Separate configuration operation preparation

docs/roadmap/audit/catalog.md

@@ -1,6 +1,6 @@
 # Consolidated audit catalog
 
-Status: **8 distinct open findings: 8 P3**, consolidated from 30
+Status: **7 distinct open findings: 7 P3**, consolidated from 30
 numbered entries in seven audit documents. Reviewed audit state:
 `db732e3a1de55c844f77870e1c6db683c2685d5d`.
 
@@ -388,6 +388,10 @@ or a helper for each loop merely to shorten the function.
 
 ## F18 — P3: Configuration preflight interleaves shared and operation-specific rules
 
+**Complete.** Operation checks, scope selection and two-sided input preparation
+have separate private functions; comparison flags are grouped. Focused preflight,
+help, scope, override, show and comparison tests pass.
+
 The configuration command builder and `prepareConfigOperation` mix flag
 combinations, help selection, capabilities, pointer parsing, plan assembly,
 ordinary inputs, and independent comparison inputs. Understanding one operation

docs/roadmap/implementation.md

@@ -1,6 +1,6 @@
 # Audit remediation implementation plan
 
-Status: in progress; Stages 1–17 complete.
+Status: in progress; Stages 1–18 complete.
 
 Baseline: `d492c7747175c01a53261206c2b4356e53453621`. Before this sprint,
 intervening changes recorded decisions and retired the completed older
@@ -585,6 +585,11 @@ actual emitted paths rather than every valid full path.
 
 ## Stage 18 — Separate configuration operation preparation
 
+**Complete.** Operation checks, scope/capability selection, comparison input
+preparation, and comparison flags have distinct private responsibilities.
+Focused preflight, help, scope, show, override and comparison tests passed in
+the offline aligned Go 1.27.0 workspace with `-mod=readonly`.
+
 Findings: F18. Source: ckconfig `input.go` and its command builder.
 
 1. Extract operation-specific option checks, shared scope/capability selection,