Ir.Resource_fault_injectionTest-only fault-injection points for resource-owning seams.
Production code calls hit at boundaries where an exception must leave resource ownership honest. The default callback is a no-op and no configuration selects it. Tests install a callback with with_callback; callbacks are process-global, so scenarios must not run in parallel.