9 Commits

Author	SHA1	Message	Date
Peter Steinberger	03e689fc89	fix(security): bind system.run approvals to argv identity	2026-02-26 03:41:31 +01:00
Peter Steinberger	0f0a680d3d	fix(exec): block shell-wrapper positional argv approval smuggling	2026-02-24 15:17:03 +00:00
Peter Steinberger	a67689a7e3	fix: harden allow-always shell multiplexer wrapper handling	2026-02-24 03:06:51 +00:00
Brian Mendonca	bd8b9af9a7	fix(exec): bind env-prefixed shell wrappers to full approval text ... (cherry picked from commit 1edf957988)	2026-02-23 18:56:14 +00:00
Peter Steinberger	24c954d972	fix(security): harden allow-always wrapper persistence	2026-02-22 22:55:33 +01:00
Peter Steinberger	2b63592be5	fix: harden exec allowlist wrapper resolution	2026-02-22 09:52:02 +01:00
Peter Steinberger	b109fa53ea	refactor(core): dedupe gateway runtime and config tests	2026-02-22 07:44:57 +00:00
Peter Steinberger	6007941f04	fix(security): harden and refactor system.run command resolution	2026-02-21 11:49:38 +01:00
Peter Steinberger	cb3290fca3	fix(node-host): enforce system.run rawCommand/argv consistency	2026-02-14 18:53:23 +01:00