[DF-1286] RESULT: BUG CONFIRMED -- 3998 bytes of kernel heap read before the SPROM buffer per SPROM rev4/5/8 parse (16 reads total = 32 bytes), surfacing via SIBA_SPROMVAR_TXPID_* sysctl spromvars (KASLR/heap-info leak).