fix(cleanup): remove dead protected exports, add icon aria-hidden, and pin static governance checks

data/outstanding-issues-snapshot.json

@@ -10,7 +10,7 @@
     "p2": 57,
     "p3": 33,
     "queued": 9,
-    "pending": 12,
+    "pending": 19,
     "resolved": 412
   },
   "queue": [
@@ -948,18 +948,54 @@
       "summary": "Cancel request 8b2a3f89-9bdb-4fb1-8fd0-35165d050263: Implemented the requested local source-card width constant in this owning answer-page change.",
       "created_at": "2026-08-25"
     },
+    {
+      "request_id": "3eebb95f-3671-41d0-afa8-85460a9b5ff3",
+      "action": "done",
+      "summary": "#321: Standardized control focus rings and ARIA descriptors across modal and drawer surfaces.",
+      "created_at": "2026-08-26"
+    },
     {
       "request_id": "40ff11ca-52f3-4b95-9118-5e0c107e68f0",
       "action": "cancel",
       "summary": "Cancel request 970b4089-9e76-4bcf-821e-2e70e16a3617: Superseded before reconciliation: the original wording incorrectly implied every component metric belongs in :root. The replacement distinguishes module-local one-consumer constants from shared CSS custom properties.",
       "created_at": "2026-08-26"
     },
+    {
+      "request_id": "454d0cd5-8f4c-4ab9-b9b3-7b5a588283a1",
+      "action": "cancel",
+      "summary": "Cancel request 76744c9f-6e7f-4390-a202-756e50be0cd1: Superseded by a539a411-4648-4f71-8b40-90d49646e8a4 on #243HCC",
+      "created_at": "2026-08-27"
+    },
     {
       "request_id": "485bdac6-7f79-4539-9d90-347866604b35",
       "action": "add",
       "summary": "Overflow menus split between a real ARIA menu and menu roles with no keyboard model",
       "created_at": "2026-08-25"
     },
+    {
+      "request_id": "531e6569-42da-4bb6-9c0f-6a410e207aea",
+      "action": "cancel",
+      "summary": "Cancel request 854ca9ba-ba3b-442b-be6d-6f5873ed60ed: Wired connection and permission unavailable recovery screens in Caring Contacts.",
+      "created_at": "2026-08-26"
+    },
+    {
+      "request_id": "5fa0b2ee-38ea-4a6a-bada-815b021b5aac",
+      "action": "cancel",
+      "summary": "Cancel request a0548b2c-2c80-44f9-9440-5b983e169a13: Repaired closing-message refusal guard in Caring Contacts service state.",
+      "created_at": "2026-08-26"
+    },
+    {
+      "request_id": "6e929764-e281-4941-9ef4-062ec5a08497",
+      "action": "cancel",
+      "summary": "Cancel request 1838b99a-9323-4e3b-84a5-8e52535ecec8: Connected governed-message validator to outbound dispatch routes with fail-closed enforcement.",
+      "created_at": "2026-08-26"
+    },
+    {
+      "request_id": "76744c9f-6e7f-4390-a202-756e50be0cd1",
+      "action": "done",
+      "summary": "#243HCC: Emitted data-settings-nav-target on sub-navigation tabs in settings-dialog.",
+      "created_at": "2026-08-26"
+    },
     {
       "request_id": "8b2a3f89-9bdb-4fb1-8fd0-35165d050263",
       "action": "add",
@@ -978,6 +1014,12 @@
       "summary": "Ward Flow: six agreed enhancements not yet assigned to a phase",
       "created_at": "2026-08-26"
     },
+    {
+      "request_id": "a5dd669d-8d52-4b67-b249-51b0757a3b9f",
+      "action": "done",
+      "summary": "#45V4Y7: Removed verified dead exports answerQuestion in src/lib/rag/rag.ts, embedText in src/lib/openai.ts, and clinicalRankScore in src/lib/clinical-search.ts. Verified 0 AST references remain across src/ and tests/; typecheck and tests pass cleanly.",
+      "created_at": "2026-08-27"
+    },
     {
       "request_id": "b85ad821-4c9b-4925-b86b-2d5767052b20",
       "action": "add",

docs/audit/live-drift-forensics-2026-08.md

@@ -1240,7 +1240,7 @@ and the green live-drift dispatch also remain **pending** for the full phase.
 
 _Owner-authorised window against `Clinical KB Database` (`sjrfecxgysukkwxsowpy`) for index DDL plus
 a `supabase db push` of the guard migrations. Executed from a dedicated worktree; the main checkout
-`D:\Repos\Database` stayed linked to STAGING throughout. D4 is OFF (the Supabase GitHub auto-deploy
+`D:\Repos\Database` stayed linked to STAGING throughout. D4 is OFF *(superseded: see §D4 — SETTLED 2026-08-21; deploy-on-merge is ON)* (the Supabase GitHub auto-deploy
 was disabled before this window), so nothing in this task reached production on merge — every hosted
 change below was made by the explicit step that names it._
 
@@ -1969,7 +1969,7 @@ objects}`; classes `validation` (mandatory from 2026-08-18), `superseded`, `no_d
 
 _Worker session for `#Q5JHBJ` only (`#316`, `#231`, `#1K6T35` untouched). Pre-flight per `#292`: none of
 the seven open PRs (#2181, #2180, #2176, #2173, #2012, #2011, #2010) touches `supabase/**`,
-`scripts/check-drift.ts`, `tests/migration-history-guards.test.ts` or this file. D4 is OFF, so the only
+`scripts/check-drift.ts`, `tests/migration-history-guards.test.ts` or this file. D4 is OFF *(superseded: see §D4 — SETTLED 2026-08-21; deploy-on-merge is ON)*, so the only
 production writes are the explicit `db push` recorded below._
 
 #### Step 1 — classification of the fifteen (every one `validation`; none earned `superseded` or `no_ddl`)