Context: the anonymized deck still embedded the QR code SVG whose
scan target and aria-label pointed to the personal forge - the
removal regex had missed the nested block.
Approach: structural removal of the whole qrblock, string-level
verification on both HTML and PDF outputs.
Changes:
- presentation-bmu-anon.{html,pdf}: QR block fully removed; zero
identifying strings verified in both files
Impact: the anonymized deck is scan-proof as well as text-proof.