Development record

itd-180 fifth-round security findings: the reading walk admits a symlinked rdi-N.md as a real item so the board reports it outstanding and its remedy verb refuses (route a non-regular item file to Unsafe as the dispositions tree does); the contested remedy points at capture disposition --supersedes, which retires one id and adds one so a contested set never shrinks — ruled: the disposition verb refuses under contest exactly as promote does, with a message naming hand repair; every guarded-read failure on a record file is rendered with the not-a-real-directory wording, false for a permission-denied or oversized regular file (carry the reason into the Unsafe entry); and the two readers' byte caps differ (already captured as a nit — export one record cap and use it in both walks, with parity rows at cap and cap+1).