# Reports

Dated audit artifacts: one file per investigation. HTML files are the rendered reports, markdown
pages are the working data they were built from. The bundle-wide work log stays in
[`../log.md`](../log.md) — a report is an artifact, not a log.

| File | Type | Description |
|------|------|-------------|
| [fleet-security-audit-2026-10-21.html](fleet-security-audit-2026-10-21.html) | report | Fleet security audit (blankpad, Dankclaw, Dankserver, LAN edge): findings register, per-host detail, LAN exposure map, container image pinning census, advisory cross-reference, remediation. |
| [vuln-dankclaw.md](vuln-dankclaw.md) | reference | CVE/GHSA pass for the 33 Dankclaw quadlet images and the Ubuntu 26.04 host — the evidence base the audit's Dankclaw rows rest on. |
| [vuln-dankserver.md](vuln-dankserver.md) | reference | CVE/GHSA pass for Dankserver (containers + host), blankpad's Arch package set, and danklivingroom's OpenSSH. |
| [sleep-wake-investigation-report.html](sleep-wake-investigation-report.html) | report | blankpad suspend/resume investigation, 2026-09-28. |

Open remediation work is tracked as Gitea issues, one per host-and-package cluster:
[#67](https://gitea.franksdank.cloud/dank/command-center/issues/67) Ubuntu OpenSSH on both servers ·
[#68](https://gitea.franksdank.cloud/dank/command-center/issues/68) gnome-remote-desktop + rpcbind ·
[#69](https://gitea.franksdank.cloud/dank/command-center/issues/69) SurrealDB ·
[#70](https://gitea.franksdank.cloud/dank/command-center/issues/70) Alpine image bases ·
[#71](https://gitea.franksdank.cloud/dank/command-center/issues/71) Pi-hole ·
[#72](https://gitea.franksdank.cloud/dank/command-center/issues/72) Valkey ·
[#73](https://gitea.franksdank.cloud/dank/command-center/issues/73) copyparty ·
[#74](https://gitea.franksdank.cloud/dank/command-center/issues/74) redis ·
[#75](https://gitea.franksdank.cloud/dank/command-center/issues/75) radiance-vllm ·
[#76](https://gitea.franksdank.cloud/dank/command-center/issues/76) danklivingroom SSH ·
[#77](https://gitea.franksdank.cloud/dank/command-center/issues/77) blankpad unfixed AVGs.