drop allowed devices + shared accounts · enumerate hidden accounts + crypto + offshore platforms within stipulation · runs locally
device inventory · account audit · local only
heuristic screener · vendor schema varies · not definitive proof