v20.0 Repo Audit Truth Remediation
Summary
This archive records the completed 2026-04-23 repo-audit follow-through for CareConnect. The work closed production-truth drift in active operational docs, aligned privacy wording for the feedback surface, and reconciled planning state so the repo no longer treated the remediation wave as still pending.
Completed Outcomes
- Closed active direct-VPS documentation drift:
- incident, alerting, rollback, and QA docs now describe the real shared-VPS runtime instead of the historical Vercel/serverless path
- Aligned privacy and retention wording:
- public feedback-retention copy no longer promises an automatic 90-day deletion workflow that the implementation does not evidence
- Reconciled planning lifecycle:
- the audit-only board and remediation sequence are now archived
- the roadmap now treats this work as completed maintenance rather than active planning
- Removed the last active provenance example that read like non-human contributor attribution:
docs/development/data-schema-drafts.mdnow uses tool-neutral research wording in its example_meta.sourcefield
Verification Snapshot
Validated on 2026-04-24:
npm run check:refsnpm run type-check
Remaining Follow-Through
These items stay on the active roadmap because they are broader governance decisions, not unfinished repo-audit cleanup:
- v22 Gate 0 blocker closure (
C1,D4) - future decision on whether higher-severity dependency findings become blocking
- future decision on whether browser E2E stays non-blocking