I know she's lying.

Case 4 just requires that the simulation not recognise that it is a simulation when it considers whether or not it's a simulation, ie. that whatever question it asks itself, it finds an answer. It can't actually check for consistency, remember, it's a simulation, if it would find an inconsistency "change detail [removing inconsistency], run" or "insert thought 'yep, that's all consistent'; run"

If she's capable of case 1, she's capable of case 4, even if she has to insert the memory on it being requested, rather than prior to request.