Update work items and daily logs for project fidelity

- Updated work items with new statuses, notes, and dependencies:
  - `PDIAP-15838` moved to Done, draft PR remains unmerged.
  - `PDIAP-15836` status updated to backlog-ready, sequenced after `PDIAP-15838`.
  - `PDIAP-12284` reopened for UIKit removal, dependency for `PDIAP-15836`.
  - Added new backlog items: `PDIAP-11961`, `PDIAP-11962`, `PDIAP-11562`, `PDIAP-12226`, `PDIAP-12227`, `PDIAP-12228`.
- Completed `PDIAP-16167`, documented findings in Confluence.
- Created daily log for 2026-05-05 summarizing work item updates and backlog triage.
- Added diagnostic script for workspace analysis.

project-knowledge/01-current/work-items.md

@@ -2,7 +2,7 @@
 type: current-work-items
 project: fidelity
 status: active
-updated: 2026-05-04
+updated: 2026-05-05
 tags:
   - current-work
   - work-item
@@ -20,12 +20,36 @@ Update the per-ticket files first when scope, status, sequencing, or communicati
 
 - `PDIAP-15838` - Remove Apollo for iOS
   Detail: `project-knowledge/02-work-items/pdiap-15838.md`
-  Current note: active Apollo-removal cleanup and validation; draft PR is open for internal review. `SampleApp` was updated to a newer `PicoSDK` path so Apollo is removed from the transitive sample-app dependency path too. Do not merge until the previous REST-toggle implementation has been QA-tested and active in production with REST enabled for all consumers for 30 days without issues.
+  Current note: ticket moved to Done after external review feedback was addressed, but the draft PR stays unmerged. Keep the branch up to date with `main` until REST backend is live in production and REST toggles have been enabled for consumers for the required validation window; expected merge timing is at least 30 days out.
 
 - `PDIAP-15836` - Modernize dismissal delegate lifecycle sequencing for pure SwiftUI environment
   Detail: `project-knowledge/02-work-items/pdiap-15836.md`
-  Current note: approved at `8` points, rooted in the AccountLink dismissal sequencing investigation, and sequenced after `PDIAP-15838`.
+  Current note: approved at `8` points and now paired with `PDIAP-12284` for the UIKit-removal implementation path. Do not move to In Progress until the next sprint starts on Thursday after lunch. Treat `PDIAP-15836` as blocked by `PDIAP-12284` unless validation proves the lifecycle fix can be implemented independently.
+
+- `PDIAP-12284` - Remove UIKit wrapping from XFlow
+  Detail: `project-knowledge/02-work-items/pdiap-12284.md`
+  Current note: reopened after rollback and should be handled with `PDIAP-15836`. Work can begin, but Jira status movement waits for the next sprint; merge/release waits until after REST-transition consumer validation.
+
+## Backlog / Future Reference
+
+- `PDIAP-11962` - Closure of secret scanning alerts
+  Detail: `project-knowledge/02-work-items/pdiap-11962.md`
+  Current note: prior closure was submitted on October 9, 2025 and Matthew closed earlier alerts/story on March 5, 2026. Two Google API Key alerts remain open and appear tied to old April 18, 2025 work, not the current REST story.
+
+- `PDIAP-11961` - Remediation of Exposed Secrets in XFlow iOS SDK - Request for Rotation/Invalidation
+  Detail: `project-knowledge/02-work-items/pdiap-11961.md`
+  Current note: related unassigned story for remaining Google API Key alerts; not a current priority but should be preserved for future planning.
+
+- `PDIAP-11562` - Investigate if XFlow is being built as debug
+  Detail: `project-knowledge/02-work-items/pdiap-11562.md`
+  Current note: likely tied to the `XFlowSDK_Debug` variable check in the XFlow podspec and Fid4 consumption, not Sparta-team work; historical Slack suggests Jenkins may build the xcframework path while local development consumes XFlow as a normal library, but this needs current validation.
+
+- `PDIAP-12226`, `PDIAP-12227`, `PDIAP-12228` - Sparta backlog items
+  Details: `project-knowledge/02-work-items/pdiap-12226.md`, `project-knowledge/02-work-items/pdiap-12227.md`, `project-knowledge/02-work-items/pdiap-12228.md`
+  Current note: Slack history ties these to the SpartaSDK follow-up split from initialization/JSON decoding, grid rendering/core components, and interactive/lifecycle behavior. Decoding and rendering are partially complete; interactive components remain blocked by unresolved mobile JavaScript execution.
+
+## Recently Completed
 
 - `PDIAP-16167` - AccountLink - XFlow causing web view rewrites investigation
   Detail: `project-knowledge/02-work-items/pdiap-16167.md`
-  Current note: active documentation/root-cause story for the FTTransfer AccountLink issue. The report should include the `XFlowSDK v0.1.0` rollback evidence and the minimal presentation-anchor fix.
+  Current note: moved to Done after publishing the Confluence report and sending the findings to Zachary / Jira / Discourse. Future references should frame this as a consumer-side SwiftUI presentation-topology issue, not an XFlow/XFlowViewMaker regression.