Trace up to three public HTTP redirects and report status semantics, cross-origin hops, HTTPS downgrades, and final-response evidence.