code-to10 v5: solidify 7 provisional resolutions per user confirmation (2026-11-02)

- whitelist expansion (tr + exit builtin) confirmed, comment only
- B4 viewport wording: temp banner removed, wording untouched,
  change-list table stays in draft, not merged into body
- B3-tail (a)/(b): no content change (bullet still absent), recorded
  as decided; v2 record showed it unselected, no side picked here
- section 4: 6 templates/artifacts/ refs deleted per signed verdict;
  tripwire test updated 6 -> 0 to pin the new inventory
- CHANGELOG pointer line kept, no marker present
- workers audit landing migration confirmed, comment only
- verify-script gate evidence confirmed, gate hard untouched
- 2 temp stances NOT touched: actual-only quota, evidence binding
  not enforced / no anti-restamp
- behavior code unchanged; directional skill tests 39/39 OK

cloud/workers.py

@@ -443,13 +443,11 @@ def _default_kill(pid):
 def _default_audit(db_path, action, detail):
     """默认审计：user_id=system、project_id=""，经统一审计口写。
 
-    临时消解（v2 provisional，待用户确认后才算定）：#228 直写 ×
-    #250 无旁路断言——本轮临时选“审计落点迁移”一边：本函数不再
-    自带审计表直写，改调 cloud.auth 的统一审计口（该口写 legacy
-    审计行 + 防篡改账本链条目同一对，落点只增链条目、不丢旧行）。
-    另一边（断言放宽、给 workers 开例外）的代价是无旁路断言从
-    此带例外口子，后续任何模块都可援引 workers 例外再起直写；
-    若用户最终选断言放宽一边，本迁移须 revert、断言改列例外。
+    已确认（v5 用户定稿 2026-11-02）：#228 直写 × #250 无旁路断言——
+    定稿选“审计落点迁移”一边：本函数不再自带审计表直写，改调
+    cloud.auth 的统一审计口（该口写 legacy 审计行 + 防篡改账本链
+    条目同一对，落点只增链条目、不丢旧行）。另一边（断言放宽、
+    给 workers 开例外）未选。
     写失败抛给调用方：reap 的杀前审计失败时不杀
     （fail-closed），杀后审计失败时只记 audit_after=False。
     统一审计口在函数内 import：workers 与 auth 同属控制面，