Bare 'import java' returns the Jni namespace without module-jni's sandbox check #68

Found in the independent review of module-jni's sandbox changes (supah, module-jni 9662347): module-python's JavaLoader.cpp handles a bare import java by returning the Jni namespace without calling module-jni's exported sandbox check (jni_module_find_create_java_namespace() path), so a sandboxed caller can reach Java through Python's import java even where module-jni refuses it (qore#5741 decision: library code refuses Java/Python for a sandboxed caller).

Expected: every path that hands Java to Python code goes through module-jni's exported check and is refused for a restricted caller with the same error. Test: sandboxed Program → Python → import java refused; trusted Program allowed.

🤖 Generated with Claude Code