DOCS: fresh-machine bug issues cite an audit doc absent from the repo

[mlorentedev]

Problem

Issues #688, #689, #690, #691 (the fresh-machine bug cluster) all end with:

Source: docs/audits/codebase-audit-2026-07-06.md (Cxx, ...)

That file does not exist in the working tree, and git log --all -- 'docs/audits/*' shows it was never committed. The referenced audit IDs (C2, C4, C5, C11, C16, C20, C29, C40) live only inside the issue bodies. So the cited SSOT for the whole cluster is unresolvable — a reviewer cannot trace a finding back to its audit context, and any finding NOT yet split into an issue is lost.

Why it matters

Standing Order #2 (SSOT) + build/operate knowledge belongs in the repo (docs/). Either the audit is a real artifact that should be committed, or the Source: lines are dangling citations that should be corrected.

Fix options

• A (preferred if the doc exists locally): commit docs/audits/codebase-audit-2026-07-06.md to the repo so every Source: line resolves, and confirm no un-ticketed findings remain (Cx not yet turned into an issue).
• B (if the audit was ephemeral): edit the Source: line in BUG: bash shell parity — aliases never load, PATH hard-reset, no nvm #688/BUG: Windows twins use the wrong Claude project-key encoding + broken --all binding #689/BUG: session-start injectors.enabled flags are dead config (never read) #690/BUG: GUARD-001 memory-sink guard never installed on Windows + doctor agy false-FAIL #691 to point at wherever the findings actually live (or drop the dead path), and capture any orphan findings as issues.

Severity

Low / P3 — traceability hygiene, not a functional bug. Surfaced while executing #689 (BUG-031).

Related: #688, #689, #690, #691.