# Discovery verification Requirements: `REQ-PRODUCT-DISCOVERY`, `REQ-AU-PIXELS`. Automated tests cover URL credential/path/query/fragment removal; no storage-value reads; separate reference/request provenance; blocked/partial APIs; bounded buffers/DOM/names; strict schema/date/enum/duplicate validation; origin-bound inventory comparison; ambiguous candidate mappings; `self` origins; stylesheets and selected responsive images; UI explicit capture, escaping, detached reports, download revocation and failure recovery; CLI explicit files, private config exclusion, bounded errors and no-overwrite/symlink behavior. Packed consumers verify optional subpath imports/types with no framework dependency. Host tests verify the example's runtime policy and script-free legal routes. Actual browser inspection verified an initial/rejected capture without the synthetic marker, an allowed capture with an exact-name candidate for its declared service/purpose, and a withdrawn capture without that marker. Editing the scenario removed prior download links. A capture was downloaded through the browser’s native link, then analyzed by the actual CLI with an explicit loopback origin. The CLI succeeded, preserved configured/observed origin distinctions and the withdrawal scenario, and wrote a git-ignored private review without the marker. These checks do not prove full network coverage, absence of tracking, permission validity or regional compliance. The reviewer identified and regression-tested `self` origin resolution plus stylesheet/selected responsive-image visibility. Explicit staging-origin handling remains visible in the report. Actual browser search and type filters isolated the declared choice-memory candidate, and “Unmapped only” removed it from the view without changing the capture download URL or captured totals. Midnight review was inspected at 390px and 320px with no horizontal document overflow. See [desktop review]() and [mobile review](). All 11 discovery tests pass within the full 216-package/24-site test check. Remaining checks include deeper network/frame/worker/storage coverage, cross-platform and assistive-technology review.