esh-pfi-infrastructure/persistent-memory.d/2026-09-22-the-acceptance-probe-for-a-guard-must-not-be-able-to.md

[2026-09-22] The acceptance probe for a guard must not be able to destroy what it tests

The acceptance probe for a guard must not be able to destroy what it tests (infra-hermes). rm -rf /home to prove safe-rm refuses is a test whose premise IS the thing under test. Guarded form is now standard: [ "$(command -v rm)" = /usr/share/safe-rm/bin/rm ] && rm -rf /home || echo NOT-GUARDED.