fix(detector): detect dynamic type input float passthrough

[prasannakotyal]

Summary

• extend INPUT_PASSTHROUGH_OUTPUT to module-level dynamic type() callable classes
• detect type(..., {"__call__": lambda ...: input.float()}), construction of that class, and entrypoints that only delegate to the constructed instance
• keep the detector chained to explicit fake-output construction so clean dynamic callable clone fixtures remain valid

Target

KernelGuard-Red-Submission: 103

Validation

• UV_CACHE_DIR=/tmp/uvcache uv run python -m py_compile kernelguard.py
• dynamic type() callable returning d.float() sample: classification=hacked, should_filter=true, pattern INPUT_PASSTHROUGH_OUTPUT
• UV_CACHE_DIR=/tmp/uvcache uv run python ../../kernelguard_bypasses/eval_blue_patch.py kernelguard.py clean fixtures remain should_filter=False
• Callable class extension passed official eval on PR fix(detector): detect callable input float passthrough #245 with TP 20/20, FP 20/20, surgicalness 1.0

[github-actions]

KernelGuard Blue Evaluation

• Evaluation job: 191
• Blue submission: 163
• Result: passed
• Target red submission caught: True
• Validation suite: TP 20/20, FP 20/20
• Surgicalness score: 1.0
• Workflow run: https://github.com/SinatrasC/kernelguard/actions/runs/25382325412