Merge pull request #10 from MacFall7/audit/2026-05-03-hardening

docs: voice-pass cleanup, remove two em dashes

Author: MacFall7

.env.example

@@ -62,7 +62,7 @@ M87_ENABLE_TEST_ENDPOINTS=false
 # M87_MOUNT_CHECK_ENABLED=1
 #
 # Quarantine state machine (escalates posture on integrity signals;
-# in-memory only as of v2 scaffolding — see docs/HARDENING.md)
+# in-memory only as of v2 scaffolding; see docs/HARDENING.md)
 # M87_QUARANTINE_ENABLED=1
 
 # ---- Service-internal config (defaults shown; uncomment to override) ----

docs/HARDENING.md

@@ -513,7 +513,7 @@ and on by default.
 See `.env.example` for the documented surface.
 
 **Note on architecture:** These flags are not configurable security
-overrides in the meta-constraints sense — they are environment-fitness
+overrides in the meta-constraints sense. They are environment-fitness
 checks that fail-closed when enabled but assume environment fitness
 when disabled. The semantic asymmetry is intentional for dev/CI
 parity. Production operators should always enable them.