moo.core.tests.test_security_model_verb.testinvoked_object_read_blocked
- moo.core.tests.test_security_model_verb.testinvoked_object_read_blocked(t_init, t_wizard)
Verb._invoked_object is underscore-prefixed; get_protected_attribute must block read access from verb code, preventing information disclosure about the dispatch target. RestrictedPython rejects _-prefixed attribute names at compile time, so exec raises TypeError; either way access is denied.