[boburning]

Program mapping

Records the merged NET-11 Samba stable-payload cleanup from #633. This documentation-only slice is based directly on current main at 2413b24e1c471e8fb53abcbfb209423b609cf726 and has no stacked dependency.

Summary

• add GitHub PR security(network): retire stale Samba controls (NET-11) #633 to NET-11
• record the exact squash commit and host/CI evidence
• preserve the honest device-evidence boundary and keep NET-11 in_progress until the coherent signed Full installation and rollback checkpoint

Validation

• JSON parse: passed
• 33/33 ledger-dependent Shell tests
• native: 595/595 in 19.07 seconds
• AddressSanitizer: 595/595 in 32.32 seconds
• CI scope: risk 1; no ARM, static-analysis, or visual work; exact three Shell targets
• git diff --check: passed

Device evidence and limitations

No device mutation was performed. The ledger explicitly records that the Mini Plus remains on the retained signed baseline and DISP-04 overlay and that remote evidence does not certify physical behavior or other SSD202D devices.