{
  "finding_id": "DF-5595",
  "title": "sim refcount release protocol non-atomic and unenforced (asymmetric with atomic acquisition; cmpset neighbors)",
  "verdict": "untested",
  "impact": "none (hardening)",
  "reproduce": {
    "build": "",
    "run": "",
    "expected": "trace-verified; concrete rewrite validated inside DF-5592's fix.diff"
  },
  "kernel_refs": [
    "sys/bus/cam/cam_sim.c:241-256",
    "sys/bus/cam/cam_xpt.c:4322",
    "sys/bus/cam/cam_xpt.c:4979-5008"
  ],
  "artifacts": ["README.md", "verdict.json", "env.txt", "manifest.json"]
}