Ceremony trace
Every options call and every verification lands here with its raw JSON. Read the attestation object once and the SimpleWebAuthn options stop feeling arbitrary.
Safety guards
These are on by default. Switching one off reproduces a real class of weakness so you can watch what the browser and the server actually do about it.