Audit mutable controls in both code and the authoritative runtime
Security and reliability audits should treat repository configuration, issue ledgers, and comments as hypotheses, then verify mutable controls in the authoritative runtime. This applies to database grants and row-level security, deployment health, scheduler semantics, and connect…