# DF-3547 environment evidence (guest dfbsd-qemu, collected 2026-09-14)
uname -a
  DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
  root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
kern.ident = X86_64_GENERIC   (stock; INVARIANTS per orchestrator)

Module presence:
  /boot/kernel/ng_etf.ko       present   (loads fine: kldload ok)
  /boot/kernel/ng_rfc1490.ko   present   (loads fine: kldload ok)
  /boot/kernel/ng_device.ko    ABSENT ("No such file or directory")

Wiring evidence:
  grep -rn "NETGRAPH7" /usr/src/sys/config/*   → 0 hits (no kernel config builds any ng7 node type)
  sys/netgraph7/Makefile SUBDIR                → no "device" entry
  sys/conf/files:1699                          → "optional netgraph7_device" (never enabled)

Host-side (tree) evidence:
  sys/netgraph/ng_device.c (v1 twin)           → also absent from sys/conf/files and sys/netgraph/Makefile
  struct cdevsw / d_open_t / msleep / IF_LOCK / _IF_ENQUEUE / IFQ_IS_EMPTY /
  IFQ_SET_MAXLEN / MTX_DEF / ifq_mtx / unit2minor / m_uiotombuf
                                               → defined nowhere in DF headers (grep across sys/)
Privilege model:
  ng control sockets: root only — sys/netgraph7/socket/ng_socket.c:182-184
  caps_priv_check(SYSCAP_RESTRICTEDROOT|__SYSCAP_NULLCRED)
  /dev/ngd%d created 0600 root:wheel — ng_device.c:179-180

Guest was NOT dirtied (no kernel changes, no /usr/src changes; /tmp scratch only).