Local CLI that compares recorded handoff JSON and reports path hashes and change kinds. It does not export field values.
Hosted evaluation and billing are disabled. POST /upload returns 501.
Local history stores only redacted reports for the capability token that created them. A token cannot read another tenant. Records expire, and DELETE /history removes that tenant.