chore(planning): archive shipped pydantic-isolation + security bundles

Promote 2026-06-14.02-pydantic-import-isolation (#62) and
2026-06-14.03-security-hardening (#63) to changes/archive/ with
status: shipped, pr, and outcome filled; move their Index lines from
Active to Archived. The deep-audit umbrella bundle stays active (still
spawning remediation).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: lesnik512

planning/README.md

@@ -74,6 +74,8 @@ carry **no** frontmatter — living prose, dated by git.
 
 ### Archived (shipped)
 
+- **[security-hardening](changes/archive/2026-06-14.03-security-hardening/design.md)** (#63, 2026-06-14) — Closed the [deep-audit](audits/2026-06-14-deep-audit.md) security cluster: URL secret redaction centralized at the `_emit_event` chokepoint (userinfo + sensitive query/fragment keys), opt-in `max_error_body_bytes` + `ResponseTooLargeError` bounding the `stream()` error pre-read, and `trust_env` + header-reachability docs. Non-streaming hard body cap deferred.
+- **[pydantic-import-isolation](changes/archive/2026-06-14.02-pydantic-import-isolation/change.md)** (#62, 2026-06-14) — Guarded the pydantic import so the decoder module loads without the extra and the `architecture/extras.md` Seam-C invariant holds for pydantic. Closed the [deep-audit](audits/2026-06-14-deep-audit.md) High + 2 folded Mediums.
 - **[docs-ux-restructure](changes/archive/2026-06-14.01-docs-ux-restructure/design.md)** (#60, 2026-06-14) — Thin README front-door + canonical `docs/index.md` (G3), why-httpware hook (G1), runnable jsonplaceholder example (G4), nav reorder + architecture links, base-client scrub. G2 dropped; G6 (decoder guide) still open.
 - **[docs-audit-followups](changes/archive/2026-06-13.05-docs-audit-followups/change.md)** (#58, 2026-06-13) — Second docs-audit batch: corrected the overstated invariant-enforcement claims in `CLAUDE.md` + `architecture/overview.md` (only `print()`/blanket-`type: ignore` are machine-checked), readability findings R1–R3, and documented the public `STATUS_TO_EXCEPTION` (G5).
 - **[docs-accuracy-fixes](changes/archive/2026-06-13.04-docs-accuracy-fixes/change.md)** (f203821, 2026-06-13) — Fixed 5 verified factual errors from the [docs audit](audits/2026-06-13-docs-audit.md): RetryBudget formula, modern-di 2.x recipe, contributing-doc CI/grep claim, `just lint` comment, middleware stable-contracts list (+ AsyncTimeout non-finite wording).

…4.02-pydantic-import-isolation/change.md …4.02-pydantic-import-isolation/change.mdplanning/changes/active/2026-06-14.02-pydantic-import-isolation/change.md renamed to planning/changes/archive/2026-06-14.02-pydantic-import-isolation/change.md planning/changes/active/2026-06-14.02-pydantic-import-isolation/change.md renamed to planning/changes/archive/2026-06-14.02-pydantic-import-isolation/change.md

@@ -1,11 +1,11 @@
 ---
-status: draft
+status: shipped
 date: 2026-06-14
 slug: pydantic-import-isolation
 supersedes: null
 superseded_by: null
-pr: null
-outcome: null
+pr: 62
+outcome: Shipped via #62 — pydantic import guarded behind is_pydantic_installed so the decoder module loads without the extra; the architecture/extras.md Seam-C isolation invariant is now true for pydantic. Closed deep-audit High + 2 folded Mediums.
 ---
 
 # Change: Guard the pydantic import so the decoder module loads without the extra

…26-06-14.03-security-hardening/design.md …26-06-14.03-security-hardening/design.mdplanning/changes/active/2026-06-14.03-security-hardening/design.md renamed to planning/changes/archive/2026-06-14.03-security-hardening/design.md planning/changes/active/2026-06-14.03-security-hardening/design.md renamed to planning/changes/archive/2026-06-14.03-security-hardening/design.md

@@ -1,11 +1,11 @@
 ---
-status: draft
+status: shipped
 date: 2026-06-14
 slug: security-hardening
 supersedes: null
 superseded_by: null
-pr: null
-outcome: null
+pr: 63
+outcome: Shipped via #63 — URL secret redaction centralized at the _emit_event chokepoint, opt-in max_error_body_bytes + ResponseTooLargeError bound the stream() error pre-read, trust_env + header-reachability docs. Non-streaming hard body cap deferred (planning/deferred.md).
 ---
 
 # Design: Security hardening — URL secret redaction + bounded error-body reads

…2026-06-14.03-security-hardening/plan.md …2026-06-14.03-security-hardening/plan.mdplanning/changes/active/2026-06-14.03-security-hardening/plan.md renamed to planning/changes/archive/2026-06-14.03-security-hardening/plan.md planning/changes/active/2026-06-14.03-security-hardening/plan.md renamed to planning/changes/archive/2026-06-14.03-security-hardening/plan.md

@@ -1,9 +1,9 @@
 ---
-status: draft
+status: shipped
 date: 2026-06-14
 slug: security-hardening
 spec: security-hardening
-pr: null
+pr: 63
 ---
 
 # security-hardening — implementation plan