Locked, existing-only offline physical and Event replay diagnostics.

No activation, writer capability, job data or partial candidate is returned. Successful inspection is not authorization to mutate or a backup certificate. Resource limits are operational budgets and never alter physical validity.