docs: audit file commit search endpoints

AI.md

@@ -11,17 +11,18 @@ When the user says this is a new chat or asks to continue mars-nwe work, first
 read this file before proposing patches or making assumptions.  Then ask for, or
 use, the current project status that the user pasted into the chat.
 
-## Current handoff status after patch 0197
+## Current handoff status after patch 0202
 
 The current accepted patch line in this chat is expected to include:
 
 - endpoint-audit/documentation patches through `0176-docs-audit-direct-lifecycle-buffer-endpoints.patch`;
-- redesign documentation patches `0177` through `0197`;
-- latest confirmed patch name: `0197-docs-define-nwserv-control-plane-role.patch`.
+- redesign documentation patches `0177` through `0198`;
+- endpoint-audit/documentation patches `0199` through `0202`;
+- latest expected patch name: `0202-docs-audit-file-commit-search-endpoints.patch`.
 
 When continuing in a new chat, first ask the user which patch was actually last
-applied.  If they confirm `0197`, build the next patch as `0198-...` against a
-tree that already contains `0197`.  If any patch failed or was skipped, rebuild
+applied.  If they confirm `0202`, build the next patch as `0203-...` against a
+tree that already contains `0202`.  If any patch failed or was skipped, rebuild
 against the last confirmed applied patch instead of assuming the file in
 `/mnt/data` was accepted.
 
@@ -32,7 +33,7 @@ Known numbering/patch-history notes from this chat:
   `0188`.  Do not reuse that old file.
 - Use `0189-docs-clarify-imported-nwlog-backend-layout.patch` instead.
 - Then use `0190-docs-clarify-simple-syslog-nwlog-backends.patch`, followed by
-  `0191` ... `0197`.
+  `0191` ... `0202`.
 
 The user prefers patch verification snippets to contain only:
 
@@ -431,3 +432,23 @@ verified smoke value is `010203040506` and the Linux xattr dump should show:
 ```text
 user.org.mars-nwe.afp.prodos-info=0x010203040506
 ```
+
+
+## Latest endpoint audit checkpoint
+
+As of patch `0202-docs-audit-file-commit-search-endpoints.patch`, the latest
+audited block is the old direct file commit/search group in `src/nwconn.c`:
+
+- `0x2222/59` / wire `0x3b` Commit File;
+- `0x2222/61` / wire `0x3d` Commit File;
+- `0x2222/62` / wire `0x3e` File Search Initialize;
+- `0x2222/63` / wire `0x3f` File Search Continue;
+- `0x2222/64` / wire `0x40` Search for a File.
+
+The next direct old file-I/O block to audit is expected to start at
+`0x2222/65` / wire `0x41` and continue through the old direct file operations
+up to `0x2222/77` / wire `0x4d`, unless the user asks to switch to AFP, NCP 22,
+NCP 23, EA, namespace, packet burst, or another family first.
+
+Remember: for every new endpoint-audit patch, also update this AI handoff file
+with the latest audited block and expected next patch number.