Demo kernel (2026-10-16 shell-mode pass): DragonFly dfbsd 6.5-DEVELOPMENT DragonFly v6.5.0.1712.g89e6a-DEVELOPMENT #1: Mon Jun 29 14:18:01 UTC 2026 root@ephemeral-5c2002c44b6c:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 (stock clean-install snapshot; sysent=0xffffffff810c7900, sys_nosys=0xffffffff80661740, sys_munmap=0xffffffff809a8400 -- all match the exploit constants)
Original baseline: DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026 (in-guest build of the same era; fix kernel #1: Mon Sep  7 07:47:17 UTC 2026, no longer on the image)
Caution: the 'with-src' snapshot kernel is a later fix-validation rebuild with shifted symbols (sysent=0xffffffff810cb880) -- exploit constants must be re-derived for it (see VERDICT.md)