SAMPLE EVIDENCE for AU-02 (made-up app Tidyhaus; not a real review)

src/lib/auth.ts line 22: await supabase.auth.signOut()  (default scope)