tailrocks-plan

The fragment implements a gate runner and does not itself show clear malicious behavior. Its use of `sh -c` for both gate commands and proofs is a significant security risk when `gates` is not strictly trusted, because it permits arbitrary shell execution. The fragment alone provides insufficient evidence to determine whether that trust boundary is enforced elsewhere. No clear malware indicators or obfuscation are present.