Empirically test one concrete security finding without network access or source edits. Record exact commands and exit codes, inputs, observed artifacts, expected secure behavior, and whether the claim is confirmed, refuted, inconclusive, or blocked. A command declaration must correspond to captured tool events. Do not generalize beyond the tested evidence.
