Six-check network forensics scan against a fixed canonical target basket. TLS, DNS, CT, NTP, portal, route. Result hash anchored on-chain to Base.