P0-2 plain image investigation

Disposable public dummy image only. No API calls, checkout credentials, cookies inspection or storage.

Run once in signed-out desktop incognito and once on a signed-out real phone. Verify signed-out state separately; private mode alone does not prove it.

Public dummy Drive file ID

Run all six plain image checks

Ready. Keep DevTools Network and Console open with Preserve log and Disable cache enabled.

The two modes omit the image referrerpolicy attribute or set it to no-referrer. The page-level no-referrer policy stays active in both.

For each request record the final redirect URL, HTTP status, Content-Type and exact Console/Network error. An image error event cannot reveal ERR_BLOCKED_BY_ORB, CSP, 403 or 429 by itself. currentSrc is not proof of the final redirect URL.

Image and CSP events

No checks run.

Stop image investigation if none loads on the signed-out phone. Report to planning; do not implement a fallback here.

Continue independent P0-3 through P0-6 tests