Evidence to bring: permissions and data-flow map. Pilot gate: an answer below C blocks real confidential uploads; use synthetic examples while resolving it. Service-level documentation such as Microsoft's must be read alongside the application's own handling.