[workflow-audit] 3 unexplained change(s) on 2026-09-12

3 unexplained commit(s) in the audit window (`.github/workflows/ .config/tend.yaml .github/audit/ .vscode/`) since `2026-09-11T12:09:50Z`.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

### `13ca270` — Add isolated Hosted accounts with pgstencil Better Auth

- **Author:** Ned Twigg (self-declared; not proof of origin)
- **Date:** 2026-09-11 15:56:24 -0700
- **Refs:** remotes/origin/hosted-auth
- **Files:**
- `.github/audit/application-security.md`
- [View diff](https://github.com/diffplug/dormouse/commit/13ca270c34ff68cc162dd0ae48545349a172fe0a)

### `1ba83d7` — Add isolated Hosted PR previews and verified production releases

- **Author:** Ned Twigg (self-declared; not proof of origin)
- **Date:** 2026-09-11 16:23:26 -0700
- **Refs:** remotes/origin/hosted-auth
- **Files:**
- `.github/workflows/hosted-preview.yml`
- `.github/workflows/hosted-production.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/1ba83d7d9a9ba5ce11cb119009b8206d13be9518)

### `fd5181b` — Verify the PR merge revision for Hosted previews

- **Author:** Ned Twigg (self-declared; not proof of origin)
- **Date:** 2026-09-11 16:25:16 -0700
- **Refs:** remotes/origin/hosted-auth
- **Files:**
- `.github/workflows/hosted-preview.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/fd5181b74d187eb4c6d5bb7a2bad4d49030aa3ea)

Comienza revisando las entradas de auditoría en .github/audit/application-security.md y los diffs vinculados de los commits 13ca270, 1ba83d7 y fd5181b. Inspecciona los archivos afectados de .github/workflows/ y su hosted-auth ref, y después compara los cambios con el resumen de ejecución. Se considera terminado cuando cada uno de los tres commits tiene una explicación humana documentada o ha sido escalado para investigación.

Escrito por el modelo de indexación a partir del texto del issue.