docs(tracking): document technical debt and missing features from final assessment

Author: rmax

NEXT_STEPS.md

@@ -14,7 +14,11 @@
 - [x] **M42.5+**: Refined Policy Guide (Shared vs Isolated) and Configuration Guide (Defaults).
 - [x] **MCP Guide**: Created `docs/guides/mcp.md` and linked from index.
 - [x] **Docs Polish**: Added Financial Governance to Policy Guide and Cluster Federation to Deployment Guide.
-- [ ] **Phase 16 Continues**: Focus on Release Prep (Epic 13/31) and final pre-release validation.
+- [x] **Project Assessment**: Verified test coverage and identified missing features (Reports stub, Graph updates, hardcoded forecast).
+- [ ] **M43.1 (Reports)**: Implement real CSV generation in `pkg/reports/csv.go` and add tests.
+- [ ] **M43.2 (Graph)**: Implement `PolicyUpdated` handling in `pkg/graph/projection.go`.
+- [ ] **M43.3 (Hardening)**: Fix hardcoded `resetAt` and add tests for `pkg/mcp` and `pkg/blob`.
+- [ ] **Phase 16 Continues**: Final pre-release validation and debt paydown.
 
 ## Phase History
 - [x] **M42.1, M42.2, M42.3**: User Documentation (Concepts, API Ref, Guides).

PROGRESS.md

@@ -86,3 +86,5 @@
 | M42.3++: SDK Documentation Refresh (JS/Py/Go) | COMPLETED | Docs | 2026-02-07 |
 | M42.5+: User Docs Refinement (Shared vs Isolated, Config Defaults) | COMPLETED | Orchestrator | 2026-02-07 |
 | docs/guides/mcp.md | DRAFTED | Docs | 2026-02-07 |
+| Project Assessment (Test Run & Code Review) | COMPLETED | Orchestrator | 2026-02-07 |
+| Epic 43: Final Polish & Debt Paydown | PLANNED | Orchestrator | 2026-02-07 |

TASKS.md

@@ -615,4 +615,17 @@ Focus: Create user-facing documentation to explain concepts and usage.
     - [x] Update `docs/guides/web-ui.md` (Graph, Cluster, Reports).
     - [x] Create `docs/guides/mcp.md` (MCP Integration).
 
+## Epic 43: Final Polish & Debt Paydown
+Focus: Address technical debt, stubbed features, and missing tests identified during final assessment.
+- [ ] **M43.1: Complete Reporting Engine**
+    - [ ] Implement actual CSV generation logic in `pkg/reports/csv.go`.
+    - [ ] Add unit tests for `pkg/reports`.
+- [ ] **M43.2: Complete Graph Projection**
+    - [ ] Handle `PolicyUpdated` events in `pkg/graph/projection.go`.
+    - [ ] Optimize graph traversal (Index for O(1) lookup).
+- [ ] **M43.3: Hardening & Configuration**
+    - [ ] Remove hardcoded `resetAt` in `pkg/engine/forecast/service.go`.
+    - [ ] Add unit tests for `pkg/mcp` (Server and Handlers).
+    - [ ] Add unit tests for `pkg/blob` (Local Store).
+