feat: implement issue #1343 — Compliance audit — 2026-10-16

DO
32m ago
+139-25

Problem

Compliance audit — 2026-10-16

From the issue: This umbrella issue tracks all findings from the automated compliance audit run on 2026-10-16. Findings are grouped by remediation category. Address each category together to avoid duplicate agent PRs.

Risk

Low — changes automation shell logic under scripts/, covered by shellcheck (--severity=warning) and the bats suite.

Test plan

Tests added/updated: test/scripts/compliance-audit/not-served-repos.bats. Verification: bash scripts/dev-lead-lint.sh (shellcheck --severity=warning) ran pre-commit; the bats suite runs in CI.

Rollback

Revert this PR. No non-revertible side effects (no tags, migrations, or external state).

Monitoring

This PR's Lint (shellcheck) and bats checks show pass/fail; watch subsequent dev-lead / pr-review runs for behavioral regressions.

Closes #1343