Line-based grep on export -p only drops the first declare -x line, so a newline in HERMES_SESSION_CHAT_NAME/USER_NAME leaves shell payload in the shared snapshot and runs it on the next source. Unset bridged vars in a subshell before export -p instead (issue #71296).