v11-upstep-audit — prplOS MR !3019

Ambiorix v11.44.1 upstep + QoS forward-port, adversarial audit

prplOS MR !3019 upsteps 23 Ambiorix components to v11.44.1 and forward-ports four QoS components — 1,013 non-merge commits across 27 repositories, landed as two feed-pin changes. Every commit was classified by a deterministic pre-classifier or read by two independently framed LLM raters and adjudicated by Opus 5: 734 OK, 257 SCRUTINIZE, 22 BLOCKER, of which 20 are still present in the tree the new pins would ship. Deterministic checks found all 27 packages switched from hash-verified tarballs to unpinned branch clones with PKG_MIRROR_HASH:=skip, 206 re-authored commits with 153 dropped Signed-off-by trailers, an MR description citing two hashes that resolve nowhere, seven Device.QoS.Classification parameters removed from the cram fixtures without mention, 102 re-imported commits that lost their prpl Jira references (with 172 GitOrigin-RevId back-pointers that resolve nowhere in public history), and 171 default-branch commits with no exact twin in the prpl/stable-v11.44.1 pins: most turn out to be present verbatim or in modified form, but two main-side code fixes are confirmed missing and the pins retain libsahtrace code the default branch had reverted. The recommendation is not to merge as-is, subject to seven concrete conditions.