# hardware-gated; source-verified missing arglen check at :444