You already did the work. Prove it.

What makes a bundle worth having

It cannot quietly understate what it did.

Every capability the trace exercised must be declared. Withhold one and gate.no_hidden_capability and gate.authority both fail and name it. A tool Workbench doesn't recognize is recorded as &host.unknown_* — never as ambient, because "we don't know what this needs" and "this needs nothing" are different claims.

It tells you what it left out.

Thinking blocks, subagent turns, unparsable lines — all counted and shown. A zero and a blank look identical in a table and mean opposite things.

It can be handed to someone else.

Three redaction profiles, applied before a bundle is saved. transcript_pii walks observations and tool arguments — a key in a shell command is the likeliest secret in a real session, not one in a payload.