[workflow-audit] 5 unexplained change(s) on 2026-09-11

Comienza revisando los cinco commits enumerados y sus diffs, especialmente .github/audit/orchestrator.md, .github/audit/application-security.md y .github/workflows/security-audit.yaml. Compáralos con el resumen de la ejecución de la auditoría y el contexto del repositorio; el trabajo estará terminado cuando cada cambio esté registrado como autorizado o se haya escalado para su investigación.

5 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-10T12:11:46Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

2128c0d — fix(security-audit): end each orchestrator wait call before the Bash cap

• Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
• Date: 2026-09-11 10:04:14 +0000
• Refs: remotes/origin/fix/audit-wait-loop-returns
• Files:
  • .github/audit/orchestrator.md
• View diff

811ddb6 — ci(security-audit): raise the orchestrator's wait deadline to 32 minutes

• Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
• Date: 2026-09-11 10:04:22 +0000
• Refs: remotes/origin/fix/audit-wait-loop-returns
• Files:
  • .github/audit/orchestrator.md
  • .github/workflows/security-audit.yaml
• View diff

98a7f79 — docs: keep "cutover" meaning one thing in the remote specs

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-10 13:08:51 -0700
• Refs: remotes/origin/pocket-webrtc-2
• Files:
  • .github/audit/application-security.md
• View diff

ca3a4ab — fix(security-audit): keep every wait call's tail unambiguous

• Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
• Date: 2026-09-11 10:16:49 +0000
• Refs: remotes/origin/fix/audit-wait-loop-returns
• Files:
  • .github/audit/orchestrator.md
  • .github/workflows/security-audit.yaml
• View diff

e0a9399 — fix(security-audit): name the wait call's output as the decision input

• Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
• Date: 2026-09-11 10:35:27 +0000
• Refs: remotes/origin/fix/audit-wait-loop-returns
• Files:
  • .github/audit/orchestrator.md
  • .github/workflows/security-audit.yaml
• View diff