The gate that could never pass

One probe killed node before it started, and took the whole security suite with it.

Before / after

FIXED tree    run-security-tests.sh   rc=0   18 passed  0 failed
CONTROL main  run-security-tests.sh   rc=1   17 passed  1 failed

test-additional-security.sh alone:
  here   82 lines, rc=0     ◀ reaches the end
  main   51 lines, rc=134   ◀ dies at section 6
  ⇒ 31 lines of assertions had NEVER executed

Why it was invisible

DYLD_INSERT_LIBRARIES=/nope/evil.dylib node -e 1   -> 134   macOS
node -e 1                                          ->   0   control
LD_PRELOAD=/nope/evil.so node -e 1                 ->   0   linux

macOS dyld terminates the process when an inserted library cannot load — before node’s first instruction. On Linux the variable is meaningless, so CI stayed green while every macOS developer’s pre-push died.

Three outcomes, not two

rc 0    + verdict unchanged  -> pass    property holds
rc 0    + verdict changed    -> fail    property broke
rc >=128                      -> fail    measured NOTHING; say so   ◀ NEW

Plus the payload now points at a real dylib (/usr/lib/libSystem.B.dylib) so node starts and the verdict is observable. A missing library only tested dyld’s error path.