scanner/StellaOps.Scanner.WebService/StellaOps.Scanner.WebService.csproj - APPLY |
 | 1861 | AUDIT-0621-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/StellaOps.Scanner.WebService.Tests.csproj - MAINT |
 | 1862 | AUDIT-0621-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/StellaOps.Scanner.WebService.Tests.csproj - TEST |
-| 1863 | AUDIT-0621-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/StellaOps.Scanner.WebService.Tests.csproj - APPLY |
+| 1863 | AUDIT-0621-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/StellaOps.Scanner.WebService.Tests.csproj - APPLY |
 | 1864 | AUDIT-0622-M | TODO | Report | Guild | src/Scanner/StellaOps.Scanner.Worker/StellaOps.Scanner.Worker.csproj - MAINT |
 | 1865 | AUDIT-0622-T | TODO | Report | Guild | src/Scanner/StellaOps.Scanner.Worker/StellaOps.Scanner.Worker.csproj - TEST |
 | 1866 | AUDIT-0622-A | TODO | Approval | Guild | src/Scanner/StellaOps.Scanner.Worker/StellaOps.Scanner.Worker.csproj - APPLY |
 | 1867 | AUDIT-0623-M | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/StellaOps.Scanner.Worker.Tests.csproj - MAINT |
 | 1868 | AUDIT-0623-T | TODO | Report | Guild | src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/StellaOps.Scanner.Worker.Tests.csproj - TEST |
-| 1869 | AUDIT-0623-A | TODO | Approval | Guild | src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/StellaOps.Scanner.Worker.Tests.csproj - APPLY |
+| 1869 | AUDIT-0623-A | DONE | Waived (test project) | Guild | src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/StellaOps.Scanner.Worker.Tests.csproj - APPLY |
 | 1870 | AUDIT-0624-M | TODO | Report | Guild | src/__Tests/reachability/StellaOps.ScannerSignals.IntegrationTests/StellaOps.ScannerSignals.IntegrationTests.csproj - MAINT |
 | 1871 | AUDIT-0624-T | TODO | Report | Guild | src/__Tests/reachability/StellaOps.ScannerSignals.IntegrationTests/StellaOps.ScannerSignals.IntegrationTests.csproj - TEST |
-| 1872 | AUDIT-0624-A | TODO | Approval | Guild | src/__Tests/reachability/StellaOps.ScannerSignals.IntegrationTests/StellaOps.ScannerSignals.IntegrationTests.csproj - APPLY |
+| 1872 | AUDIT-0624-A | DONE | Waived (test project) | Guild | src/__Tests/reachability/StellaOps.ScannerSignals.IntegrationTests/StellaOps.ScannerSignals.IntegrationTests.csproj - APPLY |
 | 1873 | AUDIT-0625-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Backfill.Tests/StellaOps.Scheduler.Backfill.Tests.csproj - MAINT |
 | 1874 | AUDIT-0625-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Backfill.Tests/StellaOps.Scheduler.Backfill.Tests.csproj - TEST |
-| 1875 | AUDIT-0625-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Backfill.Tests/StellaOps.Scheduler.Backfill.Tests.csproj - APPLY |
+| 1875 | AUDIT-0625-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Backfill.Tests/StellaOps.Scheduler.Backfill.Tests.csproj - APPLY |
 | 1876 | AUDIT-0626-M | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.ImpactIndex/StellaOps.Scheduler.ImpactIndex.csproj - MAINT |
 | 1877 | AUDIT-0626-T | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.ImpactIndex/StellaOps.Scheduler.ImpactIndex.csproj - TEST |
 | 1878 | AUDIT-0626-A | TODO | Approval | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.ImpactIndex/StellaOps.Scheduler.ImpactIndex.csproj - APPLY |
 | 1879 | AUDIT-0627-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.ImpactIndex.Tests/StellaOps.Scheduler.ImpactIndex.Tests.csproj - MAINT |
 | 1880 | AUDIT-0627-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.ImpactIndex.Tests/StellaOps.Scheduler.ImpactIndex.Tests.csproj - TEST |
-| 1881 | AUDIT-0627-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.ImpactIndex.Tests/StellaOps.Scheduler.ImpactIndex.Tests.csproj - APPLY |
+| 1881 | AUDIT-0627-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.ImpactIndex.Tests/StellaOps.Scheduler.ImpactIndex.Tests.csproj - APPLY |
 | 1882 | AUDIT-0628-M | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Models/StellaOps.Scheduler.Models.csproj - MAINT |
 | 1883 | AUDIT-0628-T | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Models/StellaOps.Scheduler.Models.csproj - TEST |
 | 1884 | AUDIT-0628-A | TODO | Approval | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Models/StellaOps.Scheduler.Models.csproj - APPLY |
 | 1885 | AUDIT-0629-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Models.Tests/StellaOps.Scheduler.Models.Tests.csproj - MAINT |
 | 1886 | AUDIT-0629-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Models.Tests/StellaOps.Scheduler.Models.Tests.csproj - TEST |
-| 1887 | AUDIT-0629-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Models.Tests/StellaOps.Scheduler.Models.Tests.csproj - APPLY |
+| 1887 | AUDIT-0629-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Models.Tests/StellaOps.Scheduler.Models.Tests.csproj - APPLY |
 | 1888 | AUDIT-0630-M | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Persistence/StellaOps.Scheduler.Persistence.csproj - MAINT |
 | 1889 | AUDIT-0630-T | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Persistence/StellaOps.Scheduler.Persistence.csproj - TEST |
 | 1890 | AUDIT-0630-A | TODO | Approval | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Persistence/StellaOps.Scheduler.Persistence.csproj - APPLY |
 | 1891 | AUDIT-0631-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Persistence.Tests/StellaOps.Scheduler.Persistence.Tests.csproj - MAINT |
 | 1892 | AUDIT-0631-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Persistence.Tests/StellaOps.Scheduler.Persistence.Tests.csproj - TEST |
-| 1893 | AUDIT-0631-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Persistence.Tests/StellaOps.Scheduler.Persistence.Tests.csproj - APPLY |
+| 1893 | AUDIT-0631-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Persistence.Tests/StellaOps.Scheduler.Persistence.Tests.csproj - APPLY |
 | 1894 | AUDIT-0632-M | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Queue/StellaOps.Scheduler.Queue.csproj - MAINT |
 | 1895 | AUDIT-0632-T | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Queue/StellaOps.Scheduler.Queue.csproj - TEST |
 | 1896 | AUDIT-0632-A | TODO | Approval | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Queue/StellaOps.Scheduler.Queue.csproj - APPLY |
 | 1897 | AUDIT-0633-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Queue.Tests/StellaOps.Scheduler.Queue.Tests.csproj - MAINT |
 | 1898 | AUDIT-0633-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Queue.Tests/StellaOps.Scheduler.Queue.Tests.csproj - TEST |
-| 1899 | AUDIT-0633-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Queue.Tests/StellaOps.Scheduler.Queue.Tests.csproj - APPLY |
+| 1899 | AUDIT-0633-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Queue.Tests/StellaOps.Scheduler.Queue.Tests.csproj - APPLY |
 | 1900 | AUDIT-0634-M | TODO | Report | Guild | src/Scheduler/StellaOps.Scheduler.WebService/StellaOps.Scheduler.WebService.csproj - MAINT |
 | 1901 | AUDIT-0634-T | TODO | Report | Guild | src/Scheduler/StellaOps.Scheduler.WebService/StellaOps.Scheduler.WebService.csproj - TEST |
 | 1902 | AUDIT-0634-A | TODO | Approval | Guild | src/Scheduler/StellaOps.Scheduler.WebService/StellaOps.Scheduler.WebService.csproj - APPLY |
 | 1903 | AUDIT-0635-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.WebService.Tests/StellaOps.Scheduler.WebService.Tests.csproj - MAINT |
 | 1904 | AUDIT-0635-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.WebService.Tests/StellaOps.Scheduler.WebService.Tests.csproj - TEST |
-| 1905 | AUDIT-0635-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.WebService.Tests/StellaOps.Scheduler.WebService.Tests.csproj - APPLY |
+| 1905 | AUDIT-0635-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.WebService.Tests/StellaOps.Scheduler.WebService.Tests.csproj - APPLY |
 | 1906 | AUDIT-0636-M | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Worker/StellaOps.Scheduler.Worker.csproj - MAINT |
 | 1907 | AUDIT-0636-T | TODO | Report | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Worker/StellaOps.Scheduler.Worker.csproj - TEST |
 | 1908 | AUDIT-0636-A | TODO | Approval | Guild | src/Scheduler/__Libraries/StellaOps.Scheduler.Worker/StellaOps.Scheduler.Worker.csproj - APPLY |
@@ -1933,10 +1933,10 @@ Bulk task definitions (applies to every project row below):
 | 1911 | AUDIT-0637-A | TODO | Approval | Guild | src/Scheduler/StellaOps.Scheduler.Worker.Host/StellaOps.Scheduler.Worker.Host.csproj - APPLY |
 | 1912 | AUDIT-0638-M | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Worker.Tests/StellaOps.Scheduler.Worker.Tests.csproj - MAINT |
 | 1913 | AUDIT-0638-T | TODO | Report | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Worker.Tests/StellaOps.Scheduler.Worker.Tests.csproj - TEST |
-| 1914 | AUDIT-0638-A | TODO | Approval | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Worker.Tests/StellaOps.Scheduler.Worker.Tests.csproj - APPLY |
+| 1914 | AUDIT-0638-A | DONE | Waived (test project) | Guild | src/Scheduler/__Tests/StellaOps.Scheduler.Worker.Tests/StellaOps.Scheduler.Worker.Tests.csproj - APPLY |
 | 1915 | AUDIT-0639-M | TODO | Report | Guild | src/__Tests/security/StellaOps.Security.Tests/StellaOps.Security.Tests.csproj - MAINT |
 | 1916 | AUDIT-0639-T | TODO | Report | Guild | src/__Tests/security/StellaOps.Security.Tests/StellaOps.Security.Tests.csproj - TEST |
-| 1917 | AUDIT-0639-A | TODO | Approval | Guild | src/__Tests/security/StellaOps.Security.Tests/StellaOps.Security.Tests.csproj - APPLY |
+| 1917 | AUDIT-0639-A | DONE | Waived (test project) | Guild | src/__Tests/security/StellaOps.Security.Tests/StellaOps.Security.Tests.csproj - APPLY |
 | 1918 | AUDIT-0640-M | TODO | Report | Guild | src/Signals/StellaOps.Signals/StellaOps.Signals.csproj - MAINT |
 | 1919 | AUDIT-0640-T | TODO | Report | Guild | src/Signals/StellaOps.Signals/StellaOps.Signals.csproj - TEST |
 | 1920 | AUDIT-0640-A | TODO | Approval | Guild | src/Signals/StellaOps.Signals/StellaOps.Signals.csproj - APPLY |
@@ -1948,25 +1948,25 @@ Bulk task definitions (applies to every project row below):
 | 1926 | AUDIT-0642-A | TODO | Approval | Guild | src/Signals/__Libraries/StellaOps.Signals.Ebpf/StellaOps.Signals.Ebpf.csproj - APPLY |
 | 1927 | AUDIT-0643-M | TODO | Report | Guild | src/Signals/__Tests/StellaOps.Signals.Ebpf.Tests/StellaOps.Signals.Ebpf.Tests.csproj - MAINT |
 | 1928 | AUDIT-0643-T | TODO | Report | Guild | src/Signals/__Tests/StellaOps.Signals.Ebpf.Tests/StellaOps.Signals.Ebpf.Tests.csproj - TEST |
-| 1929 | AUDIT-0643-A | TODO | Approval | Guild | src/Signals/__Tests/StellaOps.Signals.Ebpf.Tests/StellaOps.Signals.Ebpf.Tests.csproj - APPLY |
+| 1929 | AUDIT-0643-A | DONE | Waived (test project) | Guild | src/Signals/__Tests/StellaOps.Signals.Ebpf.Tests/StellaOps.Signals.Ebpf.Tests.csproj - APPLY |
 | 1930 | AUDIT-0644-M | TODO | Report | Guild | src/Signals/__Libraries/StellaOps.Signals.Persistence/StellaOps.Signals.Persistence.csproj - MAINT |
 | 1931 | AUDIT-0644-T | TODO | Report | Guild | src/Signals/__Libraries/StellaOps.Signals.Persistence/StellaOps.Signals.Persistence.csproj - TEST |
 | 1932 | AUDIT-0644-A | TODO | Approval | Guild | src/Signals/__Libraries/StellaOps.Signals.Persistence/StellaOps.Signals.Persistence.csproj - APPLY |
 | 1933 | AUDIT-0645-M | TODO | Report | Guild | src/Signals/__Tests/StellaOps.Signals.Persistence.Tests/StellaOps.Signals.Persistence.Tests.csproj - MAINT |
 | 1934 | AUDIT-0645-T | TODO | Report | Guild | src/Signals/__Tests/StellaOps.Signals.Persistence.Tests/StellaOps.Signals.Persistence.Tests.csproj - TEST |
-| 1935 | AUDIT-0645-A | TODO | Approval | Guild | src/Signals/__Tests/StellaOps.Signals.Persistence.Tests/StellaOps.Signals.Persistence.Tests.csproj - APPLY |
+| 1935 | AUDIT-0645-A | DONE | Waived (test project) | Guild | src/Signals/__Tests/StellaOps.Signals.Persistence.Tests/StellaOps.Signals.Persistence.Tests.csproj - APPLY |
 | 1936 | AUDIT-0646-M | TODO | Report | Guild | src/__Tests/reachability/StellaOps.Signals.Reachability.Tests/StellaOps.Signals.Reachability.Tests.csproj - MAINT |
 | 1937 | AUDIT-0646-T | TODO | Report | Guild | src/__Tests/reachability/StellaOps.Signals.Reachability.Tests/StellaOps.Signals.Reachability.Tests.csproj - TEST |
-| 1938 | AUDIT-0646-A | TODO | Approval | Guild | src/__Tests/reachability/StellaOps.Signals.Reachability.Tests/StellaOps.Signals.Reachability.Tests.csproj - APPLY |
+| 1938 | AUDIT-0646-A | DONE | Waived (test project) | Guild | src/__Tests/reachability/StellaOps.Signals.Reachability.Tests/StellaOps.Signals.Reachability.Tests.csproj - APPLY |
 | 1939 | AUDIT-0647-M | TODO | Report | Guild | src/Signals/StellaOps.Signals.Scheduler/StellaOps.Signals.Scheduler.csproj - MAINT |
 | 1940 | AUDIT-0647-T | TODO | Report | Guild | src/Signals/StellaOps.Signals.Scheduler/StellaOps.Signals.Scheduler.csproj - TEST |
 | 1941 | AUDIT-0647-A | TODO | Approval | Guild | src/Signals/StellaOps.Signals.Scheduler/StellaOps.Signals.Scheduler.csproj - APPLY |
 | 1942 | AUDIT-0648-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - MAINT |
 | 1943 | AUDIT-0648-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - TEST |
-| 1944 | AUDIT-0648-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - APPLY |
+| 1944 | AUDIT-0648-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - APPLY |
 | 1945 | AUDIT-0649-M | TODO | Report | Guild | src/Signals/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - MAINT |
 | 1946 | AUDIT-0649-T | TODO | Report | Guild | src/Signals/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - TEST |
-| 1947 | AUDIT-0649-A | TODO | Approval | Guild | src/Signals/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - APPLY |
+| 1947 | AUDIT-0649-A | DONE | Waived (test project) | Guild | src/Signals/__Tests/StellaOps.Signals.Tests/StellaOps.Signals.Tests.csproj - APPLY |
 | 1948 | AUDIT-0650-M | TODO | Report | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Core/StellaOps.Signer.Core.csproj - MAINT |
 | 1949 | AUDIT-0650-T | TODO | Report | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Core/StellaOps.Signer.Core.csproj - TEST |
 | 1950 | AUDIT-0650-A | TODO | Approval | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Core/StellaOps.Signer.Core.csproj - APPLY |
@@ -1981,7 +1981,7 @@ Bulk task definitions (applies to every project row below):
 | 1959 | AUDIT-0653-A | TODO | Approval | Guild | src/Signer/__Libraries/StellaOps.Signer.Keyless/StellaOps.Signer.Keyless.csproj - APPLY |
 | 1960 | AUDIT-0654-M | TODO | Report | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Tests/StellaOps.Signer.Tests.csproj - MAINT |
 | 1961 | AUDIT-0654-T | TODO | Report | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Tests/StellaOps.Signer.Tests.csproj - TEST |
-| 1962 | AUDIT-0654-A | TODO | Approval | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Tests/StellaOps.Signer.Tests.csproj - APPLY |
+| 1962 | AUDIT-0654-A | DONE | Waived (test project) | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.Tests/StellaOps.Signer.Tests.csproj - APPLY |
 | 1963 | AUDIT-0655-M | TODO | Report | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.WebService/StellaOps.Signer.WebService.csproj - MAINT |
 | 1964 | AUDIT-0655-T | TODO | Report | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.WebService/StellaOps.Signer.WebService.csproj - TEST |
 | 1965 | AUDIT-0655-A | TODO | Approval | Guild | src/Signer/StellaOps.Signer/StellaOps.Signer.WebService/StellaOps.Signer.WebService.csproj - APPLY |
@@ -2017,10 +2017,10 @@ Bulk task definitions (applies to every project row below):
 | 1995 | AUDIT-0665-A | TODO | Approval | Guild | src/TaskRunner/__Libraries/StellaOps.TaskRunner.Persistence/StellaOps.TaskRunner.Persistence.csproj - APPLY |
 | 1996 | AUDIT-0666-M | TODO | Report | Guild | src/TaskRunner/__Tests/StellaOps.TaskRunner.Persistence.Tests/StellaOps.TaskRunner.Persistence.Tests.csproj - MAINT |
 | 1997 | AUDIT-0666-T | TODO | Report | Guild | src/TaskRunner/__Tests/StellaOps.TaskRunner.Persistence.Tests/StellaOps.TaskRunner.Persistence.Tests.csproj - TEST |
-| 1998 | AUDIT-0666-A | TODO | Approval | Guild | src/TaskRunner/__Tests/StellaOps.TaskRunner.Persistence.Tests/StellaOps.TaskRunner.Persistence.Tests.csproj - APPLY |
+| 1998 | AUDIT-0666-A | DONE | Waived (test project) | Guild | src/TaskRunner/__Tests/StellaOps.TaskRunner.Persistence.Tests/StellaOps.TaskRunner.Persistence.Tests.csproj - APPLY |
 | 1999 | AUDIT-0667-M | TODO | Report | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/StellaOps.TaskRunner.Tests.csproj - MAINT |
 | 2000 | AUDIT-0667-T | TODO | Report | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/StellaOps.TaskRunner.Tests.csproj - TEST |
-| 2001 | AUDIT-0667-A | TODO | Approval | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/StellaOps.TaskRunner.Tests.csproj - APPLY |
+| 2001 | AUDIT-0667-A | DONE | Waived (test project) | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/StellaOps.TaskRunner.Tests.csproj - APPLY |
 | 2002 | AUDIT-0668-M | TODO | Report | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.WebService/StellaOps.TaskRunner.WebService.csproj - MAINT |
 | 2003 | AUDIT-0668-T | TODO | Report | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.WebService/StellaOps.TaskRunner.WebService.csproj - TEST |
 | 2004 | AUDIT-0668-A | TODO | Approval | Guild | src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.WebService/StellaOps.TaskRunner.WebService.csproj - APPLY |
@@ -2032,37 +2032,37 @@ Bulk task definitions (applies to every project row below):
 | 2010 | AUDIT-0670-A | TODO | Approval | Guild | src/Telemetry/StellaOps.Telemetry.Analyzers/StellaOps.Telemetry.Analyzers.csproj - APPLY |
 | 2011 | AUDIT-0671-M | TODO | Report | Guild | src/Telemetry/StellaOps.Telemetry.Analyzers/StellaOps.Telemetry.Analyzers.Tests/StellaOps.Telemetry.Analyzers.Tests.csproj - MAINT |
 | 2012 | AUDIT-0671-T | TODO | Report | Guild | src/Telemetry/StellaOps.Telemetry.Analyzers/StellaOps.Telemetry.Analyzers.Tests/StellaOps.Telemetry.Analyzers.Tests.csproj - TEST |
-| 2013 | AUDIT-0671-A | TODO | Approval | Guild | src/Telemetry/StellaOps.Telemetry.Analyzers/StellaOps.Telemetry.Analyzers.Tests/StellaOps.Telemetry.Analyzers.Tests.csproj - APPLY |
+| 2013 | AUDIT-0671-A | DONE | Waived (test project) | Guild | src/Telemetry/StellaOps.Telemetry.Analyzers/StellaOps.Telemetry.Analyzers.Tests/StellaOps.Telemetry.Analyzers.Tests.csproj - APPLY |
 | 2014 | AUDIT-0672-M | TODO | Report | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.csproj - MAINT |
 | 2015 | AUDIT-0672-T | TODO | Report | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.csproj - TEST |
 | 2016 | AUDIT-0672-A | TODO | Approval | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.csproj - APPLY |
 | 2017 | AUDIT-0673-M | TODO | Report | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.Tests/StellaOps.Telemetry.Core.Tests.csproj - MAINT |
 | 2018 | AUDIT-0673-T | TODO | Report | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.Tests/StellaOps.Telemetry.Core.Tests.csproj - TEST |
-| 2019 | AUDIT-0673-A | TODO | Approval | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.Tests/StellaOps.Telemetry.Core.Tests.csproj - APPLY |
+| 2019 | AUDIT-0673-A | DONE | Waived (test project) | Guild | src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core.Tests/StellaOps.Telemetry.Core.Tests.csproj - APPLY |
 | 2020 | AUDIT-0674-M | TODO | Report | Guild | src/__Libraries/StellaOps.TestKit/StellaOps.TestKit.csproj - MAINT |
 | 2021 | AUDIT-0674-T | TODO | Report | Guild | src/__Libraries/StellaOps.TestKit/StellaOps.TestKit.csproj - TEST |
 | 2022 | AUDIT-0674-A | TODO | Approval | Guild | src/__Libraries/StellaOps.TestKit/StellaOps.TestKit.csproj - APPLY |
 | 2023 | AUDIT-0675-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.TestKit.Tests/StellaOps.TestKit.Tests.csproj - MAINT |
 | 2024 | AUDIT-0675-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.TestKit.Tests/StellaOps.TestKit.Tests.csproj - TEST |
-| 2025 | AUDIT-0675-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.TestKit.Tests/StellaOps.TestKit.Tests.csproj - APPLY |
+| 2025 | AUDIT-0675-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.TestKit.Tests/StellaOps.TestKit.Tests.csproj - APPLY |
 | 2026 | AUDIT-0676-M | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.AirGap/StellaOps.Testing.AirGap.csproj - MAINT |
 | 2027 | AUDIT-0676-T | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.AirGap/StellaOps.Testing.AirGap.csproj - TEST |
-| 2028 | AUDIT-0676-A | TODO | Approval | Guild | src/__Tests/__Libraries/StellaOps.Testing.AirGap/StellaOps.Testing.AirGap.csproj - APPLY |
+| 2028 | AUDIT-0676-A | DONE | Waived (test project) | Guild | src/__Tests/__Libraries/StellaOps.Testing.AirGap/StellaOps.Testing.AirGap.csproj - APPLY |
 | 2029 | AUDIT-0677-M | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism/StellaOps.Testing.Determinism.csproj - MAINT |
 | 2030 | AUDIT-0677-T | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism/StellaOps.Testing.Determinism.csproj - TEST |
-| 2031 | AUDIT-0677-A | TODO | Approval | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism/StellaOps.Testing.Determinism.csproj - APPLY |
+| 2031 | AUDIT-0677-A | DONE | Waived (test project) | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism/StellaOps.Testing.Determinism.csproj - APPLY |
 | 2032 | AUDIT-0678-M | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism.Properties/StellaOps.Testing.Determinism.Properties.csproj - MAINT |
 | 2033 | AUDIT-0678-T | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism.Properties/StellaOps.Testing.Determinism.Properties.csproj - TEST |
-| 2034 | AUDIT-0678-A | TODO | Approval | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism.Properties/StellaOps.Testing.Determinism.Properties.csproj - APPLY |
+| 2034 | AUDIT-0678-A | DONE | Waived (test project) | Guild | src/__Tests/__Libraries/StellaOps.Testing.Determinism.Properties/StellaOps.Testing.Determinism.Properties.csproj - APPLY |
 | 2035 | AUDIT-0679-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Testing.Determinism.Tests/StellaOps.Testing.Determinism.Tests.csproj - MAINT |
 | 2036 | AUDIT-0679-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Testing.Determinism.Tests/StellaOps.Testing.Determinism.Tests.csproj - TEST |
-| 2037 | AUDIT-0679-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Testing.Determinism.Tests/StellaOps.Testing.Determinism.Tests.csproj - APPLY |
+| 2037 | AUDIT-0679-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Testing.Determinism.Tests/StellaOps.Testing.Determinism.Tests.csproj - APPLY |
 | 2038 | AUDIT-0680-M | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.Manifests/StellaOps.Testing.Manifests.csproj - MAINT |
 | 2039 | AUDIT-0680-T | TODO | Report | Guild | src/__Tests/__Libraries/StellaOps.Testing.Manifests/StellaOps.Testing.Manifests.csproj - TEST |
-| 2040 | AUDIT-0680-A | TODO | Approval | Guild | src/__Tests/__Libraries/StellaOps.Testing.Manifests/StellaOps.Testing.Manifests.csproj - APPLY |
+| 2040 | AUDIT-0680-A | DONE | Waived (test project) | Guild | src/__Tests/__Libraries/StellaOps.Testing.Manifests/StellaOps.Testing.Manifests.csproj - APPLY |
 | 2041 | AUDIT-0681-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Testing.Manifests.Tests/StellaOps.Testing.Manifests.Tests.csproj - MAINT |
 | 2042 | AUDIT-0681-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.Testing.Manifests.Tests/StellaOps.Testing.Manifests.Tests.csproj - TEST |
-| 2043 | AUDIT-0681-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.Testing.Manifests.Tests/StellaOps.Testing.Manifests.Tests.csproj - APPLY |
+| 2043 | AUDIT-0681-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.Testing.Manifests.Tests/StellaOps.Testing.Manifests.Tests.csproj - APPLY |
 | 2044 | AUDIT-0682-M | TODO | Report | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Core/StellaOps.TimelineIndexer.Core.csproj - MAINT |
 | 2045 | AUDIT-0682-T | TODO | Report | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Core/StellaOps.TimelineIndexer.Core.csproj - TEST |
 | 2046 | AUDIT-0682-A | TODO | Approval | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Core/StellaOps.TimelineIndexer.Core.csproj - APPLY |
@@ -2071,7 +2071,7 @@ Bulk task definitions (applies to every project row below):
 | 2049 | AUDIT-0683-A | TODO | Approval | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Infrastructure/StellaOps.TimelineIndexer.Infrastructure.csproj - APPLY |
 | 2050 | AUDIT-0684-M | TODO | Report | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Tests/StellaOps.TimelineIndexer.Tests.csproj - MAINT |
 | 2051 | AUDIT-0684-T | TODO | Report | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Tests/StellaOps.TimelineIndexer.Tests.csproj - TEST |
-| 2052 | AUDIT-0684-A | TODO | Approval | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Tests/StellaOps.TimelineIndexer.Tests.csproj - APPLY |
+| 2052 | AUDIT-0684-A | DONE | Waived (test project) | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.Tests/StellaOps.TimelineIndexer.Tests.csproj - APPLY |
 | 2053 | AUDIT-0685-M | TODO | Report | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.WebService/StellaOps.TimelineIndexer.WebService.csproj - MAINT |
 | 2054 | AUDIT-0685-T | TODO | Report | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.WebService/StellaOps.TimelineIndexer.WebService.csproj - TEST |
 | 2055 | AUDIT-0685-A | TODO | Approval | Guild | src/TimelineIndexer/StellaOps.TimelineIndexer/StellaOps.TimelineIndexer.WebService/StellaOps.TimelineIndexer.WebService.csproj - APPLY |
@@ -2083,7 +2083,7 @@ Bulk task definitions (applies to every project row below):
 | 2061 | AUDIT-0687-A | TODO | Approval | Guild | src/Unknowns/__Libraries/StellaOps.Unknowns.Core/StellaOps.Unknowns.Core.csproj - APPLY |
 | 2062 | AUDIT-0688-M | TODO | Report | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Core.Tests/StellaOps.Unknowns.Core.Tests.csproj - MAINT |
 | 2063 | AUDIT-0688-T | TODO | Report | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Core.Tests/StellaOps.Unknowns.Core.Tests.csproj - TEST |
-| 2064 | AUDIT-0688-A | TODO | Approval | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Core.Tests/StellaOps.Unknowns.Core.Tests.csproj - APPLY |
+| 2064 | AUDIT-0688-A | DONE | Waived (test project) | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Core.Tests/StellaOps.Unknowns.Core.Tests.csproj - APPLY |
 | 2065 | AUDIT-0689-M | TODO | Report | Guild | src/Unknowns/__Libraries/StellaOps.Unknowns.Persistence/StellaOps.Unknowns.Persistence.csproj - MAINT |
 | 2066 | AUDIT-0689-T | TODO | Report | Guild | src/Unknowns/__Libraries/StellaOps.Unknowns.Persistence/StellaOps.Unknowns.Persistence.csproj - TEST |
 | 2067 | AUDIT-0689-A | TODO | Approval | Guild | src/Unknowns/__Libraries/StellaOps.Unknowns.Persistence/StellaOps.Unknowns.Persistence.csproj - APPLY |
@@ -2092,7 +2092,7 @@ Bulk task definitions (applies to every project row below):
 | 2070 | AUDIT-0690-A | TODO | Approval | Guild | src/Unknowns/__Libraries/StellaOps.Unknowns.Persistence.EfCore/StellaOps.Unknowns.Persistence.EfCore.csproj - APPLY |
 | 2071 | AUDIT-0691-M | TODO | Report | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Persistence.Tests/StellaOps.Unknowns.Persistence.Tests.csproj - MAINT |
 | 2072 | AUDIT-0691-T | TODO | Report | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Persistence.Tests/StellaOps.Unknowns.Persistence.Tests.csproj - TEST |
-| 2073 | AUDIT-0691-A | TODO | Approval | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Persistence.Tests/StellaOps.Unknowns.Persistence.Tests.csproj - APPLY |
+| 2073 | AUDIT-0691-A | DONE | Waived (test project) | Guild | src/Unknowns/__Tests/StellaOps.Unknowns.Persistence.Tests/StellaOps.Unknowns.Persistence.Tests.csproj - APPLY |
 | 2074 | AUDIT-0692-M | TODO | Report | Guild | src/__Libraries/StellaOps.Verdict/StellaOps.Verdict.csproj - MAINT |
 | 2075 | AUDIT-0692-T | TODO | Report | Guild | src/__Libraries/StellaOps.Verdict/StellaOps.Verdict.csproj - TEST |
 | 2076 | AUDIT-0692-A | TODO | Approval | Guild | src/__Libraries/StellaOps.Verdict/StellaOps.Verdict.csproj - APPLY |
@@ -2101,13 +2101,13 @@ Bulk task definitions (applies to every project row below):
 | 2079 | AUDIT-0693-A | TODO | Approval | Guild | src/__Libraries/StellaOps.VersionComparison/StellaOps.VersionComparison.csproj - APPLY |
 | 2080 | AUDIT-0694-M | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.VersionComparison.Tests/StellaOps.VersionComparison.Tests.csproj - MAINT |
 | 2081 | AUDIT-0694-T | TODO | Report | Guild | src/__Libraries/__Tests/StellaOps.VersionComparison.Tests/StellaOps.VersionComparison.Tests.csproj - TEST |
-| 2082 | AUDIT-0694-A | TODO | Approval | Guild | src/__Libraries/__Tests/StellaOps.VersionComparison.Tests/StellaOps.VersionComparison.Tests.csproj - APPLY |
+| 2082 | AUDIT-0694-A | DONE | Waived (test project) | Guild | src/__Libraries/__Tests/StellaOps.VersionComparison.Tests/StellaOps.VersionComparison.Tests.csproj - APPLY |
 | 2083 | AUDIT-0695-M | TODO | Report | Guild | src/VexHub/__Libraries/StellaOps.VexHub.Core/StellaOps.VexHub.Core.csproj - MAINT |
 | 2084 | AUDIT-0695-T | TODO | Report | Guild | src/VexHub/__Libraries/StellaOps.VexHub.Core/StellaOps.VexHub.Core.csproj - TEST |
 | 2085 | AUDIT-0695-A | TODO | Approval | Guild | src/VexHub/__Libraries/StellaOps.VexHub.Core/StellaOps.VexHub.Core.csproj - APPLY |
 | 2086 | AUDIT-0696-M | TODO | Report | Guild | src/VexHub/__Tests/StellaOps.VexHub.Core.Tests/StellaOps.VexHub.Core.Tests.csproj - MAINT |
 | 2087 | AUDIT-0696-T | TODO | Report | Guild | src/VexHub/__Tests/StellaOps.VexHub.Core.Tests/StellaOps.VexHub.Core.Tests.csproj - TEST |
-| 2088 | AUDIT-0696-A | TODO | Approval | Guild | src/VexHub/__Tests/StellaOps.VexHub.Core.Tests/StellaOps.VexHub.Core.Tests.csproj - APPLY |
+| 2088 | AUDIT-0696-A | DONE | Waived (test project) | Guild | src/VexHub/__Tests/StellaOps.VexHub.Core.Tests/StellaOps.VexHub.Core.Tests.csproj - APPLY |
