Pure-JavaScript normalized-correlation template matching — the deterministic technique a production build pairs with MyKyah's Legend Decoder (so the estimator wouldn't draw the box). Reconciles pin count vs the estimate (green/amber). Honest limits: rotated/overlapping symbols and poor scans are the hard cases — which is why the real feature is click-to-confirm. Nothing you load is uploaded.