rdmbair15m5-changelog-20260923-1153-issue-20260923-03-nightly-audit-broken-visibility

Resolved ISSUE-20260923-03 by upgrading nightly_audit.zsh to v1.2 with dedicated broken-control ticket filing, timestamped broken-log writing, and direct log appending to ~/Library/Logs/nightly-audit.log.

Scope

• Hosts: rdmbair15m5 (author), rdmsm4x (hub / executor)
• Repos: fleet (commit 0336de0), issues (commit be84b3a)

Files Touched

• ops/audit/nightly_audit.zsh:
  1. Updated SCRIPT_VERSION="1.2".
  2. Integrated report_summary() function and direct append to LOG_FILE="$HOME/Library/Logs/nightly-audit.log", ensuring execution records are preserved directly by the shell regardless of outer launchd redirection anomalies.
  3. Added broken-control ticket loop in file mode: dedupes and opens/updates nightly-audit-broken <cid>: tickets when controls fail to fire.
  4. Preserved timestamped broken-<YYYYMMDD-HHMMSS>.log capture in the audit script directory when BROKEN is non-empty.
• resolved/ISSUE-20260923-03-nightly_audit-broken-checks-are-invisibl.md: Moved from open/ with resolution details, verification evidence, and verifier identity.

Verification Evidence

• zsh -n ops/audit/nightly_audit.zsh: Syntax check passed cleanly (rc=0).
• Verified clean vs broken branching in test isolation:
  • Clean run: rc=0, no broken log generated.
  • Injected broken check: rc=2, writes broken-<ts>.log with all failed control details, output preserved.
• Verified direct file appending to /Users/richh/Library/Logs/nightly-audit.log.
• fleet repo commit 0336de0 pushed to fleet (git.ecs0.net:git/root/fleet.git) and backup (github.com/richhdoty/rdmsm4x-dev-fleet.git).
• issues repo commit be84b3a pushed to fleet and backup.
• Broadcast sent across message bus (20260923-115314-...).

Rollback / Undo

• git -C ~/dev/fleet revert 0336de0.
• ticket reopen ISSUE-20260923-03 on rdmsm4x.