Docs: fix fresh-clone branch comparison on starter

README.md

@@ -7,7 +7,7 @@ Twenty independent reference applications for visitor identification and abuse p
 - `starter`: the app before integrating ShieldLabs. It works locally without keys.
 - `final`: the same app with pinned browser and Node SDKs and a server-side decision.
 
-Compare the integration with `git diff starter final -- new-account-fraud`. Stop the server before switching versions and run `npm ci --omit=dev` again in the chosen app. Do not discard your own local changes just to switch branches; use another clone if necessary. The public default branch is `starter`; switch to `final` for the completed ShieldLabs integration.
+Compare the integration with `git diff starter origin/final -- new-account-fraud`. Stop the server before switching versions and run `npm ci --omit=dev` again in the chosen app. Do not discard your own local changes just to switch branches; use another clone if necessary. The public default branch is `starter`; switch to `final` for the completed ShieldLabs integration.
 
 ## Applications
 

account-sharing/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- account-sharing`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- account-sharing`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

account-takeover/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- account-takeover`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- account-takeover`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

ban-evasion/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- ban-evasion`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- ban-evasion`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

bonus-abuse/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- bonus-abuse`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- bonus-abuse`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

card-testing/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- card-testing`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- card-testing`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

chargeback-dispute/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- chargeback-dispute`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- chargeback-dispute`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

checkout-risk/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- checkout-risk`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- checkout-risk`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

coupon-abuse/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- coupon-abuse`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- coupon-abuse`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

credential-stuffing/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- credential-stuffing`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- credential-stuffing`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

loan-risk/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- loan-risk`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- loan-risk`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

new-account-fraud/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- new-account-fraud`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- new-account-fraud`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

paywall/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- paywall`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- paywall`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.
 

personalization/README.md

@@ -16,7 +16,7 @@ The starter runs at http://127.0.0.1:3000 and needs no keys. The final needs a r
 
 ## Compare starter and final
 
-Stop the server before switching versions. From the repository root run `git diff starter final -- personalization`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
+Stop the server before switching versions. From the repository root run `git diff starter origin/final -- personalization`, then switch branches and reinstall dependencies in this folder. Preserve your own uncommitted work in another clone rather than discarding it. Ignored .env files stay local; fill the final settings when moving from starter. Schema differences may recreate this app's disposable database.
 
 In final, `public/shieldlabs.js` uses `@shieldlabs-ai/js@1.0.1` and sends a fresh action request ID. `server/shieldlabs.js` retrieves History with `@shieldlabs-ai/node@1.0.1`, rejects missing, stale, reused, limited and unusable results and applies the configured risk guard. It rereads after an 11-second observation delay as a demo precaution, not a server-guaranteed finality marker. The other modules in `server/` implement this app's rule and its own SQLite state. No sibling folder or root shared server is required.