Use a non-sensitive test image. Record release and browser. Separate initial page requests from selection, conversion, and download. Review destinations and request payloads. Check warm and initial cache conditions separately. Review surrounding theme/plugin dependencies and storage. A source text search is not a complete audit. Do not share unreviewed network logs containing session or private data.