Arca applies deterministic verification checks to sandbox-generated PDF artifacts to prevent the exposure of raw account numbers