The shell guard reads an unquoted fixed here-document output as its split words only where the word is wholly that substitution. Text glued to it (the substitution followed by x) or two such substitutions glued together fall to the unknown reading and reach ALLOW in command position, while bash runs the joined words: the hazard with x appended to its last word, or the hazard assembled from the two documents (review7-guard finding 3, verified with a neutral word). The guard page and the brief say the words are read wherever the substitution stands, which is false for a glued word.

The shell guard reads an unquoted fixed here-document output as its split words only where the word is wholly that substitution. Text glued to it (the substitution followed by x) or two such substitutions glued together fall to the unknown reading and reach ALLOW in command position, while bash runs the joined words: the hazard with x appended to its last word, or the hazard assembled from the two documents (review7-guard finding 3, verified with a neutral word). The guard page and the brief say the words are read wherever the substitution stands, which is false for a glued word.

Grounds

• pursued: the review's glued and doubled shapes block, and the shapes where the joined word is not the hazard still allow; a glued fixed output bash runs that still allows would show it wrong