17 Commits

Author	SHA1	Message	Date
Peter Steinberger	2083b0581d	test: tighten system run command normalization coverage	2026-03-14 00:42:13 +00:00
Peter Steinberger	767609532f	test: tighten system run command coverage	2026-03-14 00:30:20 +00:00
Peter Steinberger	28a49aaa34	fix: harden powershell wrapper detection	2026-03-13 20:37:38 +00:00
Peter Steinberger	68c674d37c	refactor(security): simplify system.run approval model	2026-03-11 01:43:06 +00:00
Peter Steinberger	7289c19f1a	fix(security): bind system.run approvals to exact argv text	2026-03-11 01:25:31 +00:00
Peter Steinberger	8a469a12b2	test(exec): dedupe wrapper boundary regressions	2026-03-08 00:12:08 +00:00
Peter Steinberger	2fc95a7cfc	fix(exec): close dispatch-wrapper boundary drift	2026-03-07 23:40:38 +00:00
Peter Steinberger	1d1757b16f	fix(exec): recognize PowerShell encoded commands	2026-03-07 23:15:46 +00:00
Peter Steinberger	03e689fc89	fix(security): bind system.run approvals to argv identity	2026-02-26 03:41:31 +01:00
Peter Steinberger	0f0a680d3d	fix(exec): block shell-wrapper positional argv approval smuggling	2026-02-24 15:17:03 +00:00
Peter Steinberger	a67689a7e3	fix: harden allow-always shell multiplexer wrapper handling	2026-02-24 03:06:51 +00:00
Brian Mendonca	bd8b9af9a7	fix(exec): bind env-prefixed shell wrappers to full approval text ... (cherry picked from commit 1edf957988)	2026-02-23 18:56:14 +00:00
Peter Steinberger	24c954d972	fix(security): harden allow-always wrapper persistence	2026-02-22 22:55:33 +01:00
Peter Steinberger	2b63592be5	fix: harden exec allowlist wrapper resolution	2026-02-22 09:52:02 +01:00
Peter Steinberger	b109fa53ea	refactor(core): dedupe gateway runtime and config tests	2026-02-22 07:44:57 +00:00
Peter Steinberger	6007941f04	fix(security): harden and refactor system.run command resolution	2026-02-21 11:49:38 +01:00
Peter Steinberger	cb3290fca3	fix(node-host): enforce system.run rawCommand/argv consistency	2026-02-14 18:53:23 +01:00