rdmbair15m5-changelog-20260923-1125-feat-20260901-42-nightly-fleet-audit

Verified and closed FEAT-20260901-42 (Nightly fleet audit: detect and file automatically; auto-resolve only behind an allowlist Phase 1).

Scope

Hosts: rdmbair15m5 (verifier), rdmsm4x (canonical hub)
Repos: fleet (fleet/ops/audit/nightly_audit.zsh), issues (commit 8a75031)

fleet/ops/audit/nightly_audit.zsh (on rdmsm4x): Production audit engine implementing 14 positive-controlled inspection routines across ticket-store integrity, repo upstream/remote reachability, uncommitted-and-verified age, reverse mtime detection, agent bus unread counts, library adoption, dead session leases, version cadence, and boot contract steps.
~/Library/LaunchAgents/com.eastcoastscience.nightlyaudit.plist: Scheduled launchd agent on rdmsm4x executing daily at 06:15 EDT in file mode.
Deduplication engine: Content-fingerprinted deduplication (subject-fingerprint) via ticket search --json and ticket comment, ensuring recurring findings update existing open tickets rather than flooding the issue store with duplicates.

Live execution on canonical rdmsm4x: /Users/richh/dev/fleet/ops/audit/nightly_audit.zsh report
- 199 repos scanned, 101 provenance repos checked.
- 0 broken checks (all 14 positive controls fired cleanly).
- 6 live findings correctly identified (bus-unread-high, git-mirror, intel-bottles, dead-sessions, version-cadence, boot-contract).
- Exit code: 0.
Resolved FEAT-20260901-42 on rdmsm4x with full reproduction and verification evidence.
Committed and pushed issues to fleet (git.ecs0.net:git/dev/issues.git) and backup (github.com/richhdoty/rdmsm4x-dev-issues.git).
Broadcast message sent and synchronized across all reachable fleet Macs.