Add audit remediation analysis and flag naming recommendation

docs/roadmap/audit/catalog.md

@@ -15,6 +15,10 @@ and request isolation lead; blocked validation,
 resource retention, and consumer contracts precede scaling and maintainability
 work; editorial and historical navigation issues follow.
 
+The [remediation analysis](remediation-analysis.md) tracks unresolved choices
+and recommendations for sequential discussion. Accepted conclusions are recorded
+in this catalog; analysis alone does not select a remedy.
+
 Three pairs describe the same underlying issue: correctness C2/concurrency N2,
 correctness C4/concurrency N3, and complexity M6/responsibility R1. Other
 related findings remain distinct where they concern different failure modes or
@@ -169,6 +173,10 @@ Document the implemented rules once with `FlagMeta` and link related public
 helpers. Preserve accepted Unicode lowercase letters and digits; changing
 validation would require a separate decision.
 
+The [F10 analysis](remediation-analysis.md#f10--flag-declaration-naming) reviews
+the naming convention's basis and recommends retaining the existing rules;
+agreement on that precise contract is pending.
+
 **Original:** [13-documentation D2](13-documentation.md#d2--p3-public-flag-metadata-omits-enforced-declaration-constraints).
 
 ## F11 — P3: Explanation providers must implement an unused text writer