word_cap is measured from the file before the shim opens it (0 if that
fails), so the unbounded >> into a word_cap+2 buffer could overflow if the
file changed in between. Results are unchanged for words within word_cap
(difftest 2059/2059 pass).
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>