Read-only runtime checks in a script — host, container, one-host network, mobile snapshot, model output, and Nuclei results. Code and image scanning stay in AngusSecurity.