[Wave 3] Medium — TR mirror: docs/guides/iso_soc2_deployer_guide.md #624

Wave 3 · 5 finding(s) in 5 fix package(s). English/Turkish mirror drift for this document pair; fix the side the finding names.

Findings

• DOC-TR08-024 (TR mirror, Medium) — TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: Configure webhook lifecycle (url_env, secret_env, notify_on_)
  severity Medium · already tracked: KNOWN-OPEN C31-DOC-SCHEMA-PROSE docs/roadmap/phase-16-trust-surface-hardening.md:860-862
  Where. EN docs/guides/iso_soc2_deployer_guide.md:67-68 · TR docs/guides/iso_soc2_deployer_guide-tr.md:69-70
  English text. Configure webhook lifecycle (url_env, secret_env, notify_on_)
  Turkish text. Webhook lifecycle yapılandır (url_env, secret_env, notify_on_*)
  Which is correct. Neither: there is no secret_env field (config.py L1466-1475); webhook bodies are not signed (as TR L300-303 itself says).
  Proposed correction (Turkish text for the -tr page). Webhook lifecycle'ı yapılandırın (url_env, notify_on_start/success/failure); secret_env alanı yoktur ve webhook gövdeleri imzalanmaz.

• DOC-TR08-025 (TR mirror, Medium) — TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: Enable auto_revert: true so a regression rolls back to the baseline model automatically
  severity Medium · already tracked: KNOWN-OPEN DOCS-04 docs/roadmap/phase-16-trust-surface-hardening.md:760-765
  Where. EN docs/guides/iso_soc2_deployer_guide.md:69-71 · TR docs/guides/iso_soc2_deployer_guide-tr.md:71-72
  English text. Enable auto_revert: true so a regression rolls back to the baseline model automatically
  Turkish text. kalite regresyonu otomatik olarak baseline modele döner
  Which is correct. Neither (verified misleading): auto_revert deletes the failed model (model.reverted); it does not restore/roll back to a baseline model.
  Proposed correction (Turkish text for the -tr page). auto_revert: true etkinleştirin; kalite kapısı başarısız olursa başarısız model silinir ve model.reverted event'i yazılır (baseline modele otomatik geri dönüş YAPILMAZ).

• DOC-TR08-026 (TR mirror, Medium) — TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: promoted artefacts remain hash-verified through model_integrity.json / model.integrity_verified
  severity Medium
  Where. EN docs/guides/iso_soc2_deployer_guide.md:133-135 · TR docs/guides/iso_soc2_deployer_guide-tr.md:133-135
  English text. promoted artefacts remain hash-verified through model_integrity.json / model.integrity_verified
  Turkish text. hash ile doğrulanmaya devam eder
  Which is correct. Neither (verified misleading): hashes are recorded; verification happens only when verify-integrity is run.
  Proposed correction (Turkish text for the -tr page). Terfi edilen artefaktların SHA-256 değerleri model_integrity.json içine kaydedilir; doğrulama otomatik değildir, forgelm verify-integrity çalıştırıldığında yapılır (uyuşmazlık exit 6).

• DOC-TR08-027 (TR mirror, Medium) — TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: flat data_provenance.json with hf_revision_source loaded/unverified/unresolved; compliance-only always unverified
  severity Medium
  Where. EN docs/guides/iso_soc2_deployer_guide.md:163-189 · TR docs/guides/iso_soc2_deployer_guide-tr.md:163-189
  English text. flat data_provenance.json with hf_revision_source loaded/unverified/unresolved; compliance-only always unverified
  Turkish text. aynı
  Which is correct. Neither (verified broken example/wrong detail): real file shape and value set differ.
  Proposed correction (Turkish text for the -tr page). Örnek çıktıyı gerçek data_provenance.json yapısıyla değiştirin ve hf_revision_source değerlerini forgelm/compliance.py kaynağından birebir alın; tablo yazılmadan önce doğrulanmalıdır.

• DOC-TR08-028 (TR mirror, Medium) — TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: Article 17: forgelm purge --row-id ... erases the subject's data
  severity Medium
  Where. EN docs/guides/iso_soc2_deployer_guide.md:273-284 · TR docs/guides/iso_soc2_deployer_guide-tr.md:272-283
  English text. Article 17: forgelm purge --row-id ... erases the subject's data
  Turkish text. aynı
  Which is correct. Neither (verified misleading): purge removes one row from one corpus file only; models, backups, synthetic data are not erased (see gdpr_erasure.md).
  Proposed correction (Turkish text for the -tr page). forgelm purge yalnızca belirtilen corpus dosyasından ilgili satırı siler; eğitilmiş modeller, yedekler ve türetilmiş veriler kapsam dışıdır — Madde 17 yanıtı için gdpr_erasure-tr.md'deki sınırları belirtin.

Done when

• Every finding above is fixed or closed with a reason (tick it here).
• Code fixes carry a test; doc fixes update the Turkish mirror in the same PR.

_{Found by the October 2026 ForgeLM code and documentation review against commit cab2947. Code links point at that commit; line numbers may have moved since. Finding IDs (CR-…, DOC-…, TECH-…) are stable references for this backlog.}