[deadp]

STATE.md only: added #5/#6/#7 (volume keys no longer stored in case file, hostile-input allocation caps, AFF4 truncation error) to Now and Decisions.
Marked the old test count as pre-#5-#7 and set Last updated to 23-10-2026.
No tests run (docs only).

Queued from the dashboard (item 416). The request:

TIERED shape=A builder=solo review=none reason="state-drift docs only"
Docs only: update STATE.md so it matches the repo. Points:

• Last updated 17-10-2026 but three significant commits landed 21-10-2026 (Stop storing unlocked volume keys in the case file #5, Bound hostile-input allocations; decode PDF name escapes #6, AFF4: a truncated deflate member or chunk is an error #7) with no mention in Now or Decisions.
• Commit Stop storing unlocked volume keys in the case file #5 changes security behavior (stop storing unlocked volume keys in the case file) and is absent from the state summary.
• Commits Bound hostile-input allocations; decode PDF name escapes #6 and AFF4: a truncated deflate member or chunk is an error #7 alter AFF4/EWF2 handling of hostile input and truncated data, none of which is reflected in STATE.md.
  Check each point against the repo and the git log, set "Last updated" to today, keep the existing structure. Do not change any other file. (Strata)

Opened by the queue runner on LXC 113. The runner squash-merges this once CI checks pass.

🤖 Generated with Claude Code