- 12-SECURITY-REVIEW.md maps T-12-01..T-12-34 and T-12-SC to a named test and 25 removal checks, all seen failing with the protection removed - 12-VALIDATION.md validated with the final per-task map, nyquist_compliant - REQUIREMENTS.md: API-01 and API-02 complete