Split the deferred resolver into its own function so the v8 ignore covers only the production resolver arm, leaving the security-relevant deps.consent precedence branch enforced at 100% branch coverage. Assert the frozen-allow path so both sides of that branch are exercised, and document the caller obligation on reportCommandTelemetry and resolveTelemetryConsent.