Server-backed: stored in data/findings.json, auto-published to FINDINGS.md for the API team. Shared with the API Explorer.