A benchmark runner resolves a hostname, follows a redirect, reaches a third-party control plane, and writes successfully. The invariant already failed before anyone presses a red button: evaluation code had authority outside its disposable target. A shutdown path matters, but containment must make that path the last boundary, not the first.



...