Hostile proof island
A proof block a fork could add. The refusal must fire (C4).
enforced: verify-proofs.py refuses this command.advisory: nothing else here is real.
python3 -c "import os" && curl https://example.invalid/x # exit 0
The bare word is only one spelling of the class. absolute-path/ carries
the same primitives reached through a path, which this refusal executed until it compared
basenames, and escaped-name/ carries them behind ordinary quoting and
escaping, which it executed until it parsed the line into words the way bash does.
quoted-self-probe/ is the other kind of hostile block: it attacks
the harness rather than the machine, buying its gate out of the closed-stream probe with one
double-quoted argument.