1# PCH-02 Fix Drafts23Drafts for all 10 findings of `peach-code-review.md` (Fable 5, 2026-06-12):41 Low (PCH-02-001), 9 Informational. Drafted against v4.0.0, dev lane,5baseline 117 test files / 3474 tests green, `tsc --noEmit` clean.67**Nothing outside `src/drafts/PCH-02-FIXES/` was modified.** Both gates8exclude this folder (`tsconfig.json` excludes `src/drafts`; `vitest.config.ts`9excludes `src/drafts/**`), so the drafts are inert until integrated.1011Every `*.patch.md` carries exact before/after code anchored to the cited12file:line, the rationale, compatibility verification, and its integration13save message. Every `*.test.ts` is written with destination-form imports and14a `DESTINATION:` header — copy to the stated path, no rewrite needed.1516| Finding | Severity | Draft | Kind |17|---|---|---|---|18| PCH-02-001 update-entry sanitizers | Low | `PCH-02-001-vault-patch-sanitizers.patch.md` + `vault.update-entry-sanitize.test.ts` | code + 8 tests |19| PCH-02-003 SAS trust model | Info | `PCH-02-003-sas-trust-model-comment.patch.md` | doc only |20| PCH-02-004 exact-pin deps | Info | `PCH-02-004-exact-pin-deps.patch.md` + `WASM-PROVENANCE.md` | manifest of pins + new doc |21| PCH-02-005 legacy PBKDF2 | Info | `PCH-02-005-legacy-pbkdf2-doc.patch.md` | doc + small UI notice |22| PCH-02-007 HIBP padding | Info | `PCH-02-007-hibp-add-padding.patch.md` + `vault.hibp-padding.test.ts` | code + 3 tests |23| PCH-02-008 BinaryReader bounds | Info | `PCH-02-008-binaryreader-bounds.patch.md` + `peachPayload.binaryreader-bounds.test.ts` | code + 8 tests |24| PCH-02-010 clipboard hash match | Info | `PCH-02-010-clipboard-hash-match.patch.md` + `clipboard.hash-match.test.ts` | **decision: Option A (doc) recommended / Option B (code + 4 tests + ⚠ permission)** |2526Integration sequencing, decisions, and the full contract:27`INTEGRATION-CONTRACT.md`.