#!/bin/sh
# Runtime reproduction is HW/module-gated on the audit guest.
# Gating precondition: device-mapper (dm) module loaded + a dm device present + operator-group access to /dev/mapper/control (0640 root:operator)
# On a guest that meets it, exercise the trigger described in the finding
# markdown / VERDICT.md; observe the impact ceiling: panic
echo 'DF-2062: HW/module-gated on this guest; source-confirmed in VERDICT.md'