drop filevault recovery key + system state · validate · runs locally
drop filevault recovery key + system state · local only
heuristic screener · vendor schema varies · not definitive proof