What an AI agent leak actually looks like — and what my scanner can (and can't) catchBuilding in public. Solo, local-zero, validate before