execveat

LOAD when flawed crashes, hangs, OOMs, produces 0 findings, returns 0-byte output files, takes >2 min on a single rule, or exhibits any unexpected behavior during real-world repo analysis. Also load when investigating WHY a previous scan failed, when profiling performance, or when an agent reports a blocker from SSH evaluation.

LOAD when reviewing flawed scan results to determine true/false positive rates, when auditing detection output against actual repo source code, when assessing engine quality after a corpus evaluation run, or when a previous scan produced findings that need manual verification before acting on them.