R13 only. Same supplied capture tooling, relocated to /tmp/lead-24640-r1/capture-r13. driver.mjs before R13 0 1 3 valid and driver.mjs after R13 0 1 3 valid. Fresh app-created databases and synthetic RPC seeds. No databases or credentials included. Full raw logs retain original timing and event values; transient JWT/URL auth values are redacted. Use report.py then r13-report.py to regenerate evidence. real-ps is a host /usr/bin/ps copy (copy before mounting); script executables need chmod +x. namespace.json proves each private ps bind mount. Before worktree e9236274a3a6e0c731a7df4092db1e686f039068; after checkout 63e44670dd1d222cf63619d5e02415f2a9fd3bc2. Ports can be specified with CAPTURE_PORT.
