Answered my own question thanks to a hint from samtregar about eval and $@ (on a different thread!).
It needed

$compartment->permit( qw( entereval ) );
[download]

the nested eval was trapped by the opcode mask of the first eval.