# DF-2914 — dev_is_good tests never-installed sentinel (Info-tier hardening verification)

## What
dev_is_good tests never-installed sentinel

## Build
    cd /root/h41 && make

## Run
    kldload ./h41.ko; sysctl -w debug.h41.cmd=4

## Expected
baseline (stock kernel): see verdict below
fix kernel (all-41-fixes build): the bad behavior is gone

A/B one-liner: baseline: after-destroy=1 | fix: after-destroy=0

## Files
README.md
VERDICT.md
build.sh
env.txt
fix.diff
h41.c
harness.log
manifest.json
run.sh
verdict.json

Shared harness: `h41.c` (combined KLD, sysctl debug.h41.cmd=N driven).
Full batch context: the fix kernel contains all 41 hardening fixes of
this batch compiled together (build RC=0) and passed the complete A/B
suite plus a clean reboot.