{
  "files": 70,
  "findings": [],
  "scope": "packet bytes only; no live config, secrets or database read"
}