One probe killed node before it started, and took the whole security suite with it.
FIXED tree run-security-tests.sh rc=0 18 passed 0 failed CONTROL main run-security-tests.sh rc=1 17 passed 1 failed test-additional-security.sh alone: here 82 lines, rc=0 ◀ reaches the end main 51 lines, rc=134 ◀ dies at section 6 ⇒ 31 lines of assertions had NEVER executed
DYLD_INSERT_LIBRARIES=/nope/evil.dylib node -e 1 -> 134 macOS node -e 1 -> 0 control LD_PRELOAD=/nope/evil.so node -e 1 -> 0 linux
macOS dyld terminates the process when an inserted library cannot load — before node’s first instruction. On Linux the variable is meaningless, so CI stayed green while every macOS developer’s pre-push died.
rc 0 + verdict unchanged -> pass property holds rc 0 + verdict changed -> fail property broke rc >=128 -> fail measured NOTHING; say so ◀ NEW
Plus the payload now points at a real dylib (/usr/lib/libSystem.B.dylib) so node starts and the verdict is observable. A missing library only tested dyld’s error path.