Turn an audit finding into a clear implementation ticket with affected URLs, acceptance tests, dependencies, and a rollback decision.