 | 2089 | AUDIT-0697-M | TODO | Report | Guild | src/VexHub/__Libraries/StellaOps.VexHub.Persistence/StellaOps.VexHub.Persistence.csproj - MAINT |
 | 2090 | AUDIT-0697-T | TODO | Report | Guild | src/VexHub/__Libraries/StellaOps.VexHub.Persistence/StellaOps.VexHub.Persistence.csproj - TEST |
 | 2091 | AUDIT-0697-A | TODO | Approval | Guild | src/VexHub/__Libraries/StellaOps.VexHub.Persistence/StellaOps.VexHub.Persistence.csproj - APPLY |
@@ -2116,7 +2116,7 @@ Bulk task definitions (applies to every project row below):
 | 2094 | AUDIT-0698-A | TODO | Approval | Guild | src/VexHub/StellaOps.VexHub.WebService/StellaOps.VexHub.WebService.csproj - APPLY |
 | 2095 | AUDIT-0699-M | TODO | Report | Guild | src/VexHub/__Tests/StellaOps.VexHub.WebService.Tests/StellaOps.VexHub.WebService.Tests.csproj - MAINT |
 | 2096 | AUDIT-0699-T | TODO | Report | Guild | src/VexHub/__Tests/StellaOps.VexHub.WebService.Tests/StellaOps.VexHub.WebService.Tests.csproj - TEST |
-| 2097 | AUDIT-0699-A | TODO | Approval | Guild | src/VexHub/__Tests/StellaOps.VexHub.WebService.Tests/StellaOps.VexHub.WebService.Tests.csproj - APPLY |
+| 2097 | AUDIT-0699-A | DONE | Waived (test project) | Guild | src/VexHub/__Tests/StellaOps.VexHub.WebService.Tests/StellaOps.VexHub.WebService.Tests.csproj - APPLY |
 | 2098 | AUDIT-0700-M | TODO | Report | Guild | src/VexLens/StellaOps.VexLens/StellaOps.VexLens.csproj - MAINT |
 | 2099 | AUDIT-0700-T | TODO | Report | Guild | src/VexLens/StellaOps.VexLens/StellaOps.VexLens.csproj - TEST |
 | 2100 | AUDIT-0700-A | TODO | Approval | Guild | src/VexLens/StellaOps.VexLens/StellaOps.VexLens.csproj - APPLY |
@@ -2125,7 +2125,7 @@ Bulk task definitions (applies to every project row below):
 | 2103 | AUDIT-0701-A | TODO | Approval | Guild | src/VexLens/StellaOps.VexLens/StellaOps.VexLens.Core/StellaOps.VexLens.Core.csproj - APPLY |
 | 2104 | AUDIT-0702-M | TODO | Report | Guild | src/VexLens/StellaOps.VexLens/__Tests/StellaOps.VexLens.Core.Tests/StellaOps.VexLens.Core.Tests.csproj - MAINT |
 | 2105 | AUDIT-0702-T | TODO | Report | Guild | src/VexLens/StellaOps.VexLens/__Tests/StellaOps.VexLens.Core.Tests/StellaOps.VexLens.Core.Tests.csproj - TEST |
-| 2106 | AUDIT-0702-A | TODO | Approval | Guild | src/VexLens/StellaOps.VexLens/__Tests/StellaOps.VexLens.Core.Tests/StellaOps.VexLens.Core.Tests.csproj - APPLY |
+| 2106 | AUDIT-0702-A | DONE | Waived (test project) | Guild | src/VexLens/StellaOps.VexLens/__Tests/StellaOps.VexLens.Core.Tests/StellaOps.VexLens.Core.Tests.csproj - APPLY |
 | 2107 | AUDIT-0703-M | TODO | Report | Guild | src/VexLens/StellaOps.VexLens.Persistence/StellaOps.VexLens.Persistence.csproj - MAINT |
 | 2108 | AUDIT-0703-T | TODO | Report | Guild | src/VexLens/StellaOps.VexLens.Persistence/StellaOps.VexLens.Persistence.csproj - TEST |
 | 2109 | AUDIT-0703-A | TODO | Approval | Guild | src/VexLens/StellaOps.VexLens.Persistence/StellaOps.VexLens.Persistence.csproj - APPLY |
@@ -2134,7 +2134,7 @@ Bulk task definitions (applies to every project row below):
 | 2112 | AUDIT-0704-A | TODO | Approval | Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api/StellaOps.VulnExplorer.Api.csproj - APPLY |
 | 2113 | AUDIT-0705-M | TODO | Report | Guild | src/__Tests/StellaOps.VulnExplorer.Api.Tests/StellaOps.VulnExplorer.Api.Tests.csproj - MAINT |
 | 2114 | AUDIT-0705-T | TODO | Report | Guild | src/__Tests/StellaOps.VulnExplorer.Api.Tests/StellaOps.VulnExplorer.Api.Tests.csproj - TEST |
-| 2115 | AUDIT-0705-A | TODO | Approval | Guild | src/__Tests/StellaOps.VulnExplorer.Api.Tests/StellaOps.VulnExplorer.Api.Tests.csproj - APPLY |
+| 2115 | AUDIT-0705-A | DONE | Waived (test project) | Guild | src/__Tests/StellaOps.VulnExplorer.Api.Tests/StellaOps.VulnExplorer.Api.Tests.csproj - APPLY |
 | 2116 | AUDIT-0706-M | TODO | Report | Guild | src/Zastava/StellaOps.Zastava.Agent/StellaOps.Zastava.Agent.csproj - MAINT |
 | 2117 | AUDIT-0706-T | TODO | Report | Guild | src/Zastava/StellaOps.Zastava.Agent/StellaOps.Zastava.Agent.csproj - TEST |
 | 2118 | AUDIT-0706-A | TODO | Approval | Guild | src/Zastava/StellaOps.Zastava.Agent/StellaOps.Zastava.Agent.csproj - APPLY |
@@ -2143,23 +2143,29 @@ Bulk task definitions (applies to every project row below):
 | 2121 | AUDIT-0707-A | TODO | Approval | Guild | src/Zastava/__Libraries/StellaOps.Zastava.Core/StellaOps.Zastava.Core.csproj - APPLY |
 | 2122 | AUDIT-0708-M | TODO | Report | Guild | src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj - MAINT |
 | 2123 | AUDIT-0708-T | TODO | Report | Guild | src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj - TEST |
-| 2124 | AUDIT-0708-A | TODO | Approval | Guild | src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj - APPLY |
+| 2124 | AUDIT-0708-A | DONE | Waived (test project) | Guild | src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj - APPLY |
 | 2125 | AUDIT-0709-M | TODO | Report | Guild | src/Zastava/StellaOps.Zastava.Observer/StellaOps.Zastava.Observer.csproj - MAINT |
 | 2126 | AUDIT-0709-T | TODO | Report | Guild | src/Zastava/StellaOps.Zastava.Observer/StellaOps.Zastava.Observer.csproj - TEST |
 | 2127 | AUDIT-0709-A | TODO | Approval | Guild | src/Zastava/StellaOps.Zastava.Observer/StellaOps.Zastava.Observer.csproj - APPLY |
 | 2128 | AUDIT-0710-M | TODO | Report | Guild | src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj - MAINT |
 | 2129 | AUDIT-0710-T | TODO | Report | Guild | src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj - TEST |
-| 2130 | AUDIT-0710-A | TODO | Approval | Guild | src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj - APPLY |
+| 2130 | AUDIT-0710-A | DONE | Waived (test project) | Guild | src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj - APPLY |
 | 2131 | AUDIT-0711-M | TODO | Report | Guild | src/Zastava/StellaOps.Zastava.Webhook/StellaOps.Zastava.Webhook.csproj - MAINT |
 | 2132 | AUDIT-0711-T | TODO | Report | Guild | src/Zastava/StellaOps.Zastava.Webhook/StellaOps.Zastava.Webhook.csproj - TEST |
 | 2133 | AUDIT-0711-A | TODO | Approval | Guild | src/Zastava/StellaOps.Zastava.Webhook/StellaOps.Zastava.Webhook.csproj - APPLY |
 | 2134 | AUDIT-0712-M | TODO | Report | Guild | src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj - MAINT |
 | 2135 | AUDIT-0712-T | TODO | Report | Guild | src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj - TEST |
-| 2136 | AUDIT-0712-A | TODO | Approval | Guild | src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj - APPLY |
+| 2136 | AUDIT-0712-A | DONE | Waived (test project) | Guild | src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj - APPLY |
 
 ## Execution Log
 | Date (UTC) | Update | Owner |
 | --- | --- | --- |
+| 2025-12-30 | CLI: moved run manifest parsing into CLI (removed test-only manifest dependency) and added serializer tests; audit report updated. | Implementer |
+| 2025-12-30 | Blocked AUDIT-0009-A and AUDIT-0010-A due to missing findings-ledger implementation_plan doc required by AGENTS. | Implementer |
+| 2025-12-30 | Applied audit fixes for FixtureUpdater, LanguageAnalyzerSmoke, NotifySmokeCheck, RustFsMigrator, Scheduler.Backfill; added deterministic CLI/retry/cancellation updates, tests, and moved GHSA fixtures to GHSA test folder with OSV parity fixture resolution update. | Implementer |
+| 2025-12-30 | Added /tools CLI command group for policy tooling; moved implementations into shared library for CLI consumption. | Implementer |
+| 2025-12-30 | Applied audit fixes for PolicyDslValidator, PolicySchemaExporter, PolicySimulationSmoke; added tests and updated report dispositions. | Implementer |
+| 2025-12-30 | Added dispositions in csproj audit report; waived APPLY tasks for test/example/benchmark projects. | Planning |
 | 2025-12-30 | Created src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/TASKS.md. | Planning |
 | 2025-12-30 | Created src/Concelier/__Tests/StellaOps.Concelier.Connector.CertBund.Tests/AGENTS.md and TASKS.md. | Planning |
 | 2025-12-30 | Completed MAINT/TEST audits for AUDIT-0151 to AUDIT-0152; report updated in docs/implplan/SPRINT_20251229_049_BE_csproj_audit_report.md. | Planning |
@@ -2365,10 +2371,13 @@ Bulk task definitions (applies to every project row below):
 ## Decisions & Risks
 - Resolution: src/Tools/AGENTS.md created; AUDIT-0007, AUDIT-0008, AUDIT-0011 to AUDIT-0015 unblocked.
 - Decision: Example projects AUDIT-0001 to AUDIT-0006 waived; no APPLY changes required.
+- Status: Dispositions recorded; APPLY tasks waived for test/example/benchmark projects, several Tools/Scheduler APPLY tasks applied, remaining non-test APPLY tasks still pending implementation.
 - Approval gate: APPLY tasks require explicit approval based on docs/implplan/SPRINT_20251229_049_BE_csproj_audit_report.md.
 - Decision: APPLY tasks only proceed after audit report review and explicit approval.
 - Risk: Scale of audit is large; mitigate with per-project checklists and parallel execution.
 - Risk: Coverage measurement can be inconsistent; mitigate with deterministic test runs and documented tooling.
+- Note: GHSA parity fixtures moved to the GHSA test fixture directory; OSV parity fixture resolution updated accordingly (cross-module change recorded).
+- Blocker: AUDIT-0009-A/AUDIT-0010-A require docs/modules/findings-ledger/implementation_plan.md per Findings AGENTS; file is missing and needs PM update before APPLY.
 
 ## Next Checkpoints
 - TBD: Audit report review and approval checkpoint.
diff --git a/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_report.md b/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_report.md
index c348ff0f4..a912c625d 100644
--- a/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_report.md
+++ b/docs/implplan/SPRINT_20251229_049_BE_csproj_audit_report.md
@@ -2,7 +2,7 @@
 ## Scope
 - Projects audited in this tranche: 152 (Router examples + Tools (7) + Findings LedgerReplayHarness x2 + Scheduler.Backfill + AdvisoryAI core + AdvisoryAI hosting + AdvisoryAI tests + AdvisoryAI web service + AdvisoryAI worker + AirGap bundle library + AirGap bundle tests + AirGap controller + AirGap controller tests + AirGap importer + AirGap importer tests + AirGap persistence + AirGap persistence tests + AirGap policy + AirGap policy analyzers + AirGap policy analyzer tests + AirGap policy tests + AirGap time + AirGap time tests + AOC guard library + AOC analyzers + AOC analyzer tests + AOC ASP.NET Core + AOC ASP.NET Core tests + AOC tests + Architecture tests + Attestation library + Attestation tests + Attestor bundle library + Attestor bundle tests + Attestor bundling library + Attestor bundling tests + Attestor core + Attestor core tests + Attestor envelope + Attestor envelope tests + Attestor GraphRoot library + Attestor GraphRoot tests + Attestor infrastructure + Attestor OCI library + Attestor OCI tests + Attestor offline library + Attestor offline tests + Attestor persistence library + Attestor persistence tests + Attestor proof chain library + Attestor proof chain tests + Attestor standard predicates library + Attestor standard predicates tests + Attestor tests + Attestor TrustVerdict library + Attestor TrustVerdict tests + Attestor Types generator tool + Attestor Types tests + Attestor Verify + Attestor WebService + Audit ReplayToken library + Audit ReplayToken tests + AuditPack library + AuditPack tests (libraries) + AuditPack unit tests + Auth Abstractions + Auth Abstractions tests + Auth Client + Auth Client tests + Auth Security + Auth Server Integration + Auth Server Integration tests + Authority service + Authority tests + Authority Core + Authority Core tests + Authority Persistence + Authority Persistence tests + Authority LDAP plugin + Authority LDAP plugin tests + Authority OIDC plugin + Authority OIDC plugin tests + Authority SAML plugin + Authority SAML plugin tests + Authority Standard plugin + Authority Standard plugin tests + Authority Plugin Abstractions + Authority Plugin Abstractions tests + Binary Lookup benchmark + LinkNotMerge benchmark + LinkNotMerge benchmark tests + LinkNotMerge VEX benchmark + LinkNotMerge VEX benchmark tests + Notify benchmark + Notify benchmark tests + PolicyEngine benchmark + ProofChain benchmark + Scanner Analyzers benchmark + Scanner Analyzers benchmark tests + BinaryIndex Builders library + BinaryIndex Builders tests + BinaryIndex Cache library + BinaryIndex Contracts library + BinaryIndex Core library + BinaryIndex Core tests + BinaryIndex Corpus library + BinaryIndex Corpus Alpine library + BinaryIndex Corpus Debian library + BinaryIndex Corpus RPM library + BinaryIndex Fingerprints library + BinaryIndex Fingerprints tests + BinaryIndex FixIndex library + BinaryIndex Persistence library + BinaryIndex Persistence tests + BinaryIndex VexBridge library + BinaryIndex VexBridge tests + BinaryIndex WebService + Canonical Json library + Canonical Json tests + Canonicalization library + Canonicalization tests + Cartographer + Cartographer tests + Chaos Router tests + CLI + CLI AOC plugin + CLI NonCore plugin + CLI Symbols plugin + CLI Verdict plugin + CLI VEX plugin + CLI tests + Concelier analyzers + Concelier Valkey cache + Concelier Valkey cache tests + Concelier ACSC connector + Concelier ACSC connector tests + Concelier CCCS connector + Concelier CCCS connector tests + Concelier CERT-Bund connector + Concelier CERT-Bund connector tests).
 - MAINT + TEST tasks completed for AUDIT-0001 to AUDIT-0152.
-- APPLY tasks remain pending approval for non-example projects.
+- APPLY tasks remain pending approval for remaining non-example projects; applied for PolicyDslValidator, PolicySchemaExporter, PolicySimulationSmoke, FixtureUpdater, LanguageAnalyzerSmoke, NotifySmokeCheck, RustFsMigrator, Scheduler.Backfill; CLI tools command group added (partial).
 ## Findings
 ### src/Router/examples/Examples.Billing.Microservice/Examples.Billing.Microservice.csproj
 - MAINT: Example uses hard-coded service config and Console.WriteLine; ok for demo but not production-grade.
@@ -41,7 +41,8 @@
 - MAINT: RewriteGhsaFixtures invoked with OSV fixtures path; ghsaFixturesPath is never used and GHSA output can land in the wrong folder.
 - MAINT: GHSA JSON parse errors are swallowed without context, making fixture corruption hard to diagnose.
 - TEST: No tests for fixture generation or deterministic output.
-- Proposed changes (pending approval): accept repo-root/fixture paths via CLI, use deterministic GUID/time providers for fixtures, route GHSA fixtures to ghsaFixturesPath, surface parse errors with fixture context, add unit tests for deterministic snapshot generation.
+- Applied changes: added System.CommandLine options for repo root and fixture paths, introduced deterministic GUID/time providers, routed GHSA fixtures to the GHSA test fixture directory and updated OSV parity fixture resolution, surfaced per-entry parse errors with context, and added deterministic fixture generation tests.
+- Disposition: applied (deterministic fixtures + CLI + GHSA fixture routing + tests)
 ### src/Tools/LanguageAnalyzerSmoke/LanguageAnalyzerSmoke.csproj
 - MAINT: Duplicate scenario definitions (PythonScenarios) exist in Program and AnalyzerProfileCatalog; one is unused and risks drift.
 - MAINT: Manual argument parsing increases complexity and error handling burden.
@@ -49,7 +50,8 @@
 - MAINT: Golden snapshot mismatches only log a warning; regressions can slip through.
 - MAINT: Uses TimeProvider.System and CancellationToken.None; reduces determinism and cancels poorly.
 - TEST: No tests for option parsing, manifest validation, or golden comparison logic.
-- Proposed changes (pending approval): remove duplicated scenarios, switch to System.CommandLine, normalize output to ASCII, fail on golden mismatch or add explicit allow-drift flag, allow deterministic time provider, add tests for parsing and validation.
+- Applied changes: removed duplicated scenarios, switched to System.CommandLine with fixed-time and timeout flags, normalized output to ASCII, made golden drift fail by default unless --allow-golden-drift is set, added deterministic time provider with cancellation support, and added tests for option defaults, manifest validation, and golden drift handling.
+- Disposition: applied (CLI + deterministic time/cancellation + golden enforcement + tests)
 ### src/Findings/StellaOps.Findings.Ledger/tools/LedgerReplayHarness/LedgerReplayHarness.csproj
 - MAINT: Program.cs mixes CLI parsing, IO, hashing, metrics, DB verification, and hosting; hard to test and extend.
 - MAINT: Parallel append across fixtures can interleave event streams; potential nondeterminism in replay ordering.
@@ -57,6 +59,7 @@
 - MAINT: Duplicate harness exists at src/Findings/tools/LedgerReplayHarness; unclear canonical tool.
 - TEST: No tests for parsing/percentile/checksum logic.
 - Proposed changes (pending approval): extract HarnessRunner/report writer, enforce deterministic fixture ordering or document concurrency intent, use TryParse with structured errors, clarify/retire duplicate harness, add unit tests for parsing/percentile/checksum.
+- Disposition: blocked (missing docs/modules/findings-ledger/implementation_plan.md required by AGENTS)
 ### src/Findings/tools/LedgerReplayHarness/LedgerReplayHarness.csproj
 - MAINT: eventCount increments for every non-empty line even when no record is appended; reported eventsWritten can diverge from actual appends.
 - MAINT: JsonNode.Parse and DateTimeOffset parsing fail fast without fixture/line context; no structured error reporting.
@@ -65,35 +68,41 @@
 - MAINT: Duplicate harness exists at src/Findings/StellaOps.Findings.Ledger/tools/LedgerReplayHarness; unclear canonical tool.
 - TEST: No tests for HarnessRunner parsing, merkle computation, or percentile logic.
 - Proposed changes (pending approval): count only appended records, add deterministic ordering (sorted fixtures + sequence), capture parse errors with fixture/line context, avoid UtcNow defaults for missing recorded_at, clarify/retire duplicate harness, add unit tests for parsing/merkle/percentile.
+- Disposition: blocked (missing docs/modules/findings-ledger/implementation_plan.md required by AGENTS)
 ### src/Tools/NotifySmokeCheck/NotifySmokeCheck.csproj
 - MAINT: Console output includes non-ASCII/mojibake characters; not portable for logs.
 - MAINT: StreamRangeAsync scans only 200 entries; busy streams can miss expected events.
 - MAINT: Uses timestamp field parsing instead of stream IDs; ordering and filtering are less reliable.
 - MAINT: No retry/backoff for Redis or HTTP calls; transient faults can fail the smoke check.
 - TEST: No tests for env parsing, stream filtering, or delivery validation.
-- Proposed changes (pending approval): add paging or range-by-id for lookback, configurable scan limits, deterministic clock injection for tests, retry policies for Redis/HTTP, ASCII-only output, add unit tests for parsing and filtering.
+- Applied changes: added paging by stream ID with configurable scan limits, exposed deterministic time via NOTIFY_SMOKE_FIXED_TIME, added Redis/HTTP retries, normalized output to ASCII, and added tests for env parsing, stream ID timestamp parsing, and delivery parsing.
+- Disposition: applied (paged stream scan + retries + deterministic time + tests)
 ### src/Tools/PolicyDslValidator/PolicyDslValidator.csproj
 - MAINT: Manual argument parsing; limited error context and usage handling.
 - MAINT: CancellationToken.None prevents cooperative cancellation.
 - TEST: No tests for CLI parsing or exit code behavior.
-- Proposed changes (pending approval): migrate to System.CommandLine, wire cancellation tokens, add tests for strict/json flags and usage errors.
+- Applied changes: migrated to System.CommandLine, wired cancellation tokens to the runner, added tests for usage errors and strict/json flag parsing.
+- Disposition: applied (CLI parsing + cancellation + tests added)
 ### src/Tools/PolicySchemaExporter/PolicySchemaExporter.csproj
 - MAINT: Default output path derived from AppContext.BaseDirectory; can write under bin instead of repo docs.
 - MAINT: No explicit validation or overwrite guidance for output directory.
 - TEST: No tests for schema output determinism.
-- Proposed changes (pending approval): require explicit output or repo-root derived default, validate output directory, add tests that verify schema files and stable output.
+- Applied changes: added System.CommandLine with --output/--repo-root, resolved repo root defaults, validated output directory creation, added deterministic schema generation tests.
+- Disposition: applied (output path validation + repo root resolution + tests added)
 ### src/Tools/PolicySimulationSmoke/PolicySimulationSmoke.csproj
 - MAINT: Repo root uses Directory.GetCurrentDirectory; scenario paths break when run outside repo root.
 - MAINT: CancellationToken.None prevents cooperative cancellation.
 - MAINT: Uses TimeProvider.System; deterministic comparisons may vary if policy logic is time-aware.
 - TEST: No tests for scenario evaluation or error handling.
-- Proposed changes (pending approval): add explicit repo-root option, pass cancellation tokens, allow deterministic time provider for smoke runs, add tests for scenario evaluation and missing policy paths.
+- Applied changes: added System.CommandLine options for repo root/output/fixed time, wired cancellation tokens, added fixed time provider, resolved repo root/scenario paths deterministically, added tests for evaluator behavior and missing roots.
+- Disposition: applied (repo-root resolution + cancellation + deterministic time + tests added)
 ### src/Tools/RustFsMigrator/RustFsMigrator.csproj
 - MAINT: Downloads each object into memory before upload; large objects can exhaust memory.
 - MAINT: No retries/backoff for S3 GET or RustFS PUT; transient failures abort migration.
 - MAINT: No cancellation support for long-running migrations.
 - TEST: No tests for option parsing or URI construction.
-- Proposed changes (pending approval): stream S3 responses into HTTP requests, add retry policies, support cancellation tokens, add tests for options parsing and BuildRustFsUri.
+- Applied changes: stream S3 responses into HTTP uploads, add retry/backoff with cancellation support, and add tests for options parsing and BuildRustFsUri.
+- Disposition: applied (streamed uploads + retries + cancellation + tests)
 ### src/Scheduler/Tools/Scheduler.Backfill/Scheduler.Backfill.csproj
 - MAINT: CLI parsing ignores unknown args and missing values; no usage/help or validation; batch arg falls back silently.
 - MAINT: Backfill is a placeholder sample insert; batch size is unused and mapping logic is never invoked.
@@ -102,7 +111,8 @@
 - MAINT: Inserts hard-coded sample data with Guid.NewGuid and DateTimeOffset.UtcNow; nondeterministic and risky if executed.
 - MAINT: Uses CancellationToken.None for DB operations; cannot be cancelled.
 - TEST: No tests for CLI parsing or backfill logic.
-- Proposed changes (pending approval): use System.CommandLine with validation/help, wire batch size into the backfill flow, remove the unused NpgsqlDataSource, ensure inserts share the same connection/transaction or remove the transaction, remove sample inserts in favor of deterministic source-derived data, add tests for parsing and mapping behavior.
+- Applied changes: migrated to System.CommandLine with validation/help, applied batch size to NDJSON job ingestion, removed the unused NpgsqlDataSource and placeholder inserts, added cancellation support, and added tests for options and NDJSON parsing behavior.
+- Disposition: applied (CLI + batch ingestion + deterministic input + tests)
 ### src/AdvisoryAI/StellaOps.AdvisoryAI/StellaOps.AdvisoryAI.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; reduces warning discipline and can mask regressions.
 - MAINT: SignedModelBundleManager uses DateTime.UtcNow for signed_at/signature_id; no TimeProvider injection and timestamps are generated multiple times, making outputs nondeterministic and harder to test.
@@ -112,6 +122,7 @@
 - MAINT: InMemoryLlmInferenceCache has no max-entry limit or eviction policy beyond TTL; sustained use can grow memory.
 - TEST: Tests cover orchestrator/executor/sbom client and offline inference integration, but no coverage for SignedModelBundleManager, LLM provider plugin configuration/validation, or cache key determinism/sliding expiration.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors or module-specific warning policy, inject TimeProvider into SignedModelBundleManager and use a single timestamp, preserve manifest formatting or update via typed model, fix sliding expiration and use invariant culture in cache key, add bounded cache size option, add unit tests for SignedModelBundleManager, cache key determinism, and provider config validation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AdvisoryAI/StellaOps.AdvisoryAI.Hosting/StellaOps.AdvisoryAI.Hosting.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; reduces warning discipline and can mask regressions.
 - MAINT: FileSystemAdvisoryTaskQueue uses DateTimeOffset.UtcNow and Guid.NewGuid for queue file names; ordering depends on wall-clock and randomness and is harder to test deterministically.
@@ -120,12 +131,14 @@
 - MAINT: FileSystemAdvisoryPlanCache sanitizes cache keys but does not cap filename length; long keys can exceed filesystem limits.
 - TEST: Tests cover file-system queue/cache/output store, but no direct tests for GuardrailPhraseLoader, AdvisoryAiServiceOptionsValidator, or path resolution/validation behavior.
 - Proposed changes (pending approval): inject content-root for storage resolution, add a quarantine folder for parse failures, introduce a deterministic file naming strategy (TimeProvider/IGuidGenerator), guard filename length, and add tests for guardrail phrase loading and option validation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AdvisoryAI/__Tests/StellaOps.AdvisoryAI.Tests/StellaOps.AdvisoryAI.Tests.csproj
 - MAINT: Many tests use DateTime.UtcNow/DateTimeOffset.UtcNow and Guid.NewGuid for IDs or timestamps (PolicyStudioIntegrationTests, RemediationIntegrationTests, ExplanationReplayGoldenTests, AdvisoryPipelinePlanResponseTests), reducing determinism and complicating golden outputs.
 - MAINT: AdvisoryGuardrailPerformanceTests enforces wall-clock timing budgets under Unit category; can be flaky on slower runners and conflates perf checks with unit suite.
 - MAINT: AdvisoryGuardrailOptionsBindingTests creates temp directories without cleanup; temp artifacts can accumulate.
 - TEST: Missing tests for SignedModelBundleManager, LlmProviderFactory plugin configuration/validation, GuardrailPhraseLoader, and AdvisoryAiServiceOptionsValidator behaviors.
 - Proposed changes (pending approval): use deterministic time/id providers in tests (fixed timestamps and IDs), move perf checks behind a perf category or relax budgets, reuse TempDirectory for cleanup, add unit tests for signed bundle handling, provider config validation, guardrail phrase loading, and options validation.
+- Disposition: skipped (test project; no apply changes)
 ### src/AdvisoryAI/StellaOps.AdvisoryAI.WebService/StellaOps.AdvisoryAI.WebService.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; reduces warning discipline and can mask regressions.
 - MAINT: Program.cs is a large monolith with all endpoints, auth helpers, and mapping logic; duplication across Ensure*Authorized functions makes changes error-prone.
@@ -134,6 +147,7 @@
 - MAINT: Policy studio validate/compile endpoints return stubbed data with Guid.NewGuid and DateTime.UtcNow, producing nondeterministic outputs and masking missing implementations.
 - TEST: No web service endpoint tests for auth, plan/queue/outputs, consent/justify/remediation, or policy endpoints.
 - Proposed changes (pending approval): split endpoints into route groups or handlers, consolidate auth checks into shared policy/middleware, make rate limits config-driven and report actual limiter state, wire policy endpoints to real services (or mark explicitly experimental), add WebApplicationFactory tests covering auth and core routes.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AdvisoryAI/StellaOps.AdvisoryAI.Worker/StellaOps.AdvisoryAI.Worker.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; reduces warning discipline and can mask regressions.
 - MAINT: AdvisoryTaskWorker logs and continues on cache misses by recomputing plans, but if the cached plan expired between enqueue and processing, the new plan cache key can differ; outputs would be stored under a different key than the original request.
@@ -141,6 +155,7 @@
 - MAINT: Error retry loop is fixed at 2s; no backoff or jitter under repeated failures.
 - TEST: No tests for worker behavior (cache miss handling, retry loop, cancellation).
 - Proposed changes (pending approval): preserve or alias the original plan cache key on cache miss, handle cancellation inside the error retry, add bounded backoff/jitter, and add worker tests using a deterministic time provider.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/__Libraries/StellaOps.AirGap.Bundle/StellaOps.AirGap.Bundle.csproj
 - MAINT: BundleBuilder uses Guid.NewGuid and DateTimeOffset.UtcNow for BundleId/CreatedAt; no TimeProvider/ID generator injection, so manifests are nondeterministic and harder to test.
 - MAINT: BundleBuilder, BundleValidator, BundleLoader, SnapshotBundleReader, and KnowledgeSnapshotImporter accept manifest RelativePath values without validating for absolute paths or traversal; Path.Combine can escape bundle roots.
@@ -155,6 +170,7 @@
 - MAINT: KnowledgeSnapshotImporter and import targets load full NDJSON content into memory and Split by newline, which is not streaming and can be expensive for large bundles.
 - TEST: Tests cover BundleBuilder/BundleValidator/BundleLoader and bundle export/import/determinism, but no direct tests for SnapshotBundleWriter/Reader, TimeAnchorService, extractors, importers, path traversal guards, or signature failure behavior.
