STEP_TYPE=targeted read-only source snapshot plus report publication SOURCE_FILES=exact byte copies from live VM130 SECRETS_POLICY=token file not copied; state capture limited to URL/reference lines LIMITATION=canonical VM130 source snapshot is not replaced by this targeted evidence report