AdTAO

Reviewed overlay for SN21 using the official AdTAO website and source repository. 1 community-submitted surface (training-episodes) had no probe config at all -- the registry-wide gap tracked in #5932 -- fixed. Diffed the tracked validator OpenAPI schema (16 paths) against tracked surfaces: /training/episodes, /training/summary, and /v1/registration-status all require a caller-identifying request header per the schema (confirmed live: 422 without it), not public; the /v1/epochs/* routes are parameterized by epoch_id with no stable canonical value. Not tracked: two internal debug endpoints (/debug/memory, /debug/tracemalloc) are unexpectedly public (200, no auth) but only expose Python process memory/GC stats -- no secrets or PII, low-value reconnaissance only, not the kind of intentional public product surface this registry curates.