审计历史

All 16 static findings are false positives from documentation, Markdown delimiters, or intended desktop operations. No evidence found of credential theft, screenshot upload, prompt injection, or unauthorized reconnaissance in the reviewed passages. AUV installation, OS permissions, and stored desktop evidence still require careful user control; external runtime implementations were not audited.