ops: record the decision to keep the historical ledger test rows (audit L7 — net zero; rewriting the money ledger is worse than the noise)

maintenance/ledger-test-rows.md

@@ -0,0 +1,15 @@
+# Test rows in the credit ledger — deliberately kept (audit L7, 2026-11-05)
+
+The portal `credit_ledger` carries a handful of historical test rows from the
+early build ("test credits (will revert)", "admin test - collective expense",
+and the matching reverts). They are **net zero** against member balances and
+every one is paired with its reversal.
+
+Decision: leave them in place. Rewriting the money ledger — even to remove
+test noise — destroys the audit trail's property of "what's in the table is
+what happened"; the pollution is cosmetic and far outweighed by the cost of
+ever being wrong about a ledger edit. This note is the record; no code or data
+change accompanies it.
+
+If the ledger ever grows a reporting consumer that must exclude them, filter
+by the `reason` text at query time rather than deleting rows.