Build an iframe-region that embeds the captured HTML inline, with a SHA-256 hash proving the embedded snapshot hasn't changed since capture. The audit packet is fully self-contained — no external fetch, no dependence on the source URL staying live. Paste HTML or fetch it, compute hash, ship the region.