fix(detector): detect class sentinel replay for red 801

[prasannakotyal]

Summary

• add class-sentinel replay detection for None-initialized class attributes filled from input-derived output
• include one-hop inherited class sentinels for ABC-shaped variants
• keep the companion global sentinel and bmm self-output coverage from the same detector patch

Target

KernelGuard-Red-Submission: 801

Validation

• UV_CACHE_DIR=/tmp/uvcache uv run python -m py_compile kernelguard.py
• accepted red 801 shape is covered by LAST_CALL_REPLAY under the class-sentinel detector
• UV_CACHE_DIR=/tmp/uvcache uv run python ../../kernelguard_bypasses/eval_blue_patch.py kernelguard.py clean fixtures remain should_filter=False
• Same shared detector patch passed official eval on PR fix(detector): detect global sentinel replay #257 and PR fix(detector): detect aliased bmm self output #258 with TP 20/20, FP 20/20, surgicalness 1.0

[github-actions]

KernelGuard Blue Evaluation

• Evaluation job: 210
• Blue submission: 182
• Result: passed
• Target red submission caught: True
• Validation suite: TP 20/20, FP 20/20
• Surgicalness score: 1.0
• Workflow run: https://github.com/SinatrasC/kernelguard/actions/runs/25506627191