• disown: drop disown -h from detach question (-h keeps job in table)
• airodump-ng: --channel not -C (-C takes MHz, not channel numbers)
• find -exec: \; terminator now survives normalization intact
• normalize every semicolon in a glued token (a;b;c), not just the first
• enforce #require on the text-match path
• reset sandbox between placement questions
• monotone-guard placement level on retake
• cap sandbox writes at 64MB so dd can't fill the disk
• portable disk-space check (df -kP)
• caveat reverse-shell (pentest) and iptables flush (opens all ports)