Inspect dependency, SBOM and CI evidence for vulnerable packages, unsafe permissions and registry resolution risks.
Add bounded artifact inspection, synthetic correction fixtures and portable playback.
