Security alert → remediation plan

Create a bounded remediation plan and approval checkpoint.

This task is eligible because it creates a timeline and has an attestable state transition. It will become a public battle only after paired adapters meet the same fixture and evidence conditions.