[Audit] No forced password change for the admin/admin default (USR-9)

[hellodk]

Auto-filed by the external multi-persona audit (2026-06). Do not fix until reviewed.

Auditor persona: Common User
Severity: High
Finding ID: USR-9

Location

README.md:141

Evidence

'change this immediately under Settings' is advisory only; no first-login enforcement

Impact

A distracted operator leaves the control plane (SSH keys, node secrets, playbook execution) behind a universal default with zero UX friction preventing it.

Recommended fix

Force a password change on first login, or show a persistent banner until the default is changed.

---

_{Tracked in the audit report. Labels: severity = p1-high.}