From c9f8c45aebb71fca5bbe406c860d75ee24bf03ad Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 20 Jul 2026 17:21:01 +0000 Subject: [PATCH] docs: note hazard-analysis file:line citations drift; search by symbol MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit PR #998 (merged) already refreshed the file:line citations after the rag.ts decomposition, so this trims the parallel #1000 down to the one durable complement #998 left untouched: line 14 still claimed each control is "cited at its present location" — an absolute-currency claim that re-stales on every refactor. Replace it with an as-of-#998 note plus guidance to search by the named symbol when a line has drifted (docs:check-links validates the path, not the line). Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_019Jc1ZYHFjXjn6mE6U6riVU --- docs/clinical-hazard-analysis.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/clinical-hazard-analysis.md b/docs/clinical-hazard-analysis.md index 5e9ffe5dc..98c861541 100644 --- a/docs/clinical-hazard-analysis.md +++ b/docs/clinical-hazard-analysis.md @@ -11,7 +11,7 @@ Findings were produced by a blind multi-agent fan-out — one analyst per harm pathway, each unaware of the others — followed by orchestrator-level dedupe and **adversarial verification of every finding against the live code** before it entered this document. Where an agent's claim did not survive verification it was corrected or dropped (examples: model-supplied citation identity fields are inert, so citation-ID spoofing via document text is _blocked_, not a hazard; `indexing_quality.issues` reaches the prompt raw but is built from deterministic strings and is not attacker-controllable; the audit's H4 ward-note "fix" was verified to live in **dead code**). -The 2026-07-01 repository audit ([`docs/audit/repo-audit-2026-07-01.md`](audit/repo-audit-2026-07-01.md)) findings **H1–H4** are used as evidence that these pathways are real: each was a confirmed, reproduced defect on exactly one of the pathways below. Their remediations (audit "Remediation — 2026-07-02", merged via PR #123) are the **current controls** named here — so each control is cited at its present location, and each is re-examined for residual gaps. +The 2026-07-01 repository audit ([`docs/audit/repo-audit-2026-07-01.md`](audit/repo-audit-2026-07-01.md)) findings **H1–H4** are used as evidence that these pathways are real: each was a confirmed, reproduced defect on exactly one of the pathways below. Their remediations (audit "Remediation — 2026-07-02", merged via PR #123) are the **current controls** named here, each re-examined for residual gaps. The `file:line` citations were refreshed after the `rag.ts` monolith was decomposed into the `src/lib/rag/*` directory (PR #998) — treat the line numbers as accurate as-of that refresh and **search by the named symbol** if a later refactor has shifted one (`docs:check-links` validates the file path, not the line). ## 2. Risk framework