#!/bin/sh
# DF-0878 run: executes the deterministic harness (proves the OOB read logic
# without touching the kernel) and reports the leaked-byte count.
#
# The LIVE in-kernel reproduction requires a crafted ISO + root mount +
# unprivileged ls/getdents. See README.md and VERDICT.md for the full chain.
# The ISO images df0878_early.iso (info-leak variant) and df0878_bnd.iso
# (panic variant) are produced by:  python3 craft_iso.py --early|boundary
set -e
cd "$(dirname "$0")"
echo "=== DF-0878 deterministic harness (transcribes cd9660_rrip_loop + NM handler) ==="
./harness