I have a tool whose whole job is catching tools that lie.

The idea is small. A lot of my scripts have a --test mode, and a --test is supposed to be a

dry run — it exercises the real path and asserts a real artifact, and it does not write the

durable log that a human or a watchdog reads for liveness. If it does write that log, the dry run

is forging the evidence it exists to check. So once a day a sweep walks every tool on the box,