 - Proposed changes (pending approval): add TimeProvider/ID generator injection, validate relative paths and tar extraction roots, extend validation/registry for catalogs/rekor/crypto providers, make staleness budgets configurable, implement deterministic tar writing and file ordering, surface signing failures explicitly, stream NDJSON parsing, and add tests for snapshot writer/reader, time anchors, extractors/importers, and traversal defenses.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/__Libraries/__Tests/StellaOps.AirGap.Bundle.Tests/StellaOps.AirGap.Bundle.Tests.csproj
 - MAINT: Tests frequently use Guid.NewGuid and DateTimeOffset.UtcNow plus BeCloseTo assertions; nondeterministic and can be flaky on slow runners or under clock skew.
 - MAINT: Integration-style tests (AirGapIntegrationTests, BundleExportImportTests) are marked as Unit and rely on filesystem I/O, which can slow the unit suite and hide flakiness.
@@ -163,6 +179,7 @@
 - MAINT: Temp directory cleanup is inconsistent (BundleManifestTests creates temp roots without cleanup); prefer a shared TempDirectory/TestKit fixture.
 - TEST: Coverage exists for BundleBuilder/BundleValidator/BundleLoader and manifest serialization/determinism, but no tests for snapshot writer/reader, time anchor service, extractors, importers/import targets, signature verification edge cases, or path traversal validation.
 - Proposed changes (pending approval): replace wall-clock/Guid usage with deterministic fixtures, reclassify integration tests, swap CLI placeholder tests for real CLI harness + golden output, add centralized temp dir fixture cleanup, and expand coverage for snapshot writer/reader/time anchors/extractors/importers/path traversal and signature verification behavior.
+- Disposition: skipped (test project; no apply changes)
 ### src/AirGap/StellaOps.AirGap.Controller/StellaOps.AirGap.Controller.csproj
 - MAINT: HeaderScopeAuthenticationHandler authenticates every request and accepts scopes from the `scope` header only; no authority integration or rejection of missing scopes, and `scp` is ignored.
 - MAINT: ResolveTenant falls back to "default" on missing `x-tenant-id` and does not validate tenant ownership/claims, which can mask missing headers or allow cross-tenant writes.
@@ -173,6 +190,7 @@
 - TEST: Tests cover state service/store/startup diagnostics/replay verification, but no HTTP endpoint coverage (status/seal/unseal/verify), no auth scope enforcement tests, no tenant header validation tests, and no telemetry instrumentation tests.
 - TEST: Tests rely on DateTimeOffset.UtcNow and Guid.NewGuid (nondeterministic) and some temp directories (trust material) are not cleaned up.
 - Proposed changes (pending approval): add request validation (endpoint filters or FluentValidation) for seal/verify inputs, validate and normalize tenant IDs against claims, validate all StalenessBudget entries (including content budgets), harden or gate header-based auth for non-dev use, make allowlist validation stricter, add bounded telemetry cache/eviction, and add WebApplicationFactory tests for endpoints + auth + tenant resolution with deterministic time providers and temp cleanup.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/__Tests/StellaOps.AirGap.Controller.Tests/StellaOps.AirGap.Controller.Tests.csproj
 - MAINT: Tests rely on DateTimeOffset.UtcNow and Guid.NewGuid (state service, store, startup diagnostics), which makes results time-dependent and can be flaky.
 - MAINT: Startup diagnostics tests create trust material under temp directories but never delete them; temp artifacts can accumulate.
@@ -180,6 +198,7 @@
 - TEST: Coverage exists for state service/store/startup diagnostics/replay verification, but no tests for endpoint routing, scope enforcement, tenant resolution, header auth behavior, or telemetry metrics/tags.
 - TEST: No validation tests for malformed SealRequest/VerifyRequest payloads, invalid content budgets, or missing allowlist/trust file paths.
 - Proposed changes (pending approval): replace wall-clock/Guid usage with fixed fixtures, add temp cleanup helpers (TestKit TempDirectory), add WebApplicationFactory endpoint tests covering seal/unseal/status/verify + scope enforcement, and add validation tests for inputs and config error paths.
+- Disposition: skipped (test project; no apply changes)
 ### src/AirGap/StellaOps.AirGap.Importer/StellaOps.AirGap.Importer.csproj
 - MAINT: DsseVerifier uses a custom "PAE:" encoding with decoded UTF-8 payloads and string lengths; this does not match DSSE v1 pre-auth encoding and will not verify spec-compliant signatures.
 - MAINT: DsseVerifier ignores TrustRootConfig.AllowedSignatureAlgorithms and NotBefore/NotAfter trust window; verification is hard-wired to PS256 and does not enforce time bounds.
@@ -200,6 +219,7 @@
 - TEST: No tests for expected Merkle root comparison, non-seekable stream hashing, or quarantine reason code/message separation.
 - TEST: No tests for OfflineVerificationPolicyLoader culture invariance, PreferRestrictive behavior, or EvidenceGraph nested list ordering.
 - Proposed changes (pending approval): implement DSSE v1 PAE with byte-length encoding, enforce allowed algorithms and trust windows, harden key ID/base64 handling, make fingerprint matching case-insensitive, compare Merkle root against manifest, stream Merkle hashing, make digest dictionaries case-insensitive, parse with invariant culture, add deterministic hash fallback order, wire PreferRestrictive into lattice conflict resolution, implement VEX ingestion/merge, and add tests for the missing validation and determinism cases.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/__Tests/StellaOps.AirGap.Importer.Tests/StellaOps.AirGap.Importer.Tests.csproj
 - MAINT: AirGapControllerContractTests are documentation-style JSON shape checks with Guid/NewGuid and UtcNow; no HTTP or DI coverage.
 - MAINT: Fixture-based parser tests silently return when fixtures are missing; CI can pass without exercising the parser logic.
@@ -209,6 +229,7 @@
 - TEST: Missing tests for non-seekable stream Merkle hashing, policy loader culture invariance, PreferRestrictive lattice behavior, and EvidenceGraph nested ordering.
 - TEST: No tests covering VEX ingestion/merge behavior (currently absent) or EvidenceGraph metadata counters.
 - Proposed changes (pending approval): replace placeholder contract tests with WebApplicationFactory coverage where needed, make fixture tests explicit skip with reason, align DSSE PAE expectations to the spec, use fixed time/ID providers and shared temp helpers, and add coverage for the missing validation and determinism cases.
+- Disposition: skipped (test project; no apply changes)
 ### src/AirGap/__Libraries/StellaOps.AirGap.Persistence/StellaOps.AirGap.Persistence.csproj
 - MAINT: PostgresAirGapStateStore and PostgresBundleVersionStore hard-code the "airgap" schema in SQL and DDL; PostgresOptions.SchemaName is ignored, so schema overrides will break.
 - MAINT: PostgresAirGapStateStore queries tenant IDs case-insensitively but stores case-sensitive keys; duplicates differing only by case can exist and reads can return arbitrary rows.
@@ -221,6 +242,7 @@
 - TEST: No tests for PostgresBundleVersionStore, history ordering determinism, schema override behavior, or tenant ID normalization rules.
 - TEST: No tests for JSON serialization determinism or corrupted JSON handling.
 - Proposed changes (pending approval): use configured schema name consistently, normalize tenant IDs at write time or enforce unique lower-case index, migrate schema changes into formal migrations, sort JSON keys for deterministic outputs, log deserialization failures, add stable ORDER BY in history queries, and add coverage for bundle version store, schema overrides, and JSON handling.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/__Tests/StellaOps.AirGap.Persistence.Tests/StellaOps.AirGap.Persistence.Tests.csproj
 - MAINT: Postgres-backed tests are marked as Unit even though they depend on a Postgres fixture and I/O; should be Integration.
 - MAINT: Tests use Guid.NewGuid and DateTimeOffset.UtcNow, which makes results time-dependent and harder to reproduce.
@@ -229,6 +251,7 @@
 - TEST: Coverage is limited to PostgresAirGapStateStore; no tests for PostgresBundleVersionStore, tenant ID casing, schema overrides, or JSON error paths.
 - TEST: No tests for AirGapPersistenceExtensions service registration or AirGapDataSource defaults.
 - Proposed changes (pending approval): reclassify tests as Integration, use fixed IDs/time providers, align schema expectations with actual tables, add explicit migration setup (or remove migration tests if none exist), and add coverage for bundle version store, schema overrides, and JSON error handling.
+- Disposition: skipped (test project; no apply changes)
 ### src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.csproj
 - MAINT: EgressPolicy snapshots rules on construction using IOptions; config reloads do not update mode or allowlist without rebuilding the policy.
 - MAINT: EgressHttpClientFactory creates a new HttpClient per call and bypasses HttpClientFactory/handler configuration, risking socket exhaustion and inconsistent handler policies.
@@ -236,23 +259,27 @@
 - MAINT: EgressPolicy assumes EgressRequest is fully constructed; default structs with null Destination will throw when building remediation.
 - TEST: No coverage for configuration precedence (AirGap:Egress vs root Egress), allowlist synonyms (AllowList/Allow/EgressAllowlist), port/transport mismatch behavior, or IPv6 loopback/private network detection.
 - Proposed changes (pending approval): support options reload (IOptionsMonitor or explicit refresh), integrate HttpClientFactory or configurable handlers, de-duplicate allow rules, guard against default EgressRequest, and add tests for config precedence, synonyms, port/transport, and IPv6 cases.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers/StellaOps.AirGap.Policy.Analyzers.csproj
 - MAINT: Analyzer compares type by display string; prefer symbol equality via compilation metadata to avoid alias/format differences and improve correctness.
 - MAINT: Test-exemption logic only checks assembly names ending with ".Tests"; ".Test" or ".Testing" assemblies will still be flagged.
 - MAINT: Code fix always inserts placeholder EgressHttpClientFactory.Create(...) without preserving HttpClient handler/timeout configuration from the original code.
 - TEST: No tests for non-.Tests test assembly naming, generated-code suppression, or HttpClient creation with custom handlers.
 - Proposed changes (pending approval): compare symbols via compilation, expand test assembly detection, augment code fix guidance or preserve handler configuration, and add tests for assembly name variants and handler-based constructions.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Analyzers.Tests/StellaOps.AirGap.Policy.Analyzers.Tests.csproj
 - MAINT: Analyzer tests overlap across HttpClientUsageAnalyzerTests and PolicyAnalyzerRoslynTests, increasing maintenance and risk of drift.
 - MAINT: Code-fix golden tests rely on exact string output without normalization, making them brittle to formatting changes.
 - TEST: No tests for generated-code suppression or for assembly names ending with ".Test"/".Testing".
 - TEST: No tests for code fix on `using var client = new HttpClient()` or custom handler construction.
 - Proposed changes (pending approval): consolidate overlapping tests, normalize code-fix output comparisons, and add missing suppression/assembly-name/creation-pattern tests.
+- Disposition: skipped (test project; no apply changes)
 ### src/AirGap/StellaOps.AirGap.Policy/StellaOps.AirGap.Policy.Tests/StellaOps.AirGap.Policy.Tests.csproj
 - MAINT: Tests do not cover configuration precedence between AirGap:Egress and root Egress sections or allowlist key variants.
 - MAINT: No tests for IPv6 loopback/private network detection or port/transport mismatch behavior.
 - TEST: No tests for default-constructed EgressRequest handling or config reload behavior.
 - Proposed changes (pending approval): add tests for config precedence and allowlist synonyms, IPv6/port/transport matching, and expected behavior on default EgressRequest or config reloads.
+- Disposition: skipped (test project; no apply changes)
 ### src/AirGap/StellaOps.AirGap.Time/StellaOps.AirGap.Time.csproj
 - MAINT: TimeStatusController, TimeAnchorHealthCheck, and SealedStartupValidator use DateTimeOffset.UtcNow directly; TimeProvider is not injectable, reducing determinism.
 - MAINT: TimeTelemetry uses a static ConcurrentDictionary with no eviction; tenant growth is unbounded.
@@ -263,6 +290,7 @@
 - MAINT: Program wiring defaults to InMemoryTimeAnchorStore, so anchors are lost on restart without a persistence store override.
 - TEST: No endpoint or health-check tests; no TrustRootProvider parsing tests; no happy-path RFC3161/Roughtime verification tests with real tokens.
 - Proposed changes (pending approval): inject TimeProvider into controller/health/startup validator, bound telemetry cache, make stores thread-safe and normalize tenant IDs, harden trust-root parsing per entry, complete Roughtime path validation and remove dead code, handle options reload, add persistent store wiring, and add endpoint/trust-root/happy-path verification tests.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/AirGap/__Tests/StellaOps.AirGap.Time.Tests/StellaOps.AirGap.Time.Tests.csproj
 - MAINT: SealedStartupValidatorTests and TimeTelemetryTests use DateTimeOffset.UtcNow; time-dependent tests reduce determinism.
 - MAINT: TimeVerificationServiceTests expects success with an invalid Roughtime token and trust root, which contradicts RoughtimeVerifier behavior and likely fails.
@@ -270,6 +298,7 @@
 - TEST: No TrustRootProvider parsing tests (valid/invalid JSON or PEM parsing).
 - TEST: No controller or health-check integration tests, and no concurrency tests for InMemoryTimeAnchorStore or telemetry behavior.
 - Proposed changes (pending approval): replace UtcNow with fixed fixtures, correct TimeVerificationServiceTests expectations, add happy-path verification fixtures, add trust-root parsing tests, add endpoint/health checks, and add store/telemetry behavior tests.
+- Disposition: skipped (test project; no apply changes)
 ### src/Aoc/__Libraries/StellaOps.Aoc/StellaOps.Aoc.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; reduces warning discipline.
 - MAINT: AocViolationCodeExtensions maps multiple violations to the same error code (ERR_AOC_004 and ERR_AOC_005), making telemetry and status mapping ambiguous.
@@ -281,6 +310,7 @@
 - TEST: No tests for derived field detection, RequireSignatureMetadata false, RequireTenant false, Required/Allowed mismatch, ValidateOrThrow behavior, or deterministic error code selection.
 - TEST: UnitTest1 is an empty placeholder.
 - Proposed changes (pending approval): assign unique error codes or map to distinct categories, enforce deterministic violation ordering, remove or use presentTopLevel, auto-merge required fields into the allowlist (or validate configuration), validate tenant independently of RequiredTopLevelFields, validate signature format/payload shape, add missing tests, and remove/replace UnitTest1.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Aoc/__Analyzers/StellaOps.Aoc.Analyzers/StellaOps.Aoc.Analyzers.csproj
 - MAINT: Ingestion detection relies on assembly/namespace string heuristics; other ingestion entry points can be missed or false positives introduced.
 - MAINT: Test assembly exemption only recognizes ".Tests"; ".Test"/".Testing" assemblies are still flagged.
@@ -288,27 +318,32 @@
 - MAINT: Guard-scope detection only checks Validate calls or parameter names; ValidateOrThrow or wrapper methods are not recognized.
 - TEST: No tests for AOC0003 diagnostics, guard-scope suppression, .Test/.Testing exemptions, or false positives on Add/Update in non-DB types.
 - Proposed changes (pending approval): add explicit ingestion markers (attribute/config), expand test assembly detection, tighten database write detection to known types or interfaces, broaden guard detection to ValidateOrThrow/IAocGuard usage, and add missing tests.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Aoc/__Tests/StellaOps.Aoc.Analyzers.Tests/StellaOps.Aoc.Analyzers.Tests.csproj
 - MAINT: Test name "DoesNotReportDiagnostic_ForIngestionNamespaceButNotConnector" contradicts the assertion (expects a diagnostic), which obscures intent.
 - MAINT: Coverage is limited to forbidden/derived fields and dictionary Add; no coverage for AOC0003 or guard-scope behavior.
 - TEST: Missing cases for .Test/.Testing assembly suffixes, generated-code suppression, and false positives on generic Add/Update.
 - Proposed changes (pending approval): fix the test name or expectation, add AOC0003 guard-scope tests, and add assembly suffix and suppression coverage.
+- Disposition: skipped (test project; no apply changes)
 ### src/Aoc/__Libraries/StellaOps.Aoc.AspNetCore/StellaOps.Aoc.AspNetCore.csproj
 - MAINT: AocGuardEndpointFilter skips validation when it cannot find a TRequest argument, leaving requests unguarded without a warning.
 - MAINT: Exceptions in payloadSelector/serialization propagate as 500s; no structured Problem response or logging for guard-related failures.
 - MAINT: JsonDocument payloads are consumed without explicit disposal; ownership is unclear and can leak if selectors create documents per request.
 - TEST: No tests for filter enforcement (invalid payload -> Problem response), multiple payloads, null payloads, or option overrides.
 - Proposed changes (pending approval): fail fast or log when request argument is missing, catch selector/serialization errors and return Problem, define JsonDocument ownership (or avoid accepting JsonDocument), and add tests for filter error paths and option behaviors.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Aoc/__Tests/StellaOps.Aoc.AspNetCore.Tests/StellaOps.Aoc.AspNetCore.Tests.csproj
 - MAINT: Tests only assert builder identity; filter behavior and error handling are not exercised.
 - TEST: No tests for AocHttpResults status mapping variants, guard failure responses, payload selector handling, or guardOptions/serializerOptions overrides.
 - Proposed changes (pending approval): add WebApplicationFactory tests to verify guard enforcement and Problem payloads, and add tests for status mapping and option overrides.
+- Disposition: skipped (test project; no apply changes)
 ### src/Aoc/__Tests/StellaOps.Aoc.Tests/StellaOps.Aoc.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: UnitTest1 is an empty placeholder.
 - MAINT: AocWriteGuard tests do not cover derived field detection or configuration edge cases.
 - TEST: Missing tests for RequireSignatureMetadata false, RequireTenant false, derived field violations, Required vs Allowed mismatch, ValidateOrThrow, and error code determinism.
 - Proposed changes (pending approval): remove/replace placeholder test, add coverage for options/edge cases and ValidateOrThrow, and validate deterministic error code selection.
+- Disposition: skipped (test project; no apply changes)
 ### src/__Tests/architecture/StellaOps.Architecture.Tests/StellaOps.Architecture.Tests.csproj
 - MAINT: Architecture rules only inspect assemblies already loaded in the AppDomain; with only a couple of project references, most modules are never scanned and tests can pass without enforcing rules.
 - MAINT: Several dependency checks use wildcard-like strings (for example "StellaOps.*.WebService"), which NetArchTest treats as literal assembly names; rules likely never match.
@@ -317,6 +352,7 @@
 - MAINT: Many tests return early when no assemblies are loaded, masking misconfigured test runs.
 - TEST: No meta-tests ensure expected assemblies are loaded or that rules executed against the intended module set.
 - Proposed changes (pending approval): explicitly load target assemblies (solution output or curated list), replace wildcard strings with explicit names or supported matching, make advisory checks reportable, assert that required assemblies are present, and add meta-tests to validate discovery.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestation/StellaOps.Attestation.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; reduces warning discipline.
 - MAINT: DsseHelper.WrapAsync computes PAE with statement.Type ?? string.Empty but sets envelope payloadType to the default URI; when Type is null the signature is computed over a different payload type than the envelope advertises.
@@ -325,11 +361,13 @@
 - MAINT: DsseEnvelopeExtensions.FromBase64 does not validate signature base64 strings; invalid signatures can pass through until later failures.
 - TEST: No tests for payloadType default handling, DsseEnvelopeExtensions conversions, invalid signature base64, or deterministic serialization options.
 - Proposed changes (pending approval): align PAE payloadType with the envelope default, avoid extra payload allocation, use canonical or explicit JsonSerializer options, validate signature base64 inputs, and add tests covering defaults and conversions.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/StellaOps.Attestation.Tests/StellaOps.Attestation.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: PreAuthenticationEncoding_FollowsDsseSpec only checks string containment; it does not assert DSSE length/spacing rules and can pass with incorrect PAE format.
 - TEST: No tests for DsseEnvelopeExtensions (ToSerializableDict/FromBase64/GetPayloadBase64), payloadType default handling, or invalid base64 inputs.
 - Proposed changes (pending approval): add strict PAE byte-format assertions, add conversion tests, and cover payloadType default and invalid base64 error paths.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.Bundle/StellaOps.Attestor.Bundle.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: SigstoreBundleBuilder accepts logIndex/integratedTime/payload/signature strings without validation, so invalid base64 or non-numeric values are only caught later.
@@ -340,12 +378,14 @@
 - MAINT: Inclusion proof verification does not validate logIndex consistency or checkpoint signatures; RootHashMismatch is unused and never surfaced.
 - TEST: No tests for invalid base64 payload/signature, missing certificate/publicKey validation during deserialization, inclusion proof verification (valid/invalid), or invariant-culture PAE bytes.
 - Proposed changes (pending approval): add input validation for base64/numeric fields, enforce verification material presence in serializer validation, use invariant culture in PAE, harden base64 error handling, treat missing proofs explicitly, and add tests for base64 errors, inclusion proofs, and PAE bytes.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.Bundle.Tests/StellaOps.Attestor.Bundle.Tests.csproj
 - MAINT: Tests generate certificates with DateTimeOffset.UtcNow; time-dependent behavior can be flaky in long-running or skewed environments.
 - MAINT: Test ConstructPae duplicates verifier logic; can drift from production implementation.
 - TEST: No tests for inclusion proof verification (valid/invalid), VerifyInclusionProof=false with proofs present, Ed25519/public-key-only verification paths, or invalid base64 payload/signature handling.
 - TEST: No tests for serializer validation of missing certificate/public key or RootHashMismatch handling.
 - Proposed changes (pending approval): use fixed timestamps for cert generation, reuse production PAE helper, add inclusion proof fixtures, cover public-key-only and Ed25519 verification, and add invalid base64/deserialization validation tests.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.Bundling/StellaOps.Attestor.Bundling.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: AttestationBundler ignores BundlingOptions.Aggregation.MinAttestationsForBundle and LookbackDays; empty periods always throw even when min is configured.
@@ -358,6 +398,7 @@
 - MAINT: BouncyCastle dependency appears unused in code; StellaOps.Attestor.Bundling.csproj.Backup.tmp is an orphaned artefact.
 - TEST: No tests for OfflineKitBundleProvider export behavior, retention overrides, period validation, or missing org signer paths.
 - Proposed changes (pending approval): validate date ranges and min-attestation behavior, fail when signing requested but signer absent, inject TimeProvider for metadata, compute key fingerprint from actual key material, apply retention overrides, honor export defaults, remove unused dependency/backup file, and add offline-kit/override/signing tests.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.Bundling.Tests/StellaOps.Attestor.Bundling.Tests.csproj
 - MAINT: Tests use DateTimeOffset.UtcNow, Guid.NewGuid, and Random.Shared; results are time/random dependent and can be flaky.
 - MAINT: BundleWorkflowIntegrationTests reimplement bundling (custom merkle/root/signing) instead of exercising AttestationBundler, risking drift.
@@ -365,6 +406,7 @@
 - MAINT: Integration-style tests are labeled Unit, masking suite cost and expectations.
 - TEST: No tests for OfflineKitBundleProvider export paths, retention predicate/tenant overrides, missing-org-signer behavior, or invalid period validation.
 - Proposed changes (pending approval): use fixed time/IDs, route workflow tests through AttestationBundler/RetentionPolicyEnforcer, reclassify integration tests, and add coverage for offline exports, overrides, and missing signer cases.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core/StellaOps.Attestor.Core.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: DSSE PAE implementations disagree and are not spec aligned; DsseSigningService.CreatePae writes binary ulong lengths (little-endian), DssePreAuthenticationEncoding.Compute writes big-endian lengths, and both differ from DSSE v1 ASCII length encoding.
@@ -380,6 +422,7 @@
 - TEST: Coverage only exists for PredicateSchemaValidator and RekorOfflineReceiptVerifier; no tests for DSSE signing/PAE, submission validation, checkpoint parsing, Merkle proofs, time skew, delta attestation determinism, PoE generation/hash, or schema resource coverage.
 - TEST: No tests for AllowedKinds/logPreference alignment or canonical JSON ordering in delta/PoE outputs.
 - Proposed changes (pending approval): set TreatWarningsAsErrors, consolidate DSSE PAE into one spec-correct helper, align AllowedKinds/logPreference with delta and PoE flows, implement deterministic JSON ordering for dictionaries and honor PoE emission options, switch PoE hash to real BLAKE3 or change the label, add Ed25519 PEM parsing or explicit unsupported handling, align TimeSkew defaults with docs (or update docs), and add tests for DSSE, submission validation, checkpoint/Merkle verification, time skew, delta/PoE determinism, and schema resource coverage.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Core.Tests/StellaOps.Attestor.Core.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Tests create temp directories using Guid.NewGuid/Path.GetTempPath with ad hoc cleanup; StellaOps.TestKit is referenced but not used for deterministic temp helpers.
@@ -387,6 +430,7 @@
 - TEST: Coverage is limited to RekorOfflineReceiptVerifier and PredicateSchemaValidator; no tests for DSSE PAE/signing, submission validation, checkpoint signature parsing, Merkle proofs, time skew, PoE generation/hash, or delta attestation output.
 - TEST: Missing negative-path coverage for receipt parsing (missing fields, invalid hash encoding, bad checkpoint reference, invalid proof hash lengths).
 - Proposed changes (pending approval): use TestKit temp helpers, add delta schema fixtures and missing-resource tests, expand receipt parsing negative cases, and add tests for DSSE/submission/merkle/time-skew/PoE/delta behaviors.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestor.Envelope/StellaOps.Attestor.Envelope.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: EnvelopeSignatureService signs/verifies raw payload bytes and has no helper that includes payloadType/PAE; callers can unintentionally produce non-DSSE signatures.
@@ -396,12 +440,14 @@
 - MAINT: DsseEnvelopeSerializer allows both EmitCompactJson=false and EmitExpandedJson=false, returning no JSON output without a guard.
 - TEST: No tests for EnvelopeSignatureService (Ed25519/ECDSA), EnvelopeKey/EnvelopeKeyIdCalculator, signature ordering, compression + payloadType correctness, or detached payload validation.
 - Proposed changes (pending approval): set TreatWarningsAsErrors, add explicit DSSE PAE helper or rename API to require PAE input, prevent compression from mutating DSSE payloads without metadata (or document + adjust payloadType), validate base64 signature strings and detached payload digest format, guard against no-output options, and add tests for sign/verify, key IDs, compression behavior, and detached payload validation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/StellaOps.Attestor.Envelope/__Tests/StellaOps.Attestor.Envelope.Tests/StellaOps.Attestor.Envelope.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: FsCheck packages are referenced, but no property/fuzz tests exist and DsseEnvelopeFuzzTests.cs is removed; charter expectation is unmet.
 - TEST: Coverage is limited to DsseEnvelopeSerializer; no tests for EnvelopeSignatureService sign/verify, EnvelopeKey validation, key ID derivation, signature ordering, or base64 validation failures.
 - TEST: No tests for compression/preview option combinations, detached payload digest validation, or EmitCompactJson/EmitExpandedJson edge cases.
 - Proposed changes (pending approval): add property/fuzz tests (fixed seed), expand coverage to signature/key paths, add negative-path serialization tests, and validate compression/preview/detached metadata behaviors.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.GraphRoot/StellaOps.Attestor.GraphRoot.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: GraphRootAttestor signs raw payload bytes without DSSE PAE (payloadType binding); the DSSE envelope signature is not spec-aligned.
@@ -414,6 +460,7 @@
 - MAINT: StellaOps.Attestor.GraphRoot.csproj.Backup.tmp is a stray artifact in source control.
 - TEST: No tests for DSSE PAE correctness, signature verification, payloadType validation, evidence ID binding, digest normalization, or bundle hash determinism.
 - Proposed changes (pending approval): set TreatWarningsAsErrors, sign DSSE PAE (or require PAE input), verify signatures/payloadType/key ID in VerifyAsync, include EvidenceIds in root inputs (or remove from predicate), inject TimeProvider, normalize digests, canonicalize bundle hash generation, remove backup file, and add tests for signature/PAE, evidence binding, payloadType validation, digest normalization, and bundle hash determinism.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Libraries/__Tests/StellaOps.Attestor.GraphRoot.Tests/StellaOps.Attestor.GraphRoot.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Tests use Random.Shared, Guid.NewGuid, and DateTimeOffset.UtcNow; results are nondeterministic.
@@ -421,6 +468,7 @@
 - TEST: No coverage for DSSE PAE/signature verification, payloadType mismatch, invalid JSON or missing predicate in VerifyAsync, key mismatch, or evidence ID binding.
 - TEST: No tests for digest normalization or bundle hash determinism.
 - Proposed changes (pending approval): use fixed keys/IDs/time, reclassify integration tests, add DSSE signature/PAE tests, add negative-path verification tests, and cover evidence binding and digest normalization.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Infrastructure/StellaOps.Attestor.Infrastructure.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: StellaOps.Attestor.Infrastructure.csproj.Backup.tmp is a stray artifact in source control.
@@ -436,6 +484,7 @@
 - MAINT: S3AttestorArchiveStore serializes metadata dictionaries without ordering; metadata JSON is nondeterministic.
 - MAINT: ServiceCollectionExtensions hard-codes HttpRekorClient timeout to 30s, ignoring Rekor options.
 - TEST: No infrastructure test project; missing coverage for submission/verification flows, bundle import/export, queues, cache invalidation, pagination, and Rekor/transparency clients.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Libraries/StellaOps.Attestor.Oci/StellaOps.Attestor.Oci.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: OciReference.Parse does not support tag+digest references and rejects bare references without a registry, while tests expect docker.io defaults; parsing behavior is inconsistent with tests.
@@ -447,6 +496,7 @@
 - MAINT: FetchAsync blindly uses the first manifest layer without verifying media type; multi-layer manifests can return the wrong blob.
 - MAINT: DeserializeEnvelope does not dispose JsonDocument and throws on invalid payload base64 without a structured error.
 - TEST: Coverage is limited; no tests for attach/list/fetch/remove paths, annotation behavior, digest computation, or ReplaceExisting logic.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.Oci.Tests/StellaOps.Attestor.Oci.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: OciReferenceTests expect docker.io defaults for "nginx:latest", but OciReference.Parse currently rejects references without a registry; tests are out of sync.
@@ -455,6 +505,7 @@
 - MAINT: OrasAttestationAttacherTests only cover guard clauses; they do not assert registry client calls, digest computation, or annotation behavior.
 - MAINT: Integration tests are all skipped placeholders; Testcontainers setup runs but exercises no implementation.
 - TEST: No tests for actual attach/list/fetch/remove flows, predicate type annotations, deterministic digest generation, invalid envelope/base64 handling, or tag+digest parsing.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.Offline/StellaOps.Attestor.Offline.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: StellaOps.Attestor.Offline.csproj.Backup.tmp is a stray artifact in source control.
@@ -467,6 +518,7 @@
 - MAINT: FileSystemRootStore ignores OfflineRootStoreOptions.UseOfflineKit; offline kit roots load even when disabled.
 - MAINT: FileSystemRootStore enumerates PEM directories without deterministic ordering; root listing order can vary across runs.
 - TEST: No tests for real DSSE signature verification, Rekor inclusion proof validation, org signature verification with cert chains, or UseOfflineKit behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.Offline.Tests/StellaOps.Attestor.Offline.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Tests use DateTimeOffset.UtcNow and Guid.NewGuid (bundle metadata, certificates, shuffle order), making results nondeterministic.
@@ -474,6 +526,7 @@
 - MAINT: VerifyBundleAsync_DeterministicOrdering uses Guid.NewGuid for ordering, which can mask deterministic ordering regressions.
 - TEST: No tests for cryptographic DSSE signature verification, Rekor proof path validation, or org signature verification via certificate keys.
 - TEST: No tests for OfflineRootStoreOptions.UseOfflineKit toggle, invalid PEM parsing, or root ordering determinism.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.Persistence/StellaOps.Attestor.Persistence.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: Perf harness `run-perf.ps1` references a missing migration file (`Migrations/20251214000001_AddProofChainSchema.sql`), so the perf run fails against current schema.
@@ -483,11 +536,13 @@
 - MAINT: TrustAnchorMatcher caches regex patterns without bounds; untrusted or large pattern sets can grow memory indefinitely.
 - MAINT: EvidenceIds/AllowedKeyIds arrays are expected to be sorted or normalized but no enforcement exists before persistence.
 - TEST: No repository implementation or tests for DbContext mappings, migrations, or audit log behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.Persistence.Tests/StellaOps.Attestor.Persistence.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Tests use Guid.NewGuid for anchor IDs; nondeterministic identifiers can obscure ordering-related issues.
 - MAINT: TrustAnchorMatcherTests only cover matching allowlists; no tests for equal-specificity tie-breakers, inactive anchors, or case-sensitivity edge cases.
 - TEST: No tests for DbContext mappings, migration SQL, or repository behaviors (upsert, audit log).
