Kodiak ECM source audit — scans endpoints for new/changed files. Timer: every 3 hours. Job: kodiak_ecmsourceaudit. Was P1 — ran via legacy cron_wrapper.sh in root crontab, CLI path pointed to non-existent /home/gandalf/projects/. Fixed to /home/gandalf/prod/kodiak/cli.py. Full trio.