SCANNER_PROBE_RE expansion: infra/cloud/backup/profiler probe families (A-F). 07:32 UTC sweep = 98 distinct post-cutover warn paths uncovered by 450/451 (k8s/docker/helm YAML manifests, cloud-cred JSON, terraform state/vars, SQL dumps, archives, profiler/heapdump, cred dotdirs). Audit collision-proven 98/98 coverage, 0 route collision (69 templates), 0 benign false-pos. Down-tier to silent security/info (no page, force-retain). Pluto-canonical; mars/venus inherit. Decisions: ADD families A-F + archives(.zip/.tgz/.tar.gz) + exacts /dump /trace /logfile (whole-path). HOLD /credentials (app-plausible, under-evidenced) + .bak/.backup JSON (under-evidenced). Anchor discipline: cred dotdirs (^|/) any-segment; bare-ext OK ONLY where Pluto serves zero (yaml/sql/tfstate/zip); .json stays filename-anchored (442 ban). Gates: audit pre-push diff + PTD live-probe.