drop librewolf profile · parse hardened firefox artifacts
flags hardened prefs · telemetry disable · container tabs · extension scope
heuristic screener · parses artifacts locally · no password cracking or live network · sqlite/json may be partial · not definitive proof