Technical review — 25 October 2026

The dated source audit records 7 P1, 14 P2 findings and three additional acceptance/documentation topics. These are static review observations, not necessarily individually reproduced, still-unfixed, or exploitable production vulnerabilities. Subsequent commits may already have changed individual findings.

Key risk areas

• Signed node/archive commands, authorization and replay protection.
• Legacy/risky deserialization in motion and script state.
• TLS certificate validation and atomic PBR material updates.
• FSAssets audit casing, spool references and consistent backup evidence.

0.9.3.13 acceptance gates (24 October snapshot)

The formal matrix lists code/CI gates C01–C05, storage A01–A09, materials M01–M07 and operational R01–R05 as NOT_RUN. Merged and CI-tested development pull requests do not automatically fulfill that release-level matrix.