chore: remove CLI audit markdown from git

[echobt]

Summary

Audits stay in Linear / chat only — not in CortexLM/cli git.

Removes the docs/audits/ dump (CORTEX_CLI_100_AUDIT_2026-09-08.md) and the docs index row that pointed at it.

design/cli-lock-board-index.md is self-contained (no deleted-audit §/P0/P1 citations). tui.key recipes that Greptile proved were no-ops (F2, Shift+Tab, Alt+Enter, Ctrl+x) are replaced with lock.render / cargo tests / Shift+Enter. Same limit is noted in docs/guides/development.md.

Guides, CI_SECRETS.md, CONTRIBUTING.md, and docs/README.md stay.

Test plan

• Confirmed no remaining links to docs/audits/ or CORTEX_CLI_100_AUDIT_*
• No tui.key F2 / Shift+Tab / Alt+Enter / Ctrl+x recipes that claim to open Settings, cycle mode, newline, or Shortcuts
• docs/guides/, docs/CI_SECRETS.md, docs/CONTRIBUTING.md, docs/README.md retained
• cargo fmt --all -- --check — docs-only; not required
• ./scripts/clippy.sh — docs-only; not required
• cargo test --workspace — docs-only; not required
• TUI / snapshot tests — no TUI surface touched
• cargo audit — no dependency change
• Source/dependency policy and generated API contracts — unchanged
• Local functional/security QA and changed-line coverage — docs-only; no production lines changed

Attestation (required)

I attest that:

• Security reviewed — auth, exec/sandbox, path traversal, network egress, and secret handling in this diff were reviewed. No secrets, tokens, or keyring dumps are in the change.
• Product-facing errors — user-visible failures use Cortex product copy. API-down paths say The coding service is temporarily unavailable. No raw provider, SDK, or transport names.
• TUI verified — no TUI surface touched.
• Tests added — no logic change; docs-only.
• No secrets — no API keys, WorkOS secrets, R2/AWS credentials, or .env files are included.

Risk

Docs-only. No auth, exec policy, sandbox, release, or API-contract impact. Merge still needs a non-author human approving review.

  

[echobt]

@greptileai

[greptile-apps]

Greptile Summary

This documentation-only update removes the obsolete CLI audit while preserving a self-contained lock-board reference. It replaces former audit citations with current source, test, verifier, and capture-regeneration references, and accurately documents the verification MCP’s supported key-input behavior.

Confidence Score: 5/5

Safe to merge once the required non-author Protect review is complete.

The previously reported missing-audit-context issue is fully addressed: the lock-board index now contains current, tracked references for its flows, verification surface, test coverage, source of truth, and regeneration procedures. The previously reported special-key recipe issue is fully addressed: unsupported key recipes were removed or redirected to applicable rendering and test coverage, and Shift+Enter is documented as the supported newline input.

_{Reviews (5): Last reviewed commit: "docs(verify): drop false tui.key special..." | Re-trigger Greptile}

[cursor]

@greptileai

[echobt]

@greptileai

[cursor]

@greptileai

[echobt]

@greptileai

[echobt]

Closing per standing rule: never merge audit/research .md PRs — remove these files out of band if needed, not via merge to main.

[echobt]

Reopened after accidental close — purge audit md must merge, not close. Still needs non-author Protect review. @greptileai