Node service on `:8080` exposes `POST /api/compile` behind a hidden parser guard that changes per container, forcing active fuzzing rather than static replay. A queue token is stored in unauthenticated Redis under noisy keyspace decoys; valid compile requests can create symlinked job writes that land in a root-processed cron directory. Win condition requires chaining parser bypass, Redis token discovery, controlled file write, and cron-triggered privilege escalation.