[*] jail.jailed = 1
[*] varsym_list(VARSYM_SYS) enumeration:
  *** LEAKED: DF0136_HOSTSECRET=secretvalue ***
[*] varsym_list(VARSYM_SYS) enumerated 126 system varsyms from inside the jail
[*] varsym_get(DF0136_HOSTSECRET) not found (rc=-1, No such file or directory) — get-path correctly jail-scoped

RESULT: LEAK_CONFIRMED — host system varsyms are enumerable from inside a jail via varsym_list(VARSYM_SYS)