diff --git a/docs/architecture/RECON-czujniki-2026-07-30.md b/kb/audits/czujniki-2026-07-30.md
similarity index 99%
rename from docs/architecture/RECON-czujniki-2026-07-30.md
rename to kb/audits/czujniki-2026-07-30.md
index ce2a04a..9f99edb 100644
--- a/docs/architecture/RECON-czujniki-2026-07-30.md
+++ b/kb/audits/czujniki-2026-07-30.md
@@ -1,3 +1,13 @@
+---
+okf: "0.1"
+type: audit
+visibility: private
+status: active
+updated: 2026-07-30
+as_of: 2026-07-30
+links: []
+---
+
 # Recon — node-agent vs stability-agent (2026-07-30)
 
 Read-only recon. Ground truth: `docs/architecture/RECON-multiagent-2026-07-27.md`
diff --git a/docs/infra/lustro-shipping-recon-2026-07-16.md b/kb/audits/lustro-shipping-2026-07-16.md
similarity index 99%
rename from docs/infra/lustro-shipping-recon-2026-07-16.md
rename to kb/audits/lustro-shipping-2026-07-16.md
index 8650e12..bda3d2d 100644
--- a/docs/infra/lustro-shipping-recon-2026-07-16.md
+++ b/kb/audits/lustro-shipping-2026-07-16.md
@@ -1,3 +1,13 @@
+---
+okf: "0.1"
+type: audit
+visibility: private
+status: active
+updated: 2026-07-16
+as_of: 2026-07-16
+links: []
+---
+
 # Recon: lustro `event=dead prom=up` — 1507 mismatchy w shadow-liveness.log (2026-07-16)
 
 READ-ONLY recon. Zero zmian w kodzie/serwisach. Wszystkie czasy **UTC**
diff --git a/docs/infra/piha-slim-audit-2026-07-02.md b/kb/audits/piha-slim-2026-07-02.md
similarity index 99%
rename from docs/infra/piha-slim-audit-2026-07-02.md
rename to kb/audits/piha-slim-2026-07-02.md
index f299f1c..63fafa7 100644
--- a/docs/infra/piha-slim-audit-2026-07-02.md
+++ b/kb/audits/piha-slim-2026-07-02.md
@@ -1,3 +1,13 @@
+---
+okf: "0.1"
+type: audit
+visibility: private
+status: active
+updated: 2026-07-02
+as_of: 2026-07-02
+links: []
+---
+
 # Audyt odchudzania PIHA — 2026-07-02
 
 > Faza 1 (READ-ONLY) modulu 0 filaru dokumentow (`docs/kb/modules/00-piha-slim.md`).
diff --git a/docs/infra/prometheus-cutover-recon-2026-07-06.md b/kb/audits/prometheus-cutover-2026-07-06.md
similarity index 99%
rename from docs/infra/prometheus-cutover-recon-2026-07-06.md
rename to kb/audits/prometheus-cutover-2026-07-06.md
index 0602b9f..18bb307 100644
--- a/docs/infra/prometheus-cutover-recon-2026-07-06.md
+++ b/kb/audits/prometheus-cutover-2026-07-06.md
@@ -1,3 +1,13 @@
+---
+okf: "0.1"
+type: audit
+visibility: private
+status: active
+updated: 2026-07-06
+as_of: 2026-07-06
+links: []
+---
+
 # Prometheus liveness cutover — recon starego toru (2026-07-06)
 
 Read-only recon przed cutoverem liveności floty na Prometheus `up{}`. Mapa obecnego
diff --git a/docs/infra/vps-audit-2026-07-27.md b/kb/audits/vps-stacki-2026-07-27.md
similarity index 99%
rename from docs/infra/vps-audit-2026-07-27.md
rename to kb/audits/vps-stacki-2026-07-27.md
index 076f85d..3c22138 100644
--- a/docs/infra/vps-audit-2026-07-27.md
+++ b/kb/audits/vps-stacki-2026-07-27.md
@@ -1,3 +1,13 @@
+---
+okf: "0.1"
+type: audit
+visibility: private
+status: active
+updated: 2026-07-27
+as_of: 2026-07-27
+links: []
+---
+
 # Audyt niezarządzanych stacków na VPS — 2026-07-27
 
 Recon read-only przed konsolidacją do GitOps. Zebrane przez `ssh vps` (user `oskar`,