moo.core.tests.test_security_sandbox.test_dict_update_bypasses_write_guard

moo.core.tests.test_security_sandbox.test_dict_update_bypasses_write_guard()

dict.update({‘__class__’: x}) inserts underscore keys at C level, bypassing _write_.__setitem__. The key can then be retrieved via dict.get() or .items()/.values(), bypassing _getitem_.

This is a known policy gap. dict subclassing would be needed to close it fully; for now this test documents the inconsistency.