[harness] attempt=fixed2 nltk=3.10.3 file=/pruva/project-cache/site-fixed/nltk/__init__.py
[harness] payload written: /workspace/bundle/repro/payload_fixed2.pickle (119 bytes)
[harness] attacker command: 'echo PRUVA_RCE_fixed2 > /workspace/bundle/repro/marker_fixed_2.txt'
[harness] BLOCKED with UnpicklingError: global 'nltk.tokenize.stanford_segmenter.os.system' has a dotted name, which is forbidden (attribute-traversal pickle RCE, GHSA-4489)
[harness] RESULT: BLOCKED - global rejected before resolution (attempt fixed2)