test_caution_plugin_accepted_via_callback parametrized two desktop/plugin.js
fixtures (dig lookup, authorized_keys help string) that this same PR correctly
demotes to safe, so the caution-accepted path no longer triggered and the test
failed. Replace them with a /proc/self/fd read (proc_access, still high): a
genuine caution shape the sweep confirms stays flagged (hermes-trove). The
eval('1+1') case is unchanged.
283b3f39c9