docs(audit): part 10 - config deletion opened, dependency map logged

FORK-AUDIT.md

@@ -410,3 +410,37 @@ Our egress guard (src/guard/index.ts, installed at CLI entrypoint)
 already logs all outbound requests to ~/.local/state/neuron-guard.jsonl
 and blocks vendor hosts in NEURON_GUARD=strict mode. It would have
 caught RC#1/RC#3 traffic on day one.
+
+---
+
+# PART 10: CONFIG DELETION - CAMPAIGN #1 OPENED (2026-08-22, uncommitted)
+
+## Action taken (working tree only, uncommitted)
+- DELETED: packages/opencode/src/config/config.ts entirely (640 lines of
+  authority-routing: layering, merging, well-known discovery, remote
+  fetches, account/enterprise adapters).
+- REPLACED WITH: ~50-line minimal local config
+  (~/.config/neuron/config.json; model + providerBaseURL; nothing else).
+  No remote fetch. No layering. No precedence machinery.
+- Earlier same session: the 41-line .well-known/opencode injection block
+  cut from the same file (verified by diff, Part 9 RC#1).
+
+## THE DEPENDENCY MAP (typecheck fallout = who fed on config)
+KEEP + REWIRE: provider/provider.ts (59), session/llm.ts, format,
+lsp, command, skill, tool/*, snapshot, compaction, prompt, processor.
+DIES WHOLE: mcp/index.ts (RC#3), share/share-next.ts + share/session.ts
+(opncd.ai), agent/agent.ts remote-defined agents (replaced by Rung 1
+kernel + ledger-owned agents), server/routes experimental handlers,
+control-plane/* (Part 9 RC#5).
+
+## STATE
+- Working tree modified, NOTHING COMMITTED, nothing built from it yet.
+- Next build must compile from this state; typecheck errors are the
+  campaign worklist above, not blockers to bundling.
+
+## STANDING RULE LEARNED
+Context is sovereign territory: quarantined sources are characterized,
+never displayed. Greps find confessions; reading finds behavior. The
+problem file was packages/opencode/src/config/config.ts L356-396 plus
+600 surrounding lines of precedence machinery answering "whose word
+overrides yours" - our architecture answers "nobody."