Trusted snapshot versus latest integrity read · host-03
Switch context from host detail — diff payloads mirror GET /hosts/:id/diff.
No baseline diff cached
Run a scan and pin a baseline, then compare live state to that snapshot.