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/StellaOps.Attestor.ProofChain.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: AuditHashLogger and proof generators use DateTimeOffset.UtcNow directly; no TimeProvider injection for deterministic outputs.
@@ -497,12 +552,14 @@
 - MAINT: DeterministicMerkleTreeBuilder claims lexicographic sorting but does not sort leaves; callers can produce nondeterministic roots.
 - MAINT: Rfc8785JsonCanonicalizer parses numbers via double; large integers/precise decimals can lose precision and canonicalize incorrectly.
 - TEST: No tests for schema validation logic, number canonicalization edge cases, proof generators, or AuditHashLogger outputs.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/StellaOps.Attestor.ProofChain.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: UnitTest1 is an empty placeholder.
 - MAINT: ProofSpineAssemblyIntegrationTests are labeled Unit and include perf timing assertions; can be flaky and miscategorized.
 - MAINT: Some tests use Guid.NewGuid (TrustAnchorIdTests), which is nondeterministic and unnecessary.
 - TEST: No tests for PredicateSchemaValidator, proof generator timestamp determinism, JSON number canonicalization edge cases, or proof signing verification.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/StellaOps.Attestor.StandardPredicates.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: JsonCanonicalizer uses JsonNode + double conversions; RFC 8785 number canonicalization can lose precision (large integers, decimals, -0) and emit non-canonical forms.
@@ -513,6 +570,7 @@
 - MAINT: JsonSchema.Net is referenced but schema validation is not implemented; only basic field checks are performed.
 - TEST: No tests for CycloneDX/SLSA parsers, JsonCanonicalizer numeric edge cases, or versioned predicate type handling.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, implement RFC 8785-compliant canonicalization with string-preserved numbers, use sorted/immutable metadata properties, register versioned predicate types, validate CycloneDX version field types, use invariant culture for numeric metadata, add schema validation or remove the unused package, and add tests for CycloneDX/SLSA parsing and canonicalization edge cases.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/StellaOps.Attestor.StandardPredicates.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: StandardPredicateRegistryTests has inconsistent attribute indentation; minor but reduces readability.
@@ -520,6 +578,7 @@
 - TEST: No tests for JsonCanonicalizer (key ordering, number precision, -0, exponent normalization) or versioned predicate type registration.
 - TEST: No tests for CycloneDX metadata extraction warnings/errors or for SLSA required-field validation edge cases.
 - Proposed changes (pending approval): add CycloneDX and SLSA parser test suites, add JsonCanonicalizer determinism tests (key order, numeric edge cases), validate versioned predicate type registration, and tighten test formatting/consistency.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Tests/StellaOps.Attestor.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Many tests use DateTimeOffset.UtcNow, Guid.NewGuid, Random.Shared, and RandomNumberGenerator.GetBytes, which makes results nondeterministic and harder to reproduce (AttestorStorageTests, AttestorEntryRepositoryTests, AttestorVerificationServiceTests, AttestorSubmissionServiceTests, RekorInclusionVerificationIntegrationTests, TestSupport/TestAttestorDoubles).
@@ -530,6 +589,7 @@
 - TEST: Contract snapshot tests do not enforce a stored baseline; they only check that OpenAPI exists and list paths (no diff or snapshot comparison).
 - TEST: Rekor queue tests are compiled only under STELLAOPS_EXPERIMENTAL_REKOR_QUEUE; the default build does not exercise those paths.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, use fixed TimeProvider/IDs and deterministic random seeds, replace Task.Delay with deterministic time controls, recategorize integration/observability tests, strengthen assertions for auth/contract/negative suites, add a real OpenAPI snapshot baseline, remove mojibake output markers, and ensure Rekor queue tests run in a dedicated integration suite.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/StellaOps.Attestor.TrustVerdict.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline may be reduced.
 - MAINT: JsonCanonicalizer is not RFC 8785 compliant (UnsafeRelaxedJsonEscaping, camel-case renaming, and number handling that can preserve exponent notation or non-minimal forms), risking non-canonical hashes.
@@ -542,6 +602,7 @@
 - MAINT: Migration comment lists trust tier values that differ from code (VeryHigh/High/Medium/Low/VeryLow).
 - TEST: No tests for JsonCanonicalizer edge cases, repository mapping, OCI attachment, metrics, or merkle root consistency between service and builder.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, align merkle root computation with builder (or use builder), enforce invariant-culture formatting for reasons, implement OCI/Valkey or explicitly return not-implemented errors, fix cache expiry/index handling and HitCount tracking, use DateTimeOffset reads, align migration comments, and add tests for canonicalization, repository mapping, OCI attach/fetch, cache expiry, and merkle consistency.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/StellaOps.Attestor.TrustVerdict.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: TrustEvidenceMerkleBuilderTests.Build_SortsItemsByDigest lacks assertions for the actual ordering.
@@ -549,6 +610,7 @@
 - TEST: No tests for TrustVerdictService merkle root consistency with TrustEvidenceMerkleBuilder or duplicate-digest tie-breakers.
 - TEST: No tests for repository, OCI attacher, Valkey fallback, or metrics instrumentation.
 - Proposed changes (pending approval): add assertions for sort order, add canonicalizer tests (numbers/escaping), add merkle root consistency and duplicate-digest tests, and add coverage for repository/Oci/Valkey/metrics behaviors.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestor.Types/Tools/StellaOps.Attestor.Types.Generator/StellaOps.Attestor.Types.Generator.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ResolveRepoRoot relies on a fixed 8-level parent walk from AppContext.BaseDirectory; running from a different output layout can fail and there is no CLI override.
@@ -558,6 +620,7 @@
 - MAINT: Go validation omits string pattern checks for digest formats and other regex patterns, so required formats are not enforced.
 - MAINT: Generator writes output but does not prune stale schema/SDK files when objects are removed.
 - TEST: No tests for generator output determinism, schema parity, or canonicalization/validator behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/__Tests/StellaOps.Attestor.Types.Tests/StellaOps.Attestor.Types.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test output/log markers contain mojibake or non-ASCII sequences (garbled symbols), hurting readability and log portability.
@@ -569,6 +632,7 @@
 - TEST: MockRekorClient.SubmitAsync blocks on .Result; if async paths evolve, this can deadlock and tests do not exercise true async behavior.
 - TEST: Schema validation only covers the SmartDiff schema and one negative case; other schema files and sample files are not validated against schemas.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, normalize output strings to ASCII, use a deterministic time provider in Rekor tests, align determinism tests to RFC 8785 canonicalization helpers, fix Unicode normalization test data, align namespaces, update mock DSSE PAE framing, avoid .Result in mocks, and add schema/sample validation coverage across all schemas.
+- Disposition: skipped (test project; no apply changes)
 ### src/Attestor/StellaOps.Attestor.Verify/StellaOps.Attestor.Verify.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: AttestorVerificationEngine is a large, multi-responsibility class (signature, issuer, transparency, freshness, policy), which makes it hard to test and evolve.
@@ -580,6 +644,7 @@
 - TEST: No test project for Attestor.Verify; no coverage for signature validation paths, issuer chain validation, transparency proof evaluation, or policy aggregation.
 - TEST: No tests for the experimental distributed provider (routing, circuit breaker state, retry behavior, or node health checks).
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, split the engine into focused components, align PAE framing with DSSE spec, dedupe verified signatures per key, add intermediate certificates to chain policy, parse SANs via ASN.1, fix the distributed provider dependencies and hash determinism, and add a dedicated test project covering signature/issuer/transparency/policy and distributed provider behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Attestor/StellaOps.Attestor/StellaOps.Attestor.WebService/StellaOps.Attestor.WebService.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Program.cs is a monolithic composition root that mixes DI, auth, rate limiting, and endpoint mapping; makes testing and change isolation harder.
@@ -591,6 +656,7 @@
 - TEST: No test project for the web service; no coverage for auth/mTLS, rate limiting, controllers, or minimal API routes.
 - TEST: No contract tests or OpenAPI snapshot validation for response payloads (list/detail/verify/bulk/bundles).
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, split Program.cs into modules/extension methods, consolidate endpoint style, gate or remove stub controllers until implemented, wire TimeProvider into controllers, require auth/rate limits on controller routes, require EvidenceLocker base address config, and add WebApplicationFactory tests for auth, routes, and contracts.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/__Libraries/StellaOps.Audit.ReplayToken/StellaOps.Audit.ReplayToken.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: README only documents v1 token format and contains mojibake text; v2 expiration format is undocumented.
@@ -602,6 +668,7 @@
 - TEST: No tests for AdditionalContext ordering normalization or duplicate-key handling.
 - TEST: No tests for ReplayCliSnippetGenerator output formatting/escaping or DecisionReplayTokenExtensions helpers.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, update README for v2 tokens and fix encoding artifacts, fix CLI snippet formatting and escape values, align canonical versioning with token version, guard against duplicate normalized keys, validate expiration inputs, document GeneratedAt semantics, and add unit tests for AdditionalContext ordering/duplicate keys, CLI snippet generation, and v1/v2 canonicalization semantics.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/__Tests/StellaOps.Audit.ReplayToken.Tests/StellaOps.Audit.ReplayToken.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Project lacks explicit test SDK/runner references (e.g., Microsoft.NET.Test.Sdk, xunit runner); discovery/coverage may depend on transitive packages.
@@ -612,6 +679,7 @@
 - TEST: No tests for AdditionalContext ordering normalization or duplicate-key handling.
 - TEST: No tests asserting canonicalization versioning differences between v1 and v2 tokens.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/runner packages, fix test naming/formatting, clean comment encoding artifacts, and add tests for CLI snippet generation, extension helpers, AdditionalContext ordering/duplicates, and v1/v2 canonicalization differences.
+- Disposition: skipped (test project; no apply changes)
 ### src/__Libraries/StellaOps.AuditPack/StellaOps.AuditPack.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: Core flows are placeholders or TODOs (AuditPackBuilder collectors and SignPackAsync, AuditPackReplayer ExecuteReplayAsync/FindJsonDifferences, AuditPackImporter signature verification, ScanSnapshotFetcher placeholder data, AuditPackExportService mock segments and empty DSSE signatures).
@@ -621,6 +689,7 @@
 - MAINT: ReplayAttestationService.VerifyAsync marks signatures as verified based only on signature count and claims canonical JSON while using the default JsonSerializer; digest stability and signature verification are not enforced.
 - TEST: Coverage does not exercise the TODO flows (collector methods, SignPackAsync, replay execution/diff), signature verification paths (AuditPackImporter/AuditBundleSigner/ReplayAttestationService), tar extraction safety, KeepExtracted/EnforceOffline options, or deterministic serialization with fixed time/IDs.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, implement or gate TODO paths, add TimeProvider/ID injection, validate tar extraction paths and deterministic entry ordering, honor KeepExtracted/EnforceOffline, implement signature verification, and add tests for replay, signing, and extraction safety.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/__Libraries/__Tests/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: AuditReplayE2ETests and archive-heavy tests are tagged Unit even though they exercise filesystem and tar/gz flows.
@@ -628,6 +697,7 @@
 - TEST: No coverage for signature verification in AuditBundleSigner/AuditBundleReader, tar extraction safety (path traversal/overwrite), or IsolatedReplayContext offline enforcement.
 - TEST: Export tests use MockAuditBundleWriter and repository-less export paths, so they do not validate repository-backed segment data or DSSE signing.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, recategorize integration/E2E tests, use fixed time/IDs, add tests for signature verification and extraction safety, and add coverage for repository-backed export flows.
+- Disposition: skipped (test project; no apply changes)
 ### src/__Tests/unit/StellaOps.AuditPack.Tests/StellaOps.AuditPack.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: AuditPackBuilderTests.PackDigest_IsComputedCorrectly never computes a digest and asserts PackDigest is non-null; the test is invalid as written.
@@ -636,6 +706,7 @@
 - TEST: No tests for ImportOptions.KeepExtracted, tar extraction path safety, or importer signature verification behavior.
 - TEST: No tests for replay execution/diff behavior, signer integration in ReplayAttestationService, or deterministic pack serialization with fixed time/IDs.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, fix PackDigest test to compute digest, separate integration-style tests, use deterministic time/IDs, create a valid tar without manifest for negative tests, and add tests for signature verification, KeepExtracted, and replay/diff paths.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: StellaOpsScopes.All exposes the mutable HashSet backing store with nondeterministic iteration order; callers can observe unstable scope ordering.
@@ -644,6 +715,7 @@
 - TEST: No tests for IsKnown behavior or edge cases in NetworkMask.TryParse (invalid prefixes, IPv6 boundaries) or NetworkMaskMatcher.AllowAll/DenyAll semantics.
 - TEST: StellaOpsPrincipalBuilderTests uses DateTimeOffset.UtcNow and Guid.NewGuid, which makes tests time-dependent and less deterministic.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, return a stable ordered snapshot for StellaOpsScopes.All and add a guard test for KnownScopes completeness, add tests for telemetry/defaults constants and network mask edge cases, and use fixed timestamps/IDs in principal builder tests.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Project relies on Directory.Build.props for test SDK/runner references; explicit references are absent in the csproj.
@@ -654,6 +726,7 @@
 - TEST: No tests for StellaOpsScopes.IsKnown or for completeness of KnownScopes vs all defined scope constants.
 - TEST: StellaOpsProblemResultFactory has no tests for Forbidden or default detail behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK references or document reliance on Directory.Build.props, normalize test attribute indentation, use fixed time/IDs, and add tests for scope completeness, network mask edge cases, and missing problem/telemetry defaults.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: StellaOpsAuthClientOptions exposes EnableRetries/RetryDelays/NormalizedRetryDelays, but ConfigureResilience always uses fixed retry settings; option values are unused and misleading.
@@ -662,6 +735,7 @@
 - MAINT: FileTokenCache writes token files without explicit permission hardening; cached tokens may be readable by other users on shared machines.
 - TEST: Coverage does not exercise JWKS cache expiry/offline fallback, MessagingTokenCache TTL/invalidations, file cache error paths, password-mode bearer handler, or retry configuration behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, wire retry options into resilience config (and allow disabling retries), reset cached tokens on option changes or incorporate cache keys, allow DI TimeProvider in file cache registration, harden cache file permissions, and add tests for JWKS cache, messaging cache, and handler modes.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Project relies on Directory.Build.props for test SDK/runner references; explicit references are absent in the csproj.
@@ -673,6 +747,7 @@
 - TEST: No tests for StellaOpsJwksCache expiry/offline fallback, MessagingTokenCache behavior, StellaOpsApiAuthenticationOptions.Validate negative cases, or bearer handler password mode.
 - TEST: No tests verifying retry configuration behavior or file cache error handling (deserialize failure, permission errors).
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK references or document reliance on Directory.Build.props, normalize test formatting, replace UtcNow with FakeTimeProvider, avoid private-field reflection, add missing assertions, and add coverage for JWKS cache, messaging cache, auth option validation, and bearer handler password flow.
+- Disposition: skipped (test project; no apply changes)
 ### src/__Libraries/StellaOps.Auth.Security/StellaOps.Auth.Security.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: DpopProofValidator uses GetString on typ/alg/htm/htu/nonce without ValueKind checks; malformed claims can throw instead of returning a structured failure.
@@ -681,6 +756,7 @@
 - TEST: No dedicated test project for StellaOps.Auth.Security; coverage for DPoP validator, nonce stores, and replay cache behavior is missing.
 - TEST: No tests for invalid claim types/format handling, clock skew/expiry boundaries, or replay detection semantics across caches.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add strict ValueKind checks for typ/alg/htm/htu/nonce to return failures, make DpopValidationOptions immutable or clone + re-normalize algorithms on change, normalize nonce storage keys consistently across stores, and add unit tests for validator scenarios, nonce store compatibility, and replay cache behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOps.Auth.ServerIntegration.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: StellaOpsAuthorityConfigurationManager refresh has no stale-if-error fallback; after cache expiry, metadata/JWKS fetch failures will break auth even in offline/air-gapped scenarios.
@@ -689,6 +765,7 @@
 - TEST: No tests for StellaOpsAuthorityConfigurationManager caching, JWKS retrieval, or stale fallback behavior.
 - TEST: No tests for StellaOpsBypassEvaluator deny paths (Authorization header present, null remote IP) or for vuln:read to vuln:view compatibility mapping in ExtractScopes.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add stale-if-error behavior and option-change refresh for metadata/JWKS caching, normalize scope_item claims, and add unit tests for configuration manager refresh/fallback, bypass evaluator deny cases, and scope normalization/legacy mapping.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Project relies on Directory.Build.props for test SDK/runner references; explicit package references are absent in the csproj.
@@ -697,6 +774,7 @@
 - TEST: No tests for StellaOpsResourceServerOptions validation failures (invalid Authority URI, HTTPS enforcement, invalid timeout or cache lifetime ranges).
 - TEST: No tests for StellaOpsBypassEvaluator deny paths (Authorization header present, null remote IP) or ExtractScopes scope_item normalization and legacy vuln:read mapping.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK references or document reliance on Directory.Build.props, normalize test formatting, and add tests for configuration manager caching/fallback, options validation failures, bypass evaluator deny cases, and scope_item/legacy scope normalization.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Program.cs is a monolithic composition root (~130k) mixing service registration, pipeline config, and endpoint logic; hard to test and reason about changes.
@@ -706,6 +784,7 @@
 - TEST: No unit tests for Postgres store adapters (client/service account/token/revocation/login/airgap) validating mappings, defaults, and revoke flows.
 - TEST: No direct unit tests for VulnWorkflowAntiForgeryTokenIssuer or VulnAttachmentTokenIssuer validation paths (nonce/lifetime/context limits).
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, split Program.cs into feature-specific extension modules, add concurrency-safe replay tracking with TTL for token usage, move list filtering into repository queries or raise limits deterministically, inject TimeProvider/ID generator in stores/issuers, and add tests for Postgres adapters plus workflow/attachment token issuer validation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/__Libraries/StellaOps.Authority.Core/StellaOps.Authority.Core.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: VerdictManifestBuilder defaults to Guid.NewGuid and DateTimeOffset.UtcNow (evaluatedAt/clockCutoff) when callers omit explicit values, which reduces determinism.
@@ -715,6 +794,7 @@
 - TEST: No tests for VerdictReplayVerifier (signature invalid, differences, error handling, manifestId overload) or NullVerdictManifestSigner behavior.
 - TEST: InMemoryVerdictManifestStoreTests uses DateTimeOffset.UtcNow for evaluatedAt/clockCutoff, which can make ordering assertions time-dependent.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, require explicit TimeProvider/clock inputs or inject a clock into VerdictManifestBuilder, implement or throw in VerifyAsync(manifestId), clarify or adjust NullVerdictManifestSigner validity semantics, align serializer comments with behavior, and add tests for replay verification/signing plus deterministic time usage in store tests.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Project relies on Directory.Build.props for test SDK/runner references; explicit package references are absent in the csproj.
@@ -723,6 +803,7 @@
 - TEST: No tests for NullVerdictManifestSigner behavior or signature verification failure handling.
 - TEST: No tests for ListByAssetAsync pagination/ordering or invalid pageToken handling in InMemoryVerdictManifestStore.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK references or document reliance on Directory.Build.props, replace UtcNow with fixed timestamps, and add tests for replay verifier, null signer semantics, and list-by-asset pagination edge cases.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: AuthorityPersistenceExtensions and Postgres.ServiceCollectionExtensions duplicate service registrations; keeping them in sync is error-prone.
@@ -732,6 +813,7 @@
 - TEST: No tests for PostgresVerdictManifestStore CRUD/pagination/serialization or for in-memory store behaviors (bootstrap invites, token usage, revocation export sequence).
 - TEST: No tests verifying schema override behavior or DI registration via the persistence extension methods.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, consolidate service registration into a single extension, clone PostgresOptions before mutation, align PostgresVerdictManifestStore serialization with core serializer and respect configured schema, add TimeProvider/ID injection for in-memory stores, and add tests for verdict manifest persistence plus in-memory and registration behaviors.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Project relies on Directory.Build.props for test SDK/runner references; explicit package references are absent in the csproj.
@@ -741,6 +823,7 @@
 - TEST: No tests for in-memory store behaviors (bootstrap invite reservation, token usage replay detection, revocation export sequencing).
 - TEST: Many tests use DateTimeOffset.UtcNow and Guid.NewGuid, which can make assertions time-dependent.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK references or document reliance on Directory.Build.props, fix test categorization/formatting/encoding artifacts, add missing repository and in-memory store coverage, and use fixed timestamps/IDs where possible.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: LdapIdentityProviderPlugin runs LdapCapabilityProbe synchronously on construction; the probe uses sync-over-async calls with a fixed 5s timeout, which can stall startup and is not configurable.
@@ -753,6 +836,7 @@
 - TEST: No tests for LdapSecretResolver file/env handling or for FindBySubjectAsync behavior.
 - TEST: No tests for capability probe failure paths (missing container DN, connection failure, service bind failure) or for snapshot cache refresh behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, make capability probing async with configurable timeouts and refresh behavior, implement FindBySubjectAsync, consolidate filter escaping, and add tests for health checks, probe failure/caching, connection factory TLS/cert handling, and secret resolution.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Multiple tests include mojibake/non-ASCII marker strings in output (security/resilience/snapshot tests), reducing log portability.
@@ -764,6 +848,7 @@
 - TEST: No tests for LdapSecretResolver file/env resolution or for FindBySubjectAsync behavior.
 - TEST: No tests for MessagingLdapClaimsCache or distributed cache integration paths.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, replace non-ASCII log markers with ASCII, add assertions to placeholder tests, shift snapshot tests to exercise production code paths, normalize formatting, and add coverage for identity provider health, connection factory TLS/cert behavior, secret resolution, FindBySubjectAsync, and distributed cache.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: RequireAsymmetricKey option is never enforced in OidcCredentialStore, so symmetric tokens are accepted even when asymmetric-only is requested.
@@ -776,6 +861,7 @@
 - TEST: No tests for OidcIdentityProviderPlugin health check paths (success/degraded/unavailable) or for configuration refresh behavior.
 - TEST: No tests for OidcClaimsEnricher claim additions or role propagation.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, enforce RequireAsymmetricKey, include plugin name in cache keys, use IHttpClientFactory with configurable timeouts, register/dispose a shared MemoryCache, add option validation for redirect URIs and scopes, remove the backup tmp file, and add tests for token validation paths, health checks, claims enrichment, and cache isolation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/runner references; discovery depends on shared props/packages.
@@ -786,6 +872,7 @@
 - TEST: No tests for OidcCredentialStore against real validation paths (issuer/audience/clock skew/asymmetric enforcement) or metadata refresh behavior.
 - TEST: No tests for OidcClaimsEnricher behavior or for session cache key isolation across plugin instances.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/runner references or document reliance on shared props, replace non-ASCII markers with ASCII, add assertions to placeholder tests, use fixed timestamps/IDs, and add tests that exercise production token validation, metadata refresh, claims enrichment, and cache keying.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: IdpMetadataUrl is accepted in validation but not used to fetch or refresh signing keys; with metadata-only config, signature validation will fail at runtime.
@@ -798,6 +885,7 @@
 - TEST: No tests for SamlCredentialStore validation behavior (signature/audience/lifetime), certificate loading, or metadata-based refresh.
 - TEST: No tests for SamlIdentityProviderPlugin health check paths or SamlClaimsEnricher behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, implement metadata-based signing key retrieval or require explicit certs, refresh certs on option changes, include plugin name in cache keys, use IHttpClientFactory with configurable timeouts, harden XML parsing, implement or remove unused options, remove the backup tmp file, and add tests for validation paths, health checks, claims enrichment, and cache isolation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/runner references; discovery depends on shared props/packages.
@@ -808,6 +896,7 @@
 - TEST: No tests for SamlCredentialStore against real validation paths (signature verification, audience, lifetime, encrypted assertions).
 - TEST: No tests for SamlClaimsEnricher behavior or for session cache key isolation across plugin instances.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/runner references or document reliance on shared props, replace non-ASCII markers with ASCII, add assertions to placeholder tests, use fixed timestamps/IDs, and add tests that exercise production SAML validation, XML hardening, claims enrichment, and cache keying.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: StandardPluginOptions.Normalize only normalizes TokenSigning paths; TenantId and bootstrap values are not trimmed or normalized, so whitespace can become a tenant identifier.
@@ -819,6 +908,7 @@
 - TEST: No tests for StandardClaimsEnricher, StandardIdentityProviderPlugin health checks, or StandardPluginBootstrapper error handling.
 - TEST: No tests for StandardClientProvisioningStore.DeleteAsync or for password policy rejection paths.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, normalize TenantId/bootstrap values, remove or implement TokenSigning options, fix metadata mapping for List/Dictionary values, add a subjectId query path, inject TimeProvider/ID generator, and add tests for subject lookups, update flows, claims enrichment, bootstrapper behavior, and delete/password-policy paths.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/runner references; discovery depends on shared props/packages.
@@ -828,6 +918,7 @@
 - TEST: No tests for StandardClaimsEnricher or StandardIdentityProviderPlugin health paths.
 - TEST: No tests for FindBySubjectAsync/update-role/attribute flows or StandardClientProvisioningStore.DeleteAsync.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/runner references or document reliance on shared props, normalize formatting, use fixed timestamps/IDs, remove unused dependencies if safe, and add tests for claims enrichment, identity provider health, subject lookup/update flows, and client delete behavior.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: AuthorityPluginHealthResult uses a shared static dictionary for empty details; if mutated via cast, results can bleed across instances.
@@ -837,6 +928,7 @@
 - TEST: No tests for AuthoritySecretHasher algorithm selection, configure behavior, or error path when not configured.
 - TEST: No tests for AuthorityClientDescriptor/AuthorityClientCertificateBindingRegistration normalization or AuthorityIdentityProviderHandle disposal behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, remove the backup tmp file, protect the empty-details dictionary (defensive copy or read-only wrapper), clarify/encapsulate AuthoritySecretHasher configuration scope, and add tests for HasCapability, secret hashing, client descriptor normalization, and handle disposal.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/runner references; discovery depends on shared props/packages.
@@ -844,6 +936,7 @@
 - TEST: No tests for AuthorityPluginManifest.HasCapability, AuthoritySecretHasher, or AuthorityClientDescriptor normalization (including certificate binding registration).
 - TEST: No tests for AuthorityIdentityProviderHandle disposal semantics or AuthorityClaimsEnrichmentContext Items behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/runner references or document reliance on shared props, normalize formatting, and add coverage for manifest capabilities, secret hashing, client descriptor normalization, and handle/context behavior.
+- Disposition: skipped (test project; no apply changes)
 ### src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/runner references (Microsoft.NET.Test.Sdk/xUnit); discovery depends on shared props/packages.
@@ -855,12 +948,14 @@
 - TEST: Selector/registry tests do not cover credential store or claims enricher usage (stubs throw), leaving those interactions unvalidated.
 - TEST: Time-bound behavior is only exercised with the system clock; no deterministic boundary tests for expiration/nbf, replay windows, or rate limiting.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document central package usage, replace non-ASCII markers with ASCII, use fixed timestamps/IDs or a fake time provider, replace throwing test doubles with safe stubs, add assertions in OTel trace tests, add coverage for credential store/claims enricher selection and time-bound edges, and scope environment variable/OpenSSL overrides with cleanup (EnvironmentVariableScope or fixture).
+- Disposition: skipped (test project; no apply changes)
 ### src/__Tests/__Benchmarks/binary-lookup/StellaOps.Bench.BinaryLookup.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the benchmark suite.
 - MAINT: Benchmark helpers implement Hamming similarity and cache logic locally; if production logic diverges, results can drift from real workloads.
 - MAINT: Benchmarks use synthetic in-memory data only; no optional fixture path to validate performance against real datasets.
 - TEST: No tests cover benchmark helper logic (fingerprint generation, similarity, cache key construction); correctness relies on visual inspection.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, reuse or mirror production helpers where possible, add optional fixture-driven inputs, and add minimal smoke tests for helper logic if it remains in this project.
+- Disposition: skipped (test project; no apply changes)
 ### src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge/StellaOps.Bench.LinkNotMerge.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ProgramOptions.Parse uses int.Parse/double.Parse without TryParse or structured error reporting; invalid input yields generic exceptions.
@@ -869,6 +964,7 @@
 - MAINT: JSON metadata uses DateTimeOffset.UtcNow when --captured-at is absent; outputs are nondeterministic unless callers pin the timestamp.
 - TEST: No tests cover CLI parsing, CSV/JSON/Prometheus writers, or failure reporting paths; coverage only exists for helper classes in the tests project.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add TryParse with contextual errors or move to a CLI parser, allow env var or explicit defaults for config/baseline, thread cancellation tokens, require captured-at for deterministic output, and add tests for CLI parsing and writers.
+- Disposition: skipped (benchmark/sample project; no apply changes)
 ### src/Bench/StellaOps.Bench/LinkNotMerge/StellaOps.Bench.LinkNotMerge.Tests/StellaOps.Bench.LinkNotMerge.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK and xUnit package references; discovery depends on shared props/packages.
@@ -877,6 +973,7 @@
 - TEST: No tests for BenchmarkConfig validation (invalid counts, batch size > observations) or ObservationGenerator content hashing.
 - TEST: No tests for TablePrinter, CsvWriter, BenchmarkJsonWriter, or PrometheusWriter output formatting.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, normalize formatting, and add coverage for CLI parsing, config validation, writer outputs, and generator/linkset aggregation behavior.
+- Disposition: skipped (test project; no apply changes)
 ### src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ProgramOptions.Parse uses int.Parse/double.Parse without TryParse or structured error reporting; invalid input yields generic exceptions.
@@ -885,6 +982,7 @@
 - MAINT: JSON metadata uses DateTimeOffset.UtcNow when --captured-at is absent; outputs are nondeterministic unless callers pin the timestamp.
 - TEST: No tests cover CLI parsing, CSV/JSON/Prometheus writers, or failure reporting paths; coverage only exists for helper classes in the tests project.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add TryParse with contextual errors or move to a CLI parser, allow env var or explicit defaults for config/baseline, thread cancellation tokens, require captured-at for deterministic output, and add tests for CLI parsing and writers.
+- Disposition: skipped (benchmark/sample project; no apply changes)
 ### src/Bench/StellaOps.Bench/LinkNotMerge.Vex/StellaOps.Bench.LinkNotMerge.Vex.Tests/StellaOps.Bench.LinkNotMerge.Vex.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK and xUnit package references; discovery depends on shared props/packages.
@@ -894,6 +992,7 @@
 - TEST: No tests for TablePrinter, CsvWriter, BenchmarkJsonWriter, or PrometheusWriter output formatting.
 - TEST: No tests for VexLinksetAggregator event emission logic with mixed statuses/justifications.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, normalize formatting, and add coverage for CLI parsing, config validation, writer outputs, generator hashing, and aggregator event emission.
+- Disposition: skipped (test project; no apply changes)
 ### src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify/StellaOps.Bench.Notify.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ProgramOptions.Parse uses int.Parse/double.Parse without TryParse or structured error reporting; invalid input yields generic exceptions.
@@ -903,6 +1002,7 @@
 - MAINT: CsvWriter does not guard against null/empty path and allows caller to pass invalid path values.
 - TEST: No tests cover CLI parsing, CSV/JSON writers, or failure reporting paths; coverage is partial via helper tests only.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add TryParse with contextual errors or move to a CLI parser, allow env var or explicit defaults for config/baseline, thread cancellation tokens, require captured-at for deterministic output, validate CSV/JSON path inputs, and add tests for CLI parsing and writers.
+- Disposition: skipped (benchmark/sample project; no apply changes)
 ### src/Bench/StellaOps.Bench/Notify/StellaOps.Bench.Notify.Tests/StellaOps.Bench.Notify.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK and xUnit package references; discovery depends on shared props/packages.
@@ -912,6 +1012,7 @@
 - TEST: No tests for CsvWriter or BenchmarkJsonWriter output formatting.
 - TEST: No tests for DispatchAccumulator failure path (no values) or NotifyScenarioRunner failure messages.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, normalize formatting, and add coverage for CLI parsing, config validation, writer outputs, and failure-path assertions.
+- Disposition: skipped (test project; no apply changes)
 ### src/Bench/StellaOps.Bench/PolicyEngine/StellaOps.Bench.PolicyEngine/StellaOps.Bench.PolicyEngine.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ProgramOptions.Parse uses int.Parse/double.Parse without TryParse or structured error reporting; invalid input yields generic exceptions.
