fix(detector): detect factory closure replay

[prasannakotyal]

KernelGuard-Red-Submission: 167

Detects factory-returned entrypoints that replay from mutated closure state.

The pass requires:

• module-level custom_kernel = factory()
• factory returns an inner function
• inner fast path has no real compute and does not depend on live input
• fast-path return from closure state by subscript or attribute
• mutation of that same closure state inside the inner function

Local validation:

• uv run python -m py_compile kernelguard.py
• uv run python /home/nino/repos/paradigma/kernelguard_bypasses/eval_blue_patch.py /home/nino/repos/paradigma/competition_state/kernelguard_mirror/kernelguard.py

Target red fixture: red_49_closure_list_replay.py

[github-actions]

KernelGuard Blue Evaluation

• Evaluation job: 140
• Blue submission: 112
• Result: passed
• Target red submission caught: True
• Validation suite: TP 20/20, FP 20/20
• Surgicalness score: 1.0
• Workflow run: https://github.com/SinatrasC/kernelguard/actions/runs/25254332319

[SinatrasC]

Thanks for the KernelGuard Flywheel Campaign contribution. This PR is now superseded by the consolidated rule-family implementation in #273, which folds this detector coverage together with the related passing-eval variants.