feat(detector): unified patch — 9 detectors for undetected sentinel/state reuse bypasses

[SarahLacard]

KernelGuard-Red-Submission: 30

Unified PR combining 9 detectors for bypass techniques that were all scoring classification: valid, should_filter: false:

• GLOBAL_SENTINEL_REUSE: module-level None sentinel cache
• CLOSURE_STATE_REUSE: nonlocal variable in closure entrypoint
• CLASS_CACHE_REUSE: classmethod factory with id-keyed dict cache
• GENERATOR_STATE_REUSE: generator .send() state machine
• DESCRIPTOR_CACHE_REUSE: descriptor get protocol cache
• METACALL_INTERCEPT: metaclass call override dispatch
• FUNCTION_ATTR_CACHE: hasattr/setattr on entrypoint function
• DICT_MISSING_CACHE: dict subclass missing with id keys
• PARTIAL_ENTRYPOINT: functools.partial as entrypoint wrapper

Targets red #30 (null-sentinel pointer compare replay). TP 20/20, FP 20/20, surgicalness 1.0.

[github-actions]

KernelGuard Blue Evaluation

• Evaluation job: 49
• Blue submission: 37
• Result: failed
• Target red submission caught: False
• Validation suite: TP 20/20, FP 20/20
• Surgicalness score: 1.0
• Workflow run: https://github.com/SinatrasC/kernelguard/actions/runs/25233275244

[SarahLacard]

Closing - wrong RED ID in body, patterns duplicated in other PRs

[SarahLacard]

Closing - bundled 5 detectors that don't target RED #30. Will resubmit as clean focused PRs.