The judge's tests run against files and fakes; the drill runs it against a real resolver file and real resolvers, rewritten as the VPN client does, and records the statements the controller's replay raises and clears from.
