docs: add #582 usage-redaction suite to the §5.2 delivery log

https://claude.ai/code/session_01XNtnkLbBiXZxfQQYLMpucB

Author: claude

docs/audits/AUDIT_2026-06-10.md

@@ -185,7 +185,7 @@ suites. Writing direct suites for extracted modules surfaced real bugs twice
 earlier in this cycle (the `isRecord` guard fixed in #544 and the stream-stall
 fix in #546), so the method was applied across the remaining gaps.
 Every PR below is independent and based on `main`. The test PRs
-(#559–#575, plus #580) each mock only the effectful seams and run the
+(#559–#575, plus #580 and #582) each mock only the effectful seams and run the
 real identity-matching / retry / parsing logic; the remaining rows are
 follow-ups from the same wave — the L3 convention doc (#576), a
 version-drift fix the wave's full-suite canary caught (#577), a
@@ -219,6 +219,7 @@ tracking issue and a maintainer MCP-auth test — not PRs; it also skips
 | [#579](https://github.com/ndycode/codex-multi-auth/pull/579) | `lib/storage.ts` + `test/property/account-identity.property.test.ts` | third live bug found by the coverage method: fast-check proved `deduplicateAccounts` non-idempotent (a newest-wins merge in one matching tier can install an account that duplicates an earlier survivor through another tier); fixed with a fixpoint loop, pinned by 9 identity-matching properties incl. a deterministic counterexample replay |
 | [#580](https://github.com/ndycode/codex-multi-auth/pull/580) | `test/account-rate-limits.test.ts` | the extracted per-account rate-limit helpers, previously reachable only via the `accounts.ts` facade: reason-code taxonomy incl. the generic-429 unknown bucket, family vs model-scoped quota keys, expiry-boundary semantics (`now >= reset` clears), model-key precedence, and the expired-entry pruning side effect |
 | [#581](https://github.com/ndycode/codex-multi-auth/pull/581) | `package.json` | drops the unused `@fast-check/vitest` devDependency (the property suites deliberately use plain `fast-check`, so the `test.prop` wrapper has no consumers) |
+| [#582](https://github.com/ndycode/codex-multi-auth/pull/582) | `test/usage-redaction.test.ts` | the usage-ledger redaction/normalization contracts (previously reachable only via the `usage/index.js` facade): identifier hashing, account refs storing only hashes, the unknown-outcome -> `failure` fallback (never miscounted as success), token clamping/total recompute, the 100..599 status window, cost fallback to the pricing estimate, and the serialized JSONL line never containing raw account id or email |
 
 ---