Proven Capabilities (from D3-01)

All measurement methods are based on the KNULLI Surveillance Protocol (docs/KNULLI_SURVEILLANCE_PROTOCOL.md):

1. SMB Access: Full read/write to //100.119.202.114/share (no auth)
2. Telemetry: herms-sdl.log at /roms/ports/hermes/herms-sdl.log via SMB
3. Screenshot Capture: Trigger mechanism via /tmp/hermes-sdl-capture (proven in D3-01)
4. Input Injection: pygame -> ANSI -> SSH PTY bridge via herms_sdl_client.py
5. Frame Extraction: ffmpeg at 60fps: ffmpeg -y -i input.mp4 -vf fps=60 frames/%06d.png