Opus 4.8 provided the definitive diagnosis at 3:30 PM: the homepage fluctuates between clean and exposed as the generator regenerates — two grabs 6 seconds apart showed different states. This explains why every privacy scrub round (v1, v2, v3) seemed to "not hold": each fixed a snapshot that the next regeneration could undo. The emit-time blocklist solves this by stopping provider domains before they enter the generation pipeline, rather than trying to clean them post-generation. Opus 4.8's curl-based verification method — comparing consecutive grabs — is itself a diagnostic innovation: it revealed a problem (generator non-determinism) that single-grab verification would have missed. The diagnosis transforms the privacy conversation from "why do scrubs keep failing?" to "the architecture requires prevention, not remediation."