TR mirror drift in docs/usermanuals/en/reference/cli.md: validates the nine Annex IV fields and recomputes the manifest hash. Exit 0 when valid ... 6 when manifest hash no longer matches (DOC-TR10-005) #328

Wave 1 · theme D1-10: Documentation-only fixes · highest severity High · 1 finding(s) · effort docs fix

Summary

neither; exit 0 is also returned when metadata.manifest_hash is absent (hash check skipped)

Primary finding

DOC-TR10-005 — TR mirror drift in docs/usermanuals/en/reference/cli.md: validates the nine Annex IV fields and recomputes the manifest hash. Exit 0 when valid ... 6 when manifest hash no longer matches

severity High · already tracked: KNOWN-OPEN TRUST-05 docs/roadmap/phase-16-trust-surface-hardening.md:440-441

Where. EN docs/usermanuals/en/reference/cli.md:225 · TR docs/usermanuals/tr/reference/cli.md:225

English text. validates the nine Annex IV fields and recomputes the manifest hash. Exit 0 when valid ... 6 when manifest hash no longer matches

Turkish text. manifest hash'ini yeniden hesaplar. Geçerliyse exit 0 ... manifest hash artık eşleşmiyorsa 6

Which is correct. neither; exit 0 is also returned when metadata.manifest_hash is absent (hash check skipped)

Proposed correction (Turkish text for the -tr page). Ekleyin: 'metadata.manifest_hash yoksa hash karşılaştırması ATLANIR ve komut yine de 0 döner (reason: tampering detection skipped); damga anahtarsız SHA-256'dır, dosyaya yazabilen biri silebilir veya yeniden damgalayabilir. Gerçek özgünlük kanıtı için --pipeline modunu ve FORGELM_AUDIT_SECRET ile korroborasyonu kullanın.'

Acceptance criteria

• Each statement is re-checked against the code at fix time.
• Documentation listed above is corrected in English and in its Turkish mirror in the same PR.
• Every finding in this issue is resolved or explicitly closed with a reason.

_{Found by the October 2026 ForgeLM code and documentation review against commit cab2947. Code links point at that commit; line numbers may have moved since. Finding IDs (CR-…, DOC-…, TECH-…) are stable references for this backlog.}