// Runtime-facing signals you can probe locally
telemetry_hosts : none (marketing pledge)
clipboard_sync_channel : disabled by product design
secret_index_policy : entropy-aware FTS5 exclusions
password_mgr_bypass : 1pw | bitwarden | keepassxc
✓ Posture hardened for local workstations