fix: remediate full-deep audit findings and retain release holds

data/repo-awareness-snapshot.json

@@ -3148,6 +3148,11 @@
         "section": "root",
         "catalogued": true
       },
+      {
+        "path": "docs/audit/2026-10-17-full-deep-remediation-results.md",
+        "section": "audit",
+        "catalogued": true
+      },
       {
         "path": "docs/superpowers/plans/2026-09-01-calculators-clinical-safety.md",
         "section": "superpowers",
@@ -3443,6 +3448,11 @@
         "section": "root",
         "catalogued": true
       },
+      {
+        "path": "docs/governance/clinical-release-remediation-handoff-2026-10-17.md",
+        "section": "governance",
+        "catalogued": true
+      },
       {
         "path": "docs/decisions/2026-09-04-on-call-design-choices.md",
         "section": "decisions",
@@ -4108,6 +4118,11 @@
         "section": "decisions",
         "catalogued": true
       },
+      {
+        "path": "docs/audit/2026-10-17-full-deep-remediation-spec.md",
+        "section": "audit",
+        "catalogued": true
+      },
       {
         "path": "docs/decisions/2026-08-07-weak-evidence-banner-only-when-it-adds.md",
         "section": "decisions",
@@ -5263,6 +5278,11 @@
         "section": "redesign",
         "catalogued": true
       },
+      {
+        "path": "docs/governance/physiological-calculator-hold-2026-10-17.md",
+        "section": "governance",
+        "catalogued": true
+      },
       {
         "path": "docs/decisions/2026-10-15-no-default-ai-coding-tool.md",
         "section": "decisions",
@@ -5278,6 +5298,11 @@
         "section": "brand",
         "catalogued": true
       },
+      {
+        "path": "docs/rag-behaviour/cache-freshness.md",
+        "section": "rag-behaviour",
+        "catalogued": true
+      },
       {
         "path": "docs/audit/codex-cloud-reliability-20260907.md",
         "section": "audit",
@@ -5358,6 +5383,11 @@
         "section": "root",
         "catalogued": true
       },
+      {
+        "path": "docs/superpowers/plans/2026-10-17-full-deep-remediation.md",
+        "section": "superpowers",
+        "catalogued": true
+      },
       {
         "path": "docs/audit/worktree-reconciliation-2026-08-23.md",
         "section": "audit",

docs/README.md

@@ -284,6 +284,15 @@ Every remaining tracked document in this category (process, plus the `agents/` r
 - [plans/edge-ingestion-overhaul-3pr-plan.md](plans/edge-ingestion-overhaul-3pr-plan.md) — Edge Ingestion Overhaul — 3-PR Execution Plan — Status: Planning only.
 - [plans/tooling-activation-implementation-plan.md](plans/tooling-activation-implementation-plan.md) — Tooling activation — implementation plan — Status: local workstreams (WS-B, WS-C) implemented 2026-08-01;
 
+## Full Deep audit remediation (2026-10-17)
+
+- [Remediation spec](audit/2026-10-17-full-deep-remediation-spec.md) — observed defects and acceptance expectations.
+- [Parallel implementation plan](superpowers/plans/2026-10-17-full-deep-remediation.md) — six implementation lanes, dependencies and review gates.
+- [Local implementation results](audit/2026-10-17-full-deep-remediation-results.md) — issue disposition, verification limits and operator handoff.
+- [Clinical release handoff](governance/clinical-release-remediation-handoff-2026-10-17.md) — genuine outstanding privacy and clinical evidence.
+- [Physiological calculator hold](governance/physiological-calculator-hold-2026-10-17.md) — containment pending sourced clinical review.
+- [Cache freshness](rag-behaviour/cache-freshness.md) — durable revision fences and mixed-deployment limits.
+
 ## Plans and workstreams (living)
 
 - [maturity-backlog-workorders.md](maturity-backlog-workorders.md) — actionable work orders tracking the repository-maturity audit backlog

docs/agents/codex-cloud-legacy-bootstrap.md

@@ -13,6 +13,30 @@ installer. The direct installer alone permits the documented inherited
 `GH_TOKEN`/`OPENAI_BASE_URL` exit `2` path; that remains a failed raw boundary.
 No cache, scoped profile or child scrub makes the raw parent clean.
 
+## Optional Python 3.12 dependency lock
+
+The selected legacy bootstrap installs `worker/python/requirements-cloud.txt`
+with `--require-hashes`. Its source is `worker/python/requirements-cloud.in`,
+which includes the shared OCR requirements and constrains Cython to the range
+required by quicksectx 0.4.1 (`>=0.25,<3.2.0`). Regenerate with Python 3.12:
+
+```bash
+PYTHON_BIN=python3.12 npm run generate:worker-python-cloud-lock
+```
+
+The native generator uses pip-tools 7.6.0, resolves dependencies and emits hashes;
+do not hand-edit versions or hashes in the generated lock. After an authorised,
+coordinated regeneration, install that exact file in a fresh Python 3.12 venv
+with `python -m pip install --require-hashes -r worker/python/requirements-cloud.txt`,
+then require `python -m pip check` to succeed. A static lock-header check alone
+does not prove dependency resolution or installation.
+
+The default worker Docker image uses Python 3.11 and
+`worker/python/requirements.txt`, generated from `requirements.in`. An optional
+Cloud-lock failure does not establish a default worker failure. Never install
+the production lock on Python 3.12 as a substitute: medspaCy has different
+spaCy constraints for the two Python versions.
+
 ## Select one checkout and config home
 
 Setup binds its generated `~/.clinical-kb-codex-cloud.sh` and command shims to