EXP-006-PRE — document isolation
Header Document-Isolation-Policy: NON DÉMONTRÉ (no authenticated browser session created; no header falsified via curl).