Christopher Aziz (Bombadil Systems LLC)

Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables

Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis

Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)

Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()