statSync().isDirectory() is true for a mode-600 directory, but a subprocess cwd needs X_OK — spawn would fail EACCES, deferring a self-contained configuration error past the load/start boundary the resolution owns. Probe accessSync(X_OK) alongside the type check so "not an accessible directory" is literally what the guard verifies.