diff --git a/.changeset/2198-security-dead-scan-exports.md b/.changeset/2198-security-dead-scan-exports.md
index 4e9008e98..a28eb2c42 100644
--- a/.changeset/2198-security-dead-scan-exports.md
+++ b/.changeset/2198-security-dead-scan-exports.md
@@ -1,5 +1,5 @@
 ---
 type: Fixed
-pr: 0
+pr: 2211
 ---
 **Dead security scan exports removed; injection-scan docs corrected to match reality** — `scanEntropyAnomalies` and `shannonEntropy` were dead code with zero production callers (live hooks inline their own patterns for independence). REQ-SCAN-INJ-02/-03 now accurately describe what runs live (injection patterns, invisible Unicode) vs CI-only (base64-decode, codebase scan). (#2198)