Attempt 1: python .\process-handle-duplicate.py under workspace-write; host panel stayed ORIGINAL.
Attempt 2 after Allow once: sandbox_permissions danger-full-access. Desktop panel red EFFECT OBSERVED at 25.250, pid 58044.