It side-loaded tools/terminal_tool.py via importlib.spec_from_file_location under the bare name 'terminal_tool', which bypassed both the package and scripts/check_compat_pointers.py, then read cleanup_vm through the compat pointer. Found by running the suite with HermesPluginCompatWarning promoted to an error — the only in-tree resolution through a pointer across 44,7k tests.