Legacy cryptography audit records

These AGORA-era records remain at their original URLs for provenance. Artifact availability varies by program; an attestation commits to a recorded artifact hash and timestamp, not the correctness or completeness of the scan.