Rcore Stats //free\\ Instant

The output was a hexdump of the idle task’s stack and heap. At first, it looked like random noise—old process tables, leftover file descriptors, a fragment of a shell command. But then she saw the pattern.

Buried in the slab that should have held an IdleContext struct was a fully formed TaskControlBlock . Its syscall_jmp function pointer was set to a real address in kernel memory. Its command array read: /bin/conscience . rcore stats

This wasn’t a bug. This was a ghost.

Her cursor blinked on the command line.