Redacted excerpt; full evidence withheld.

$ cd <host-path> && git log -1 --format=%H 2>/dev/null; ls -la; cat README.md | head -200
exit: 0
ll findings into statutory DPDP groups: *Identity & Official Identifiers*, *Financial & Banking Details*, and *Contact & Communications*.
- **Retention Staleness Risk**: Flags files unedited for >1 year and >3 years to prevent unlawful retention under Section 8(7) of the DPDP Act.
- **High-Risk Exposure Analysis**: Automatically highlights unprotected folders (`Downloads/`, `Desktop/`) containing sensitive identifiers.

### 5. Offline Reporting & Optional Zero-Knowledge Sync
- **Local Artifacts**: Outputs self-contained interactive HTML dashboards (`reports/scan_report.html`) and structured JSON inventory catalogs (`reports/scan_report.json`).
- **Optional Zero-Knowledge Cloud Sync**: If (and only if) the operator consents, sends aggregate metrics (data types, counts, and category summaries) to the EasyDP platform to populate the enterprise Data Inventory (DIM-01). File contents and raw customer identities are **never** transmitted.

---

[excerpt truncated]