v0.13.45: @newsroom.writer: application behaviour policies, with the compromise map

Application behaviour policies, updated with the PHP story site's new compromise map.

• What the map shows. As of 20:50 UTC on 22 October: millions of attempts; three vendors reporting exploitation without naming a victim; one named organisation attacked, the attack stopped; none saying php2shell was the way in. Behind it, 184 vault sources, 773 watched pages, 3,444 news items and 295 probed sites.
• Three readings of the silence. Harder to exploit than it looks; compromises not disclosed; attackers unusually quiet. The silence lowers the likelihood, not the blast radius.
• Is this where everyone should be looking? A question for a researcher's data on the week's other flaws.
• Corrected. The report that the fix might be incomplete was answered by PHP's security team on 22 October.