Intake RISK-F-0011 and climb the due checks

Gate House routed a King's Guard observation that qonto-assistant's
audit.deny stream has no completeness evidence. Filed and graded medium,
public, open. Clean-checked F-0010, F-0008, and REG-0001 after confirming
nothing moved. Raised the inbox timeout so question-zero does not false-fail
on the tunneled hub.

Assistant: grok
Assistant-Session: 01a060e9-e363-7521-bf11-df5fa31b7156

findings/RISK-F-0010-embedded-backup-webdav-credential.md

@@ -25,10 +25,10 @@ embargo_condition: "the provider credential is revoked or invalidated and the li
 embargo_since: "2026-09-01"
 embargo_review: "2026-09-15"
 escalation: none
-last_checked: "2026-09-01T00:32:44Z"
-next_check: "2026-09-01T00:32:44Z"
-cadence: instant
-clean_streak: 0
+last_checked: "2026-09-02T08:11:17Z"
+next_check: "2026-09-02T09:11:17Z"
+cadence: 1h
+clean_streak: 1
 waiting_on:
   - who: railiance-platform
     what: "revoke or invalidate the provider credential, remove the source default, name fix tracking, and demonstrate governed ciphertext upload plus restore"
@@ -38,7 +38,7 @@ waiting_on:
     default_at: "2026-09-15"
 graded_by: risk-nexus
 ruling: RISK-RULING-2026-09-01-A
-checked_by: "codex/risk-nexus"
+checked_by: "grok/risk-nexus"
 ---
 
 # RISK-F-0010 — Forgejo backup source embeds a WebDAV credential default
@@ -121,3 +121,4 @@ Reasoning: `docs/rulings/2026-09-01-inbox-sweep.md`.
 ## Reviews
 
 - **2026-09-01** — graded from the filed report and a redacted current-source check. The literal default remains; no fix record was found. Cadence starts at instant.
+- **2026-09-02** — clean check: literal source default remains; no fix tracking; embargo and 2026-09-15 wait unchanged. Cadence instant → 1h (1 clean in a row); next check 2026-09-02 09:11Z.