Summary

• Add installed CLI bundle auditing with metadata-only JSON/Markdown receipts via uselesskey audit-bundle.
• Validate manifest, artifact, receipt, path containment, scanner-safe, runtime-material, and profile consistency without copying raw payloads.
• Wire audit into external-adoption-smoke so clean-project installed-style paths run bundle, verify, audit, and inspect.
• Add SPEC-0014, reviewer handoff docs, downstream CI docs, lane closeout, and learning record.

Files added/changed

• CLI audit command and tests: crates/uselesskey-cli/src/main.rs, crates/uselesskey-cli/tests/cli.rs
• External/adoption proof wiring: xtask/src/external_adoption_smoke.rs, xtask/src/adoption_regression.rs, xtask/src/main.rs
• Control-plane/spec/docs: .uselesskey/goals/, docs/specs/USELESSKEY-SPEC-0014-installed-bundle-audit.md, plans/installed-bundle-audit/
• Reviewer and CI docs: docs/how-to/share-installed-bundle-audit.md, docs/how-to/use-uselesskey-in-downstream-ci.md, docs/VERIFICATION.md, docs/contract-packs/README.md, examples/external/*/README.md
• No-panic cleanup in touched tests: crates/uselesskey-core/src/srp/seed.rs, crates/uselesskey-webhook/src/lib.rs, xtask/src/main.rs, xtask/src/adoption_regression.rs

Validation

• cargo test -p uselesskey-cli --all-features audit_bundle
• cargo test -p xtask external_adoption_smoke
• cargo xtask external-adoption-smoke --path . --format json
• cargo xtask adoption-regression --external
• cargo xtask spec-check --strict
• cargo xtask docs-sync --check
• cargo xtask typos
• cargo xtask no-blob
• cargo xtask claim-report --check-public-claims
• cargo xtask contract-packs --check
• cargo xtask check-no-panic-family
• cargo +nightly xtask pr-lite
• cargo xtask pr
• cargo fmt --check
• git diff --check

Non-goals

• No v0.10.0 release prep, version bump, tag, or publish.
• No new badges or contract packs.
• No provider compatibility, production security, scanner-evasion, or release-readiness claim.
• No claim-ledger command execution from the installed CLI.
• No raw fixture payload copying into audit receipts.

What this enables next

• Installed users can generate, verify, audit, inspect, and attach metadata-only reviewer packets without cloning the repo.
• Downstream CI can consume stable audit failure classes for bundle consistency and sensitivity-label drift.