A process scan matches on a name column that the system cuts short when more columns follow. The check finds no processes at all, so the guard it feeds never fires, and every test stays green on a fake list.
Run each detector once on the real machine. A seam can hide a probe that sees nothing.
Print what a guard found, not just its verdict. Zero matches should look odd.
Print what a guard found, not just its verdict. Zero matches should look odd.