diff --git a/Netgrimoire/Audits/wallo-2026-04-27.md b/Netgrimoire/Audits/wallo-2026-04-27.md
new file mode 100644
index 0000000..ba60624
--- /dev/null
+++ b/Netgrimoire/Audits/wallo-2026-04-27.md
@@ -0,0 +1,46 @@
+---
+title: Audit - wallo.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:41:28.982Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:41:28.982Z
+---
+
+# Audit Report — wallo.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/wallo.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+**SWARM AUDIT**
+
+1. **Homepage labels:** 
+   - `homepage.group`: PASS
+   - `homepage.name`: PASS
+   - `homepage.icon`: PASS
+   - `homepage.href`: PASS
+   - `homepage.description`: PASS
+
+2. **Uptime Kuma labels:**
+   - `kuma.wallos.http.name`: PASS
+   - `kuma.wallos.http.url`: PASS
+
+3. **Caddy labels on exposed services:**
+   - `caddy=expense.netgrimoire.com`: PASS
+   - `caddy.reverse_proxy=wallos:80`: PASS
+
+4. **Placement constraints:** 
+   - No placement constraint specified, which is acceptable if it's not a requirement.
+
+5. **Volumes use `/DockerVol/<service>` path convention:**
+   - Not applicable in this configuration as no volume paths are set to follow the specified convention.
+
+6. **Network references external netgrimoire overlay:**
+   - `netgrimoire`: PASS
+
+**VERDICT:** PASS
\ No newline at end of file