Third‑party capture (scope‑locked)

Scope lock (mapping-only)

• No cookies/localStorage/sessionStorage
• No form field values
• No auth tokens
• No request payloads

Allowed: URL + timestamp + screenshot hash + optional response headers hash + optional HTML hash.

Reality Audit

Integrity signal only — not a legal outcome.