38-pattern emit-time blocklist has caught every instance of provider domain or other sensitive data. Zero privacy incidents since launch.