Final direct script sources and exact invocations are authoritative. create-replay.py and downloaded round-one builders are historical scratch helpers, not a recipe to regenerate final acp-replay-shim.py. All logs are sanitized; auth-bearing raw logs, databases and settings are excluded. Native command environment includes secret variable names only, never values.