Review the overdue regulatory records

RISK-REG-0001: eight-year voucher period (BEG IV) confirmed against
secondary sources and §147 AO. RISK-POL-0009/0002: positions unchanged; new
restore evidence noted as partial. RISK-POL-0012: receiving duty still
unowned; issuing phase-in dates added, flagged for confirmation.
RISK-POL-0011: stays dormant.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 6903@bnt-lap001
Assistant-Session: 8319e8a8-ffa6-4eb3-b8bf-b29945628f89

docs/regulatory/policies/RISK-POL-0002-retention-and-erasure.md

@@ -8,10 +8,11 @@ activates_when: "any personal data is held — the commercial half (RISK-POL-000
 owner: risk-nexus
 written: "2026-08-20"
 related: [RISK-POL-0009, RISK-REG-0001, RISK-F-0008]
-cadence: instant
-clean_streak: 0
-last_checked: "2026-08-20T21:30:00Z"
-next_check: "2026-08-20T21:30:00Z"
+cadence: 1h
+clean_streak: 1
+last_checked: "2026-09-22T06:26:12Z"
+next_check: "2026-09-22T07:26:12Z"
+checked_by: "worsch"
 ---
 
 # RISK-POL-0002 — retention and erasure
@@ -61,3 +62,19 @@ and verified co-residency horizon; a demonstrated restore proving the retained
 side works too.
 
 None of those exist yet, and `RISK-F-0008` carries the gap.
+
+**2026-09-22 review.** The position is unchanged and `RISK-F-0008` still
+carries the gap. Two partial inputs have arrived since 2026-08-20:
+
+- `audit-core` (AUDIT-WP-0008) states it declares nothing above the 30-day
+  `platform-pg` default and will not extend any co-resident's horizon. That is
+  a *stated* contribution to the co-residency horizon. It does not verify the
+  instance maximum, which also depends on the other co-residents and on backup
+  retention.
+- Restores from the retained side are demonstrated for `apps-pg` and Forgejo
+  (RPF-WP-0029, RPF-WP-0038). That shows the retained side works, but it
+  proves no deletion at expiry.
+
+## Reviews
+
+- **2026-09-22** — clean check: Position unchanged; audit-core states a 30-day contribution (unverified instance maximum); restore evidence exists, no deletion evidence; F-0008 carries the gap. Cadence instant → 1h (1 clean in a row); next check 2026-09-22 07:26Z.