@@ -921,6 +1022,7 @@
 - MAINT: SyntheticFindingGenerator uses Guid.NewGuid for layer digests, making benchmark data nondeterministic even with fixed seeds.
 - TEST: No test project for this benchmark; no coverage for config parsing, path resolution, or generator/evaluation helpers.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add TryParse with contextual errors or move to a CLI parser, allow env var or explicit defaults for config/baseline, thread cancellation tokens, require captured-at for deterministic output, replace Guid.NewGuid with seeded random bytes, and add a test project covering config validation, path utilities, generator determinism, and evaluation outputs.
+- Disposition: skipped (benchmark/sample project; no apply changes)
 ### src/__Tests/__Benchmarks/proof-chain/StellaOps.Bench.ProofChain.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the benchmark suite.
 - MAINT: Benchmarks use RandomNumberGenerator.Fill, Guid.NewGuid, and DateTimeOffset.UtcNow for payloads/IDs; inputs are nondeterministic, so runs are not reproducible.
@@ -928,6 +1030,7 @@
 - MAINT: Benchmarks simulate verification logic instead of exercising production pipeline; results can drift from real costs.
 - TEST: No tests cover benchmark helper logic, Merkle root computation, or determinism of bundle assembly.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, switch to deterministic seeded data, remove or use the unused prefix parameter, consider reusing production verification helpers, and add minimal smoke tests for helper logic.
+- Disposition: skipped (test project; no apply changes)
 ### src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers/StellaOps.Bench.ScannerAnalyzers.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ProgramOptions.Parse uses int.Parse/double.Parse without TryParse or structured error reporting; invalid input yields generic exceptions.
@@ -935,6 +1038,7 @@
 - MAINT: CsvWriter does not guard against null/empty path and allows caller to pass invalid path values.
 - TEST: No tests cover ProgramOptions.Parse, scenario root resolution, or parser/analyzer runner determinism.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add TryParse or CLI parser, allow explicit/deterministic time providers, validate CSV/JSON path inputs, and add tests for CLI parsing, root resolution, and analyzer runner determinism.
+- Disposition: skipped (benchmark/sample project; no apply changes)
 ### src/Bench/StellaOps.Bench/Scanner.Analyzers/StellaOps.Bench.ScannerAnalyzers.Tests/StellaOps.Bench.ScannerAnalyzers.Tests.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK and xUnit package references; discovery depends on shared props/packages.
@@ -942,6 +1046,7 @@
 - TEST: No tests for BenchmarkConfig validation errors or ScenarioRunnerFactory error paths.
 - TEST: No tests for GlobToRegex parsing, metadata walk parser error handling, or NodeBenchMetrics determinism.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, normalize formatting, and add coverage for config validation, scenario runner factory errors, glob matching, and NodeBenchMetrics stability.
+- Disposition: skipped (test project; no apply changes)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Builders/StellaOps.BinaryIndex.Builders.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: FingerprintClaim defaults CreatedAt to DateTimeOffset.UtcNow and ReproducibleBuildJob uses Guid.NewGuid/DateTimeOffset.UtcNow directly; determinism and testability suffer without a time/ID provider.
@@ -952,6 +1057,7 @@
 - TEST: No tests cover PatchDiffEngine similarity thresholds, rename detection, or option handling (Weights/FuzzyNameMatching).
 - TEST: No tests cover Guid.Parse failure handling or claim CreatedAt determinism.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject time/ID providers, handle non-GUID BuildId gracefully, honor DiffOptions.Weights/FuzzyNameMatching, replace non-ASCII arrows with ASCII, bind options from configuration, and add tests for diff engine options, rename handling, and claim creation paths.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Builders.Tests/StellaOps.BinaryIndex.Builders.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK reference; discovery depends on shared props/packages.
@@ -961,6 +1067,7 @@
 - TEST: No tests cover PatchDiffEngine behavior (weights, rename detection, duplicate names).
 - TEST: No tests cover ServiceCollectionExtensions option binding or BuilderServiceOptions defaults.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, remove unused Testcontainers dependency, replace non-ASCII comment markers, use deterministic IDs in helpers, and add tests for PatchDiffEngine options and DI option binding.
+- Disposition: skipped (test project; no apply changes)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Cache/StellaOps.BinaryIndex.Cache.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: InvalidateDistroAsync uses server.Keys without paging; full keyspace scans can block and delete bursts can stall on large caches.
@@ -971,6 +1078,7 @@
 - TEST: No tests project for this library; no coverage for cache key generation, TTL selection, early expiry behavior, invalidation, or serialization fallbacks.
 - TEST: No tests for configuration binding or validation of BinaryCacheOptions/ResolutionCacheOptions.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add options validation for TTLs/prefix/early expiry factors, inject a deterministic random source for early expiry, replace server.Keys invalidation with paged scans or explicit key indexes, use full fingerprint hashes (or document and test truncation), replace misses.First with a lookup map, and add a cache test project covering keys/TTL/early expiry/invalidation and binding validation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Contracts/StellaOps.BinaryIndex.Contracts.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: VulnResolutionResponse.ResolvedAt is non-nullable but not marked required; default timestamps can slip into responses if not explicitly set.
@@ -980,6 +1088,7 @@
 - TEST: No tests project for contract serialization or validation attributes.
 - TEST: No tests for JSON round-trip or DataAnnotations validation of required fields and empty batches.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, mark ResolvedAt as required (or make it nullable), define enums or constants for MatchType/FixMethod, add validation to enforce at least one identifier and non-empty batch items, and add contract tests for JSON round-trip and validation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Core/StellaOps.BinaryIndex.Core.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: BinaryIdentity defaults CreatedAt/UpdatedAt to DateTimeOffset.UtcNow; time is not injectable and yields nondeterministic identities in tests.
@@ -992,6 +1101,7 @@
 - TEST: Existing feature extractor tests cover basic metadata/identity; missing tests for malformed headers, non-seekable streams, build-id parsing, and boundary conditions.
 - TEST: No tests for ResolutionService edge cases (missing identifiers, batch truncation, confidence threshold mapping) or BinaryIdentityService batch error behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider (or time abstraction) for identities and resolution responses, validate identifier presence and return structured errors for empty identifiers, avoid placeholder hashes, add seekability checks or use buffered readers, stream build-id scanning for ELF, add telemetry or explicit errors for PE/Mach-O parsing failures, and add tests for malformed header cases, non-seekable streams, resolution mapping, and batch behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Core.Tests/StellaOps.BinaryIndex.Core.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit package references; discovery depends on shared props/packages.
@@ -1001,6 +1111,7 @@
 - TEST: No tests for ResolutionService or BinaryIdentityService behaviors (identifier validation, batch truncation, error paths).
 - TEST: No tests for non-seekable stream handling or malformed binary headers in feature extractors.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, replace Guid.NewGuid with deterministic IDs, clean non-ASCII comment markers, normalize indentation, and add tests for resolution flows, non-seekable streams, and malformed headers.
+- Disposition: skipped (test project; no apply changes)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus/StellaOps.BinaryIndex.Corpus.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: IBinaryCorpusConnector.SupportedDistros exposes a mutable array; callers can mutate it and introduce nondeterministic behavior.
@@ -1010,6 +1121,7 @@
 - TEST: No tests project for corpus contract types or connector interface behaviors.
 - TEST: No tests for contract validation, snapshot key equality, or serialization round-trip.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, replace arrays with ImmutableArray/IReadOnlyList plus normalization, define UTC requirement for CapturedAt, validate digest format or introduce a digest value type, and add tests for contract validation and serialization.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus.Alpine/StellaOps.BinaryIndex.Corpus.Alpine.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: AlpineCorpusConnector uses Guid.NewGuid and DateTimeOffset.UtcNow for snapshots; time/ID are not injectable for deterministic tests.
@@ -1023,6 +1135,7 @@
 - TEST: No tests project for Alpine corpus connector/extractor behavior.
 - TEST: No tests for APKINDEX parsing, APK extraction correctness, or secfixes extraction integration in this library.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider/ID provider for snapshot creation, document or validate mirror selection, stream APK extraction and avoid whole-file buffering, correctly parse multi-part APK structure, add size limits for entry buffering, make Dependencies/Provides immutable collections, normalize ASCII comments, and add tests for APKINDEX parsing, APK extraction, and secfixes extraction paths.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus.Debian/StellaOps.BinaryIndex.Corpus.Debian.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: DebianCorpusConnector uses Guid.NewGuid and DateTimeOffset.UtcNow for snapshots; time/ID are not injectable for deterministic tests.
@@ -1037,6 +1150,7 @@
 - TEST: No tests project for Debian corpus connector/source/extractor behavior.
 - TEST: No tests for Packages.gz parsing, continuation lines, or extraction correctness.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider/ID provider for snapshot creation, document/validate mirror selection and distro path handling, preserve package size, stream package downloads and extraction with size guards, handle continuation lines in Packages.gz parsing, normalize package ordering before digest, and add tests for index parsing and extraction paths.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Corpus.Rpm/StellaOps.BinaryIndex.Corpus.Rpm.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: RpmCorpusConnector uses Guid.NewGuid and DateTimeOffset.UtcNow for snapshots; time/ID are not injectable for deterministic tests.
@@ -1050,6 +1164,7 @@
 - TEST: No tests project for RPM corpus connector/extractor/changelog behavior.
 - TEST: No tests for primary.xml parsing, payload extraction (xz/gzip/zstd), or SRPM changelog extraction integration.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider/ID provider for snapshot creation, return immutable SupportedDistros, stream payload extraction with size guards, add decompression support for gzip/zstd (or detect and error), avoid large header buffering, add seekability checks, normalize package ordering before digest, clean ASCII comments, and add tests for index parsing and payload extraction.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Fingerprints/StellaOps.BinaryIndex.Fingerprints.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: ReferenceBuildPipeline uses Guid.NewGuid and DateTimeOffset.UtcNow for fingerprint IDs and IndexedAt; time/ID are not injectable for deterministic runs.
@@ -1066,6 +1181,7 @@
 - TEST: No tests for ReferenceBuildPipeline behaviors (empty artifacts, storage path generation, repository writes).
 - TEST: FingerprintMatcher tests do not cover MatchOptions.Algorithms, Architecture filter behavior, or details population on no match.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider/ID provider into ReferenceBuildPipeline, enforce or validate placeholder pipeline states, honor MatchOptions.Algorithms in matcher, clarify architecture semantics, make match details consistent, document or change combined fingerprint layout, normalize arrays to immutable collections, clean ASCII comments, and add tests for CFG/string/combined generators plus pipeline/matcher option handling.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Fingerprints.Tests/StellaOps.BinaryIndex.Fingerprints.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit package references; discovery depends on shared props/packages.
@@ -1076,6 +1192,7 @@
 - TEST: No tests for ReferenceBuildPipeline or FingerprintBlobStorage placeholder behaviors.
 - TEST: No tests for MatchOptions.Algorithms/Architecture handling or Details population when no candidates.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared package usage, replace nondeterministic IDs/timestamps with deterministic fixtures, clean ASCII comments, and add tests for CFG/string/combined generators, matcher options, and pipeline/storage behaviors.
+- Disposition: skipped (test project; no apply changes)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.FixIndex/StellaOps.BinaryIndex.FixIndex.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: FixEvidence.CreatedAt and SecurityFeedEvidence.PublishedAt are set with DateTimeOffset.UtcNow in parsers; time is not injectable for deterministic tests.
@@ -1090,6 +1207,7 @@
 - TEST: No dedicated FixIndex tests project; parser coverage exists only via Core tests (indirect).
 - TEST: No tests for DebianChangelogParser/RpmChangelogParser excerpt truncation, secfixes regex edge cases, or patch header parsing limits.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider for evidence timestamps, wire parsers via DI/options, normalize distro/release casing, make confidence values configurable, add safer excerpt truncation preserving line boundaries, validate patch header encoding, clean ASCII comments, and add direct FixIndex parser tests.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Persistence/StellaOps.BinaryIndex.Persistence.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: BinaryIndexDbContext uses string interpolation to set app.tenant_id; tenant IDs are not validated or parameterized, risking SQL injection or invalid UUID errors.
@@ -1104,6 +1222,7 @@
 - TEST: No tests for FixIndexRepository, FingerprintRepository, BinaryVulnAssertionRepository, BinaryVulnerabilityService, or BinaryIndexMigrationRunner.
 - TEST: No coverage for RLS tenant enforcement or invalid tenant IDs.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, parameterize tenant_id setting with UUID validation, use a stable advisory lock hash, add migration history tracking and transaction scopes, wire Dapper CommandDefinition with cancellation tokens, fix FixMethod string mapping, use GetFieldValue<DateTimeOffset> for timestamps, implement fingerprint repository read paths, add batching to services, and add persistence tests for repositories/migrations/RLS.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Tests/StellaOps.BinaryIndex.Persistence.Tests/StellaOps.BinaryIndex.Persistence.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit references; discovery depends on shared props/packages.
@@ -1113,6 +1232,7 @@
 - TEST: No tests for FixIndexRepository, FingerprintRepository, BinaryVulnAssertionRepository, or BinaryVulnerabilityService.
 - TEST: No tests for BinaryIndexMigrationRunner or migration idempotency.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared usage, reclassify integration tests with proper category, use deterministic fixtures for IDs/times, add RLS/multi-tenant tests, and add integration coverage for missing repositories and migrations.
+- Disposition: skipped (test project; no apply changes)
 ### src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.VexBridge/StellaOps.BinaryIndex.VexBridge.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: VexEvidenceGenerator uses DateTimeOffset.UtcNow in multiple places; no TimeProvider injection for deterministic output.
@@ -1129,6 +1249,7 @@
 - TEST: No tests for evidence payload schema content (schema_version, evidence_ref, resolved_at formatting).
 - TEST: No tests for external link handling or PURL parsing edge cases.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, inject TimeProvider, avoid exception flow for below-threshold items, share a single timestamp per observation, propagate actual algorithm, harden PURL parsing, make external link generation configurable, surface DSSE failure metadata, add schema validation helpers, clean ASCII comments, and add tests for DSSE paths, schema fields, and link handling.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/BinaryIndex/__Tests/StellaOps.BinaryIndex.VexBridge.Tests/StellaOps.BinaryIndex.VexBridge.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit references; discovery depends on shared props/packages.
@@ -1139,6 +1260,7 @@
 - TEST: No tests for observation timestamp consistency (createdAt/lastObserved/receivedAt).
 - TEST: No tests for PURL parsing or external link suppression behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared usage, replace nondeterministic IDs/times with deterministic fixtures, add integration category tags, and add tests for DSSE behavior and timestamp consistency.
+- Disposition: skipped (test project; no apply changes)
 ### src/BinaryIndex/StellaOps.BinaryIndex.WebService/StellaOps.BinaryIndex.WebService.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: ResolutionCacheService is registered but not wired into IResolutionService; cache options and BypassCache have no effect.
@@ -1153,6 +1275,7 @@
 - TEST: No test project for WebService controllers, middleware, or DI wiring.
 - TEST: No tests for request validation, error mapping, rate limiting behavior, cache bypass wiring, or health/telemetry endpoints.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, wire ResolutionCacheService via a decorator or service integration, register rate limiting and telemetry with configuration (respect Enabled), inject TimeProvider for rate limiting/health timestamps, align ProblemDetails status codes and add explicit 500 responses, honor EnableDsseByDefault in single requests, remove duplicate health endpoint or document intent, clean ASCII comments, and add tests for controllers/middleware/DI wiring and error paths.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/__Libraries/StellaOps.Canonical.Json/StellaOps.Canonical.Json.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: Canonicalization uses JavaScriptEncoder.UnsafeRelaxedJsonEscaping; RFC 8785 alignment and escaping expectations are not documented or configurable.
@@ -1164,6 +1287,7 @@
 - TEST: Missing tests for CanonicalizeVersioned overload with JsonSerializerOptions, duplicate _canonVersion handling, and invalid JSON inputs for CanonicalizeParsedJson.
 - TEST: Missing tests for numeric edge cases (scientific notation/precision) and escaping/normalization alignment with RFC 8785.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, document or make encoder/naming policy configurable, skip or override existing _canonVersion fields, parse ReadOnlySpan<byte> without extra allocation, cache JsonSerializerOptions, and add tests for versioned overload, duplicate version field handling, invalid JSON inputs, and numeric/escaping edge cases.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/__Libraries/StellaOps.Canonical.Json.Tests/StellaOps.Canonical.Json.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit package references; discovery depends on shared props/packages.
@@ -1173,6 +1297,7 @@
 - TEST: No tests for duplicate _canonVersion fields or invalid JSON inputs for CanonicalizeParsedJson.
 - TEST: No tests for numeric edge cases (scientific notation/precision) or RFC 8785 escaping alignment.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared usage, normalize attribute indentation, replace mojibake strings with explicit Unicode escapes, and add tests for versioned overloads, duplicate version fields, non-object roots, invalid JSON inputs, and numeric/escaping edge cases.
+- Disposition: skipped (test project; no apply changes)
 ### src/__Libraries/StellaOps.Canonicalization/StellaOps.Canonicalization.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: CanonicalJsonSerializer uses JavaScriptEncoder.UnsafeRelaxedJsonEscaping and CamelCase naming without explicit documentation of RFC 8785 alignment or rationale.
@@ -1186,6 +1311,7 @@
 - TEST: No tests for StableDictionaryConverter ordering with non-string keys, null handling, or converter round-trip.
 - TEST: No tests for Iso8601DateTimeConverter parsing offsets, or DeterminismVerifier differences output.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, document canonicalization contract and escaping/naming policies, enforce string-only dictionary keys or provide stable key serialization, avoid global culture mutation by using explicit invariant formatting, handle null keys deterministically, parse date times with explicit DateTimeStyles, add error context for DeterminismVerifier parsing, and add tests for dictionary ordering, date parsing, and determinism compare.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/__Libraries/__Tests/StellaOps.Canonicalization.Tests/StellaOps.Canonicalization.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit package references; discovery depends on shared props/packages.
@@ -1196,6 +1322,7 @@
 - TEST: Missing tests for Iso8601DateTimeConverter parse paths and offset-less inputs.
 - TEST: Missing tests for DeterminismVerifier Compare differences and error handling.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared usage, set IsTestProject, normalize attribute indentation, and add tests for converter edge cases, date parsing, and determinism verifier outputs.
+- Disposition: skipped (test project; no apply changes)
 ### src/Cartographer/StellaOps.Cartographer/StellaOps.Cartographer.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Authority options are bound/validated manually and also registered via AddOptions; the singleton snapshot can diverge from reloaded options and there is no ValidateOnStart for the options pipeline.
@@ -1204,6 +1331,7 @@
 - MAINT: Program includes TODO placeholders for core graph builders/overlay workers/Authority client; service remains a skeleton.
 - TEST: No tests in this project for Program wiring, options validation, or health/readiness endpoints (coverage expected in separate tests project).
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, consolidate options binding with ValidateOnStart and a single options source, wire authentication/authorization when Authority is enabled, add real health/readiness checks, and add tests for options validation and endpoint behavior.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Cartographer/__Tests/StellaOps.Cartographer.Tests/StellaOps.Cartographer.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit package references; discovery depends on shared props/packages.
@@ -1212,6 +1340,7 @@
 - TEST: Coverage exists for authority options defaults and validation errors.
 - TEST: Missing tests for Program configuration (options binding/validation, warnings), health and readiness endpoints, and authentication/authorization wiring.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared usage, set IsTestProject, add category traits, and add tests for Program wiring and health/readiness endpoints.
+- Disposition: skipped (test project; no apply changes)
 ### src/__Tests/chaos/StellaOps.Chaos.Router.Tests/StellaOps.Chaos.Router.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit test SDK/xUnit package references; discovery depends on shared props/packages.
@@ -1224,6 +1353,7 @@
 - TEST: Coverage exists for backpressure, recovery, and Valkey failure scenarios.
 - TEST: Missing tests for deterministic retry-after parsing edge cases, rate limit headers presence expectations, and metrics contract validation.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xUnit references or document shared usage, set IsTestProject, normalize package indentation, add offline/air-gap guidance and container image pre-pull hooks, replace nondeterministic IDs/timestamps with deterministic fixtures where possible, add connectivity guards/skip for missing ROUTER_URL, and add focused assertions for Retry-After/metrics contracts.
+- Disposition: skipped (test project; no apply changes)
 ### src/Cli/StellaOps.Cli/StellaOps.Cli.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: CLI project references `src/__Tests/__Libraries/StellaOps.Testing.Manifests` in production; test-only dependencies leak into runtime build.
@@ -1235,7 +1365,9 @@
 - MAINT: Non-ASCII glyphs and box-drawing characters are embedded in CLI output and sample configs; portability and ASCII-only logging guidance is inconsistent.
 - TEST: CLI tests exist (unit/golden/integration) for command factory/bootstrapper and several command groups.
 - TEST: Missing tests for Program entrypoint wiring (service registrations, options validation, AirGapEgressBlockedException path, cancellation exit codes).
-- Proposed changes (pending approval): enable TreatWarningsAsErrors, move test-only references out of production csproj, refactor DI wiring into modules with options validation on startup, split CommandHandlers into focused files, replace csproj compile removes with feature flags or modules, inject time/ID providers for deterministic outputs, standardize ASCII-safe output or document Unicode output, and add tests for Program wiring and cancellation/egress error paths.
+- Applied changes: added /tools command group for policy tools (policy-dsl-validate, policy-schema-export, policy-simulation-smoke) and moved implementations into shared library `src/__Libraries/StellaOps.Policy.Tools`; moved run manifest parsing into CLI to remove the test-only manifest dependency and added serializer tests.
+- Proposed changes (pending approval): enable TreatWarningsAsErrors, refactor DI wiring into modules with options validation on startup, split CommandHandlers into focused files, replace csproj compile removes with feature flags or modules, inject time/ID providers for deterministic outputs, standardize ASCII-safe output or document Unicode output, and add tests for Program wiring and cancellation/egress error paths.
+- Disposition: partial (tools command group integrated; manifest parsing moved into CLI; remaining recommendations pending)
 ### src/Cli/__Libraries/StellaOps.Cli.Plugins.Aoc/StellaOps.Cli.Plugins.Aoc.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Plugin build target copies only the plugin assembly and PDB into a fixed output folder; dependency/version isolation is not captured and stale binaries can accumulate.
@@ -1250,6 +1382,7 @@
 - TEST: No test project for this plugin.
 - TEST: Missing tests for command parsing/required options, `@since` parameter binding, dry-run behavior, error exit codes, and JSON/NDJSON output paths.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, bind and validate `@since` (parse to DateTimeOffset or explicit SHA mode), add parameter binding for tenant/since, move verification service to its own file with injected connection factory and time provider, treat database errors as exit code 1, stream NDJSON output, use shared deterministic serializer settings, replace Console usage with CLI output/logging, and add a tests project covering parsing, validation, parameter binding, dry-run, error handling, and outputs.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Cli/__Libraries/StellaOps.Cli.Plugins.NonCore/StellaOps.Cli.Plugins.NonCore.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Plugin build target copies only the plugin assembly and PDB into a fixed output folder; dependency/version isolation is not captured and stale binaries can accumulate.
@@ -1260,6 +1393,7 @@
 - TEST: No test project for this plugin.
 - TEST: Missing tests for command parsing, option validation, conflict cases (for example `--file` plus `--image`), and handler invocation/exit codes.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, split command builders per area or move to helper classes, add option validation and mutual exclusion rules, enforce invariant parsing or explicit defaults, wire defaults at option-level for help text, and add a tests project with parsing and validation coverage.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Cli/__Libraries/StellaOps.Cli.Plugins.Symbols/StellaOps.Cli.Plugins.Symbols.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Plugin build target copies only the plugin assembly and PDB into a fixed output folder; dependencies (Symbols.Core, Symbols.Client, Spectre.Console) are not copied and stale binaries can accumulate.
@@ -1273,6 +1407,7 @@
 - TEST: No test project for this plugin.
 - TEST: Missing tests for command parsing/validation, ingest format handling, upload/verify error handling, and client interaction behavior.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, copy plugin dependencies to output (or add a plugin load context), split execution into services with DI, implement or gate real symbol extraction/DSSE verification, validate inputs (paths, platform, server), add JSON error handling, use async IO with cancellation, standardize deterministic output, and add a tests project with parsing/validation/service behavior coverage.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Cli/__Libraries/StellaOps.Cli.Plugins.Verdict/StellaOps.Cli.Plugins.Verdict.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Plugin build target copies only the plugin assembly and PDB into a fixed output folder; dependencies (Verdict library, Spectre.Console) are not copied and stale binaries can accumulate.
@@ -1288,6 +1423,7 @@
 - TEST: No test project for this plugin.
 - TEST: Missing tests for command parsing, API fetch behavior, signature verification modes, inputs hash validation, replay bundle checks, expiration handling, exit codes, and output formatting.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, copy plugin dependencies or add a plugin load context, split execution into services with DI, dispose or reuse HttpClient with timeouts, surface API errors with context, implement signature verification or add explicit "not supported" exit code, canonicalize inputs before hashing, fix exit code ordering for expiration, inject time provider, sort evidence graph output, standardize JSON output options, use async file IO with cancellation, and add a tests project covering parsing, fetch paths, hash/replay verification, expiration, and outputs.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Cli/__Libraries/StellaOps.Cli.Plugins.Vex/StellaOps.Cli.Plugins.Vex.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: Plugin build target copies only the plugin assembly and PDB into a fixed output folder; dependencies (Spectre.Console and any client libs) are not copied and stale binaries can accumulate.
@@ -1304,6 +1440,7 @@
 - TEST: No test project for this plugin.
 - TEST: Missing tests for option parsing/validation, exit codes on failure, API client query formatting, placeholder command behavior, and output formatting.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, copy plugin dependencies or add load context, split commands/DTOs/HTTP client into separate files with DI, replace mojibake with ASCII, enforce option validation and mutual exclusion, return non-zero exit codes on errors, implement or explicitly fail placeholder commands, handle CSV or remove it, use invariant formatting for query params, configure HttpClient via factory with timeouts, sort outputs, standardize JSON serializer options, and add tests covering parsing, validation, client formatting, and exit codes.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit Microsoft.NET.Test.Sdk/xunit package references; discovery depends on shared props/packages.
@@ -1314,6 +1451,7 @@
 - TEST: Missing tests for CLI plugin command modules (AOC, VEX, Verdict, Symbols) and their option parsing/exit code behavior.
 - TEST: Proof command coverage is effectively missing because tests are excluded by the project file.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xunit references or document shared usage, re-enable ProofCommandTests or remove the stale file, delete or implement UnitTest1, normalize encoding artifacts to ASCII, and add plugin-module tests for parsing and exit codes.
+- Disposition: skipped (test project; no apply changes)
 ### src/Concelier/__Analyzers/StellaOps.Concelier.Analyzers/StellaOps.Concelier.Analyzers.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: Analyzer targets netstandard2.0 while the repo targets .NET 10; alignment is not documented and may limit newer analyzer APIs.
@@ -1322,6 +1460,7 @@
 - TEST: No tests project for this analyzer.
 - TEST: Missing tests for positive/negative cases (connector namespace with new HttpClient, non-connector namespace, IHttpClientFactory usage).
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, document netstandard target rationale or upgrade if feasible, use StringComparison.Ordinal in namespace checks, and add an analyzer tests project to validate diagnostics and suppression paths.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Concelier/__Libraries/StellaOps.Concelier.Cache.Valkey/StellaOps.Concelier.Cache.Valkey.csproj
 - MAINT: TreatWarningsAsErrors is false in the project file; warning discipline is relaxed.
 - MAINT: CacheTtlPolicy.GetTtl ignores HighScoreThreshold/MediumScoreThreshold configuration and uses hardcoded 0.7/0.4; configuration knobs are ineffective.
@@ -1337,6 +1476,7 @@
 - TEST: CacheTtlPolicy tests do not assert custom thresholds (current tests pass even if thresholds are ignored).
 - TEST: Missing tests for connection factory (timeouts, reconnect, disabled mode), ValkeyCanonicalAdvisoryService caching behavior, cache warmup locking, metrics wiring, error paths, and PURL collision handling.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, respect configurable TTL thresholds, consider hashing for long PURL keys, replace non-ASCII comment artifacts, wire ConcelierCacheMetrics into cache operations, avoid disposing shared ActivitySource, use ConnectAsync with cancellation/timeouts, simplify decorator registration, make warmup delay configurable, and add tests for connection handling, decorator behavior, warmup locking, metrics, and PURL collisions.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Concelier/__Tests/StellaOps.Concelier.Cache.Valkey.Tests/StellaOps.Concelier.Cache.Valkey.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: Test project lacks explicit Microsoft.NET.Test.Sdk/xunit runner references; discovery depends on shared props/packages.
@@ -1347,6 +1487,7 @@
 - TEST: Coverage exists for AdvisoryCacheKeys and CacheTtlPolicy basics plus performance-style cache benchmarks.
 - TEST: Missing tests for ConcelierCacheConnectionFactory (connect/reconnect/cancellation), ValkeyAdvisoryCacheService read/write/error paths, ValkeyCanonicalAdvisoryService decorator behavior, cache warmup locking, and ConcelierCacheMetrics integration.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, add explicit test SDK/xunit references or document shared usage, normalize attribute indentation, gate performance benchmarks behind a performance trait or explicit flag, replace nondeterministic GUID/time data with deterministic fixtures, and add tests for connection handling, cache operations, decorator behavior, warmup locking, and metrics wiring.
+- Disposition: skipped (test project; no apply changes)
 ### src/Concelier/__Libraries/StellaOps.Concelier.Connector.Acsc/StellaOps.Concelier.Connector.Acsc.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: `AcscConnector` has duplicate `using` statements and duplicated Accept header lists across `AcscConnector` and DI registration; configuration is easy to drift.
@@ -1359,6 +1500,7 @@
 - TEST: Coverage exists for fetch fallback behavior, parse/map integration snapshots, and HTTP client configuration.
 - TEST: Missing tests for `ProbeAsync` behaviors (HEAD/GET fallback and preference updates), `ForceRelay` misconfiguration paths, relay-disabled behavior, parser edge cases (Atom feeds, missing IDs), and deterministic key generation.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, consolidate Accept header configuration, surface ForceRelay misconfiguration as a failure, use invariant-only date parsing, replace GUID fallback IDs with stable hashes, clean non-ASCII trim characters, normalize field mask casing, and add tests for probe, relay misconfig, parser edge cases, and deterministic ID generation.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Concelier/__Tests/StellaOps.Concelier.Connector.Acsc.Tests/StellaOps.Concelier.Connector.Acsc.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: IsTestProject is not set; relies on SDK defaults rather than explicit test metadata.
@@ -1367,6 +1509,7 @@
 - TEST: Coverage exists for fetch fallback behavior, parse/map snapshots, and HTTP client configuration.
 - TEST: Missing tests for `ProbeAsync`, `ForceRelay` misconfiguration, relay-disabled behavior, Atom feed parsing, missing ID fallback determinism, and severity/field normalization.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, set IsTestProject, add explicit test SDK/xunit references or document shared usage, switch fixture copy to PreserveNewest, and add tests for probe/relay modes, Atom parsing, deterministic IDs, and field normalization.
+- Disposition: skipped (test project; no apply changes)
 ### src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/StellaOps.Concelier.Connector.Cccs.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: CccsConnector.cs includes duplicate `using StellaOps.Concelier.Storage` directives, adding noise.
@@ -1380,6 +1523,7 @@
 - TEST: Coverage exists for fetch/parse/map integration, HTML parsing, and mapper outputs.
 - TEST: Missing tests for cursor serialization ordering, invariant date parsing, TrimKnownHashes deterministic eviction, BuildDocumentUri normalization, taxonomy failure handling, and reference URL normalization for lang parameters.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, remove duplicate usings and consolidate serializer options, replace Guid.NewGuid IDs with stable hashes/keys, sort pending/known hash collections before persisting and evict deterministically, enforce invariant date parsing, fix regex encoding artifacts, add taxonomy failure diagnostics, and add tests for cursor determinism, hash trimming, URI normalization, taxonomy failure, and lang parameter handling.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Concelier/__Tests/StellaOps.Concelier.Connector.Cccs.Tests/StellaOps.Concelier.Connector.Cccs.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: IsTestProject is not set; discovery relies on defaults rather than explicit test metadata.
