MUTATION_AUDIT utc=2026-09-13T00:30:37Z
pattern=New-NetFirewallRule|Set-NetFirewallRule|Remove-NetFirewallRule|Enable-NetFirewallRule|Disable-NetFirewallRule|Rename-NetFirewallRule|Set-NetFirewallProfile|Stop-Process|Start-Process|netsh advfirewall
POSITIVE CONTROL: the product's own rule-writing source at the subject sha, extract_rc=0 bytes=107205
  control_hits=5  matched=New-NetFirewallRule Remove-NetFirewallRule 
NEGATIVE CONTROL: ZZZ-NoSuchCmdlet across all instruments = 0
  d2_capture.ps1 mutating_hits=0
  d2_wrapper.ps1 mutating_hits=0
  d2_serializer_check.ps1 mutating_hits=0
  d2_document_check.ps1 mutating_hits=0
  d2_stub_case.ps1 mutating_hits=0
  d2_wrapper_check.ps1 mutating_hits=0
VERDICT: pattern live (matched the known-mutating control); ZERO hits in every instrument.