[1jovansimon]

Local comparison of saved manual scans

Adds explicit history compare BEFORE_UUID AFTER_UUID --directory DIR with terminal/JSON output and optional new-destination HTML. Reads two strictly validated schema-1 snapshots from one project, preserves both records, and never rescans source or recalculates findings against today's catalog.

Integration identities, source evidence, recorded assessment statuses and Scanner/catalog/scope context are compared separately. Unique client scope and embedded record fingerprints are required for like-for-like transitions. Missing, moved, ambiguous, truncated or incompatible evidence remains explicit; disappearing findings never establish a fix. Unknown transitions describe evidence uncertainty, not application health or runtime repair.

The self-contained dashboard preserves the founder-approved desktop design, native collapsed evidence, responsive layout, restrictive CSP and escaping. No JavaScript, external assets, monitoring, repairs, Cloud sync, accounts or paid Cloud features.

Verification

• Local Node 24/macOS: lint, typecheck, 454 tests across 16 files, build, benchmark, package check, archive check and isolated empty-cache offline installation passed.
• Comparison tests cover genuine synthetic Affected → Unknown, matching/ambiguity, corrupt/unsafe records, version/catalog/coverage mismatch, privacy, HTML injection/CSP, traversal/linked output, no-overwrite and immutable records.
• Installed CLI verified with lifecycle scripts disabled and common network transports/parent dependencies blocked; existing scan/history lifecycle checks passed.
• Static mobile/accessibility checks: responsive rules, wrapping, language/headings, native closed details, visible summary focus and normal-text contrast (minimum checked 6.39:1) passed. No browser was available; rendered mobile layout, keyboard/screen-reader behavior and browser CSP enforcement remain manual founder checks.
• Synthetic benchmark retains 14 TP / 0 FP / 2 unsupported FN across 12 fixtures; not a real-world accuracy guarantee.

Scanner/catalog algorithms, existing terminal/JSON serializers, Phase A HTML rendering, history storage/schema/deletion, dependencies/lockfile, licensing and CI remain unchanged. MIT attribution remains Copyright (c) 2026 Jovan Simon. Only eight reviewed Scanner files are included; no private task reports, artifacts, Cloud/waitlist infrastructure or production changes.

Based on verified public main 08560ab0805795b44875c5def3499e37c71b827f, containing PRs #8 and #9. Phase C remains documented as an unmerged review candidate. Local records are not authenticated; positional identities/privacy omissions and portable filesystem race/intermediate-memory limits remain documented.

Ubuntu/macOS CI must complete and founder must review remaining manual checks. Do not merge automatically. No npm publication or release is authorized.