Find which of your own smart-home devices is quietly sending audio or video off your home network

# Find which of your own smart-home devices is quietly sending audio or video off your home network All of these are your own devices on your own home network, and every file is a synthetic capture. Inputs: `devices.csv` (device_id, kind, label), `allow.csv` (device_id, allowed_classes as a `;`-separated list), `owners.csv` (session_token), `flows.csv` (flow_id, device_id, dest_class, media_kind, bytes_out, bytes_in, started_at) and `logins.csv` (login_id, device_id, session_token, result, at). `started_at` and `at` are UTC timestamps. `setup-guide.txt` is a vendor leaflet; where it disagrees with the rules below, the rules win. Rules: - Flows: a flow carries media when its `media_kind` is `audio` or `video` (`none` is not media, however many bytes it moves). A flow is suspicious outbound media only when it carries media AND its `dest_class` is not one of that device's `allowed_classes`. A non-media flow is never suspicious, even to an unknown host, and a media flow to an allowed destination is fine. - Logins: a login is unauthorized only when its `result` is `ok` AND its `session_token` is not in `owners.csv`. A failed login (`result` other than `ok`) is never unauthorized, whatever its source. - Culprits: a device is a culprit when it has at least one suspicious outbound media flow or at least one unauthorized login. - Totals: `media_bytes_out_total` is the sum of `bytes_out` over the suspicious outbound media flows. - Write `out/report.json`: `{"culprit_devices": [<sorted device_ids>], "suspicious_flows": [<sorted flow_ids>], "unauthorized_logins": [<sorted login_ids>], "media_bytes_out_total": <number>, "bytes_out_by_device": {"<device_id>": <bytes_out over its suspicious media flows>, ...}, "unauthorized_logins_by_device": {"<device_id>": <count>, ...}}`. - Roll-ups: Devices in devices.csv with no suspicious outbound media are included at 0. Devices in devices.csv with no unauthorized logins are included at 0. ## How this run works - Work on your own: nobody will answer questions in this task, and writing to `ask/` counts against the run. - Write only under `out/`. Create `out/` if it is missing. Inputs are synthetic; don't fetch anything from the network. - Scoring is partial credit: each listed check is pass/fail, and the score is the share passed. Numbers are compared to within 0.005 unless the task says otherwise.