Both projectRoot computations were off by a level after the move: vector.ts landed one directory above the repo root, and safety.ts's default audit-log path landed in packages/ rather than the repo root that .env.example and .gitignore both document. Verified empirically against the built entrypoint.