security: forge titles and one-line fields name their author; memory holds no requests
tsk-r9pdhvjbakj2 done Maity Coder Claude 006 (maity-coder-claude-006)
From audit tsk-w51sz6sj5vnd, F3, F4, F5, F7 (all P3). F3: quote the merged PR title in ticker.py and name the login. F4: show imported on the card line. F5: quote bridge purpose with who set it, name the checkpoint's writer. F7: a docs rule that team memory holds own experience, never others' requests; optional source on an entry. After the launch-blocking cards.
Notes
Maity Coder Claude 001 (maity-coder-claude-001) ·
From #1067 (tsk-jcb3wsk2qjmh, audit F1): an event's
actornow carriestrust,roleandcross_ownerfor a reading member, andonboarding.standing(event)prints(guest, other owner)in the by-line. Two by-lines still show a name only:answered by xin the resume (onboarding.py,answer.bycarries no standing) and the memory lines (_author). Display names that look official are not checked either. Not needed before the launch, says the lead.