- parser at 0xfffffff0270cbe18 sets the verify flag to 0 when /arm-io/sgx lacks verify-gmmu-tlbis-at-sync - BuildManifest maps iPhone19,7 -> v64sap; that DT lacks the key, as do iBoot, AGX and the kernelcache; only SPTM contains the strings - consequence: the GMMU TLBI completion window remains open on iPhone 27.2 (fix-gating gap, not a new memory-safety bug)