diff --git a/Netgrimoire/Audits/journiv-2026-04-03.md b/Netgrimoire/Audits/journiv-2026-04-03.md
new file mode 100644
index 0000000..d12bb9c
--- /dev/null
+++ b/Netgrimoire/Audits/journiv-2026-04-03.md
@@ -0,0 +1,27 @@
+---
+title: Audit - journiv.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:57:23.495Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:57:23.495Z
+---
+
+# Audit Report — journiv.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/journiv.yaml  
+**Type:** Docker Compose  
+**Verdict:** FAIL
+
+---
+
+PASS: Caddyfile has a global block for Crowdsec configuration.
+PASS: All services are reverse-proxied through Caddy, ensuring they do not expose ports directly.
+
+FAIL:
+- The service at `fish.pncharris.com` is missing a Caddyfile entry.
+- No entries exist for the subdomains of `webmail.netgrimoire.com`.
+
+VERDICT: FAIL
\ No newline at end of file