@@ -1389,6 +1533,7 @@
 - TEST: Coverage exists for fetch/parse/map integration, HTML parser extraction, and mapper output.
 - TEST: Missing tests for TrimKnownHashes eviction determinism, cursor date parsing under non-invariant cultures, BuildDocumentUri normalization for relative URLs, taxonomy fetch failure behavior, and reference URL normalization for lang parameters.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, set IsTestProject, add explicit test SDK/xunit references or document central management, normalize attribute indentation, use fixed GUID/time in tests, and add tests for cursor determinism, hash trimming, URI normalization, taxonomy failures, and lang parameter handling.
+- Disposition: skipped (test project; no apply changes)
 ### src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/StellaOps.Concelier.Connector.CertBund.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed.
 - MAINT: CertBundConnector.cs includes duplicate `using StellaOps.Concelier.Storage` directives, adding noise.
@@ -1400,6 +1545,7 @@
 - TEST: Coverage exists for fetch/parse/map integration via connector tests.
 - TEST: Missing tests for feed parsing (advisoryId extraction, pubDate failures), detail parser error handling, cursor serialization determinism, known advisory trimming behavior, and severity mapping for German labels.
 - Proposed changes (pending approval): enable TreatWarningsAsErrors, remove duplicate usings, return null/MinValue on invalid pubDate with explicit logging, sort cursor collections before persisting, enforce invariant date parsing in cursor, use deterministic DTO IDs, track recency for known advisories, and add tests for feed parsing, parser failures, cursor ordering, trimming, and severity mapping.
+- Disposition: pending implementation (non-test project; apply recommendations remain open)
 ### src/Concelier/__Tests/StellaOps.Concelier.Connector.CertBund.Tests/StellaOps.Concelier.Connector.CertBund.Tests.csproj
 - MAINT: TreatWarningsAsErrors is not set in the project file; warning discipline is relaxed for the test suite.
 - MAINT: IsTestProject is not set; discovery relies on defaults rather than explicit test metadata.
@@ -1411,3 +1557,4 @@
 ## Notes
 - Example projects waived at requester direction; APPLY tasks closed with no changes.
 - APPLY tasks remain pending approval of proposed changes for non-example projects.
+- Disposition: skipped (test project; no apply changes)
diff --git a/docs/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md b/docs/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md
new file mode 100644
index 000000000..1400f4407
--- /dev/null
+++ b/docs/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md	
@@ -0,0 +1,1146 @@
+Here’s a compact, practical blueprint for detecting patched vulnerabilities in Linux binaries—even when distros backport fixes and version strings lie—by using **low‑entropy delta signatures** over ELF segments.
+
+---
+
+# Why this helps
+
+Version numbers and CVE notes are noisy. Distros often **backport** a fix without bumping upstream versions. A fast, reproducible **code‑delta fingerprint** lets Stella Ops verify “is the fix present in *this* binary?” without trusting package metadata.
+
+# Core idea (plain English)
+
+1. Extract the binary’s executable/read‑only segments (`.text`, `.rodata`, and optionally `.got/.plt`).
+2. **Normalize** away relocation noise (addresses, section offsets, build‑IDs).
+3. Hash the normalized bytes with **SHA‑256**.
+4. Compare that hash (or a tiny set of chunk hashes) against a **reference signature** for the *patched* and *vulnerable* states of the function(s) touched by the CVE.
+5. Verdict: “Patched”, “Still vulnerable”, or “Indeterminate (needs deeper diff)”.
+
+# What we store (the “delta signature”)
+
+For each CVE fix (per arch, per compiler family if needed):
+
+* Target ELF: `soname`, `symbol(s)` affected (e.g., `ssl3_accept`, `png_handle_iCCP`)
+* Segment scope: `.text` (always), `.rodata` (optional)
+* **Normalization recipe**: strip relocations, zero relocation slots, canonicalize NOP runs, normalize jump tables
+* **Hash schema**:
+
+  * Whole‑region SHA‑256, **and**/or
+  * Rolling chunk hashes (e.g., 1–4 KiB windows) for resilience
+* Build meta: arch (`x86_64`, `aarch64`), endianness, ABI hints, compiler hardening flags that *don’t* affect normalized output
+* Confidence notes (e.g., “ROP‑safe change only in function X”)
+
+# Normalization rules (pragmatic)
+
+* Apply relocations to get final bytes, then **zero out** relocation targets and absolute addresses.
+* Canonicalize:
+
+  * NOP sleds → single `NOP`
+  * PLT/GOT stub patterns → canonical tokens
+  * Jump tables: rewrite 32/64‑bit absolute entries to **relative deltas** then zero base
+  * Padding → zero
+* Strip `.comment`, `.note.*`, `.symtab` (keep `.dynsym` for symbol mapping only).
+
+# Minimal C# sketch (Stella Ops scanner.webservice)
+
+```csharp
+public sealed class ElfDeltaHasher
+{
+    public record SignatureSpec(string SoName, string[] Symbols, string Arch, bool IncludeRodata);
+
+    public record DeltaResult(string Arch, string SoName, string Symbol,
+                              string Alg, byte[] Hash, int Size);
+
+    public static IEnumerable<DeltaResult> Compute(Stream elfStream, SignatureSpec spec)
+    {
+        var elf = ElfFile.Load(elfStream); // use an internal reader (no P/Invoke)
+        if (elf.DynamicLibraries?.Any(s => s.Contains(spec.SoName)) == false && 
+            elf.SONAME != spec.SoName) yield break;
+
+        foreach (var sym in ResolveSymbols(elf, spec.Symbols))
+        {
+            var textBytes = ExtractNormalized(elf, sym, sections: new[]{".text"});
+            yield return HashChunk("sha256:text", spec.SoName, sym.Name, textBytes);
+
+            if (spec.IncludeRodata)
+            {
+                var roBytes = ExtractNormalized(elf, sym, sections: new[]{".rodata",".rodata.rel.ro"});
+                yield return HashChunk("sha256:ro", spec.SoName, sym.Name, roBytes);
+            }
+        }
+    }
+
+    static DeltaResult HashChunk(string alg, string so, string sym, ReadOnlySpan<byte> bytes)
+    {
+        using var sha = System.Security.Cryptography.SHA256.Create();
+        var h = sha.ComputeHash(bytes.ToArray());
+        return new DeltaResult(arch: RuntimeArch(), so, sym, alg, h, bytes.Length);
+    }
+}
+```
+
+*(Your real code: implement `ElfFile`, relocation application, and the normalization passes above; add rolling 2 KiB window hashes for robustness.)*
+
+# Where it lives in Stella Ops
+
+* **StellaOps.Feedser**: ingest vendor advisories; map CVE → touched symbols/functions.
+* **StellaOps.PatchSigRepo** (new): git‑backed registry of delta signatures (AGPL data pack).
+* **StellaOps.Scanner.Webservice**: runs the normalizer/hasher against container layers and host files.
+* **StellaOps.Vexer**: emits **machine‑verifiable VEX** statements (“Status=Fixed; Evidence=DeltaSig#abcd…”).
+* **UI**: in the **Finding details** drawer → “Patched by backport (verified by code delta)”; badge links to the exact signature entry.
+
+# Pipeline (end‑to‑end)
+
+1. **Signature authoring** (one‑time per CVE):
+
+   * Pull upstream vulnerable & fixed tags.
+   * Build both with common flags per arch; disasm diff to identify changed symbols.
+   * Generate normalized hashes → create `cves/CVE-YYYY-NNNN/*.json`.
+2. **CI publish**: sign each signature file (DSSE), push to **Proof‑Market Ledger** mirror and internal registry.
+3. **Scan time**:
+
+   * Identify candidate ELF (`soname`/path heuristics).
+   * Compute normalized hashes; compare against **patched** and **vulnerable** sets.
+   * Emit VEX + attach proof artifact (hash, recipe, tool version).
+4. **Policy**:
+
+   * Gate releases on “Patched OR Not‑Affected by reachability”, otherwise block.
+
+# Handling distro drift
+
+* Keep multiple signatures per CVE:
+
+  * `gcc‑O2`, `clang‑O2`, `-fstack-protector-strong`, LTO on/off.
+* Prefer **symbol‑scoped** hashing over whole file.
+* If symbol names are stripped:
+
+  * Fallback to **function boundary recovery** (linear sweep + prologue heuristics) and **fuzzy block graph** matching; still run normalization.
+
+# Performance tips
+
+* Cache per‑layer ELF normalization by `(fileDigest, toolVersion)`.
+* Use mmap + streaming SHA256; avoid copying.
+* Parallelize per‑ELF, but cap CPU with a scheduler token.
+
+# Reducing false results
+
+* Require **dual evidence** when uncertain: `.text` hash match + small CFG checksum (basic‑block count + edge hash).
+* Mark **Indeterminate** if:
+
+  * Only `.rodata` matches,
+  * File is PIE with heavy inlining changes,
+  * LTO changed layout dramatically.
+* Always record tool + recipe versions in the evidence blob for deterministic replay.
+
+# Data format (example)
+
+```json
+{
+  "cve": "CVE-2023-12345",
+  "package": "libfoo.so.1",
+  "arch": "x86_64",
+  "symbols": [
+    {
+      "name": "foo_parse",
+      "scope": ".text",
+      "normalization": ["applyRelocs","zeroAbs","canonNops","canonJt"],
+      "hash": "sha256:4f1c...d9",
+      "size": 1184
+    }
+  ],
+  "alt_signatures": [
+    {"compiler":"clang-16","flags":"-O3 -fno-plt", "hash":"sha256:9ab...42"}
+  ],
+  "attestation": {"dsse":"..."}
+}
+```
+
+# Rollout checklist (2 sprints)
+
+* **Sprint A**
+
+  * Implement ELF loader + normalization passes (x86_64/aarch64).
+  * Build authoring tool (`stella-deltasig mk`) and signer.
+  * Wire Scanner → Vexer evidence pipe; UI badge.
+* **Sprint B**
+
+  * Add rolling chunk hashes + CFG micro‑checksum.
+  * Author top‑20 backported CVEs (OpenSSL, glibc, zlib, curl, libpng).
+  * Cache & perf; add air‑gapped bundle for signatures.
+
+# Why this is a moat
+
+* Competing scanners mostly trust **CVE string matching** and package versions. You ship **cryptographic, function‑level proof** that a fix is present—even across diverged distros—**without humans in the loop**. That’s hard to replicate quickly.
+
+If you want, I can draft the `PatchSigRepo` JSON schema, the DSSE attestation type, and a tiny CLI (`stella-deltasig`) you can drop into `scanner.webservice` today.
+Below is a complete, opinionated “DeltaSig” module design that plugs into the existing Stella Ops standard CLI (single `stella` entrypoint), plus the payload schema, DSSE envelope type, and a deterministic “sigpack” format. All examples and code are .NET 10–style and keep dependencies minimal (built-in crypto + System.Text.Json).
+
+---
+
+## 1) CLI module shape (as a first-class `stella` module)
+
+### Command tree
+
+```text
+stella deltasig
+  mk         Create an unsigned delta-signature payload JSON
+  sign       Wrap payload in DSSE + sign
+  verify     Verify DSSE envelope(s)
+  id         Print signature ID (sha256 of canonical payload)
+  pack       Build deterministic sigpack (zip) from DSSE envelopes
+  inspect    Pretty-print payload/envelope; show fields + hashes
+  match      Compute evidence for a given ELF against a sigpack (optional, uses extractor service)
+```
+
+### Output/UX rules (standard CLI conventions)
+
+* Default output is **human-readable**; add `--json` on any command to emit machine JSON.
+* Exit codes:
+
+  * `0` success / verified / match found
+  * `2` verification failed / match is “vulnerable”
+  * `3` indeterminate / partial
+  * `64` usage error (missing args)
+  * `70` internal error
+
+### Typical workflow
+
+```bash
+# 1) Create payload
+stella deltasig mk \
+  --cve CVE-2023-12345 \
+  --package libfoo \
+  --soname libfoo.so.1 \
+  --arch x86_64 \
+  --abi gnu \
+  --symbol foo_parse --symbol foo_init \
+  --scope text \
+  --hash sha256 \
+  --out cves/CVE-2023-12345/libfoo/x86_64-gnu.payload.json
+
+# 2) Sign (DSSE)
+stella deltasig sign \
+  --in  cves/CVE-2023-12345/libfoo/x86_64-gnu.payload.json \
+  --key keys/stellaops-patches.ecdsa-p256.pem \
+  --out cves/CVE-2023-12345/libfoo/x86_64-gnu.dsse.json
+
+# 3) Verify
+stella deltasig verify \
+  --in  cves/CVE-2023-12345/libfoo/x86_64-gnu.dsse.json \
+  --pub keys/stellaops-patches.ecdsa-p256.pub.pem
+
+# 4) Pack for offline distribution
+stella deltasig pack \
+  --in-dir cves/ \
+  --out stellaops-deltasigpack-2025-12.zip
+```
+
+---
+
+## 2) File formats
+
+### 2.1 Delta signature payload (canonical JSON, signed via DSSE)
+
+**PayloadType** (DSSE):
+`application/vnd.stellaops.deltasig.v1+json`
+
+**Design goals**
+
+* Payload is **deterministic**: no timestamps, no author fields.
+* Signature ID is `sha256(canonical_payload_bytes)`.
+
+#### Payload structure (`DeltaSigPayloadV1`)
+
+```json
+{
+  "schema": "stellaops.deltasig.v1",
+  "cve": "CVE-2023-12345",
+  "package": {
+    "name": "libfoo",
+    "soname": "libfoo.so.1"
+  },
+  "target": {
+    "arch": "x86_64",
+    "abi": "gnu"
+  },
+  "normalization": {
+    "recipeId": "elf.delta.norm.v1",
+    "steps": [
+      "applyRelocs",
+      "zeroRelocTargets",
+      "canonNops",
+      "canonPltGot",
+      "canonJumpTables",
+      "zeroPadding"
+    ]
+  },
+  "symbols": [
+    {
+      "name": "foo_parse",
+      "scope": ".text",
+      "hashAlg": "sha256",
+      "hashHex": "4f1c...d9",
+      "sizeBytes": 1184,
+      "chunks": [
+        { "offset": 0, "sizeBytes": 2048, "hashHex": "aa.." }
+      ],
+      "cfg": { "bbCount": 42, "edgeHashHex": "bb.." }
+    }
+  ]
+}
+```
+
+Notes:
+
+* `chunks` and `cfg` are optional but recommended for resilience.
+* `hashHex` is lowercase hex of the **normalized bytes** of the symbol region.
+
+### 2.2 DSSE envelope (signed wrapper)
+
+Minimal DSSE JSON:
+
+```json
+{
+  "payloadType": "application/vnd.stellaops.deltasig.v1+json",
+  "payload": "BASE64URL( canonical_payload_bytes )",
+  "signatures": [
+    {
+      "keyid": "sha256:ab12...ef",
+      "sig": "BASE64URL( signature_over_PAE )"
+    }
+  ]
+}
+```
+
+### 2.3 Sigpack (deterministic offline bundle)
+
+A **ZIP** with deterministic ordering and timestamps forced to a constant (e.g., 1980-01-01 for ZIP compatibility).
+
+Contents:
+
+```text
+index.json
+sigs/<sigId>.dsse.json
+(optional) keys/<keyid>.pub.pem
+(optional) meta.json
+```
+
+`index.json` (sorted by `sigId`):
+
+```json
+{
+  "schema": "stellaops.deltasigpack.v1",
+  "entries": [
+    {
+      "sigId": "sha256:...",
+      "cve": "CVE-2023-12345",
+      "package": "libfoo",
+      "soname": "libfoo.so.1",
+      "arch": "x86_64",
+      "abi": "gnu",
+      "path": "sigs/sha256-....dsse.json"
+    }
+  ]
+}
+```
+
+---
+
+## 3) How to integrate as a module in the Stella Ops standard CLI
+
+### 3.1 Minimal module contract (stable SPI)
+
+Create a tiny contract assembly used by the main CLI and all modules:
+
+`src/StellaOps.Cli.Abstractions/IStellaCliModule.cs`
+
+```csharp
+namespace StellaOps.Cli.Abstractions;
+
+public interface IStellaCliModule
+{
+    string Name { get; }          // "deltasig"
+    string Description { get; }   // one-liner
+    void Register(InvocationContext ctx, Command root);
+}
+```
+
+`InvocationContext` can carry DI/services/config:
+
+```csharp
+namespace StellaOps.Cli.Abstractions;
+
+public sealed record InvocationContext(
+    IServiceProvider Services,
+    string[] Args,
+    TextWriter Out,
+    TextWriter Err
+);
+```
+
+### 3.2 Main CLI loads modules (built-in + plugin folder)
+
+`src/StellaOps.Cli/Program.cs`
+
+```csharp
+using System.CommandLine;
+using System.CommandLine.Invocation;
+using System.Reflection;
+using System.Runtime.Loader;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+using StellaOps.Cli.Abstractions;
+
+var builder = Host.CreateApplicationBuilder(args);
+
+// Register shared services (logging, config, etc.)
+builder.Services.AddSingleton<TextWriter>(_ => Console.Out);
+builder.Services.AddSingleton<TextWriter>(_ => Console.Error);
+
+// Load built-in modules by referencing their assemblies,
+// plus optional external modules from "./modules".
+var modules = LoadModules(AppContext.BaseDirectory);
+
+var host = builder.Build();
+var services = host.Services;
+
+var root = new RootCommand("Stella Ops CLI");
+
+var ctx = new InvocationContext(services, args, Console.Out, Console.Error);
+
+foreach (var m in modules.OrderBy(m => m.Name, StringComparer.Ordinal))
+    m.Register(ctx, root);
+
+return await root.InvokeAsync(args);
+
+static IReadOnlyList<IStellaCliModule> LoadModules(string baseDir)
+{
+    var result = new List<IStellaCliModule>();
+
+    // 1) Built-in: scan already loaded assemblies
+    result.AddRange(InstantiateModules(AppDomain.CurrentDomain.GetAssemblies()));
+
+    // 2) Plugins: ./modules/*.dll
+    var modulesDir = Path.Combine(baseDir, "modules");
+    if (Directory.Exists(modulesDir))
+    {
+        foreach (var dll in Directory.EnumerateFiles(modulesDir, "*.dll", SearchOption.TopDirectoryOnly)
+                                     .OrderBy(x => x, StringComparer.Ordinal))
+        {
+            try
+            {
+                var asm = AssemblyLoadContext.Default.LoadFromAssemblyPath(dll);
+                result.AddRange(InstantiateModules(new[] { asm }));
+            }
+            catch
+            {
+                // keep CLI robust: ignore broken plugins
+            }
+        }
+    }
+
+    // Deduplicate by Name (first wins)
+    return result.GroupBy(m => m.Name, StringComparer.Ordinal).Select(g => g.First()).ToList();
+}
+
+static IEnumerable<IStellaCliModule> InstantiateModules(IEnumerable<Assembly> assemblies)
+{
+    foreach (var asm in assemblies)
+    {
+        Type[] types;
+        try { types = asm.GetTypes(); }
+        catch { continue; }
+
+        foreach (var t in types)
+        {
+            if (t.IsAbstract || t.IsInterface) continue;
+            if (!typeof(IStellaCliModule).IsAssignableFrom(t)) continue;
+            if (t.GetConstructor(Type.EmptyTypes) is null) continue;
+
+            IStellaCliModule? module = null;
+            try { module = (IStellaCliModule)Activator.CreateInstance(t)!; }
+            catch { /* ignore */ }
+
+            if (module is not null) yield return module;
+        }
+    }
+}
+```
+
+This approach keeps “module = assembly” without forcing a rigid plugin framework.
+
+---
+
+## 4) The DeltaSig module implementation (CLI wiring)
+
+### 4.1 Project layout
+
+```text
+src/
+  StellaOps.Cli/
+  StellaOps.Cli.Abstractions/
+  StellaOps.PatchSig/                 # models + canonical JSON + DSSE + pack builder
+  StellaOps.Cli.Modules.DeltaSig/      # the CLI module, depends on PatchSig
+```
+
+### 4.2 Module registration
+
+`src/StellaOps.Cli.Modules.DeltaSig/DeltaSigModule.cs`
+
+```csharp
+using System.CommandLine;
+using StellaOps.Cli.Abstractions;
+using StellaOps.PatchSig;
+
+namespace StellaOps.Cli.Modules.DeltaSig;
+
+public sealed class DeltaSigModule : IStellaCliModule
+{
+    public string Name => "deltasig";
+    public string Description => "Create, sign, verify, and pack patch-aware ELF delta signatures.";
+
+    public void Register(InvocationContext ctx, Command root)
+    {
+        var cmd = new Command("deltasig", Description);
+
+        cmd.AddCommand(DeltaSigCommands.Mk());
+        cmd.AddCommand(DeltaSigCommands.Sign());
+        cmd.AddCommand(DeltaSigCommands.Verify());
+        cmd.AddCommand(DeltaSigCommands.Id());
+        cmd.AddCommand(DeltaSigCommands.Pack());
+        cmd.AddCommand(DeltaSigCommands.Inspect());
+        // cmd.AddCommand(DeltaSigCommands.Match()); // optional (requires ELF extractor service)
+
+        root.AddCommand(cmd);
+
+        // Optional alias: "stella sig delta ..."
+        var sig = root.Subcommands.FirstOrDefault(c => c.Name == "sig");
+        if (sig is not null)
+        {
+            var deltaAlias = new Command("delta", Description);
+            foreach (var sc in cmd.Subcommands) deltaAlias.AddCommand(sc);
+            sig.AddCommand(deltaAlias);
+        }
+    }
+}
+```
+
+### 4.3 Commands (handlers call PatchSig library)
+
+`src/StellaOps.Cli.Modules.DeltaSig/DeltaSigCommands.cs`
+
+```csharp
+using System.CommandLine;
+using System.CommandLine.NamingConventionBinder;
+using StellaOps.PatchSig;
+using StellaOps.PatchSig.Dsse;
+using StellaOps.PatchSig.Packaging;
+
+namespace StellaOps.Cli.Modules.DeltaSig;
+
+internal static class DeltaSigCommands
+{
+    public static Command Mk()
+    {
+        var c = new Command("mk", "Create an unsigned delta-signature payload JSON.");
+        var cve     = new Option<string>("--cve") { IsRequired = true };
+        var pkg     = new Option<string>("--package") { IsRequired = true };
+        var soname  = new Option<string>("--soname") { IsRequired = true };
+        var arch    = new Option<string>("--arch") { IsRequired = true };
+        var abi     = new Option<string>("--abi", () => "gnu");
+        var symbols = new Option<string[]>("--symbol") { AllowMultipleArgumentsPerToken = true, IsRequired = true };
+        var scope   = new Option<string>("--scope", () => "text"); // text|rodata|both
+        var outFile = new Option<string>("--out") { IsRequired = true };
+
+        c.AddOption(cve); c.AddOption(pkg); c.AddOption(soname); c.AddOption(arch); c.AddOption(abi);
+        c.AddOption(symbols); c.AddOption(scope); c.AddOption(outFile);
+
+        c.Handler = CommandHandler.Create<string,string,string,string,string,string[],string,string>((cve, package, soname, arch, abi, symbol, scope, @out) =>
+        {
+            // IMPORTANT: mk here creates the *structure*. Filling hashes is typically done by an extractor.
+            // If you have an ELF extractor service, plug it here to compute hashHex/sizeBytes/chunks/cfg.
+            var payload = DeltaSigPayloadV1.CreateSkeleton(cve, package, soname, arch, abi, symbol, scope);
+
+            var bytes = CanonicalJson.Serialize(payload);
+            Directory.CreateDirectory(Path.GetDirectoryName(Path.GetFullPath(@out))!);
+            File.WriteAllBytes(@out, bytes);
+            return 0;
+        });
+
+        return c;
+    }
+
+    public static Command Id()
+    {
+        var c = new Command("id", "Print signature ID (sha256 of canonical payload).");
+        var input = new Option<string>("--in") { IsRequired = true };
+        c.AddOption(input);
+
+        c.Handler = CommandHandler.Create<string>((@in) =>
+        {
+            var payloadBytes = File.ReadAllBytes(@in);
+            var sigId = SigId.ComputeSha256Hex(payloadBytes);
+            Console.Out.WriteLine($"sha256:{sigId}");
+            return 0;
+        });
+
+        return c;
+    }
+
+    public static Command Sign()
+    {
+        var c = new Command("sign", "Wrap payload in DSSE and sign.");
+        var input = new Option<string>("--in") { IsRequired = true };
+        var key   = new Option<string>("--key") { IsRequired = true };
+        var outp  = new Option<string>("--out") { IsRequired = true };
+        var alg   = new Option<string>("--alg", () => "ecdsa-p256-sha256"); // ecdsa-p256-sha256|rsa-pss-sha256
+        c.AddOption(input); c.AddOption(key); c.AddOption(outp); c.AddOption(alg);
+
+        c.Handler = CommandHandler.Create<string,string,string,string>((@in, key, @out, alg) =>
+        {
+            var payloadBytes = File.ReadAllBytes(@in);
+
+            var signer = DsseSignerFactory.CreateFromPem(key, alg);
+            var env = DsseEnvelope.CreateSigned(
+                payloadType: DsseTypes.DeltaSigV1,
+                payloadBytes: payloadBytes,
+                signer: signer
+            );
+
+            var envBytes = CanonicalJson.Serialize(env);
+            Directory.CreateDirectory(Path.GetDirectoryName(Path.GetFullPath(@out))!);
+            File.WriteAllBytes(@out, envBytes);
+            return 0;
+        });
+
+        return c;
+    }
+
+    public static Command Verify()
+    {
+        var c = new Command("verify", "Verify DSSE envelope signature(s).");
+        var input = new Option<string>("--in") { IsRequired = true };
+        var pub   = new Option<string>("--pub") { IsRequired = true };
+        c.AddOption(input); c.AddOption(pub);
+
+        c.Handler = CommandHandler.Create<string,string>((@in, pub) =>
+        {
+            var envBytes = File.ReadAllBytes(@in);
+            var env = CanonicalJson.Deserialize<DsseEnvelope>(envBytes);
+
+            var verifier = DsseVerifierFactory.CreateFromPem(pub);
+
+            var ok = env.VerifyAny(verifier, out var matchedKeyId);
+            if (!ok)
+            {
+                Console.Error.WriteLine("DSSE verification FAILED.");
+                return 2;
+            }
+
+            Console.Out.WriteLine($"DSSE verification OK. keyid={matchedKeyId}");
+            return 0;
+        });
+
+        return c;
+    }
+
+    public static Command Inspect()
+    {
+        var c = new Command("inspect", "Inspect payload or DSSE envelope.");
+        var input = new Option<string>("--in") { IsRequired = true };
+        c.AddOption(input);
+
+        c.Handler = CommandHandler.Create<string>((@in) =>
+        {
+            var bytes = File.ReadAllBytes(@in);
+
+            // Heuristic: DSSE envelope contains "payloadType"
+            if (bytes.AsSpan().IndexOf(System.Text.Encoding.UTF8.GetBytes("\"payloadType\"")) >= 0)
+            {
+                var env = CanonicalJson.Deserialize<DsseEnvelope>(bytes);
+                Console.Out.WriteLine($"payloadType: {env.PayloadType}");
+                Console.Out.WriteLine($"payloadBytes: {Base64Url.Decode(env.Payload).Length}");
+                Console.Out.WriteLine($"signatures: {env.Signatures.Count}");
+            }
+            else
+            {
+                var payload = CanonicalJson.Deserialize<DeltaSigPayloadV1>(bytes);
+                Console.Out.WriteLine($"{payload.Cve} {payload.Package.Name} {payload.Target.Arch}-{payload.Target.Abi}");
+                Console.Out.WriteLine($"symbols: {payload.Symbols.Count}");
+            }
+
+            return 0;
+        });
+
+        return c;
+    }
+
+    public static Command Pack()
+    {
+        var c = new Command("pack", "Build deterministic sigpack (zip) from DSSE envelopes under a directory.");
+        var inDir = new Option<string>("--in-dir") { IsRequired = true };
+        var outp  = new Option<string>("--out") { IsRequired = true };
+        c.AddOption(inDir); c.AddOption(outp);
+
+        c.Handler = CommandHandler.Create<string,string>((inDir, @out) =>
+        {
+            SigPackBuilder.BuildFromDirectory(inDir, @out);
+            Console.Out.WriteLine(@out);
+            return 0;
+        });
+
+        return c;
+    }
+}
+```
+
+The module is “real”: `mk/sign/verify/id/pack/inspect` are fully implementable now. `match` can be added once you plug in the ELF delta extractor you already want in `scanner.webservice`.
+
+---
+
+## 5) PatchSig library: canonical JSON, signature IDs, DSSE sign/verify, deterministic pack
+
+### 5.1 Canonical JSON (field-order deterministic)
+
+You control determinism by writing properties in a fixed order (no reliance on reflection order).
+
+`src/StellaOps.PatchSig/CanonicalJson.cs`
+
+```csharp
+using System.Text;
+using System.Text.Json;
+
+namespace StellaOps.PatchSig;
+
+public static class CanonicalJson
+{
+    private static readonly JsonSerializerOptions Options = new()
+    {
+        WriteIndented = false,
+        PropertyNamingPolicy = null,
+        DictionaryKeyPolicy = null
+    };
+
+    // For payload/envelope models where property order matters, implement custom writers.
+    public static byte[] Serialize<T>(T value)
+        => JsonSerializer.SerializeToUtf8Bytes(value, Options);
+
+    public static T Deserialize<T>(byte[] utf8)
+        => JsonSerializer.Deserialize<T>(utf8, Options)
+           ?? throw new InvalidOperationException("Invalid JSON.");
+}
+
+public static class SigId
+{
+    public static string ComputeSha256Hex(ReadOnlySpan<byte> canonicalPayloadBytes)
+    {
+        var hash = System.Security.Cryptography.SHA256.HashData(canonicalPayloadBytes);
+        return Convert.ToHexString(hash).ToLowerInvariant();
+    }
+}
+```
+
+If you want strict canonicalization beyond fixed-order models (e.g., arbitrary JSON), replace `Serialize` with a JCS implementation; for DeltaSig you typically don’t need that if you own the writer.
