after we recently went through the trouble of double-checking that auto-leaks dump/reporting was running correctly on developer computers, it occurred to me: why not just always leak 1 thing on purpose, so we are reassured by at least a 1-item leak report each time?  Here is that 1 item leak (to be called in 'main' by our apps)