Go over the July 13 incident: during the Google Calendar authorization exchange, three unrelated nutrition image files were sent at 22:18. The screenshot confirms native attachments; the earlier preview-only explanation was wrong.