+
+### 5.2 Payload model (deterministic; no timestamps)
+
+`src/StellaOps.PatchSig/DeltaSigPayloadV1.cs`
+
+```csharp
+namespace StellaOps.PatchSig;
+
+public sealed record DeltaSigPayloadV1(
+    string Schema,
+    string Cve,
+    PackageRef Package,
+    TargetRef Target,
+    NormalizationRef Normalization,
+    List<SymbolSig> Symbols
+)
+{
+    public static DeltaSigPayloadV1 CreateSkeleton(
+        string cve, string package, string soname, string arch, string abi,
+        IEnumerable<string> symbols, string scope)
+    {
+        var steps = new[]
+        {
+            "applyRelocs",
+            "zeroRelocTargets",
+            "canonNops",
+            "canonPltGot",
+            "canonJumpTables",
+            "zeroPadding"
+        };
+
+        var symScope = scope switch
+        {
+            "text" => ".text",
+            "rodata" => ".rodata",
+            "both" => ".text", // skeleton puts .text; extractor can add rodata sigs too
+            _ => ".text"
+        };
+
+        return new DeltaSigPayloadV1(
+            Schema: "stellaops.deltasig.v1",
+            Cve: cve,
+            Package: new PackageRef(package, soname),
+            Target: new TargetRef(arch, abi),
+            Normalization: new NormalizationRef("elf.delta.norm.v1", steps.ToList()),
+            Symbols: symbols.Distinct(StringComparer.Ordinal).OrderBy(x => x, StringComparer.Ordinal)
+                           .Select(s => new SymbolSig(
+                               Name: s,
+                               Scope: symScope,
+                               HashAlg: "sha256",
+                               HashHex: "",
+                               SizeBytes: 0,
+                               Chunks: null,
+                               Cfg: null))
+                           .ToList()
+        );
+    }
+}
+
+public sealed record PackageRef(string Name, string Soname);
+public sealed record TargetRef(string Arch, string Abi);
+public sealed record NormalizationRef(string RecipeId, List<string> Steps);
+
+public sealed record SymbolSig(
+    string Name,
+    string Scope,
+    string HashAlg,
+    string HashHex,
+    int SizeBytes,
+    List<ChunkSig>? Chunks,
+    CfgSig? Cfg
+);
+
+public sealed record ChunkSig(int Offset, int SizeBytes, string HashHex);
+public sealed record CfgSig(int BbCount, string EdgeHashHex);
+```
+
+### 5.3 DSSE sign/verify (PAE included)
+
+`src/StellaOps.PatchSig/Dsse/DsseEnvelope.cs`
+
+```csharp
+using System.Text;
+
+namespace StellaOps.PatchSig.Dsse;
+
+public static class DsseTypes
+{
+    public const string DeltaSigV1 = "application/vnd.stellaops.deltasig.v1+json";
+}
+
+public sealed record DsseEnvelope(
+    string PayloadType,
+    string Payload,
+    List<DsseSignature> Signatures
+)
+{
+    public static DsseEnvelope CreateSigned(string payloadType, byte[] payloadBytes, IDsseSigner signer)
+    {
+        var pae = DssePae.Encode(payloadType, payloadBytes);
+        var sig = signer.Sign(pae);
+
+        return new DsseEnvelope(
+            PayloadType: payloadType,
+            Payload: Base64Url.Encode(payloadBytes),
+            Signatures: new List<DsseSignature>
+            {
+                new DsseSignature(signer.KeyId, Base64Url.Encode(sig))
+            }
+        );
+    }
+
+    public bool VerifyAny(IDsseVerifier verifier, out string? matchedKeyId)
+    {
+        matchedKeyId = null;
+        var payloadBytes = Base64Url.Decode(Payload);
+        var pae = DssePae.Encode(PayloadType, payloadBytes);
+
+        foreach (var s in Signatures)
+        {
+            var sigBytes = Base64Url.Decode(s.Sig);
+            if (verifier.Verify(pae, sigBytes))
+            {
+                matchedKeyId = s.KeyId;
+                return true;
+            }
+        }
+        return false;
+    }
+}
+
+public sealed record DsseSignature(string KeyId, string Sig);
+
+public static class DssePae
+{
+    // DSSEv1 PAE: "DSSEv1" SP len(pt) SP pt SP len(payload) SP payload
+    public static byte[] Encode(string payloadType, ReadOnlySpan<byte> payload)
+    {
+        var ptBytes = Encoding.UTF8.GetBytes(payloadType);
+        var header = $"DSSEv1 {ptBytes.Length} {payloadType} {payload.Length} ";
+        var headerBytes = Encoding.UTF8.GetBytes(header);
+
+        var outBytes = new byte[headerBytes.Length + payload.Length];
+        Buffer.BlockCopy(headerBytes, 0, outBytes, 0, headerBytes.Length);
+        payload.CopyTo(outBytes.AsSpan(headerBytes.Length));
+        return outBytes;
+    }
+}
+
+public static class Base64Url
+{
+    public static string Encode(ReadOnlySpan<byte> bytes)
+        => Convert.ToBase64String(bytes.ToArray())
+                  .TrimEnd('=').Replace('+', '-').Replace('/', '_');
+
+    public static byte[] Decode(string s)
+    {
+        s = s.Replace('-', '+').Replace('_', '/');
+        switch (s.Length % 4)
+        {
+            case 2: s += "=="; break;
+            case 3: s += "="; break;
+        }
+        return Convert.FromBase64String(s);
+    }
+}
+
+public interface IDsseSigner
+{
+    string KeyId { get; }
+    byte[] Sign(ReadOnlySpan<byte> pae);
+}
+
+public interface IDsseVerifier
+{
+    bool Verify(ReadOnlySpan<byte> pae, ReadOnlySpan<byte> signature);
+}
+```
+
+`src/StellaOps.PatchSig/Dsse/DsseSignerFactory.cs`
+
+```csharp
+using System.Security.Cryptography;
+using System.Text;
+
+namespace StellaOps.PatchSig.Dsse;
+
+public static class DsseSignerFactory
+{
+    public static IDsseSigner CreateFromPem(string pemPath, string alg)
+    {
+        var pem = File.ReadAllText(pemPath, Encoding.UTF8);
+
+        return alg switch
+        {
+            "ecdsa-p256-sha256" => new EcdsaP256Signer(pem),
+            "rsa-pss-sha256"    => new RsaPssSigner(pem),
+            _ => throw new ArgumentOutOfRangeException(nameof(alg), $"Unsupported alg: {alg}")
+        };
+    }
+
+    private sealed class EcdsaP256Signer : IDsseSigner
+    {
+        private readonly ECDsa _key;
+        public string KeyId { get; }
+
+        public EcdsaP256Signer(string pem)
+        {
+            _key = ECDsa.Create();
+            _key.ImportFromPem(pem);
+
+            // keyid = sha256(spki-der)
+            var spki = _key.ExportSubjectPublicKeyInfo();
+            KeyId = "sha256:" + Convert.ToHexString(SHA256.HashData(spki)).ToLowerInvariant();
+        }
+
+        public byte[] Sign(ReadOnlySpan<byte> pae)
+            => _key.SignData(pae.ToArray(), HashAlgorithmName.SHA256);
+    }
+
+    private sealed class RsaPssSigner : IDsseSigner
+    {
+        private readonly RSA _key;
+        public string KeyId { get; }
+
+        public RsaPssSigner(string pem)
+        {
+            _key = RSA.Create();
+            _key.ImportFromPem(pem);
+
+            var spki = _key.ExportSubjectPublicKeyInfo();
+            KeyId = "sha256:" + Convert.ToHexString(SHA256.HashData(spki)).ToLowerInvariant();
+        }
+
+        public byte[] Sign(ReadOnlySpan<byte> pae)
+            => _key.SignData(pae.ToArray(), HashAlgorithmName.SHA256, RSASignaturePadding.Pss);
+    }
+}
+
+public static class DsseVerifierFactory
+{
+    public static IDsseVerifier CreateFromPem(string pemPath)
+    {
+        var pem = File.ReadAllText(pemPath, Encoding.UTF8);
+
+        // Heuristic: if PEM contains "RSA" use RSA, else ECDSA.
+        if (pem.Contains("BEGIN RSA", StringComparison.OrdinalIgnoreCase))
+            return new RsaPssVerifier(pem);
+
+        return new EcdsaVerifier(pem);
+    }
+
+    private sealed class EcdsaVerifier : IDsseVerifier
+    {
+        private readonly ECDsa _pub;
+        public EcdsaVerifier(string pem)
+        {
+            _pub = ECDsa.Create();
+            _pub.ImportFromPem(pem);
+        }
+
+        public bool Verify(ReadOnlySpan<byte> pae, ReadOnlySpan<byte> signature)
+            => _pub.VerifyData(pae.ToArray(), signature.ToArray(), HashAlgorithmName.SHA256);
+    }
+
+    private sealed class RsaPssVerifier : IDsseVerifier
+    {
+        private readonly RSA _pub;
+        public RsaPssVerifier(string pem)
+        {
+            _pub = RSA.Create();
+            _pub.ImportFromPem(pem);
+        }
+
+        public bool Verify(ReadOnlySpan<byte> pae, ReadOnlySpan<byte> signature)
+            => _pub.VerifyData(pae.ToArray(), signature.ToArray(), HashAlgorithmName.SHA256, RSASignaturePadding.Pss);
+    }
+}
+```
+
+### 5.4 Deterministic pack builder
+
+`src/StellaOps.PatchSig/Packaging/SigPackBuilder.cs`
+
+```csharp
+using System.IO.Compression;
+using StellaOps.PatchSig.Dsse;
+
+namespace StellaOps.PatchSig.Packaging;
+
+public static class SigPackBuilder
+{
+    private static readonly DateTimeOffset ZipTime = new(1980, 1, 1, 0, 0, 0, TimeSpan.Zero);
+
+    public static void BuildFromDirectory(string inDir, string outZip)
+    {
+        var dsseFiles = Directory.EnumerateFiles(inDir, "*.dsse.json", SearchOption.AllDirectories)
+                                 .OrderBy(p => p, StringComparer.Ordinal)
+                                 .ToList();
+
+        var entries = new List<SigPackIndexEntry>();
+        var sigBlobs = new List<(string SigId, byte[] EnvBytes)>();
+
+        foreach (var f in dsseFiles)
+        {
+            var envBytes = File.ReadAllBytes(f);
+            var env = CanonicalJson.Deserialize<DsseEnvelope>(envBytes);
+
+            var payloadBytes = Base64Url.Decode(env.Payload);
+            var sigIdHex = SigId.ComputeSha256Hex(payloadBytes);
+            var sigId = $"sha256:{sigIdHex}";
+
+            // best-effort parse payload for index fields
+            var payload = CanonicalJson.Deserialize<DeltaSigPayloadV1>(payloadBytes);
+
+            var relPath = $"sigs/{sigId.Replace(':','-')}.dsse.json";
+            entries.Add(new SigPackIndexEntry(
+                SigId: sigId,
+                Cve: payload.Cve,
+                Package: payload.Package.Name,
+                Soname: payload.Package.Soname,
+                Arch: payload.Target.Arch,
+                Abi: payload.Target.Abi,
+                Path: relPath
+            ));
+
+            sigBlobs.Add((sigId, envBytes));
+        }
+
+        var index = new SigPackIndexV1(
+            Schema: "stellaops.deltasigpack.v1",
+            Entries: entries.OrderBy(e => e.SigId, StringComparer.Ordinal).ToList()
+        );
+        var indexBytes = CanonicalJson.Serialize(index);
+
+        Directory.CreateDirectory(Path.GetDirectoryName(Path.GetFullPath(outZip))!);
+        if (File.Exists(outZip)) File.Delete(outZip);
+
+        using var fs = File.Create(outZip);
+        using var zip = new ZipArchive(fs, ZipArchiveMode.Create);
+
+        AddEntry(zip, "index.json", indexBytes);
+
+        foreach (var (sigId, bytes) in sigBlobs.OrderBy(x => x.SigId, StringComparer.Ordinal))
+        {
+            var rel = $"sigs/{sigId.Replace(':','-')}.dsse.json";
+            AddEntry(zip, rel, bytes);
+        }
+    }
+
+    private static void AddEntry(ZipArchive zip, string path, byte[] bytes)
+    {
+        var entry = zip.CreateEntry(path, CompressionLevel.Optimal);
+        entry.LastWriteTime = ZipTime;
+        using var s = entry.Open();
+        s.Write(bytes, 0, bytes.Length);
+    }
+}
+
+public sealed record SigPackIndexV1(string Schema, List<SigPackIndexEntry> Entries);
+
+public sealed record SigPackIndexEntry(
+    string SigId,
+    string Cve,
+    string Package,
+    string Soname,
+    string Arch,
+    string Abi,
+    string Path
+);
+```
+
+---
+
+## 6) Where ELF extraction plugs in (without contaminating the CLI contract)
+
+You keep the CLI module clean by depending on an **extractor interface** that lives in scanner/webservice libraries, not in the CLI itself.
+
+Example SPI (lives in `StellaOps.PatchSig` or `StellaOps.Scanner.ElfDelta.Abstractions`):
+
+```csharp
+public interface IElfDeltaExtractor
+{
+    // Takes a skeleton payload and fills hashHex/sizeBytes/chunks/cfg for each symbol entry.
+    DeltaSigPayloadV1 PopulateFromElf(DeltaSigPayloadV1 skeleton, string elfPath);
+}
+```
+
+Then `stella deltasig mk --elf /path/to/libfoo.so.1 ...` can become a “fully automatic” authoring tool by resolving `IElfDeltaExtractor` from DI when present. If it isn’t present, `mk` still creates a valid skeleton that can be filled by CI tooling.
+
+This respects your architectural split: heavy analysis logic stays in scanner/webservice libraries; the CLI module remains a thin orchestration surface.
+
+---
+
+## 7) What you get immediately
+
+* A first-class `stella deltasig` module with working:
+
+  * deterministic payload emission
+  * DSSE signing and verification (ECDSA P-256 or RSA-PSS)
+  * deterministic offline pack bundling
+  * stable signature IDs
+* A clean seam to plug your ELF normalization/hasher implementation (the complex part) without redesigning CLI later.
+
+If you want next, I can add the `match` command and define the exact evidence JSON object that `scanner.webservice` should emit into VEX (“Fixed by backport (verified)”) so the CLI and scanner share the same evidence type byte-for-byte.
diff --git a/docs/product-advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md b/docs/product-advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md
new file mode 100644
index 000000000..867b7848d
--- /dev/null
+++ b/docs/product-advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md	
@@ -0,0 +1,617 @@
+Here’s a compact, plug‑and‑play plan to build a **cross‑distro “golden set”** so your retrieval can correctly handle **backported fixes** and avoid false “still vulnerable” flags.
+
+---
+
+# What this golden set is
+
+A small, curated corpus of tuples **(distro, release, package, CVE)** with:
+
+* the **vendor‑declared fixed version** (what the distro claims)
+* a **counterexample** where **upstream is still affected** but the distro **backported** the patch (so version comparison alone would be misleading)
+
+Use it as regression tests + seed facts for your policy engine and matchers.
+
+---
+
+# Minimum schema (normalize for reuse)
+
+**Tables**
+
+* `vendor_package`
+  `(vendor_id, distro, release, src_name, bin_name, epoch, version, revision, arch)`
+* `cve`
+  `(cve_id, description, CWE, published, severity, cvss_vector)`
+* `fix_decl` (vendor declarations)
+  `(distro, release, src_name, cve_id, status ENUM('fixed','not_affected','affected','wont_fix'), fixed_epoch, fixed_version, fixed_revision, evidence_uri, evidence_hash, declared_at)`
+* `patch_evidence` (backport facts)
+  `(distro, release, src_name, cve_id, patch_id, upstream_commit, backport_commit, applied_in_epoch, applied_in_version, applied_in_revision, diff_hash, proving_fn ENUM('hunk','symbol','function','binary'), notes)`
+* `upstream_affects` (ground truth on upstream tags)
+  `(project, cve_id, affected_range (SemVer/commit range), last_affected_tag, first_fixed_tag, fix_commit)`
+* `golden_case` (test harness)
+  `(case_id, distro, release, src_name, bin_name, cve_id, vendor_fixed_spec, upstream_state ENUM('still_affected','fixed'), backport_present BOOL, rationale)`
+
+**Indexes**
+
+* `idx_fix_decl_key (distro, release, src_name, cve_id)`
+* `idx_patch_evidence_key (distro, release, src_name, cve_id)`
+* `idx_upstream_affects (project, cve_id)`
+
+---
+
+# Version math you must use
+
+Implement distro‑specific comparators:
+
+* **Debian/Ubuntu**: `dpkg --compare-versions` (Epoch:Version-Revision)
+* **RHEL/Fedora/CentOS/SUSE**: **RPMVERCMP** (Epoch:Version-Release)
+* **Alpine**: **apk version** rules
+  Store a normalized sortable key (e.g., `verkey`) alongside raw fields for each family.
+
+---
+
+# Golden‑set curation algorithm (daily job)
+
+1. **Select targets**
+
+* Choose top N packages (openssl, glibc, curl, zlib, libxml2, expat, xz, sudo, bash, systemd, sqlite, curl, busybox, python3 stdlib, musl, libssh2, libx11, nginx, apache, postgresql, mariadb, openssh).
+* Cross all with major CVEs known to have **backports**.
+
+2. **Ingest vendor claims**
+
+* Scrape/consume security trackers (Debian, Ubuntu USN, RHEL, SUSE, Alpine, Fedora). Normalize into `fix_decl`.
+* Compute `verkey_fixed`.
+
+3. **Verify backport reality**
+
+* For each `(distro, release, pkg, cve)` with status “fixed” where **upstream tag** still falls in `affected_range`:
+
+  * Pull **src package diff** (dsc+patches or SRPM .patch).
+  * Extract fix‑hunks (functions/symbols) from upstream `fix_commit`.
+  * Run **proving functions**:
+
+    * `hunk` match: patch hunks present
+    * `symbol/function` match: AST/name diff present
+    * `binary` match: pattern in compiled object (for golden set, keep source‑level first)
+  * If proof ≥ threshold, write to `patch_evidence` and set `backport_present=true` in `golden_case`.
+
+4. **Create counterexample**
+
+* Ensure at least one case per distro where:
+
+  * **Upstream version number looks vulnerable**, but distro has **backport evidence** → mark as **“counterexample”** in `golden_case`.
+
+5. **Attest facts**
+
+* Generate DSSE/in‑toto attestations for each row (content hash of patches/diffs + URLs). Store `evidence_hash`.
+
+---
+
+# Retrieval‑time decision function (pseudo)
+
+```
+bool is_vulnerable(pkg, ver, distro, release, cve):
+  decl = get_fix_decl(distro, release, pkg.src, cve)
+  if decl is null:
+     return heuristic_by_upstream_ranges(pkg.project, ver, cve)
+
+  if decl.status == 'not_affected': return false
+  if decl.status == 'wont_fix':     return true  // unless patch_evidence says otherwise
+
+  // status == 'fixed' -> check two paths
+  if compare(ver, decl.fixed_spec, distro_family) >= 0:
+     return false  // version >= declared fixed
+
+  // version < declared fixed: still check for backport proof pinned to our exact build
+  if has_patch_evidence(distro, release, pkg.src, cve, ver):
+     return false  // verified backport on this version/build
+
+  return true
+```
+
+**Note:** `has_patch_evidence` should accept **(epoch, version, revision)** and allow `applied_in_* <= installed_*`.
+
+---
+
+# Golden test harness (what “must pass”)
+
+For each `golden_case`:
+
+1. Resolve installed `(epoch,version,revision)`.
+2. Evaluate `is_vulnerable`.
+3. Assert expected:
+
+   * **Vendor‑fixed + backport_present → expected false** even if upstream says affected.
+   * **No backport + version < fixed_spec → expected true**.
+
+Emit a short **VEX** (CycloneDX VEX or CSAF) per case to keep your engine VEX‑first.
+
+---
+
+# Minimal data loaders (first pass)
+
+* **Debian/Ubuntu**: `security-tracker`, USN JSON, `Sources` + `.dsc` + `debian/patches/*`.
+* **RHEL/Fedora/SUSE**: OVAL/OVAL‑RPM, advisories (RHSA/SUSE‑SU), SRPM patches.
+* **Alpine**: `secdb`, `APKBUILD` diffs (`.patch` in `community/main`).
+
+---
+
+# Ship list (MVP → Week 1–2)
+
+* Parsers: dpkg/rpm/apk version compare libs in C# (+ test vectors).
+* Ingestors for **Debian, Ubuntu, RHEL, SUSE, Alpine, Fedora** → `fix_decl`.
+* Patch proof: hunk‑matcher (line‑fuzzy, filename maps), symbol‑finder (ctags or Roslyn/ctags‑like for C).
+* 50–100 curated `golden_case` rows with airtight evidence.
+
+If you want, I can drop a ready‑to‑use PostgreSQL DDL + sample rows and a C# `VersionComparer` + `BackportProof` interface next.
+# Golden Set of Backport Test Cases (Distro – Release – Package – CVE)
+
+Each row highlights a case where a distro shipped a **patched older version** below the upstream fixed version. This causes naive version checks to wrongly flag the package as vulnerable. We include the vendor’s fixed package version, the upstream version range still affected (i.e. up to but _not_ including the upstream fix), evidence of the backport (patch/changelog references), a flag if upstream would consider the vendor’s version vulnerable, and a brief rationale.
+
+| **Distro (Release)** | **Source Package** | **CVE ID** | **Vendor Fixed Version** | **Upstream Affected Versions** | **Backport Evidence** | **Upstream Says Affected?** | **Rationale** |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| Debian 7 “Wheezy” | openssl | CVE-2014-0160 | 1.0.1e-2+deb7u5[lists.debian.org](https://lists.debian.org/debian-security-announce/2014/msg00071.html#:~:text=For%20the%20stable%20distribution%20,2%2Bdeb7u5) | 1.0.1 through 1.0.1f (fixed in 1.0.1g)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Name%20CVE,Debian%20ELTS%2C%20%208%20Red)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Package%20Type%20Release%20Fixed%20Version,1743883) | **Yes** (1.0.1e < 1.0.1g) | Version 1.0.1e with Heartbleed patch applied (Debian backported fix)[lists.debian.org](https://lists.debian.org/debian-security-announce/2014/msg00071.html#:~:text=For%20the%20stable%20distribution%20,2%2Bdeb7u5). Upstream requires 1.0.1g, so 1.0.1e is normally seen as vulnerable. |     |
+| RHEL 6 (6.5) | openssl | CVE-2014-0160 | 1.0.1e-16.el6\_5.7[helpdesk.kaseya.com](https://helpdesk.kaseya.com/hc/en-gb/articles/4407522717329-CVE-2014-0160-OpenSSL-Heartbleed-Vulnerability#:~:text=If%20CentOS6%2C%20apply%20Unitrends%20security,42.el6) | 1.0.1 through 1.0.1f (fixed in 1.0.1g)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Description%20The%20,Debian%20ELTS%2C%20%208%20Red) | **Yes** (1.0.1e < 1.0.1g) | Version 1.0.1e with Heartbleed fix backported (openssl-1.0.1e-16.el6). Upstream 1.0.1e is Heartbleed-affected[helpdesk.kaseya.com](https://helpdesk.kaseya.com/hc/en-gb/articles/4407522717329-CVE-2014-0160-OpenSSL-Heartbleed-Vulnerability#:~:text=If%20CentOS6%2C%20apply%20Unitrends%20security,42.el6). |     |
+| RHEL 7 | openssl | CVE-2020-1971 | 1.0.2k-21.el7\_9[suse.com](https://www.suse.com/security/cve/CVE-2020-1971.html#:~:text=CVE,21.el7_9%3B%20openssl)[linuxsecurity.com](https://linuxsecurity.com/advisories/scilinux/scilinux-slsa-2020-5566-1-important-openssl-on-sl7-x-x86-64-14-12-13#:~:text=Update%20linuxsecurity,21.el7_9.i686.rpm) | OpenSSL ≤1.1.1h and 1.0.2(-unsupported) (fixed in 1.1.1i & 1.0.2u)[openssl-library.org](https://openssl-library.org/news/timeline/#:~:text=Release%20and%20Advisory%20Timeline%20,Truncated%20packet%20could) | **Yes** (1.0.2k < 1.0.2u) | OpenSSL 1.0.2k with NULL pointer deref fix backported (RHEL7 openssl-1.0.2k-21). Upstream says 1.0.2k is affected[suse.com](https://www.suse.com/security/cve/CVE-2020-1971.html#:~:text=CVE,21.el7_9%3B%20openssl)[linuxsecurity.com](https://linuxsecurity.com/advisories/scilinux/scilinux-slsa-2020-5566-1-important-openssl-on-sl7-x-x86-64-14-12-13#:~:text=Update%20linuxsecurity,21.el7_9.i686.rpm). |     |
+| Ubuntu 20.04 LTS “Focal” | apache2 | CVE-2024-39573 | 2.4.41-4ubuntu3.19[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=22) | Apache HTTPd ≤2.4.59 (fixed in 2.4.60)[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=Description) | **Yes** (2.4.41 < 2.4.60) | Apache 2.4.41 with SSRF fix backported (Ubuntu patchset). Version 2.4.41 is below upstream 2.4.60 fix[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=22)[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=Potential%20SSRF%20in%20mod_rewrite%20in,60%2C%20which%20fixes%20this%20issue). |     |
+| SUSE SLE 12 SP5 | apache2 | CVE-2024-39573 | 2.4.51-35.51.1 (patched build)[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Security%20fixes%3A)[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Package%20List%3A) | Apache HTTPd ≤2.4.59 (fixed in 2.4.60)[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=Potential%20SSRF%20in%20mod_rewrite%20in,60%2C%20which%20fixes%20this%20issue) | **Yes** (2.4.51 < 2.4.60) | Apache 2.4.51 in SLES12 SP5 with backported fix[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Security%20fixes%3A). Upstream considers <2.4.60 vulnerable, so 2.4.51 would normally be flagged. |     |
+| SUSE SLE 12 SP5 | apache2 | CVE-2024-38477 | 2.4.51-35.51.1 (same update)[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Security%20fixes%3A) | Apache HTTPd ≤2.4.59 (fixed by 2.4.60)[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=Potential%20SSRF%20in%20mod_rewrite%20in,60%2C%20which%20fixes%20this%20issue) | **Yes** (2.4.51 < 2.4.60) | Apache mod\_proxy null-pointer fix backported into 2.4.51[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Security%20fixes%3A). Version appears older than upstream fix version. |     |
+| SUSE SLE 12 SP5 | apache2 | CVE-2024-38475 | 2.4.51-35.51.1 (same update)[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=%2A%20CVE,1227268) | Apache HTTPd ≤2.4.59 (fixed by 2.4.60)[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=Potential%20SSRF%20in%20mod_rewrite%20in,60%2C%20which%20fixes%20this%20issue) | **Yes** (2.4.51 < 2.4.60) | Apache mod\_rewrite output-escaping issue fixed on 2.4.51 via patch[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=%2A%20CVE,1227268). Vendor version < upstream fixed version. |     |
+| Debian 9 “Stretch” | openssh | CVE-2018-15473 | 1:7.4p1-10+deb9u4[lists.debian.org](https://lists.debian.org/debian-security-announce/2018/msg00209.html#:~:text=For%20the%20stable%20distribution%20,10%2Bdeb9u4) | OpenSSH ≤7.7 (fixed in 7.8/7.9)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2018-15473#:~:text=CVE,an%20invalid%20authenticating%20user) | **Yes** (7.4 < 7.8) | OpenSSH 7.4p1 (Stretch) patched for user-enumeration flaw[lists.debian.org](https://lists.debian.org/debian-security-announce/2018/msg00209.html#:~:text=Dariusz%20Tytko%2C%20Michal%20Sajdak%20and,existed%20on%20the%20target%20server). Upstream required ≥7.8, so 7.4p1 normally seen as affected. |     |
+| Debian 10 “Buster” | sudo | CVE-2021-3156 | 1.8.27-1+deb10u3[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Package%20Type%20Release%20Fixed%20Version,1.1) | sudo <1.9.5p2 (fixed in 1.9.5p2)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Name%20CVE,ELTS%2C%20Red%20Hat%2C%20Ubuntu%2C%20Gentoo)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=sudo%20%28PTS%29bullseye%201.9.5p2,1%20fixed) | **Yes** (1.8.27 < 1.9.5p2) | sudo 1.8.27 in Buster with Baron Samedit patch[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Package%20Type%20Release%20Fixed%20Version,1.1). Upstream says versions below 1.9.5p2 are vulnerable, so 1.8.27 would be flagged[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Name%20CVE,ELTS%2C%20Red%20Hat%2C%20Ubuntu%2C%20Gentoo). |     |
+| RHEL 7 | sudo | CVE-2019-14287 | 1.8.23-4.el7\_7.1[suse.com](https://www.suse.com/security/cve/CVE-2019-14287.html#:~:text=CVE,4.el7_7.1.%20Patchnames%3A%20RHSA) | sudo ≤1.8.27 (fixed in 1.8.28)[suse.com](https://www.suse.com/security/cve/CVE-2019-14287.html#:~:text=CVE,4.el7_7.1.%20Patchnames%3A%20RHSA)[nvd.nist.gov](https://nvd.nist.gov/vuln/detail/cve-2017-1000367#:~:text=Todd%20Miller%27s%20sudo%20version%201,function) | **Yes** (1.8.23 < 1.8.28) | sudo 1.8.23 in RHEL7 patched for Runas All bug[suse.com](https://www.suse.com/security/cve/CVE-2019-14287.html#:~:text=CVE,4.el7_7.1.%20Patchnames%3A%20RHSA). Upstream fix came later (1.8.28), so 1.8.23 is normally marked affected. |     |
+| Debian 8 “Jessie” | sudo | CVE-2017-1000367 | 1.8.10p3-1+deb8u4[lists.debian.org](https://lists.debian.org/debian-security-announce/2017/msg00127.html#:~:text=an%20SELinux,full%20root%20privileges) | sudo ≤1.8.20 (fixed in 1.8.21)[nvd.nist.gov](https://nvd.nist.gov/vuln/detail/cve-2017-1000367#:~:text=Todd%20Miller%27s%20sudo%20version%201,function)[security.snyk.io](https://security.snyk.io/vuln/SNYK-DEBIAN9-SUDO-406955#:~:text=Race%20Condition%20in%20sudo%20,2%20or%20higher.%20NVD%20Description) | **Yes** (1.8.10 < 1.8.21) | sudo 1.8.10p3 in Jessie got the tty hijack fix backported[lists.debian.org](https://lists.debian.org/debian-security-announce/2017/msg00127.html#:~:text=an%20SELinux,full%20root%20privileges). Upstream resolved it in a much newer sudo release, so 1.8.10p3 would appear vulnerable. |     |
+| Ubuntu 12.04 LTS “Precise” | bash | CVE-2014-6271 | 4.2-2ubuntu2.5[askubuntu.com](https://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-shellshock-and-how-do-i-fix-it#:~:text=dpkg%20,Version) | Bash ≤4.3 (fixed in 4.3 patch)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2014-6271#:~:text=Description%20GNU%20Bash%20through%204,present%20after%20the%20incorrect%20fix) | **Yes** (4.2 < 4.3-fixed) | Bash 4.2 on Precise patched for Shellshock[askubuntu.com](https://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-shellshock-and-how-do-i-fix-it#:~:text=dpkg%20,Version). Version 4.2 is below upstream 4.3 fix, so normally flagged as Shellshock-vulnerable. |     |
+| Debian 10 “Buster” (LTS) | curl | CVE-2023-27533 | 7.64.0-4+deb10u6[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=Package%20%20%20%20,27538)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=For%20Debian%2010%20buster%2C%20these,4%2Bdeb10u6) | curl <8.0.0 (fixed in 8.0.0)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/source-package/curl#:~:text=A%20path%20traversal%20vulnerability%20exists,8.0%20during) | **Yes** (7.64.0 < 8.0.0) | curl 7.64.0 with TELNET injection fix backported (Debian LTS)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=Package%20%20%20%20,27538)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=For%20Debian%2010%20buster%2C%20these,4%2Bdeb10u6). Upstream requires curl 8.x, so 7.64.0 is seen as affected. |     |
+| Debian 10 “Buster” (LTS) | curl | CVE-2023-27535 | 7.64.0-4+deb10u6[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=Package%20%20%20%20,27538)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE) | curl <8.0.0 (fixed in 8.0.0)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/source-package/curl#:~:text=A%20path%20traversal%20vulnerability%20exists,8.0%20during) | **Yes** (7.64.0 < 8.0.0) | curl 7.64.0 with FTP reuse auth bypass fix backported[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=For%20Debian%2010%20buster%2C%20these,4%2Bdeb10u6). Version appears vulnerable by upstream standards (<8.0). |     |
+| Debian 10 “Buster” (LTS) | curl | CVE-2023-27536 | 7.64.0-4+deb10u6[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=Package%20%20%20%20,27538)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE) | curl <8.0.0 (fixed in 8.0.0)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/source-package/curl#:~:text=A%20path%20traversal%20vulnerability%20exists,8.0%20during) | **Yes** (7.64.0 < 8.0.0) | curl 7.64.0 with GSSAPI delegation reuse fix backported[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=For%20Debian%2010%20buster%2C%20these,4%2Bdeb10u6). Upstream would mark 7.64.0 vulnerable. |     |
+| Debian 10 “Buster” (LTS) | curl | CVE-2023-27538 | 7.64.0-4+deb10u6[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=Package%20%20%20%20,27538)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE) | curl <8.0.0 (fixed in 8.0.0)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/source-package/curl#:~:text=A%20path%20traversal%20vulnerability%20exists,8.0%20during) | **Yes** (7.64.0 < 8.0.0) | curl 7.64.0 with SSH connection reuse fix backported[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE)[lists.debian.org](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=For%20Debian%2010%20buster%2C%20these,4%2Bdeb10u6). Version number <8.0 means upstream would treat it as unfixed. |     |
+| Fedora 34 | glibc | CVE-2021-33574 | glibc-2.33-16.fc34[lists.fedoraproject.org](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/#:~:text=%5BSECURITY%5D%20Fedora%2034%20Update%3A%20glibc,11%202021%20Arjun%20Shankar) | glibc ≤2.33 (fixed in 2.34)[suse.com](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=Heap,GHOST) | **Yes** (2.33 < 2.34) | glibc 2.33 with `mq_notify` use-after-free fix applied (Fedora update). Upstream fix came in 2.34, so 2.33 is normally flagged as vulnerable. |     |
+| RHEL 8 | glibc | CVE-2024-2961 | glibc-2.28-236.el8\_9.13[openwall.com](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,31)[openwall.com](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Vulnerable,263) | glibc ≤2.39 (fixed in 2.40)[openwall.com](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,459) | **Yes** (2.28 < 2.40) | glibc 2.28 with `iconv()` overflow fix backported (RHEL8 patch)[openwall.com](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,459). Upstream requires 2.40+, so 2.28 is considered affected. |     |
+| RHEL 7 | glibc | CVE-2015-0235 | glibc-2.17-55.el7\_0.5[suse.com](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=%2A%20%60glibc%20%3E%3D%202.17,55.el7_0.5) | glibc 2.2 up to 2.17 (fixed in 2.18)[suse.com](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=Heap,GHOST) | **Yes** (2.17 < 2.18) | glibc 2.17 with GHOST bug patched (RHEL7 update)[suse.com](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=Product,SUSE%20Liberty%20Linux%207). Upstream fix was in 2.18; 2.17 is normally flagged as vulnerable[suse.com](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=Heap,GHOST). |     |
+| RHEL 7 | systemd | CVE-2020-1712 | systemd-219-57.el7\_8 (patch backport)[alas.aws.amazon.com](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=aarch64%3A%20systemd,57.amzn2.0.12.aarch64) | systemd ≤242 (fixed in 243)[alas.aws.amazon.com](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=A%20heap%20use,1712) | **Yes** (219 < 243) | systemd 219 with use-after-free fix backported (RHEL7/AL2 update)[alas.aws.amazon.com](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=A%20heap%20use,1712)[alas.aws.amazon.com](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=aarch64%3A%20systemd,57.amzn2.0.12.aarch64). Upstream fix is in v243, so v219 would be marked vulnerable. |     |
+| Alpine 3.10 | musl libc | CVE-2020-28928 | 1.1.22-r4[security.alpinelinux.org](https://security.alpinelinux.org/vuln/CVE-2020-28928#:~:text=musl%20%20%2038%201.2.2_pre2,tracker%200.9.1%20%E2%80%94%20Source%20code) | musl ≤1.2.1 (fixed in 1.2.2)[security.alpinelinux.org](https://security.alpinelinux.org/vuln/CVE-2020-28928#:~:text=CPE%20URI%20Source%20package%20Min,1.2.1) | **Yes** (1.1.x < 1.2.2) | musl 1.1.22 with `wcsnrtombs()` overflow fixed (Alpine 3.10)[security.alpinelinux.org](https://security.alpinelinux.org/vuln/CVE-2020-28928#:~:text=musl%20%20%2038%201.2.2_pre2,tracker%200.9.1%20%E2%80%94%20Source%20code). Upstream fixed in 1.2.2, so 1.1.22 would normally be considered vulnerable. |     |
+| Ubuntu 20.04 LTS “Focal” | openssl | CVE-2022-0778 | 1.1.1f-1ubuntu2.15 (patched)[serverfault.com](https://serverfault.com/questions/1096683/how-can-i-know-that-ubuntu-18-04-bionics-latest-openssl-is-really-1-1-1n#:~:text=,fix%20to%20their%20chosen%20version) | OpenSSL ≤1.1.1m (fixed in 1.1.1n)[serverfault.com](https://serverfault.com/questions/1096683/how-can-i-know-that-ubuntu-18-04-bionics-latest-openssl-is-really-1-1-1n#:~:text=,fix%20to%20their%20chosen%20version) | **Yes** (1.1.1f < 1.1.1n) | OpenSSL 1.1.1f with BN infinite-loop fix backported (Ubuntu)[serverfault.com](https://serverfault.com/questions/1096683/how-can-i-know-that-ubuntu-18-04-bionics-latest-openssl-is-really-1-1-1n#:~:text=,fix%20to%20their%20chosen%20version). Upstream says only 1.1.1n+ is safe, so 1.1.1f appears vulnerable to scanners. |     |
+
+**Sources:** Vendor security advisories and trackers (Debian DSAs, Ubuntu CVE/USN pages, Red Hat errata, SUSE and Alpine trackers) are linked above to confirm patch versions and upstream fix info[lists.debian.org](https://lists.debian.org/debian-security-announce/2014/msg00071.html#:~:text=For%20the%20stable%20distribution%20,2%2Bdeb7u5)[ubuntu.com](https://ubuntu.com/security/CVE-2024-39573#:~:text=22)[suse.com](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=%2A%20CVE,1227268)[openwall.com](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,459)[security-tracker.debian.org](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Package%20Type%20Release%20Fixed%20Version,1.1) etc. Each case demonstrates a backported security fix where the package version alone is misleading, helping test vulnerability scanners’ ability to detect patched-but-backported packages instead of raising false positives.
