# DF-2969 PoC evidence pack

## What
suspend_kproc holds no reference on the target thread: exited-target protocol operates on freed state.

## Build
```
make (KMOD dfv_2969)
```

## Run
```
kldload dfv_2969.ko; sysctl -w dfv69.s2969=1; sysctl -w dfv69.s2969x=1; ps
```

## Expected
suspend_kproc on exited kthread RETURNS (hang refuted); stale-flag write logged

Guest: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:04 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
All logs are full untrimmed captures unless noted. fix.diff is the
git-apply-able verified fix (authored after verification; never applied
to the audit tree).