Framework and privilege case
Label: ungraded synthesis. About fifteen minutes.

1. Name proposal M-1 and the decision not to run it.
2. Name the file an ordinary account can write, and the service identity that runs the service.
3. Say who would be able to change the program a higher-rights service starts.
4. Recommend a fix you will not perform: remove the extra write, then read the list again.
5. Stop: no file changed, no service restarted, no module loaded.

The note is not graded. Do not include a payload or a command that changes rights.