docs: add #580 and #581 to the §5.2 delivery log

https://claude.ai/code/session_01XNtnkLbBiXZxfQQYLMpucB

Author: claude

docs/audits/AUDIT_2026-06-10.md

@@ -185,12 +185,13 @@ suites. Writing direct suites for extracted modules surfaced real bugs twice
 earlier in this cycle (the `isRecord` guard fixed in #544 and the stream-stall
 fix in #546), so the method was applied across the remaining gaps.
 Every PR below is independent and based on `main`. The test PRs
-(#559–#575) each mock only the effectful seams and run the real
-identity-matching / retry / parsing logic; the final four rows are
+(#559–#575, plus #580) each mock only the effectful seams and run the
+real identity-matching / retry / parsing logic; the remaining rows are
 follow-ups from the same wave — the L3 convention doc (#576), a
 version-drift fix the wave's full-suite canary caught (#577), a
-dead-code sweep the coverage scan surfaced (#578), and a dedup
-idempotence fix found by a new identity property suite (#579).
+dead-code sweep the coverage scan surfaced (#578), a dedup idempotence
+fix found by a new identity property suite (#579), and an unused
+devDependency removal (#581).
 (The number sequence skips #558 and #562, which are issues — the knip CI
 tracking issue and a maintainer MCP-auth test — not PRs; it also skips
 #568, which is the PR delivering this very section.)
@@ -216,6 +217,8 @@ tracking issue and a maintainer MCP-auth test — not PRs; it also skips
 | [#577](https://github.com/ndycode/codex-multi-auth/pull/577) | `.codex-plugin/plugin.json`, `docs/README.md`, `AGENTS.md`, `test/documentation.test.ts` | live-regression fix found by a full-suite canary vs the §7 baseline: the 2.3.0-beta.2 bump left three stale beta.1 references (plugin manifest, docs-portal release table, AGENTS.md header); adds a doc-integrity guard pinning the AGENTS.md version to package.json |
 | [#578](https://github.com/ndycode/codex-multi-auth/pull/578) | five deleted modules + `lib/AGENTS.md` | dead-code sweep surfaced while verifying coverage convergence: removes 768 LOC of orphaned modules with zero importers repo-wide, incl. a 625-line forecast/report monolith superseded by `commands/forecast.ts`/`commands/report.ts` that was still being patched in parallel (#502, #506) |
 | [#579](https://github.com/ndycode/codex-multi-auth/pull/579) | `lib/storage.ts` + `test/property/account-identity.property.test.ts` | third live bug found by the coverage method: fast-check proved `deduplicateAccounts` non-idempotent (a newest-wins merge in one matching tier can install an account that duplicates an earlier survivor through another tier); fixed with a fixpoint loop, pinned by 9 identity-matching properties incl. a deterministic counterexample replay |
+| [#580](https://github.com/ndycode/codex-multi-auth/pull/580) | `test/account-rate-limits.test.ts` | the extracted per-account rate-limit helpers, previously reachable only via the `accounts.ts` facade: reason-code taxonomy incl. the generic-429 unknown bucket, family vs model-scoped quota keys, expiry-boundary semantics (`now >= reset` clears), model-key precedence, and the expired-entry pruning side effect |
+| [#581](https://github.com/ndycode/codex-multi-auth/pull/581) | `package.json` | drops the unused `@fast-check/vitest` devDependency (the property suites deliberately use plain `fast-check`, so the `test.prop` wrapper has no consumers) |
 
 ---