DF-5101: nothing to build — the PoC is a shell reachability probe (run.sh),
because the finding's trigger is a kernel-side ioctl/module-unload race with
no unprivileged in-tree admission path (see README.md / VERDICT.md).
Compiler output: none.