v0.3: phone check (iPhone, Android) as the Space front page, catalog 0.3 (74 checks), shared vulnerability rules, real-CVE training data

Offline vulnerability matching: inventory in collectors, signed OSV/NVD/KEV/EPSS bundle builder, matcher in the app, tests

Collectors 0.2: user account type, USB device access, pending updates, outdated apps, software inventory; controls document

Stage 1 step 1: read-only collectors, evidence schema, catalog and synthetic data