Wrote the audit report:

- `/run/src/report.md`
- `/run/src/report.json`

Key results: 163/163 core tests passed, and the QML sanitizer/link/log checks passed. The most serious issues found are a history/store-path flood-control bypass (`FR-11`, confirmed with a probe), unbounded unauthenticated media-hint/preview maps (`FR-1`), attacker-controlled storage dial addresses (`FR-2`), and preview AEAD nonce reuse (`FR-12`). I could not build the full Nix module or run a live second peer, so wire-only findings are marked `[read]`; the report lists all probes, screenshots, and untested areas.