[Knapp-Kevin]

Scope and evidence

• Issue Freshness: reconcile Microsoft Skills from registered July pin #400: exact-version candidate freshness screening for all eight changed Azure SDK Rust packages in the frozen Oct 10 comparison. 8/8 REJECT unchanged (authority hard fails), with individual exact manifest and complete package-tree identities, ten-dimension static rubric, controlled tags, dependencies, privacy/authorization findings, and explicit security/behavioral not-run. Frozen changed-existing screening advances 24/76 → 32/76 (44 remain); the latest whole-source denominator is still unknown.
• Critical finding: azure-keyvault-keys-rust wraps a four-byte/32-bit DEK from rand::random::<u32>().to_le_bytes(). azure-identity-rust and azure-keyvault-secrets-rust print retrieved secret values. No upstream remediation claimed.
• Four historically removed Microsoft canonical paths rechecked as absent at current HEAD; replacements/retirements unresolved.
• Governed discovery: official google/skills at exact revision with 175 README navigation links (NOT an eligible denominator), three inspected manifests, and a distinct AAS directory reference. No automatic admission.

Passive/atomic accounting

Three passive evidence files only. No runtime, scripts, CI, scanners, schedulers, install actions, source pin, source registry, user-facing skill, or governed verification companion changes. Registered Microsoft remains 186/186 at July pin, public totals 44 first-party / 22 sources / 12 pinned corpora / 721 persisted reviews. Five accounting surfaces require no count updates for this candidate-only research. No security scan or behavioral execution occurred.

Merge check

Check actual head SHA, mergeability, reviews/threads/statuses and latest main before expected-head protected merge. PRs #412, #413 and #416 remain independent draft acceptance holds; this PR does not modify their files.