Watch the kernel delete a poisoned tool result from the model's own KV cache — and prove the next token is
bit-identical to a brain that never read it. Driving the real ctxmmu gate · kvmmu bridge · model.KVCache.Evict. No model weights, no GPU, no key.