REG-D11 / AUD-07 — FIXED: BOUNDARIES zk row states the CLM-089 boundary
Recorded 2026-09-21 (UTC) on the working host; commands run from the repository root.

CHECK (executed)
$ grep -n 'CLM-089`\: no setup' docs/BOUNDARIES.md
30:| Zero-knowledge inclusion proof feasibility | Circuit cost is linear in leaf length; a leaf built with a small or zero `max_forensic_bytes` proves and verifies (`CLM-089`: no setup, proving, verification or proof-size figure is claimed) | `max_forensic_bytes` is **not configurable through the gateway** — `aegis/proxy/app.py` constructs `CryptographicAuditLedger` without it and `aegis/config.py` defines no setting or environment variable for it — so every gateway-written leaf uses the 65,536-byte default, a ~262 KB hex-encoded prefix, and on the order of 10⁸ constraints (`CLM-089`); only an in-process caller passing `max_forensic_bytes` directly to the ledger constructor can produce a provable shape. Nothing bounds a declared shape either: `zk_verifier_key(prefix_len, path_depth, peak_count)` allocates from three caller-supplied integers with no backing bytes, so a verifier deriving a key from a prover-published shape must bound it themselves first. See [`institutional/DOC-08_ZERO_KNOWLEDGE_INCLUSION.md`](institutional/DOC-08_ZERO_KNOWLEDGE_INCLUSION.md) §6.3 and §6.5. |
$ grep -c 'setup 2.5 s' docs/BOUNDARIES.md || true
0
0 (0 = the measured numbers are gone)

DIFF (shared fix commit)
$ git show --stat --oneline 8ccea5f
8ccea5f fix(AUD-07/15/16/17 + trivial batch): MAR citation, blocked wording, boundary text
 aegis/core/crypto_audit.py                    |  4 +--
 aegis/core/export_audit_log.py                |  7 +++-
 aegis/core/market_abuse_detector.py           |  7 ++--
 aegis/core/mifid_record_keeper.py             | 15 ++++----
 aegis/core/worm_ledger.py                     |  3 +-
 aegis/proxy/app.py                            |  2 +-
 aegis/proxy/mtls.py                           |  2 +-
 aegis_rust_v2/src/hasher.rs                   |  3 +-
 docs/BOUNDARIES.md                            |  3 +-
 docs/REGISTRY.md                              |  2 +-
 docs/ROADMAP.md                               | 52 +++++++++++++--------------
 docs/architecture/DEEP_DIVE.md                |  4 +--
 docs/assurance/AUDIT_EVIDENCE_INDEX.md        |  2 +-
 docs/compliance/COMPLIANCE_MAPPING.md         |  2 +-
 docs/compliance/EU_AI_ACT_TECHNICAL_INPUTS.md |  4 +--
 docs/compliance/HIPAA_TECHNICAL_INPUTS.md     |  4 +--
 docs/institutional/UNSUPPORTED_CLAIMS.md      | 14 ++++----
 17 files changed, 71 insertions(+), 59 deletions(-)

DOC GATES (executed)
"warnings": 0
}
verify_claims: PASS (102 claims, 0 findings)
verify_links: PASS (1355 relative links and anchors resolved)
verify_docs: PASS (0 findings)
