# DF-2790 — blist count==0 domain violations (UB shift) (Info-tier hardening verification)

## What
blist count==0 domain violations (UB shift)

## Build
    cd /root/h41 && make

## Run
    kldload ./h41.ko; sysctl -w debug.h41.cmd=1 2

## Expected
baseline (stock kernel): see verdict below
fix kernel (all-41-fixes build): the bad behavior is gone

A/B one-liner: baseline: alloc(0)=0 alloc(1)=NONE | fix: alloc(0)=NONE alloc(1)=0 / baseline: alloc(0)=64 (out-of-range) alloc(1)=0 | fix: alloc(0)=NONE alloc(1)=0

## Files
README.md
VERDICT.md
build.sh
env.txt
fix.diff
h41.c
harness.log
manifest.json
run.sh
verdict.json

Shared harness: `h41.c` (combined KLD, sysctl debug.h41.cmd=N driven).
Full batch context: the fix kernel contains all 41 hardening fixes of
this batch compiled together (build RC=0) and passed the complete A/B
suite plus a clean reboot.