Summary

• Add a clean-project downstream CI bundle audit example with a copyable GitHub Actions workflow.
• Register the example in external-adoption-smoke so it compiles in the clean-project matrix.
• Advance the downstream CI polish goal from example work to audit receipt golden coverage.

Files added/changed

• examples/external/downstream-ci-bundle-audit/Cargo.toml
• examples/external/downstream-ci-bundle-audit/README.md
• examples/external/downstream-ci-bundle-audit/.github/workflows/uselesskey-audit.yml.example
• examples/external/downstream-ci-bundle-audit/src/lib.rs
• xtask/src/external_adoption_smoke.rs
• .uselesskey/goals/active.toml

Validation

• cargo test -p xtask external_adoption_smoke
• cargo xtask external-adoption-smoke --path .
• cargo xtask adoption-regression --external
• cargo xtask docs-sync --check
• cargo xtask typos
• cargo fmt --all -- --check
• git diff --check

Non-goals

• No release prep, version bump, tag, or publish.
• No new contract packs or badges.
• No provider compatibility, production security, or scanner-evasion claims.

What this enables next

• The audit receipt golden slice can protect stable bundle-audit JSON/Markdown shape now that downstream CI has a concrete installed-user example.