diff --git a/.console/log.md b/.console/log.md
index f3740f0..b741b77 100644
--- a/.console/log.md
+++ b/.console/log.md
@@ -102,3 +102,10 @@ Added a minimal CHANGELOG.md so M1 (and M5 format check) pass.
 Reorder per canonical convention: What X is → What X is not → Quick
 start → Architecture → ...
 
+
+## 2026-05-08 — Custodian round: OConsole clean (39 → 0)
+
+T6/T7 exclude_paths for src/operator_console/** (TUI exercised via CLI,
+not name-imported in tests). T8 for test_architecture_demo.py (subprocess+curses).
+common_words += git_watcher (subcommand name, not a Python symbol).
+
diff --git a/.custodian/config.yaml b/.custodian/config.yaml
index a959352..de8450d 100644
--- a/.custodian/config.yaml
+++ b/.custodian/config.yaml
@@ -70,11 +70,21 @@ audit:
       # OperatorConsole is a TUI application — bootstrap, command dispatch,
       # and display modules are validated through integration use, not unit tests.
       - "src/operator_console/**/*.py"
+    T6:
+      # Same rationale: TUI modules used through CLI invocation, not name-import.
+      - "src/operator_console/**"
+    T7:
+      - "src/operator_console/**"
+    T8:
+      # Architecture-demo test exercises the layout via subprocess + curses.
+      - tests/test_architecture_demo.py
 
   # K1 suppressions: config key names in architecture docs that are not Python
   # def/class names but appear in implementation context ("has `status_repos`").
+  # git_watcher is a console subcommand name, not a Python symbol.
   common_words:
     - status_repos
+    - git_watcher
 
 tools:
   ruff: true