Doc update

docs/irap-poam.md

@@ -1,17 +1,5 @@
 # Plan of Action & Milestones (POA&M) — Diskless Fleet Boot System
 
-> **Protective marking:** `STARFLEET RESTRICTED — CLEARANCE LEVEL 2 — BRIDGE CREW / SECURITY DIVISION`
-> *(marking scheme: `STARFLEET ROUTINE` ≈ OFFICIAL · `STARFLEET RESTRICTED` ≈
-> OFFICIAL: Sensitive · `STARFLEET SECRET` ≈ PROTECTED · `OMEGA DIRECTIVE` ≈
-> SECRET and above — see the [SAR](irap-sar.md) banner.)*
->
-> **Source:** IRAP security assessment 2026-07-10 — see the
-> [Security Assessment Report](irap-sar.md). Weaknesses derive from the SSP
-> [Annex A residual-risk register](ssp-annex-a-ism-residual-risk.md) (R-NN) and
-> the assessor's additional findings (F-NN, SAR §5.2). The repo's
-> [TODO.md](TODO.md) remains the engineering-level working backlog; this POA&M
-> is the authorisation-facing view and the two must be kept in sync.
-
 | Field | Value |
 |---|---|
 | POA&M version | 1.2 (adds P-24 / SAR F-08 — DNS/DHCP residual flows: kiosk HTTP, UKI rollback) |

docs/irap-sar.md

@@ -1,17 +1,5 @@
 # Security Assessment Report (SAR) — Diskless Fleet Boot System
 
-> **Protective marking:** `STARFLEET RESTRICTED — CLEARANCE LEVEL 2 — BRIDGE CREW / SECURITY DIVISION`
-> *(Starfleet marking scheme used throughout this document set:
-> `STARFLEET ROUTINE` ≈ OFFICIAL · `STARFLEET RESTRICTED` ≈ OFFICIAL: Sensitive ·
-> `STARFLEET SECRET` ≈ PROTECTED · `OMEGA DIRECTIVE` ≈ SECRET and above.
-> Confirm against the system's final data classification.)*
->
-> **Assessment framework:** Australian Government PSPF + ASD *Information
-> Security Manual* (ISM), May 2026 release (engagement target). This report is
-> the IRAP assessor's Security Assessment Report produced under stage 4
-> (**Assess**) of the ISM assessment and authorisation lifecycle, for use by the
-> Authorising Officer at stage 5 (**Authorise**).
-
 | Field | Value |
 |---|---|
 | System assessed | Diskless Fleet Boot System ("the fleet") |