wiki: repository integrity — the eight checks, and why five were advisory first noetl/ai-meta#390. The three findings the gate could only report are fixed in the generator (noetl/cli#93: arm64 built every release, --multiversion, --arch, Release written via a temp path) and promoted to failures (noetl/apt#3), plus a fourth for architecture leakage that had never been reported. Documents the generator details that carry the fixes, because each is easy to undo by accident -- a redirect straight into dists/<suite>/Release reintroduces the self-entry, and dropping --arch sends every .deb into one index. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>