== TEST 1: RLIMIT_FSIZE vs O_APPEND ==
prefill: size=2097152
rlimit_fsize = 1MiB, file already 2MiB
append-write(4096): ret=4096 errno=0 sigxfsz=0 size=2101248
  -> BUG: BYPASSED rlimit (write past RLIMIT_FSIZE accepted, no SIGXFSZ)
append-write after lseek(0): ret=4096 errno=0 sigxfsz=0 size=2105344
control plain-write@2MiB: ret=-1 errno=27 sigxfsz=1
  -> OK: limit enforced for non-append
== TEST 2: chflags UF_APPEND (append-only) enforcement ==
(fd opened BEFORE the flag is set; kernel open-gate cannot
 retroactively apply O_APPEND to an existing descriptor)
chflags(UF_APPEND) ok (file held open rw since before)
pwrite@0 on uappnd via pre-opened fd: ret=4 errno=0
  -> BUG: BYPASSED append-only (arbitrary-offset write accepted)
write@4 on uappnd: ret=4 errno=0
content now: [XXXXYYYYCCCC] (12 bytes)
  -> BUG: append-only file content MODIFIED at non-EOF