Cover run record I/O, vulnerability markdown rendering, CSV severity ordering, and executive report output.