{
  "client_exit_code": 0,
  "transport": "HTTPS with explicitly trusted ephemeral local CA",
  "scope": "same-origin free development reference",
  "gateway_evidence_failures": [],
  "runtime_credentials": "temporary directory removed after run",
  "outbound_provider_calls": "application has no outbound provider/payment implementation; client restricts destinations to configured origin"
}