docs(17): record code review disposition

.planning/phases/17-blog-companions/17-REVIEW-DISPOSITION.md

@@ -5,23 +5,23 @@ titles: json
 findings:
   - id: CR-01
     severity: critical
-    disposition: open
+    disposition: fixed
     title: "Sitemap writes admin-supplied `javascript:` URLs into `<loc>`, which sitemap.xsl renders as a clickable link on the public origin (stored XSS)"
   - id: WR-01
     severity: warning
-    disposition: open
+    disposition: fixed
     title: "Moving a menu entry to another menu orphans its subtree, and a parent from another menu silently overrides the chosen menu"
   - id: WR-02
     severity: warning
-    disposition: open
+    disposition: fixed
     title: "Reorder page sends overlapping saves; out-of-order completion leaves the database on an older tree than the screen shows"
   - id: WR-03
     severity: warning
-    disposition: open
+    disposition: fixed
     title: "A registry menu entry or sitemap row saved without a reference passes validation and then silently disappears"
   - id: WR-04
     severity: warning
-    disposition: open
+    disposition: fixed
     title: "`journal-post` resolves unpublished posts, exposing draft titles and URLs on the anonymous menu API and in sitemap.xml"
   - id: WR-05
     severity: warning
@@ -71,20 +71,20 @@ findings:
     severity: info
     disposition: open
     title: "Repeater row errors stay at their old index after a row is moved or removed"
-open: 14
+open: 9
 total: 17
-recorded: 2026-10-12T19:49:51.034Z
+recorded: 2026-10-12T19:50:01.936Z
 ---
 
 # Phase 17: Code Review Disposition
 
 | Finding | Severity | Disposition | Source |
 |---------|----------|-------------|--------|
-| CR-01 | critical | open | - |
-| WR-01 | warning | open | - |
-| WR-02 | warning | open | - |
-| WR-03 | warning | open | - |
-| WR-04 | warning | open | - |
+| CR-01 | critical | fixed | 17-REVIEW-FIX.md |
+| WR-01 | warning | fixed | 17-REVIEW-FIX.md |
+| WR-02 | warning | fixed | 17-REVIEW-FIX.md |
+| WR-03 | warning | fixed | 17-REVIEW-FIX.md |
+| WR-04 | warning | fixed | 17-REVIEW-FIX.md |
 | WR-05 | warning | fixed | 17-REVIEW-FIX.md |
 | WR-06 | warning | fixed | 17-REVIEW-FIX.md |
 | WR-07 | warning | fixed | 17-REVIEW-FIX.md |