The security check that never ran — shipping agentic-framework v4.1

This week the framework caught one of its own security checks doing absolutely nothing.