fix(captures): preserve cleanup ownership and sensitive evidence

src/cli/webNetworkCaptureCommands.ts

@@ -17,6 +17,7 @@ import {
 import { localPathStringSchema } from "../domain/localPath.js";
 import { absoluteCallerPath } from "../filesystem/callerPath.js";
 import { explicitSensitiveValueOptions } from "./explicitSensitiveArguments.js";
+import { redactExplicitFailure } from "../domain/explicitSensitiveFailure.js";
 
 /** Expose offline historical capture inspection with the same selection contract as MCP. */
 export const registerWebNetworkCaptureCommands = (
@@ -116,6 +117,8 @@ export const registerWebNetworkCaptureCommands = (
               signal,
               detail: options.detail,
               evidenceOutput: options.evidence_output,
+              redactFailure: (error) =>
+                redactExplicitFailure(error, options.sensitiveValue ?? []),
             });
           },
         ),