agent trust boundaries fail silently, with no log, no error when docs stay in text, so visitors bounce without seeing what crosses the token.
i wired playwright in CI to render demo records side by side, so reviewers inspect what crosses. unverified claims are just marketing.
