Sync docs, audit artifacts, project notes, and VerdictTank proposal docs

- audit/phase-one + phase-two: security audit briefs, findings, credential-rotation plan, Docker-USER hardening scripts, rollback refs
- disaster-recovery/restore-test-log.md + backup-dr-audit-2026-08-10.md
- clients/ (modelortho SEO audit, ai-biz-dev competitive landscape), notes/ (tiktok strategy)
- projects/: front-desk-voice-agent, seo-visibility-checker product plan, hotnow-savannah HTML, resend-transactional-email, backup-dashboard-enhancements, code-review-graph, seo-ci-architecture
- proposals/verdicttank/: architecture v4.0, methodology, judge-pool review, consolidation reasoning, cross-check review
- docs/super-search/firecrawl-provider-strategy.md
- updates: CHANGELOG, model-chain, projects-master-readme, intelsight.io
- .gitignore: exclude nested standalone repos (seo-tool, venturebuilt)

audit/phase-two/running-exemptions.md

@@ -0,0 +1,37 @@
+# Running Exemptions Document
+
+Authority: Germaine Brown is the sole authorizer of any departure from the
+Policy & Procedure document (P&P section 8). No exemption is assumed; it is requested,
+justified, approved, and recorded here.
+
+## Schema
+
+| Field | Meaning |
+|---|---|
+| ID | EX-### |
+| Date | When requested/approved (ET) |
+| Requester | Who raised it |
+| Provision departed from | Which P&P section/policy |
+| Request + justification | The business reason |
+| Authorization | Germaine's decision |
+| One-time / ongoing | Duration |
+| Follow-up date | For ongoing exemptions |
+| Status | open / closed |
+
+---
+
+## Entries
+
+### EX-001: Public-repo credential exposure (D3) deferred
+
+| Field | Value |
+|---|---|
+| ID | EX-001 |
+| Date | 2026-08-13 (raised in Phase One, re-surfaced at Phase Two start) |
+| Requester | Germaine Brown |
+| Provision departed from | P&P section 1 (no live credentials in any repo): the public repo `itpp-infrastructure` re-leaks live admin credentials |
+| Request + justification | Defer the repo lockdown ("leave the repo alone for now") while Phase One was read-only |
+| Authorization | Deferred by Germaine in Phase One |
+| One-time / ongoing | One-time, with a Phase Two follow-up |
+| Follow-up date | Phase Two start (now): this is Workstream 1 item 10 (D3/EX-001) |
+| Status | OPEN: pending Germaine's updated decision now that Phase Two is starting |