Audit coding agent data flows before login with canary repositories, auth-state diffs, filesystem traces, egress capture, and deletion evidence.