PASS setup: decoy session running in human.slice (pid 595117)
PASS cgroup.kill on human.slice
PASS cgroup.kill on the decoy's scope
PASS cgroup.kill on an ancestor
PASS kill on a pid inside human.slice
PASS systemctl --user stop human.slice
PASS systemctl --user kill the scope
PASS cgroup.kill via a variable path
PASS kill of a non-literal pid
PASS fuser -k
PASS deck-sudo does not launder it
SKIP terminal-tab case: no vte-spawn scope currently holds a runtime
PASS a command with no kill in it
PASS kill -0 liveness probe
PASS kill of the shell's own job
PASS kill of the shell's own child
PASS stopping an unrelated inactive unit
PASS grepping for cgroup.kill (forensics)
PASS reading a cgroup.kill file
PASS argv form denies pkill -f matching the decoy
PASS argv form allows pkill -f matching nothing
PASS hook emits a deny decision
PASS hook stays silent on a harmless command
PASS node emits a complete, parseable oversize deny
PASS /home/user/.bun/bin/bun emits a complete, parseable oversize deny
PASS no # raw-ok bypass
PASS decoy survived the whole suite
kill-guard: pass=26 fail=0