Local stealth verification with no external detector: reports mode (connect vs launch), live fingerprint probes (navigator.webdriver / window.chrome / plugins / UA-headless) as pass/fail, and an audit of the active overrides for the path (incl. the iframe-proxy state from #4). `--json` for a stable shape agents can gate a sensitive flow on. Distinct from `doctor` (install/env health).