Batch 01 — Production-readiness controls

The controls a project needs before real users depend on it: an authorization and abuse QA pass, an operations runbook, a verified restore, and a measured statement of which controls are actually present. Lands when docs/OPERATIONS.md exists, QA pass H is in the plan, and controls.sh reports every declared control as measured rather than unknown.

No due date
100% Completed