v1.7.1 — UI audit corrections

What's fixed

Timeline — broken evidence links on audit rows

Audit entries carried no real evidence record but generated clickable links pointing at random hex IDs, opening to "Evidence not found" live panels. Two-site fix: clear EvidenceID in the converter and pass the raw empty string to evidenceDetailLinkHTML so it renders "unavailable". WAF evidence rows (real EvidenceID) are unaffected.

Forensic page — enrichment not running in production

handleForensicPage and handleForensicLookup called s.enrichment directly, which is nil in production. Both handlers now use securityIntelligenceService(), the same factory used by the Security Intelligence page, which falls back to config-initialised service.

Table column widths — four data tables

Timeline, WAF Events, Pipeline Health, and Forensic Local Evidence all used table-layout: fixed with no column hints, giving equal width to every column and truncating source names. Added <colgroup> with explicit rem widths per table.

Dashboard counter — developer TODOs removed from disabled count

Replay, Recovery, and Shadow/cutover were listed as disabled: not wired, inflating DisabledCount from 1 (HA/fencing — real architectural boundary) to 4. The three entries are removed.

Install

curl -LO https://github.com/jmrGrav/security-automation-go/releases/download/v1.7.1/security-automation-go_1.7.1_amd64.deb
curl -LO https://github.com/jmrGrav/security-automation-go/releases/download/v1.7.1/SHA256SUMS
sha256sum -c SHA256SUMS
sudo dpkg -i security-automation-go_1.7.1_amd64.deb
sudo systemctl restart cf-sync