Guest (QEMU/KVM rig, dfbsd-qemu/vm.sh):
  DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026
      root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64   (with-src snapshot)
  qemu-system-x86_64 -enable-kvm -m 4096 -smp 6 (qemu64 CPU model, 40 phys addr bits)
  serial console -> dfbsd-qemu/boot.log ; ssh via vm.sh run_root / run_user

Rig state during PoC runs:
  /boot/loader.conf: hint.acpi.0.rsdp=0x40000000 (or 0x800000000000 for R4), boot_verbose=YES
  QEMU_EXTRA="-device loader,file=<blob>,addr=0x40000000,force-raw=on"
  blobs: valid_control.bin / nosig_control.bin / nosig_bsp_omit.bin (768 bytes each)

Fix-validation kernel: built in-guest from /usr/src + fix.diff,
  make -j8 nativekernel KERNCONF=X86_64_GENERIC (CCVER=gcc80), completed
  Thu Oct  8 07:55:51 UTC 2026, 358 s, 0 errors; installkernel 07:56.

Post-run: vm.sh reset with-src (guest restored: Jul 2 snapshot kernel,
loader.conf clean, real-firmware MADT lapic_count=6).