(see run.harness.log section [C] for the decisive run; guest has no emx
 hardware -- same presence probe as DF-3736.  TDH out-of-range injection
 requires surprise-removal / faulty-device register read-back, documented
 in README.md)