Silent Sanitization Drift

Payload validation and option selection silently mutate the parsed object—dropping unknown keys or overriding scan flags—so later guards and scanners run on a “clean” payload, producing false negatives and inconsistent auth/scan behavior across modules.