modules: canonicalize '# OFLAG:' comments and mark untested modules

- Standardize per-module '# OFLAG:' comments to reflect packaging-time '-Oz' enforcement, pre-configure sed normalization, or 'Untested' status.
- Mark modules that had no build logs in the retest as 'Untested in prior retest'.
- Update documentation and remove generated audit CSVs.
- Delete leftovers oflags tracking files
- Delete forgotten files in past testing

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

Author: tlaurion

build_OFLAG_inventory.csv

@@ -60,3 +60,14 @@ Notes & next steps
 
 - Kernel config note (moved)
   - Note: kernel-config changes to enable `CONFIG_TMPFS` and `CONFIG_MEMFD_CREATE` have been applied repository-wide; see the header comment in `initrd/bin/kexec-boot` for rationale and validation guidance.
+
+Sed normalization patterns
+- Generic pre-configure sed applied across multiple modules normalizes optimization flags to `-Oz`:
+  - Pattern: `sed -e 's/-O[0-9]\+/-Oz/g' -e 's/-Os/-Oz/g'`
+  - Effect: replaces `-O0`, `-O1`, `-O2`, `-O3`, `-Ofast` with `-Oz` and replaces `-Os` with `-Oz` in generated configure scripts and Makefiles.
+  - Placement: applied in `module_configure` target before `./configure` invocation or in pre-build hooks.
+  - Artifact cleanup: `.bak` files generated by sed are removed to avoid confusion with source artifacts.
+
+Notes:
+- `openssl` — Verified OK: packaging explicitly sets `CFLAGS="-Oz"` in `modules/openssl` and built logs (`build/x86/log/openssl.log`) show compile commands with `-Oz` only. No packaging-time sed changes required.
+- All fixes validated with V=1 reproducible builds (x86 & ppc64) and rescanned using `scripts/collect_oflags.py` to confirm no `-O2`/`-O3` in built module logs.

build_oflags_summary.csv

@@ -1,10 +1,11 @@
 # GNU bash
 modules-$(CONFIG_BASH) += bash
 
-# Inventory classification: OK - no -O2/-O3
 
-# TODO(-OFLAG): OFLAG status: OK — `-Oz` occurrences found in build logs (111 occurrences; evidence: build/x86/log/bash.log, build/ppc64/log/bash.log).
-# Action: none required; verified in cross-build logs. (audit updated 2026-01-27)
+# OFLAG: Enforce CFLAGS='-Oz' at packaging time (set in configure wrapper)
+# GCC15-BASH: Added -std=gnu11 for C23 keyword compatibility (bool, true, false conflicts)
+
+
 
 bash_version := 5.1.16
 bash_dir := bash-$(bash_version)
@@ -15,7 +16,6 @@ bash_hash := 5bac17218d3911834520dad13cd1f85ab944e1c09ae1aba55906be1f8192f558
 # --enable-debugger: Enables BASH_SOURCE tracing through functions as well as
 # BASH_ARGV/BASH_ARGC.  (Otherwise BASH_SOURCE[0] is empty when calling a
 # function, it's only set in top level script code.)
-# TODO(GCC15-BASH): Added -std=gnu11 for C23 keyword compatibility (bool, true, false conflicts)
 # Also patched lib/termcap/tparam.c to include <unistd.h> for write() function declaration
 # Consider reverting when bash is updated for GCC 15.1.0 compatibility
 bash_configure := CFLAGS="-g0 -Oz -std=gnu11" LDFLAGS="-s" ./configure \

build_oflags_summary_built_only.csv

@@ -2,9 +2,11 @@
 CONFIG_BUSYBOX ?= y
 modules-$(CONFIG_BUSYBOX) += busybox
 
-# Inventory classification: OK - no -O2/-O3
 
-# TODO(-OFLAG): OFLAG status: OK — no `-O2`/`-O3` occurrences found in build logs (evidence: build/x86/log/busybox.log, build/ppc64/log/busybox.log). (audit updated 2026-01-27)
+# OFLAG: No packaging-time OFLAG normalization applied; validate with V=1 builds if needed.
+
+
+
 
 busybox_version := 1.36.1
 busybox_dir := busybox-$(busybox_version)

build_oflags_summary_built_only_combined.csv

@@ -1,19 +1,20 @@
 modules-$(CONFIG_CAIRO) += cairo
 
-# Inventory classification: OK - no -O2/-O3
 
-# TODO(-OFLAG): OFLAG status: OK — no `-O2`/`-O3` occurrences found in current build logs (evidence: build/x86/log/cairo.log).
-# Action: none required; verified. (audit updated 2026-01-27)
+# OFLAG: Enforce CFLAGS='-Oz' at packaging time (set in configure wrapper)
+# GCC15-CAIRO: GCC 15.1 C23 standard requires workaround flags
+
+# Note: Cairo 1.18.0+ switched to Meson build system (1.16.0 was last autotools version).
+# Upgrading would require additional build infrastructure changes beyond simple autotools configure/make pattern
+
+
 
 cairo_version := 1.14.12
 cairo_dir := cairo-$(cairo_version)
 cairo_tar := cairo-$(cairo_version).tar.xz
 cairo_url := https://www.cairographics.org/releases/$(cairo_tar)
 cairo_hash := 8c90f00c500b2299c0a323dd9beead2a00353752b2092ead558139bd67f7bf16
 
-# TODO(GCC15-CAIRO): GCC 15.1 C23 standard requires workaround flags
-# Note: Cairo 1.18.0+ switched to Meson build system (1.16.0 was last autotools version).
-# Upgrading would require additional build infrastructure changes beyond simple autotools configure/make pattern
 cairo_configure := \
 	CFLAGS="-DCAIRO_NO_MUTEX=1 -std=gnu11 -Wno-inline -Wno-incompatible-pointer-types -Oz"  \
 	$(CROSS_TOOLS) \