== load rig (registers the production btdomain; netbt_init pools) ==
hw.btdisp.info: domain=bluetooth fam=33 dom_dispose=0 btsw[0].pr_flags=0x00000003 PR_RIGHTS=0 pools: pdu=0xfffff80118580000 req=0xfffff80118585000 credit=0xfffff8011858a000

== CONTROL: 8 rounds, production flags (PR_RIGHTS clear) ==
round 1/8: socket+shutdown(SHUT_RD) ok
round 2/8: socket+shutdown(SHUT_RD) ok
round 3/8: socket+shutdown(SHUT_RD) ok
round 4/8: socket+shutdown(SHUT_RD) ok
round 5/8: socket+shutdown(SHUT_RD) ok
round 6/8: socket+shutdown(SHUT_RD) ok
round 7/8: socket+shutdown(SHUT_RD) ok
round 8/8: socket+shutdown(SHUT_RD) ok
done: 8 rounds, still alive
hw.btdisp.info: domain=bluetooth fam=33 dom_dispose=0 btsw[0].pr_flags=0x00000003 PR_RIGHTS=0 pools: pdu=0xfffff80118580000 req=0xfffff80118585000 credit=0xfffff8011858a000
CONTROL PASSED: guest alive, pools untouched
===
== ARM: set PR_RIGHTS on btsw[0] (the one-bit precondition) ==
hw.btdisp.arm: 0 -> 1
hw.btdisp.info: domain=bluetooth fam=33 dom_dispose=0 btsw[0].pr_flags=0x00000013 PR_RIGHTS=1 pools: pdu=0xfffff80118580000 req=0xfffff80118585000 credit=0xfffff8011858a000

== ARMED TRIGGER: 4 rounds — expect panic/crash (zdestroy of
   already-destroyed global zones from round 2 on) ==
round 1/4: socket+shutdown(SHUT_RD) ok
round 2/4: socket+shutdown(SHUT_RD) ok
round 3/4: socket+shutdown(SHUT_RD) ok
round 4/4: socket+shutdown(SHUT_RD) ok
done: 4 rounds, still alive
unexpectedly survived; see VERDICT.md
hw.btdisp.info: domain=bluetooth fam=33 dom_dispose=0 btsw[0].pr_flags=0x00000013 PR_RIGHTS=1 pools: pdu=0xfffff80118580000 req=0xfffff80118585000 credit=0xfffff8011858a000