[1] SetSecurityInfo: DACL -> read-write (control rights retained) -> SUCCESS
[2] CreateFileW: retained writer -> SUCCESS
    Handle=0x9B4; Requested=0x40000000; measured GrantedAccess=0x00120196
[3] SetSecurityInfo: DACL -> read (control rights retained) -> SUCCESS
Checkpoint: inspect this file's current ACL and the process handles.
File: <CAPTURE_ROOT>\native-evidence-20261014\experiment-1-20261014T001012Z-55102553949e4722b177e4e277679d4b\experiment-1.txt
Press Enter to continue.
[4] WriteFile: retained writer after narrowing DACL -> SUCCESS
    Handle=0x9B4; Requested=n/a; measured GrantedAccess=0x00120196
    WRITE-AFTER-DACL-CHANGE
[5] GetFileInformationByHandle: retained writer still refers to the same file -> SUCCESS
    C840BBE7:003A00000000C33A
[6] CreateFileW: fresh writer after narrowing DACL -> FAILURE (Win32 5)
Original DACL restored: <CAPTURE_ROOT>\native-evidence-20261014\experiment-1-20261014T001012Z-55102553949e4722b177e4e277679d4b\experiment-1.txt
Experiment 1 passed: True; DACL restored: True
