21d1d08a2f
The old assertion read _drive_health_report's source text for the _sanitized_cua_env() call — a banned source-reading test that broke when the spawn moved into _open_mcp with identical runtime behavior. Now intercepts subprocess.Popen at the _open_mcp seam and asserts the env it actually receives strips secrets and applies the telemetry opt-out.