# Reports

Dated audit artifacts: one file per investigation. HTML files are the rendered reports, markdown
pages are the working data they were built from. The bundle-wide work log stays in
[`../log.md`](../log.md) — a report is an artifact, not a log.

| File | Type | Description |
|------|------|-------------|
| [fleet-security-audit-2026-10-21.html](fleet-security-audit-2026-10-21.html) | report | Fleet security audit (blankpad, Dankclaw, Dankserver, LAN edge): findings register, per-host detail, LAN exposure map, container image pinning census, advisory cross-reference, remediation. |
| [vuln-dankclaw.md](vuln-dankclaw.md) | reference | CVE/GHSA pass for the 33 Dankclaw quadlet images and the Ubuntu 26.04 host — the evidence base the audit's Dankclaw rows rest on. |
| [vuln-dankserver.md](vuln-dankserver.md) | reference | CVE/GHSA pass for Dankserver (containers + host), blankpad's Arch package set, and danklivingroom's OpenSSH. |
| [sleep-wake-investigation-report.html](sleep-wake-investigation-report.html) | report | blankpad suspend/resume investigation, 2026-09-28. |