diff --git a/Netgrimoire/Audits/wallo-2026-04-20.md b/Netgrimoire/Audits/wallo-2026-04-20.md
new file mode 100644
index 0000000..de44cf4
--- /dev/null
+++ b/Netgrimoire/Audits/wallo-2026-04-20.md
@@ -0,0 +1,46 @@
+---
+title: Audit - wallo.yaml
+description: Gremlin audit report 2026-04-20
+published: true
+date: 2026-04-20T11:41:44.633Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-20T11:41:44.633Z
+---
+
+# Audit Report — wallo.yaml
+
+**Date:** 2026-04-20  
+**File:** swarm/wallo.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**SWARM AUDIT**
+
+1. **Homepage labels**: PASS
+   - homepage.group: "PNCHarris Apps"
+   - homepage.name: "Wallos"
+   - homepage.icon: "wallos.png"
+   - homepage.href: "https://expense.netgrimoire.com"
+   - homepage.description: "Subscription Manager"
+
+2. **Uptime Kuma labels**: FAIL
+   - Missing kuma.<n>.http.name and kuma.<n>.http.url labels.
+
+3. **Caddy labels on exposed services**:
+   - caddy=expense.netgrimoire.com: PASS
+   - caddy.reverse_proxy=wallos:80: PASS
+
+4. **Placement constraints**: FAIL
+   - Missing node.hostname placement constraint.
+
+5. **Volumes use /DockerVol/<service> path convention**: FAIL
+   - Volumes are not using the /DockerVol/<service> path convention.
+     - /data/nfs/Baxter/Docker/wallos/db: Should be /DockerVol/wallos/db
+     - /data/nfs/Baxter/Docker/wallos/logos: Should be /DockerVol/wallos/logos
+
+6. **Network references external netgrimoire overlay**: PASS
+
+**VERDICT: FAIL**
\ No newline at end of file