Perform evidence-based security scanning for AgenticOS deployments without mutating production state.