Reviewed whitelisted provider/capture/file-operation scripts, command/stat/media-event logs and full-viewport sampled frames of every paired recording. Sandbox account fixture@example.invalid only; public README outputs only. No live userdata copied. Signed URLs replaced by source-N IDs. No settings, .env, database, raw fake request, pairing URL, startup/server log, private setup recording, or prior userdata included. Browser console/network dumps deliberately excluded.
