The repo is public and the referenced fixes are still several PRs out. Removes the internal audit pointer, the current auth-state confirmation, the submission failure-mode detail, and the dependency CVE specifics. Architecture, rationale, and PR sequence are unchanged.