## Summary Remediation epic for the **2026-06-29 comment-accuracy audit** of the CRAIG workspace (1,008 Rust files / ~239K LOC). Every comment class was checked against the current code — line comments, doc-comments, block comments, and `reason=`/`note=` attribute strings — on the suspicion (confirmed) that successive refactor passes had left comments stale. **Method:** multi-agent workflow over 123 balanced file groups — two independent auditor lenses (guarantees/semantics + references/drift) → adversarial per-group verifier (defaults to *not-stale*) → independent second confirm on high-severity/false-guarantee survivors. 413 agents. **Funnel:** 575 raw flags → **421 confirmed** → 125 rejected (false positive) → 27 uncertain. High-stakes escalation upheld 49/51 (2 recanted). 151/421 flagged by *both* lenses. **Plan:** [comment-accuracy-remediation.adoc](https://gitlab.com/gadhs/application/ccwis/craig/-/blob/main/docs/modules/ROOT/pages/plans/comment-accuracy-remediation.adoc) (canonical Antora plan; link goes live when the docs MR merges). Per-finding detail lives in the child issues + that plan. **Triage of the 421 confirmed:** - **15 latent code gaps** (comment promises behaviour the code never performs) → 6 `fix:` issues. - **406 doc-drift** (code correct; comment stale) → 19 per-crate `docs:` issues. 27 *uncertain* findings (verifier low-confidence) are tracked for triage in #907. ## Children — latent code gaps (`fix:`) - [ ] #908 fix(authz): engine never emits authz.cache_miss / authz.cache_refreshed audit events (weight: 5) - [ ] #909 fix(auth): introspection serve-on-outage grace is 1x not the documented 2x cache_ttl_max_seconds (weight: 2) - [ ] #910 fix(financial,security): i64->i32 narrowings justify safety with validation that does not exist (weight: 3) - [ ] #911 fix(rules): evaluate() reason= claims a timeout-bounded await + fallback compile that do not exist (weight: 3) - [ ] #912 fix(cases): effective_disposition doc promises multiple concurrent-authority rows but returns one (LIMIT 1) (weight: 2) - [ ] #913 fix(web): /security/* pages documented '(admin only)' but mounted require_admin_or_supervisor (weight: 2) ## Children — comment doc-drift by crate (`docs:`) - [ ] #914 docs(xtask): correct 51 stale/inaccurate comments (weight: 5) - [ ] #915 docs(craig-web): correct 48 stale/inaccurate comments (weight: 5) - [ ] #916 docs(craig-cli): correct 32 stale/inaccurate comments (weight: 5) - [ ] #917 docs(craig-cases): correct 31 stale/inaccurate comments (weight: 5) - [ ] #918 docs(craig-intake): correct 29 stale/inaccurate comments (weight: 3) - [ ] #919 docs(craig-test-lib): correct 21 stale/inaccurate comments (weight: 3) - [ ] #920 docs(craig-authz): correct 19 stale/inaccurate comments (weight: 3) - [ ] #921 docs(craig-auth): correct 18 stale/inaccurate comments (weight: 3) - [ ] #922 docs(craig-exchange): correct 17 stale/inaccurate comments (weight: 3) - [ ] #923 docs(craig-common): correct 13 stale/inaccurate comments (weight: 3) - [ ] #924 docs(craig-security): correct 12 stale/inaccurate comments (weight: 2) - [ ] #925 docs(craig-api): correct 10 stale/inaccurate comments (weight: 2) - [ ] #926 docs(craig-placement): correct 9 stale/inaccurate comments (weight: 2) - [ ] #927 docs(craig-financial): correct 9 stale/inaccurate comments (weight: 2) - [ ] #928 docs(craig-seed): correct 9 stale/inaccurate comments (weight: 2) - [ ] #929 docs(craig-reference): correct 9 stale/inaccurate comments (weight: 2) - [ ] #930 docs(craig-store): correct 8 stale/inaccurate comments (weight: 2) - [ ] #931 docs(partner): correct 30 stale comments across craig-partner-* adapters (weight: 3) - [ ] #932 docs(misc): correct 31 stale comments across smaller crates (weight: 5)