guest_uname: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
stock kernel: X86_64_GENERIC (INVARIANTS), no SMEP/SMAP/KASLR/kernel stack canary on this guest
qemu: -enable-kvm -m 4096 -smp 6, disk qcow2 snapshot "with-src" (clean source)
unpriv trigger user: maxx (uid=1001, gid=1001)
compiler: guest /usr/bin/cc (gcc), host-built trigger with `cc -O2`
kenv(1): /usr/bin/kenv ; libc exports kenv(3) (implicit-decl warning is cosmetic)
boot env plant: /boot/loader.conf lines
    audit.smash="AAAA...700 x A..."'      (700 bytes)
    audit.hello="PANGRAM_CONTROL"         (control)
verified post-reboot (DUMP path): dynamic table contains audit.smash entry
sysctl kern.environment.* reads the STATIC boot env (includes the plant)