PHPUnit hardens test output against agent deception and adds a bounded-run timeout
When coding agents read test logs, code-controlled strings can deceive the agent or its human reviewer. PHPUnit's new escaping and run limit address part of that trust boundary, not the sandbox.