Require observed squad start before terminal status, dual high-risk confirm/reject, computed overlay diffs, real A/B contexts, UI logout, and UI_PHASE post-restart evidence. Sanitize network paths; no mocks. Co-authored-by: Cursor <cursoragent@cursor.com>