[Wave 3] Medium — TR mirror: docs/usermanuals/en/data/pii-masking.md #630

Wave 3 · 6 finding(s) in 6 fix package(s). English/Turkish mirror drift for this document pair; fix the side the finding names.

Findings

• DOC-TR12-031 (TR mirror, Medium) — TR mirror drift in docs/usermanuals/en/data/pii-masking.md: detects nine categories of PII ... These eight are the complete set
  severity Medium
  Where. EN docs/usermanuals/en/data/pii-masking.md:8,19-23 · TR docs/usermanuals/tr/data/pii-masking.md:8,19-23
  English text. detects nine categories of PII ... These eight are the complete set
  Turkish text. dokuz kategori PII ... Bu sekizi tam kümedir
  Which is correct. Eight.
  Proposed correction (Turkish text for the -tr page). ForgeLM'in regex maskeleyicisi sekiz PII kategorisini tespit eder; ingest sırasında yalnızca --pii-mask veya --all-mask verildiğinde redakte eder.

• DOC-TR12-032 (TR mirror, Medium) — TR mirror drift in docs/usermanuals/en/data/pii-masking.md: Phone: E.164-compatible + locale variants; Locales table (TR default, DE/FR, Global fallback)
  severity Medium
  Where. EN docs/usermanuals/en/data/pii-masking.md:15,75-83 · TR docs/usermanuals/tr/data/pii-masking.md:15,75-83
  English text. Phone: E.164-compatible + locale variants; Locales table (TR default, DE/FR, Global fallback)
  Turkish text. E.164-uyumlu + locale varyantları; Locale'ler tablosu
  Which is correct. No locales; phone requires '+CC' or '(area)' prefix.
  Proposed correction (Turkish text for the -tr page). Telefon: yalnızca +ÜlkeKodu ... veya (alan) ... biçimleri; locale seçimi yoktur. 'Locale'ler' tablosunu kaldırın.

• DOC-TR12-033 (TR mirror, Medium) — TR mirror drift in docs/usermanuals/en/data/pii-masking.md: IBAN: Country-aware checksum (example TR12 0006 4000 ...); TC kimlik: Modulo-10 + modulo-11
  severity Medium
  Where. EN docs/usermanuals/en/data/pii-masking.md:17-18 · TR docs/usermanuals/tr/data/pii-masking.md:17-18
  English text. IBAN: Country-aware checksum (example TR12 0006 4000 ...); TC kimlik: Modulo-10 + modulo-11
  Turkish text. Ülke-bilinçli checksum; Modulo-10 + modulo-11 checksum
  Which is correct. IBAN = ISO 7064 mod-97 + uzunluk 15-34 (ülkeye özgü uzunluk yok); TC kimlik = iki mod-10 kontrolü; örnek IBAN geçersiz.
  Proposed correction (Turkish text for the -tr page). IBAN: ISO 7064 mod-97 (örnek olarak mod-97'yi geçen bir IBAN kullanın, ör. TR33 0006 1005 1978 6457 8413 26); TC kimlik: 10. ve 11. hane için iki mod-10 checksum kontrolü.

• DOC-TR12-034 (TR mirror, Medium) — TR mirror drift in docs/usermanuals/en/data/pii-masking.md: The PII regexes are deliberately tuned for low false-positive rate.
  severity Medium
  Where. EN docs/usermanuals/en/data/pii-masking.md:56-62 · TR docs/usermanuals/tr/data/pii-masking.md:56-62
  English text. The PII regexes are deliberately tuned for low false-positive rate.
  Turkish text. PII regex'leri bilinçli olarak düşük false-positive oran için ayarlanır.
  Which is correct. Only checksum-validated families are low-FP; others deliberately over-report.
  Proposed correction (Turkish text for the -tr page). Checksum doğrulaması olan aileler (kredi kartı, IBAN, TC kimlik) düşük false-positive için ayarlıdır; diğerleri kasıtlı olarak fazla raporlar (insan değerlendirmesi için).

• DOC-TR12-035 (TR mirror, Medium) — TR mirror drift in docs/usermanuals/en/data/pii-masking.md: ⚠ PII: 18 emails, 4 phone, 2 IBAN (medium severity) ; lists row indices and offsets
  severity Medium
  Where. EN docs/usermanuals/en/data/pii-masking.md:70,73 · TR docs/usermanuals/tr/data/pii-masking.md:70,73
  English text. ⚠ PII: 18 emails, 4 phone, 2 IBAN (medium severity) ; lists row indices and offsets
  Turkish text. ⚠ PII: 18 e-posta, 4 telefon, 2 IBAN (orta seviye); satır indisleri ve offset'leri listeler
  Which is correct. Neither: counts only; IBAN is critical and gates exit 3.
  Proposed correction (Turkish text for the -tr page). PII : email=18, phone=4 PII severity : worst tier = medium Rapor yalnızca sayımları tutar; satır indisi veya offset yoktur. IBAN critical katmandadır ve --allow-pii yoksa exit 3 verir.

• DOC-TR12-036 (TR mirror, Medium) — TR mirror drift in docs/usermanuals/en/data/pii-masking.md: For a Presidio ML-NER pass with a locale hint, pass --pii-ml-language to the CLI: (ingest command)
  severity Medium
  Where. EN docs/usermanuals/en/data/pii-masking.md:91-98 · TR docs/usermanuals/tr/data/pii-masking.md:91-98
  English text. For a Presidio ML-NER pass with a locale hint, pass --pii-ml-language to the CLI: (ingest command)
  Turkish text. Presidio ML-NER geçişi için locale ipucu vermek üzere CLI bayrağını kullanın: (ingest komutu)
  Which is correct. Neither: --pii-ml/--pii-ml-language belong to forgelm audit, not ingest; audit takes one path (no shell glob).
  Proposed correction (Turkish text for the -tr page). ML-NER geçişi yalnızca forgelm audit altındadır: forgelm audit data/ --output ./out/ --pii-ml --pii-ml-language de. İkinci (ingest) örneği kaldırın ve glob yerine tek dosya/dizin verin.

Done when

• Every finding above is fixed or closed with a reason (tick it here).
• Code fixes carry a test; doc fixes update the Turkish mirror in the same PR.

_{Found by the October 2026 ForgeLM code and documentation review against commit cab2947. Code links point at that commit; line numbers may have moved since. Finding IDs (CR-…, DOC-…, TECH-…) are stable references for this backlog.}