fix(verify): arm64 stack save, adaptive canary and host gating

Assisted-by: GLM 5.3

verify/coverage.go

@@ -5,7 +5,7 @@ package verify
 
 import (
 	"fmt"
-	"sort"
+	"slices"
 )
 
 // Block describes one basic block within a function: a maximal sequence of
@@ -13,7 +13,7 @@ import (
 // a single exit (a jump, conditional jump or RET).
 type Block struct {
 	Offset int    // byte offset within the function
-	Label  string // label name ("" for the entry block)
+	Label  string // label name ("(entry)" for the function entry block)
 }
 
 // Blocks identifies the basic blocks of a function from its local labels.
@@ -40,7 +40,7 @@ func (k *Kernel) Blocks(name string) ([]Block, error) {
 	for off := range offToLabel {
 		offsets = append(offsets, off)
 	}
-	sort.Ints(offsets)
+	slices.Sort(offsets)
 	for _, off := range offsets {
 		blocks = append(blocks, Block{Offset: off, Label: offToLabel[off]})
 	}