fbbe916fa4
Two invariants in the mirroring test file, adapted from the contributor's test commit: (1) after the retry window one real scan runs and any verdict closes the breaker so the next command is scanned again; (2) inside the window nothing spawns, exactly one probe runs per window, and a failed probe re-arms it. The block/warn reset covered by the fix also supersedes the counter-only fixes in #76578 and #71495. Document the five-minute suspend-and-reprobe behaviour in the security guide next to tirith_fail_open. Co-authored-by: Ryan Gu <133598845+ryangu00@users.noreply.github.com> Co-authored-by: HumphreySun98 <humphreysun98@gmail.com> Co-authored-by: yinkev <182213728+yinkev@users.noreply.github.com>