loadRejectsModuleWithImports

The import fixture's memory is bounded, so the capability violation is the only possible rejection — the message assertion pins the import guard itself, not another guard firing first.