# hardware-gated; see VERDICT.md (source-verified leak + harness-kernel compile)