Capability host — leaked-password interception is active.
alice@thecompany-lab.com
/ password for the breached flow, or
bob@thecompany-lab.com /
Str0ng-Unique-Passphrase!2026 for the clean flow. These are
synthetic PoC credentials, not real credentials. See the verification guide.