[quolu]

Summary

• Add Spotter-owned, opt-in spotter runtime-errors report for the owner-LAN BugHub product intake contract.
• Sign exact JSON bytes with HMAC-SHA256; acknowledge only a signed matching 200 receipt. Keep cumulative records pending on uncertain delivery.
• Keep network off by default. A Spotter-owned owner-private config enables collection and reporting separately; the legacy factory config remains collection-only when the product config is absent.
• Include hourly launchd and systemd templates; Windows Task Scheduler setup is documented. Pause retries on schema rejection or rejected credentials.

Verification

• npm test at initial feature commit: 614 tests, 611 passed, 3 existing skips.
• Contract request and response HMAC vectors match exactly. Local store to signed mock receipt integration advances the cursor; invalid receipts do not.
• Product full CI passed on macOS native, Linux workstation, and Windows native: https://github.com/kitepon/Spotter/actions/runs/37109231761
• Final credential format (key_id may contain :, secret up to 1024 characters, Windows Administrators ownership) passed focused tests and Windows native CI, including an actual owner-private ACL readback test: https://github.com/kitepon/Spotter/actions/runs/37110883243
• npm run verify:docs passed after retargeting onto 1.8.1 main.

Rollout boundary

Draft and based on main. BugHub's LAN intake is deployed; Fragile's per-terminal credential placement is awaiting owner approval. Spotter 1.9.0 release preparation is separate draft PR #7. No reporting configuration, credential, or schedule was installed by this PR. Product release and terminal application require owner approval.