- add r2 CLI timeouts and cap structural sweeps - fix SQL return-source taint and base64 blob filtering - document vendor lanes and Ghidra .sla runtime policy