Module hardening 

Process hardening: best-effort defense-in-depth measures.

Functions

disable_core_dumps

Disable core dumps for this process.

is_ram_backed

Whether path lives on a RAM-backed filesystem (tmpfs/ramfs), meaning data written there never hits persistent storage.

stdout_is_regular_file

Whether this process’s stdout is a regular file (as opposed to a pipe, terminal, or device).

strict_mode

Whether MURK_STRICT is enabled. Strict mode trades convenience for a hard “never let a secret touch the disk” guarantee — see is_ram_backed.