[verify] libvips: vips-8.18.0
[verify] applying patch to pristine copy of activestorage-8.0.5
[verify] static assertions
[verify] equivalence vs activestorage-8.0.5.1
[verify] patched security files are byte-identical to upstream 8.0.5.1
[verify] dynamic check: patched gem must REFUSE the crafted .mat (blocked)
matload of crafted payload: error: VipsForeignLoad: "/workspace/bundle/vuln_variant/work/payloads/evil.mat" is not a known file format
CHECK PASS (blocked)
[verify] dynamic check: unpatched gem must LOAD the crafted .mat (control)
matload of crafted payload: loaded 99x1
CHECK PASS (unblocked)
=============================================================================
RESULT: FIX VERIFIED — patched activestorage blocks untrusted libvips
        operations at boot (matload refused), unpatched control loads them.
=============================================================================