EC-only configuration debt scanner and client-facing assessment. Metadata, counts, and findings only.