Add AD1 session data, memory entries for datasheet pipeline and security incident

- Imported AD1 Claude session files to clients/dataforth/session-logs/
- Created memory: project_datasheet_pipeline.md (full pipeline architecture)
- Created memory: project_dataforth_incident_2026-03-27.md (security incident + MFA)
- Updated MEMORY.md index
- Updated session log with AD1 pipeline rebuild findings

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

clients/dataforth/session-logs/project_engr_share_exploration.md

@@ -0,0 +1,83 @@
+---
+name: ENGR share exploration progress
+description: Progress exploring \\AD1\Engineering\ENGR for test datasheet pipeline clues. Key directories identified, ATE/Test Datasheets found.
+type: project
+---
+
+## Share Access
+- Share name is `Engineering` (not `ENGR`): `\\AD1\Engineering\ENGR\`
+- Access via bash: `//ad1/Engineering/ENGR/`
+- AD1 IP: 192.168.0.27
+
+## AD1 Shares (from Get-SmbShare)
+- Engineering -> C:\Engineering
+- ITSvc -> C:\Shares\ITSvc
+- Plus default admin shares (ADMIN$, C$, IPC$, NETLOGON, SYSVOL)
+
+## Current Network Mappings on AD2
+- B: -> \\ad1\itsvc
+- Q: -> \\ad2\c-drive
+- S: -> \\SAGE-SQL\sage
+- T: -> \\ad2\e-drive
+- W: -> \\files-d1\sales
+- X: -> \\ad2\webshare
+- Y: -> \\files-d1\archive
+
+## ENGR Top-Level Structure
+```
+ATE/                    <-- Automated Test Equipment - KEY AREA
+Custom Products/
+DESIGN/
+LABEL/
+MTBF Calculations/
+Project Reports/
+Software/
+Staff Directories/
+Test Equipment/
+```
+
+## ATE Folder Contents (MOST RELEVANT)
+```
+0 D2TESTNAS, 8B, 8B isoLynx SLX300, 8BGangTester, 8BPWR,
+8Bdatabase-changes, ADDR, ATE Networking, All_Model_Specs,
+Application Notes, BACKPANEL TEST FIXTURE PROJECT, Book4.xls,
+CM-3-101, DSCA, DSCP, DSCT, FLUKE 8845A development,
+File Utilities, Fluke Calibration Management,
+High Voltage Input Module Test, KEPCO ABC software, LDM, MENU,
+MS-DOS 6.22, Perforce-Extracted Files-5B&8B isL, Polynomials,
+Print, ProdSW, Python, QB45, RML, RMSIN, SCM5B, SCM5B isoLynx,
+SCM5B_Gang_Tester, SCM7B, SCM7B_Gang_Tester, SCMD, SCMVAS_SCMHVAS,
+TESTLOGS, TPR List, **Test Datasheets**, Test Equipment,
+Tester Notebooks, Toshiba (7-day burn-in), Trouble Shooting,
+Troubleshooting Tools
+```
+
+**KEY FIND: `ATE/Test Datasheets/` exists — not yet explored.**
+
+Also notable in ATE:
+- `QB45/` — QuickBASIC 4.5 source likely here
+- `D2TESTNAS/` — config/docs for the NAS
+- `MS-DOS 6.22/` — DOS setup files
+- `TESTLOGS/` — test log output
+- `ProdSW/` — production software
+- `MENU/` — likely the DOS menu system
+- Various product family folders (8B, SCM5B, SCM7B, DSCA, DSCT, etc.)
+
+## Software Folder Contents
+Mostly installer/tool archives. Notable: QB64, ReDAQ, FieldTalk, Modbus Poll, Visual Studio 2008
+
+## DESIGN Folder Contents
+Product design folders by family. Notable: `Test Equipment Design/` subfolder.
+
+## Next Steps
+1. **Explore ATE/Test Datasheets/** — this is the primary target
+2. Explore ATE/QB45/ — QuickBASIC source that runs on DOS machines
+3. Explore ATE/TESTLOGS/ — test output logs
+4. Explore ATE/ProdSW/ — production software
+5. Explore ATE/D2TESTNAS/ — NAS configuration
+6. Explore ATE/MENU/ — DOS menu system
+7. Look for any upload/sync scripts or scheduled task configs
+
+**Why:** Reconstructing test datasheet pipeline from context clues since AD2 was wiped.
+
+**How to apply:** Continue systematic exploration of \\AD1\Engineering\ENGR\ATE\ subtree, prioritizing Test Datasheets, QB45, TESTLOGS, and any sync/upload related files.