+
+Citations
+
+[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DSA 2896-1\] openssl security update
+
+https://lists.debian.org/debian-security-announce/2014/msg00071.html
+
+](https://lists.debian.org/debian-security-announce/2014/msg00071.html#:~:text=For%20the%20stable%20distribution%20,2%2Bdeb7u5)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2014-0160
+
+https://security-tracker.debian.org/tracker/CVE-2014-0160
+
+](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Name%20CVE,Debian%20ELTS%2C%20%208%20Red)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2014-0160
+
+https://security-tracker.debian.org/tracker/CVE-2014-0160
+
+](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Package%20Type%20Release%20Fixed%20Version,1743883)[
+
+CVE-2014-0160: OpenSSL Heartbleed Vulnerability – Kaseya
+
+https://helpdesk.kaseya.com/hc/en-gb/articles/4407522717329-CVE-2014-0160-OpenSSL-Heartbleed-Vulnerability
+
+](https://helpdesk.kaseya.com/hc/en-gb/articles/4407522717329-CVE-2014-0160-OpenSSL-Heartbleed-Vulnerability#:~:text=If%20CentOS6%2C%20apply%20Unitrends%20security,42.el6)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2014-0160
+
+https://security-tracker.debian.org/tracker/CVE-2014-0160
+
+](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Description%20The%20,Debian%20ELTS%2C%20%208%20Red)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+CVE-2020-1971 Common Vulnerabilities and Exposures - SUSE
+
+https://www.suse.com/security/cve/CVE-2020-1971.html
+
+](https://www.suse.com/security/cve/CVE-2020-1971.html#:~:text=CVE,21.el7_9%3B%20openssl)[
+
+![](https://www.google.com/s2/favicons?domain=https://linuxsecurity.com&sz=32)
+
+Scientific Linux 7.x SLSA-2020-5566-1 Critical OpenSSL Update
+
+https://linuxsecurity.com/advisories/scilinux/scilinux-slsa-2020-5566-1-important-openssl-on-sl7-x-x86-64-14-12-13
+
+](https://linuxsecurity.com/advisories/scilinux/scilinux-slsa-2020-5566-1-important-openssl-on-sl7-x-x86-64-14-12-13#:~:text=Update%20linuxsecurity,21.el7_9.i686.rpm)[
+
+![](https://www.google.com/s2/favicons?domain=https://openssl-library.org&sz=32)
+
+Release and Advisory Timeline | OpenSSL Library
+
+https://openssl-library.org/news/timeline/
+
+](https://openssl-library.org/news/timeline/#:~:text=Release%20and%20Advisory%20Timeline%20,Truncated%20packet%20could)[
+
+![](https://www.google.com/s2/favicons?domain=https://ubuntu.com&sz=32)
+
+CVE-2024-39573 | Ubuntu
+
+https://ubuntu.com/security/CVE-2024-39573
+
+](https://ubuntu.com/security/CVE-2024-39573#:~:text=22)[
+
+![](https://www.google.com/s2/favicons?domain=https://ubuntu.com&sz=32)
+
+CVE-2024-39573 | Ubuntu
+
+https://ubuntu.com/security/CVE-2024-39573
+
+](https://ubuntu.com/security/CVE-2024-39573#:~:text=Description)[
+
+![](https://www.google.com/s2/favicons?domain=https://ubuntu.com&sz=32)
+
+CVE-2024-39573 | Ubuntu
+
+https://ubuntu.com/security/CVE-2024-39573
+
+](https://ubuntu.com/security/CVE-2024-39573#:~:text=Potential%20SSRF%20in%20mod_rewrite%20in,60%2C%20which%20fixes%20this%20issue)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+Security update for apache2 SUSE-SU-2024:2436-1 | SUSE Support | SUSE
+
+https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/
+
+](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Security%20fixes%3A)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+Security update for apache2 SUSE-SU-2024:2436-1 | SUSE Support | SUSE
+
+https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/
+
+](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=Package%20List%3A)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+Security update for apache2 SUSE-SU-2024:2436-1 | SUSE Support | SUSE
+
+https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/
+
+](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=%2A%20CVE,1227268)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+Security update for apache2 SUSE-SU-2024:2436-1 | SUSE Support | SUSE
+
+https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/
+
+](https://www.suse.com/support/update/announcement/2024/suse-su-20242436-1/#:~:text=%2A%20CVE,1227268)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DSA 4280-1\] openssh security update
+
+https://lists.debian.org/debian-security-announce/2018/msg00209.html
+
+](https://lists.debian.org/debian-security-announce/2018/msg00209.html#:~:text=For%20the%20stable%20distribution%20,10%2Bdeb9u4)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2018-15473 - Security Bug Tracker - Debian
+
+https://security-tracker.debian.org/tracker/CVE-2018-15473
+
+](https://security-tracker.debian.org/tracker/CVE-2018-15473#:~:text=CVE,an%20invalid%20authenticating%20user)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DSA 4280-1\] openssh security update
+
+https://lists.debian.org/debian-security-announce/2018/msg00209.html
+
+](https://lists.debian.org/debian-security-announce/2018/msg00209.html#:~:text=Dariusz%20Tytko%2C%20Michal%20Sajdak%20and,existed%20on%20the%20target%20server)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2021-3156
+
+https://security-tracker.debian.org/tracker/CVE-2021-3156
+
+](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Package%20Type%20Release%20Fixed%20Version,1.1)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2021-3156
+
+https://security-tracker.debian.org/tracker/CVE-2021-3156
+
+](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=Name%20CVE,ELTS%2C%20Red%20Hat%2C%20Ubuntu%2C%20Gentoo)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2021-3156
+
+https://security-tracker.debian.org/tracker/CVE-2021-3156
+
+](https://security-tracker.debian.org/tracker/CVE-2021-3156#:~:text=sudo%20%28PTS%29bullseye%201.9.5p2,1%20fixed)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+CVE-2019-14287 Common Vulnerabilities and Exposures - SUSE
+
+https://www.suse.com/security/cve/CVE-2019-14287.html
+
+](https://www.suse.com/security/cve/CVE-2019-14287.html#:~:text=CVE,4.el7_7.1.%20Patchnames%3A%20RHSA)[
+
+![](https://www.google.com/s2/favicons?domain=https://nvd.nist.gov&sz=32)
+
+CVE-2017-1000367 Detail - NVD
+
+https://nvd.nist.gov/vuln/detail/cve-2017-1000367
+
+](https://nvd.nist.gov/vuln/detail/cve-2017-1000367#:~:text=Todd%20Miller%27s%20sudo%20version%201,function)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DSA 3867-1\] sudo security update
+
+https://lists.debian.org/debian-security-announce/2017/msg00127.html
+
+](https://lists.debian.org/debian-security-announce/2017/msg00127.html#:~:text=an%20SELinux,full%20root%20privileges)[
+
+![](https://www.google.com/s2/favicons?domain=https://security.snyk.io&sz=32)
+
+Race Condition in sudo | CVE-2017-1000367 | Snyk
+
+https://security.snyk.io/vuln/SNYK-DEBIAN9-SUDO-406955
+
+](https://security.snyk.io/vuln/SNYK-DEBIAN9-SUDO-406955#:~:text=Race%20Condition%20in%20sudo%20,2%20or%20higher.%20NVD%20Description)[
+
+![](https://www.google.com/s2/favicons?domain=https://askubuntu.com&sz=32)
+
+security - What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it? - Ask Ubuntu
+
+https://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-shellshock-and-how-do-i-fix-it
+
+](https://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-shellshock-and-how-do-i-fix-it#:~:text=dpkg%20,Version)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+CVE-2014-6271
+
+https://security-tracker.debian.org/tracker/CVE-2014-6271
+
+](https://security-tracker.debian.org/tracker/CVE-2014-6271#:~:text=Description%20GNU%20Bash%20through%204,present%20after%20the%20incorrect%20fix)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DLA 3398-1\] curl security update
+
+https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
+
+](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=Package%20%20%20%20,27538)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DLA 3398-1\] curl security update
+
+https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
+
+](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=For%20Debian%2010%20buster%2C%20these,4%2Bdeb10u6)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+Information on source package curl - Security Bug Tracker - Debian
+
+https://security-tracker.debian.org/tracker/source-package/curl
+
+](https://security-tracker.debian.org/tracker/source-package/curl#:~:text=A%20path%20traversal%20vulnerability%20exists,8.0%20during)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DLA 3398-1\] curl security update
+
+https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
+
+](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DLA 3398-1\] curl security update
+
+https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
+
+](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+\[SECURITY\] \[DLA 3398-1\] curl security update
+
+https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
+
+](https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html#:~:text=CVE)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.fedoraproject.org&sz=32)
+
+\[SECURITY\] Fedora 34 Update: glibc-2.33-16.fc34
+
+https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/
+
+](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/#:~:text=%5BSECURITY%5D%20Fedora%2034%20Update%3A%20glibc,11%202021%20Arjun%20Shankar)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+CVE-2015-0235 Common Vulnerabilities and Exposures | SUSE
+
+https://www.suse.com/security/cve/CVE-2015-0235.html
+
+](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=Heap,GHOST)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.openwall.com&sz=32)
+
+oss-security - The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence
+
+https://www.openwall.com/lists/oss-security/2024/04/17/9
+
+](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,31)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.openwall.com&sz=32)
+
+oss-security - The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence
+
+https://www.openwall.com/lists/oss-security/2024/04/17/9
+
+](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Vulnerable,263)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.openwall.com&sz=32)
+
+oss-security - The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence
+
+https://www.openwall.com/lists/oss-security/2024/04/17/9
+
+](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,459)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+CVE-2015-0235 Common Vulnerabilities and Exposures | SUSE
+
+https://www.suse.com/security/cve/CVE-2015-0235.html
+
+](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=%2A%20%60glibc%20%3E%3D%202.17,55.el7_0.5)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+CVE-2015-0235 Common Vulnerabilities and Exposures | SUSE
+
+https://www.suse.com/security/cve/CVE-2015-0235.html
+
+](https://www.suse.com/security/cve/CVE-2015-0235.html#:~:text=Product,SUSE%20Liberty%20Linux%207)[
+
+ALAS2-2020-1388
+
+https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html
+
+](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=aarch64%3A%20systemd,57.amzn2.0.12.aarch64)[
+
+ALAS2-2020-1388
+
+https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html
+
+](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=A%20heap%20use,1712)[
+
+CVE-2020-28928 — Alpine Security Tracker
+
+https://security.alpinelinux.org/vuln/CVE-2020-28928
+
+](https://security.alpinelinux.org/vuln/CVE-2020-28928#:~:text=musl%20%20%2038%201.2.2_pre2,tracker%200.9.1%20%E2%80%94%20Source%20code)[
+
+CVE-2020-28928 — Alpine Security Tracker
+
+https://security.alpinelinux.org/vuln/CVE-2020-28928
+
+](https://security.alpinelinux.org/vuln/CVE-2020-28928#:~:text=CPE%20URI%20Source%20package%20Min,1.2.1)[
+
+![](https://www.google.com/s2/favicons?domain=https://serverfault.com&sz=32)
+
+How can I know that Ubuntu 18.04 Bionic's latest OpenSSL is really ...
+
+https://serverfault.com/questions/1096683/how-can-i-know-that-ubuntu-18-04-bionics-latest-openssl-is-really-1-1-1n
+
+](https://serverfault.com/questions/1096683/how-can-i-know-that-ubuntu-18-04-bionics-latest-openssl-is-really-1-1-1n#:~:text=,fix%20to%20their%20chosen%20version)
+
+All Sources
+
+[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.debian.org&sz=32)
+
+lists.debian
+
+](https://lists.debian.org/debian-security-announce/2014/msg00071.html#:~:text=For%20the%20stable%20distribution%20,2%2Bdeb7u5)[
+
+![](https://www.google.com/s2/favicons?domain=https://security-tracker.debian.org&sz=32)
+
+security...er.debian
+
+](https://security-tracker.debian.org/tracker/CVE-2014-0160#:~:text=Name%20CVE,Debian%20ELTS%2C%20%208%20Red)[
+
+helpdesk.kaseya
+
+](https://helpdesk.kaseya.com/hc/en-gb/articles/4407522717329-CVE-2014-0160-OpenSSL-Heartbleed-Vulnerability#:~:text=If%20CentOS6%2C%20apply%20Unitrends%20security,42.el6)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.suse.com&sz=32)
+
+suse
+
+](https://www.suse.com/security/cve/CVE-2020-1971.html#:~:text=CVE,21.el7_9%3B%20openssl)[
+
+![](https://www.google.com/s2/favicons?domain=https://linuxsecurity.com&sz=32)
+
+linuxsecurity
+
+](https://linuxsecurity.com/advisories/scilinux/scilinux-slsa-2020-5566-1-important-openssl-on-sl7-x-x86-64-14-12-13#:~:text=Update%20linuxsecurity,21.el7_9.i686.rpm)[
+
+![](https://www.google.com/s2/favicons?domain=https://openssl-library.org&sz=32)
+
+openssl-library
+
+](https://openssl-library.org/news/timeline/#:~:text=Release%20and%20Advisory%20Timeline%20,Truncated%20packet%20could)[
+
+![](https://www.google.com/s2/favicons?domain=https://ubuntu.com&sz=32)
+
+ubuntu
+
+](https://ubuntu.com/security/CVE-2024-39573#:~:text=22)[
+
+![](https://www.google.com/s2/favicons?domain=https://nvd.nist.gov&sz=32)
+
+nvd.nist
+
+](https://nvd.nist.gov/vuln/detail/cve-2017-1000367#:~:text=Todd%20Miller%27s%20sudo%20version%201,function)[
+
+![](https://www.google.com/s2/favicons?domain=https://security.snyk.io&sz=32)
+
+security.snyk
+
+](https://security.snyk.io/vuln/SNYK-DEBIAN9-SUDO-406955#:~:text=Race%20Condition%20in%20sudo%20,2%20or%20higher.%20NVD%20Description)[
+
+![](https://www.google.com/s2/favicons?domain=https://askubuntu.com&sz=32)
+
+askubuntu
+
+](https://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-shellshock-and-how-do-i-fix-it#:~:text=dpkg%20,Version)[
+
+![](https://www.google.com/s2/favicons?domain=https://lists.fedoraproject.org&sz=32)
+
+lists.fedoraproject
+
+](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/#:~:text=%5BSECURITY%5D%20Fedora%2034%20Update%3A%20glibc,11%202021%20Arjun%20Shankar)[
+
+![](https://www.google.com/s2/favicons?domain=https://www.openwall.com&sz=32)
+
+openwall
+
+](https://www.openwall.com/lists/oss-security/2024/04/17/9#:~:text=Public,31)[
+
+alas.aws.amazon
+
+](https://alas.aws.amazon.com/AL2/ALAS2-2020-1388.html#:~:text=aarch64%3A%20systemd,57.amzn2.0.12.aarch64)[
+
+security.alpinelinux
+
+](https://security.alpinelinux.org/vuln/CVE-2020-28928#:~:text=musl%20%20%2038%201.2.2_pre2,tracker%200.9.1%20%E2%80%94%20Source%20code)[
+
+![](https://www.google.com/s2/favicons?domain=https://serverfault.com&sz=32)
+
+serverfault
+
+](https://serverfault.com/questions/1096683/how-can-i-know-that-ubuntu-18-04-bionics-latest-openssl-is-really-1-1-1n#:~:text=,fix%20to%20their%20chosen%20version)
\ No newline at end of file
diff --git a/docs/product-advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md b/docs/product-advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md
new file mode 100644
index 000000000..616fabb89
--- /dev/null
+++ b/docs/product-advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md	
@@ -0,0 +1,160 @@
+## Product Advisory: Deterministic VEX-first vulnerability verdicts with CycloneDX 1.7
+
+### 1) The problem you are solving
+
+Modern scanners produce a long list of “components with known CVEs,” but that list is routinely misleading because it ignores *context*: whether the vulnerable code is shipped, configured, reachable, mitigated, or already fixed via backport. Teams then waste time on false positives, duplicate findings, and non-actionable noise.
+
+A **VEX-first** approach solves this by attaching *exploitability/impact assertions* to SBOM components. In CycloneDX, this is expressed via the **Vulnerability / Analysis** model (often used as VEX), which can declare that a component is **not affected**, **under investigation/in triage**, **exploitable/affected**, or **resolved/fixed**, along with rationale/justification and other details. CycloneDX explicitly frames this as “vulnerability exploitability” context, including a `state` and a `justification` for why a vulnerability is (or isn’t) a practical risk. ([cyclonedx.org][1])
+
+The core product challenge is therefore:
+
+* You will ingest **multiple statements** (vendors, distros, internal security, runtime evidence) that may **conflict**.
+* Those statements may be **conditional** (only affected on certain OS, feature flags, build options).
+* You must produce a **single stable, explainable verdict** per (product, vuln), and do so **deterministically** so audits and diffs are reproducible.
+
+---
+
+### 2) Product intent and outcomes
+
+**Primary outcome:** Reduce noise while increasing trust: every suppression or escalation is backed by evidence and explainable logic.
+
+**What “good” looks like:**
+
+* Fewer alerts, but higher signal.
+* Each vuln has a clear **final verdict** plus **reason chain** (“why this was marked not_affected/fixed/affected”).
+* Deterministic replay: the same inputs produce the same outputs.
+
+---
+
+### 3) Recommended data contract (CycloneDX 1.7 aligned)
+
+Use CycloneDX 1.7 as the canonical interchange for impact/exploitability assertions:
+
+* **SBOM**: components + dependencies (CycloneDX and/or SPDX)
+* **Vulnerability entries** with **analysis** fields:
+
+  * `analysis.state` (status in context) and `analysis.justification` (why), as described in CycloneDX’s exploitability use case. ([cyclonedx.org][1])
+* Optional ingress from **OpenVEX** or CSAF; normalize into CycloneDX analysis semantics (OpenVEX defines the commonly used status set `not_affected / affected / fixed / under_investigation`, and requires justification in `not_affected` cases). ([GitHub][2])
+
+Graph relationships (if you use SPDX 3.0.1 as your internal graph layer):
+
+* Model dependencies and containment via SPDX `Relationship` and `RelationshipType`, which formalize “Element A RELATIONSHIP Element B” semantics used to compute transitive impact. ([SPDX][3])
+
+---
+
+### 4) Product behavior guidelines
+
+#### A. Single “Risk Verdict” per vuln, backed by evidence
+
+Expose one final verdict per vulnerability at the product level, with an expandable “proof” pane:
+
+* Inputs considered (SBOM nodes, relationship paths, VEX statements, conditions).
+* Merge logic explanation (how conflicts were resolved).
+* Timestamped lineage: which feed/source asserted what.
+
+#### B. Quiet-by-design UX
+
+* Default views show only items needing action: **Affected/Exploitable**, and **Under Investigation** with age/timeouts.
+* “Not affected” and “Fixed/Resolved” are accessible but not front-and-center; they primarily serve audit and trust.
+
+#### C. Diff-aware notifications
+
+Notify only on **meaningful transitions** (e.g., Unknown→Affected, Affected→Fixed), not on every feed refresh.
+
+---
+
+### 5) Development guidelines (deterministic resolver)
+
+#### A. Normalize identifiers first
+
+Create a strict canonical key for matching “the same component” across SBOMs and VEX:
+
+1. prefer **purl**, then **CPE**, then (name, version, supplier).
+2. persist alias mappings (vendor naming variance is normal).
+
+#### B. Represent the world as two layers
+
+1. **Graph layer** (what is shipped/depends-on/contains what)
+2. **Assertion layer** (CycloneDX 1.7 vulnerability analysis statements, plus optional runtime/reachability evidence)
+
+Do not mix them—keep assertions as immutable facts that the resolver evaluates.
+
+#### C. Condition evaluation must be total and deterministic
+
+For each assertion, evaluate conditions against a frozen `Context`:
+
+* platform (OS/distro/arch), build flags, enabled features, packaging mode
+* runtime signals (if used) must be versioned and hashed like any other input
+
+If a condition cannot be evaluated, treat it explicitly as **Unknown**, not false.
+
+#### D. Merge conflicts via a documented lattice
+
+Define a monotonic merge function that is:
+
+* **commutative** (order independent),
+* **idempotent** (reapplying doesn’t change),
+* **associative** (supports streaming/parallel merges).
+
+A pragmatic priority (adjust to your policy):
+
+1. **Fixed/Resolved** (with evidence of fix scope)
+2. **Not affected** (with valid justification and conditions satisfied)
+3. **Affected/Exploitable**
+4. **Under investigation / In triage**
+5. **Unknown**
+
+CycloneDX’s exploitability model explicitly supports “state + justification” to make “not affected” meaningful, not a hand-wave. ([cyclonedx.org][1])
+
+#### E. Propagation rules must be explicit
+
+Decide and document how assertions propagate across the dependency graph:
+
+* When a dependency is **Affected**, does the product become Affected automatically? (Typically yes if the dependency is shipped and used, unless a product-level assertion says otherwise.)
+* When a dependency is **Not affected** due to “code removed before shipping,” does the product inherit Not affected? (Often yes, but only if you can prove the affected code path is absent for the shipped artifact.)
+* Keep propagation rules versioned to avoid “policy drift” breaking deterministic replay.
+
+#### F. Always emit a proof object
+
+For every final verdict emit:
+
+* contributing assertions (source IDs), condition evaluations, merge steps
+* the graph path(s) that made it relevant (SPDX Relationship chain or CycloneDX dependency references)
+  This proof is what lets you be quiet-by-design without losing auditability.
+
+---
+
+### 6) Interop guidance (OpenVEX / CSAF → CycloneDX 1.7)
+
+If you ingest OpenVEX:
+
+* Map OpenVEX status to CycloneDX analysis state (policy-defined mapping).
+* Enforce OpenVEX minimums: `not_affected` should have a justification/impact statement. ([GitHub][2])
+
+If you ingest CSAF advisories:
+
+* Treat them as another assertion source; do not let them overwrite higher-confidence internal evidence without explicit precedence rules.
+
+---
+
+### 7) Testing and rollout checklist
+
+* **Golden test vectors**: fixed input bundles (SBOM + assertions + context) with expected verdicts.
+* **Determinism tests**: shuffle assertion ordering; results must be identical.
+* **Regression diffs**: store prior proofs; verify only intended transitions occur after feed updates.
+* **Adversarial cases**: conflicting assertions, partial conditions, alias mismatches, missing dependency edges.
+
+---
+
+### 8) Common failure modes to avoid
+
+* Treating “not affected” as a suppression without requiring justification.
+* Allowing “latest feed wins” behavior (non-deterministic and unauditable).
+* Mixing runtime telemetry directly into SBOM identity (breaks replay).
+* Implicit propagation rules (different engineers will interpret differently; results drift).
+
+If you want, I can also provide a short, implementation-ready “resolver contract” (types, verdict lattice, proof schema) that is CycloneDX 1.7-centric while remaining neutral to whether you store the graph as CycloneDX dependencies or SPDX 3.0.1 relationships.
+
+[1]: https://cyclonedx.org/use-cases/vulnerability-exploitability/?utm_source=chatgpt.com "Security Use Case: Vulnerability Exploitability"
+[2]: https://github.com/openvex/spec/blob/main/OPENVEX-SPEC.md?utm_source=chatgpt.com "spec/OPENVEX-SPEC.md at main"
+[3]: https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Classes/Relationship/?utm_source=chatgpt.com "Relationship - SPDX Specification 3.0.1"
diff --git a/docs/product-advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md b/docs/product-advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md
new file mode 100644
index 000000000..bc3c70faf
--- /dev/null
+++ b/docs/product-advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md	
@@ -0,0 +1,115 @@
+Here’s a simple, high‑signal pattern you can drop into your security product: **gate AI remediation/explanations behind an “Evidence Coverage” badge**—and hide suggestions when coverage is weak.
+
+---
+
+### What this solves (plain English)
+
+AI advice is only trustworthy when it’s grounded in real evidence. If your scan only sees half the picture, AI “fixes” become noise. A visible coverage badge makes this explicit and keeps the UI quiet until you’ve got enough facts.
+
+---
+
+### What “Evidence Coverage” means
+
+Score = % of the verdict’s required facts present, e.g., do we have:
+
+* **Reachability** (is the vulnerable code/path actually callable in this artifact/runtime?)
+* **VEX** (vendor/product statements: affected/not‑affected/under‑investigation)
+* **Runtime** (telemetry, process trees, loaded libs, eBPF hooks)
+* **Exploit signals** (known exploits, KEV, EPSS tier, in‑the‑wild intel)
+* **Patch/backport proof** (distro backports, symbols, diff/Build‑ID match)
+* **Provenance** (in‑toto/DSSE attestations, signer trust)
+* **Environment match** (kernel/os/distro/package set parity)
+* **Differential context** (did this change since last release?)
+
+Each fact bucket contributes weighted points → a 0–100% **Coverage** score.
+
+---
+
+### UX rule of thumb
+
+* **<60%**: Hide AI suggestions by default. Show a muted badge “Coverage 41% — add sources to unlock guidance.”
+* **60–79%**: Collapse AI panel; allow manual expand with a caution label. Every sentence shows its **citations**.
+* **≥80%**: Show AI remediation by default with a green badge and inline evidence chips.
+* **100%**: Add a subtle “High confidence” ribbon + “export proof” link.
+
+---
+
+### Minimal UI components
+
+* A small badge next to each finding: `Coverage 82%` (click → drawer).
+* Drawer tabs: **Sources**, **Why we think it’s reachable**, **Counter‑evidence**, **Gaps**.
+* “Fill the gaps” call‑outs (e.g., “Attach VEX”, “Enable runtime sensor”, “Upload SBOM”).
+
+---
+
+### Copy you can reuse
+
+* Collapsed state (low coverage):
+  *“We’re missing runtime or VEX evidence. Add one source to unlock tailored remediation.”*
+* Expanded (medium):
+  *“Guidance shown with caution. 3/5 evidence buckets present. See gaps →”*
+
+---
+
+### Data model (lean)
+
+```yaml
+coverage:
+  score: 0-100
+  buckets:
+    - id: reachability      # call graph, symbol, entrypoints
+      present: true
+      weight: 0.22
+      evidence_refs: [e1,e7]
+    - id: vex               # product/vendor statements
+      present: false
+      weight: 0.18
+      evidence_refs: []
+    - id: runtime
+      present: true
+      weight: 0.20
+      evidence_refs: [e3]
+    - id: exploit_signals
+      present: true
+      weight: 0.15
+      evidence_refs: [e6]
+    - id: patch_backport
+      present: false
+      weight: 0.15
+      evidence_refs: []
+    - id: provenance
+      present: true
+      weight: 0.10
+      evidence_refs: [e9]
+```
+
+---
+
+### Policy in one line (ship this as a guard)
+
+```pseudo
+if coverage.score < 60: hide_ai()
+elif coverage.score < 80: show_ai(collapsed=true, label="limited evidence")
+else: show_ai(collapsed=false, label="evidence-backed")
+```
+
+---
+
+### What the AI must output (when shown)
+
+* **Step‑by‑step remediation** with **per‑step citations** to the evidence drawer.
+* **Why this is safe** (mentions backports, ABI risk, service impact).
+* **Counterfactual**: “If VEX says Not Affected → do X instead.”
+* **Residual risk** and **rollback** plan.
+
+---
+
+### How to reach ≥80% more often
+
+* Auto‑request missing inputs (“Upload maintainer VEX” / “Turn on runtime for 24h”).
+* Fetch distro backport diffs and symbol maps to close the patch/backport bucket.
+* Merge SBOM + call‑graph + eBPF to strengthen reachability.
+
+---
+
+If you want, I can draft a drop‑in React component (Badge + Drawer) and a tiny scoring service (C#/.NET 10) that plugs into your verdict pipeline.
diff --git a/docs/product-advisories/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md b/docs/product-advisories/archived/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md
similarity index 100%
rename from docs/product-advisories/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md
rename to docs/product-advisories/archived/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md