Record audit remediation verification

docs/roadmap/audit-remediation.md

@@ -1,15 +1,15 @@
 # Audit remediation roadmap
 
-Status: target and decisions finalized; the [implementation plan](implementation.md)
-defines the sprint. No remediation is implemented by these documents.
+Status: source remediation complete; the [implementation plan](implementation.md)
+records the sprint and verification. Release and dependency alignment remain
+separate work in [future work](future.md#pending-release-and-integration-work).
 
 Baseline: `d131999c7c474010a4814bb81601cd32920e6c83`. The
-[catalog](audit/catalog.md) contains 27 distinct open findings, five P2 and 22 P3,
+[catalog](audit/catalog.md) records 27 distinct findings, five P2 and 22 P3,
 from seven audits. Its accepted decisions and the
 [remediation analysis](audit/remediation-analysis.md) supply the scope and
-rationale for this roadmap. The implementation is unchanged since the audited
-state `db732e3a1de55c844f77870e1c6db683c2685d5d`; subsequent commits recorded
-the review and decisions.
+rationale for this roadmap. The audited state was
+`db732e3a1de55c844f77870e1c6db683c2685d5d`.
 
 This roadmap owns the target, scope, and completion criteria. The implementation
 plan owns ordered stages, dependencies, concrete changes, and verification steps.
@@ -251,22 +251,22 @@ removes migration work, not the need for coherent module requirements.
 
 ## Completion criteria
 
-- [ ] Every finding F01–F27 has its selected remediation implemented and recorded
+- [x] Every finding F01–F27 has its selected remediation implemented and recorded
   with relevant evidence; related findings remain individually accountable.
-- [ ] The five P2 defects have focused behavioral protection, including error
+- [x] The five P2 defects have focused behavioral protection, including error
   identity, retained evidence, and the deferred acceptance boundary.
-- [ ] F06 and F08's maintained consumers work, with actual completion checks
+- [x] F06 and F08's maintained consumers work, with actual completion checks
   distinguished from unavailable or skipped shell checks.
-- [ ] F11 and F21's selected API changes and F09/F10's clarified contracts are
+- [x] F11 and F21's selected API changes and F09/F10's clarified contracts are
   reflected in canonical GoDoc and affected integration guidance.
-- [ ] Obsolete production wrappers/plumbing and duplicate adaptation/bookkeeping
+- [x] Obsolete production wrappers/plumbing and duplicate adaptation/bookkeeping
   are removed at the agreed boundaries, with useful tests retained.
-- [ ] F13–F15 and F22 remove the identified repeated work while preserving
+- [x] F13–F15 and F22 remove the identified repeated work while preserving
   behavior, without a new performance guarantee or measurement prerequisite.
-- [ ] F17–F20 improve responsibility separation within their bounded scope;
+- [x] F17–F20 improve responsibility separation within their bounded scope;
   public behavior and necessary ordering remain protected.
-- [ ] Documentation corrections F25–F27 are complete and local links resolve.
-- [ ] Relevant module and aligned-workspace results are recorded. Independent
+- [x] Documentation corrections F25–F27 are complete and local links resolve.
+- [x] Relevant module and aligned-workspace results are recorded. Independent
   results identify the exact dependency selection; any release-alignment work
   still pending is explicitly distinguished from completed source work.