Track audit follow-up: secret-history remediation, CI, branch protection, dependency metadata, and roadmap refresh.