docs(changelog): archive pre-v2 history, exclude archive from ratchet

docs(i18n): align actual EN surface with announced policy

docs(index): repair broken links + lock against drift

ci(compose): validate base+prod merge in CI and freeze invariants

test(architecture): eliminate subprocess pytest/mypy from tests

ci(workflows): align paths with post-rewrite layout + lock against drift

fix(web): URGENT — vues empilees + sidebar a 10 entrees (etape 6/N)

chore(web): supprime retro.css et nettoie les references legacy (etape 5/N)

refactor(web): shell XerOCR — sidebar gauche + base.html.j2 (etape 1/N)

refactor(harness): allowlist manifest (politique inverse) au lieu du denylist

fix(harness): drop dependencies_lock/system_binaries_lock du snapshot

fix(harness): détection chemin cross-OS (Windows + POSIX) — CI verte

test(chantier2): ratchet-down absolu sur le total narration sprint

test(chantier2): Phase 2.final — garde-fou anti-narration sprint

test(chantier1): Phase 1.final — garde-fou anti-régression + suppr test_sprint_numbering

fix(chantier1): import bare résiduel test_sprint_a14_s18_bnf_e2e → test_bnf_e2e

test(rename): dé-sprintage tests/golden (1 fichier, git mv)

test(rename): dé-sprintage tests/integration (12 fichiers) + fix chemin Makefile:81

test(rename): dé-sprintage tests/architecture (8 fichiers, git mv)

test(rename): dé-sprintage tests/security (9 fichiers, git mv)

test(rename): dé-sprintage tests/web (15 fichiers, git mv)

test(rename): dé-sprintage tests/interfaces/cli (1 fichier, git mv)

test(rename): dé-sprintage tests/reports (29 fichiers, git mv)

test(rename): dé-sprintage tests/app (10 fichiers, git mv)

test(rename): dé-sprintage tests/adapters (22 fichiers, git mv ; collision vlm arbitrée)

test(rename): dé-sprintage tests/pipeline (13 fichiers, git mv)

test(rename): dé-sprintage tests/evaluation (53 fichiers, git mv)

test(rename): dé-sprintage tests/formats (3 fichiers, git mv)

test(rename): dé-sprintage tests/domain (7 fichiers, git mv)

refactor(app): Phase B — extrait _execute_with_partial (run_orchestrator <500)

test(harness): comble le trou — caractérisation execute_preset

fix(app): resume recalcule les view_results des docs repris du partial

test(harness): caractérisation totale du cœur stateful run_orchestrator

refactor(app): Phase A — extrait les 4 builders @staticmethod (run_orchestrator)

test(cov): couvre les branches défensives du patch (codecov ⚠️)

refactor(app): run_orchestrator_helpers plat → sous-package cohésif (P1.1)

refactor(web): security.py P1.2 cluster 2 — public_mode + paths extraits

refactor(web): dégonfle security.py — extraction uploads/rate_limit/csp (P1.2)

fix(test): P0.3 confinement test OS-agnostique (CI Windows)

fix(web): streaming ZIP/image complet + garde-fous bombe (P0.5)

fix(web): confine output_json/partial_dir client sous output_dir (P0.3)

fix(web): entity_extractor fail-closed dans TOUS les modes (P0.2)

fix(docker): corrige le drift port/version (P0.4)

fix(compose): corrige la régression de démarrage CSRF + découple secure_cookies

refactor(evaluation): extrait ranking/stratification de benchmark_result (P1)

refactor(app): extrait _persist_legacy_benchmark_json de run_orchestrator (P1)

refactor(app): extrait les helpers stateless de run_orchestrator (P1)

hardening(web): streaming uploads à plafonds durs + cookies Secure + cohérence démarrage

hardening(web): durcissement des defaults P0 issus de l'audit prod

fix(adapters): isole les artefacts PAR pipeline — fin du clobber inter-pipelines