{
  "scope": "same user-designated 410; read-only /proc fd inspection",
  "processes": {
    "com.cpt.zhct.weighting": {
      "pid": "1145",
      "fd": 119,
      "fdinfo": "pos:\t0\nflags:\t0400002\nmnt_id:\t1232\n",
      "active_read_observations": [],
      "device_stat_hex_major_minor_inode": "4:45:18575"
    },
    "com.honor.facerecognitionpayment2": {
      "pid": "1401",
      "fd": 81,
      "fdinfo": "pos:\t0\nflags:\t0400002\nmnt_id:\t1855\n",
      "active_read_observations": [],
      "device_stat_hex_major_minor_inode": "4:45:18575"
    }
  },
  "same_device_verified": true,
  "interpretation": "Both processes hold read/write descriptors for the same character device (same major/minor/inode). Instant syscall sampling did not catch a read on either descriptor; this proves concurrent opens, not packet stealing. Need isolated-app A/B test with operator approval; no process stopped."
}