TR mirror drift in docs/usermanuals/en/reference/cli.md: Validates monotonic timestamps, prev_hash chain integrity, seq gap detection, and HMAC (DOC-TR10-002) #325

Wave 1 · theme D1-10: Documentation-only fixes · highest severity High · 1 finding(s) · effort docs fix

Summary

neither; only prev_hash chain, optional HMAC and genesis-manifest are checked

Primary finding

DOC-TR10-002 — TR mirror drift in docs/usermanuals/en/reference/cli.md: Validates monotonic timestamps, prev_hash chain integrity, seq gap detection, and HMAC

severity High

Where. EN docs/usermanuals/en/reference/cli.md:22,215 · TR docs/usermanuals/tr/reference/cli.md:22,215

English text. Validates monotonic timestamps, prev_hash chain integrity, seq gap detection, and HMAC

Turkish text. Monoton timestamp'leri, prev_hash zincir bütünlüğünü, seq boşluk tespitini ve HMAC imzalarını doğrular

Which is correct. neither; only prev_hash chain, optional HMAC and genesis-manifest are checked

Proposed correction (Turkish text for the -tr page). verify-audit yalnızca SHA-256 prev_hash zincirini, (secret verilirse) _hmac etiketlerini ve genesis manifest sidecar'ını doğrular. Timestamp monotonluğu ve seq boşluğu KONTROL EDİLMEZ. Not: --hmac-secret-env verilip --require-hmac verilmezse _hmac taşımayan satırlar sessizce atlanır; zincirin anahtarlı olduğundan emin olmak için --require-hmac kullanın.

Acceptance criteria

• Each statement is re-checked against the code at fix time.
• Documentation listed above is corrected in English and in its Turkish mirror in the same PR.
• Every finding in this issue is resolved or explicitly closed with a reason.

_{Found by the October 2026 ForgeLM code and documentation review against commit cab2947. Code links point at that commit; line numbers may have moved since. Finding IDs (CR-…, DOC-…, TECH-…) are stable references for this backlog.}