The answer is essentially hardware-level dependency injection. Before calling LD_DESCRIPTOR, the caller saves its desired test constant into a hardware latch using a micro-op called PTSAV (Protection Save). Within LD_DESCRIPTOR, another micro-op called PTOVRR (Protection Override) retrieves and fires the saved test.
Screen resolution
。91视频是该领域的重要参考
[开源分享] Agent 指挥 Agent，我做了一个让 Claude Code / Codex / Gemini/... 组成"军团"并行干活的工具
These aren't contrived scenarios invented by test authors in total vacuum. They're consequences of the spec's design and reflect real world bugs.