Decode native diff paths without revalidation

docs/roadmap/audit/catalog.md

@@ -1,6 +1,6 @@
 # Consolidated audit catalog
 
-Status: **4 distinct open findings: 4 P3**, consolidated from 30
+Status: **3 distinct open findings: 3 P3**, consolidated from 30
 numbered entries in seven audit documents. Reviewed audit state:
 `db732e3a1de55c844f77870e1c6db683c2685d5d`.
 
@@ -507,6 +507,9 @@ construction becomes linear.
 
 ## F23 — P3: Concise diff rendering validates already-valid native paths
 
+**Complete.** The private decoder accepts ConfigKit's native path and performs
+single-pass token decoding. Focused diff, token and snapshot tests pass.
+
 ckconfig's private pointer decoder validates arbitrary strings even though its
 sole production caller supplies the canonical string of an immutable ConfigKit
 `Path`. Tests sustain malformed-input branches that this boundary cannot reach.