# System Application Audit

See the previous System Application Audit design for the complete architecture, security boundaries, allowed scope, policy model, check catalog, and Admin UI requirements. This v2 bundle adds detail/report behavior and uses `audit.fix.md` for remediation instructions.

## Naming policy

- File base names: lowercase letters and digits only. Do not use `-` or `_` in the base filename.
- Directory names: lowercase letters, digits, and underscore only. Do not use `-` or `.`.
- Existing legacy names must be documented as exceptions and migrated only after all references are updated and tested.

## Tool operation

Use `system-app-audit.sh APP_NAME --details` for actionable output and `--report FILE` for a saved report. See `audit.fix.md` for how to correct each finding.