Why: CI runs as root, where chmod-based failure injection does not fail (root bypasses file permissions), and any filesystem state that would fail restore is pre-detected by the classification pass. A package-level test seam makes the injection deterministic on any uid. Evidence: GOWORK=off go test (-race) green locally. Impact: test-only seam, documented as never-for-production. Refs: Agent-Native#33