post-mortem-author

No malware is evident in this fragment. It indicates a significant configuration-governance risk: after the directory move, CODEOWNERS appears not to enforce the intended two approvals for config/gateways files, and configuration changes may deploy directly at full traffic without the code canary stage. The incident data documents impact but does not identify its cause. Assessment is limited to the shown evidence and does not assume unseen content is absent.