Fixed

Reduce native application-writer write amplification for metadata-heavy QUIC/UDP evidence using a finite 64 KiB byte buffer and moved JSON fields. Observation identity, nonblocking queue admission, the 64-event pending bound, failure accounting, and existing performance budgets remain unchanged (#413).

Doctor now explains native Deep Capture residue with stable plain-language guidance and width-aware layouts, while JSON exposes exact structured lifecycle and recovery facts without changing cleanup eligibility or behavior.

fragcap steam list now renders a display-cell-aligned table or labeled vertical records instead of raw tab-separated fields, preserving complete long and localized title values while leaving JSON and target state unchanged.

Automatic target registration now accepts authoritative Steam identities or verified local engine evidence only. Exact Steam client subtrees are excluded from generic known-root classification, so platform infrastructure and location-only folders no longer become targets automatically.

Update the exact Rustls pin to 0.23.45 to reject TLS 1.3 handshake messages across encryption-level boundaries (RUSTSEC-2026-0285). The existing ring provider, selected features, upstream verification, and scoped session authority remain unchanged.