docs: record 1.7.6 auth/security audit tail

AGENTS.md

@@ -2322,6 +2322,11 @@ Rules:
       stacking dialogs; the desktop welcome prompt no longer races an in-progress
       sign-in. Language selection returns to the menu. APK sha256 `bdb25384…`,
       versionCode 10705. Web forced live.
+    - **1.7.6 (2026-10-28):** auth is app-wide via `AuthDialogContext` (Layout owns
+      the dialogs), so signup survives the conditional unmount of any page-card
+      `LoginArea`; Esc/keyboard close wired explicitly; language search resets on
+      close; trip-itinerary URLs sanitized. APK sha256 `d8cf3e4a…`, versionCode
+      10706. Web forced live.
 
 ### Relay archive (dataset backup)
 - **Transfer content between keys (`scripts/transfer-content.mjs`, 2026-10-04):**
@@ -3184,6 +3189,20 @@ Skip-to-content is a button that focuses `<main>` (HashRouter-safe).
 keeps `stateRef` in sync cross-tab; the backup flag is per-account
 (`lib/backup.ts`). Listing detail / Events render `ErrorState` on outage.
 
+**2026-10-28 audit tail.** `npm audit` reports 11 advisories (5 high, 1
+critical). The critical/high tail is **`protobufjs` via
+`onnxruntime-web`/`onnx-proto`** (translation model parsing; models come only
+from our HTTPS model host and the translation guard blocks every other origin —
+no user-supplied ONNX), **`sharp`** (Node-only transformers dependency; not used
+by the browser worker), and **`xlsx`** (write-only; parse CVEs do not apply).
+The rest are dev-only (`@capacitor/cli`/xcode/uuid, Tailwind
+typography/postcss). No safe automatic fix without crossing the ONNX
+Runtime/transformers major; revisit with that upgrade. AI-generated itinerary
+links now go through `sanitizeUrl`; every `target="_blank"` has
+`rel=noopener noreferrer`; no `javascript:`/raw user HTML paths found. Auth is
+now app-wide via `AuthDialogContext` so signup survives card/page unmounts, and
+all internal nav links match a route.
+
 **Deferred (documented, NOT fixed).**
 - `H1` — **PARTIAL**: `claim-from` now stores the original **coordinate**
   (`30818:pubkey:d`, not an ambiguous bare pubkey), `SkateSpot` parses