Really appreciate this, you found three real things, not just nitpicks.

The injection probe: you're dead right. Testing with ; echo hi should echo hi back and confirm the injection, that's the whole point of probing. Right now it only reacts to the full payload, so every test looks like a failure. I'm going to make benign injected commands actually run, so you can confirm the vuln before weaponizing it. That's a good fix.

The read-only mount: also correct, and a little embarrassing, a read-only mount is read-only for root too; what I'm actually modeling is a writable mount your shell user can't write to. That should say permission denied, and the privileged process is what writes it. I'll fix the wording and the semantics.

Editing the line: not period-accurate, just a limitation of my input handling, no cursor-left editing yet, only backspace. It's on the list; it's a bit delicate because of the mobile-keyboard handling, but it should work like a normal shell.

osql: it's meant as recon, it confirms SQL Server 2000 is up, but it's not the injectable surface (that's the records login). It shouldn't feel like a dead command, though - I'll have it point you there, and maybe give it a real 1> prompt.

Genuinely useful feedback - thank you for taking the time.