anandh8x 93c4d65c88 fix(sandbox): classify PowerShell removal aliases

2026-07-26 23:41:28 +05:30

..

adapters_test.go

fix(sandbox): self-dispatch the Windows sandbox helpers so they work in dev (#280)

2026-06-21 14:01:49 +05:30

adapters.go

fix(sandbox): self-dispatch the Windows sandbox helpers so they work in dev (#280)

2026-06-21 14:01:49 +05:30

analyzer_test.go

fix(sandbox): classify PowerShell removal aliases

2026-07-26 23:41:28 +05:30

analyzer.go

fix(sandbox): classify PowerShell removal aliases

2026-07-26 23:41:28 +05:30

architecture_baseline_test.go

Align sandbox command approval behavior (#322)

2026-06-26 13:20:07 +05:30

auto_allow_bash_test.go

fix(sandbox): don't auto-allow shell when re-entrancy skips wrapping (#727) (#744)

2026-07-20 11:56:36 +05:30

command_prefix.go

Persist command prefix approvals (#252)

2026-06-18 21:56:24 +05:30

engine_test.go

fix(sandbox): classify Windows executable suffixes

2026-07-24 20:02:00 +05:30

engine.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

execution_adapter_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

export_test.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

grant_scope_test.go

fix: address bugs found in a multi-agent codebase audit (#481)

2026-07-06 18:48:28 +08:00

grant_scope.go

fix: address bugs found in a multi-agent codebase audit (#481)

2026-07-06 18:48:28 +08:00

grants_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

grants.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

homebrew_tools_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

landlock_linux_test.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

landlock_linux.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

landlock_other.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

linux_helper_linux_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

linux_helper_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

log_monitor_darwin_test.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

log_monitor_darwin.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

log_monitor_other.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

manager_test.go

fix(sandbox): scrub sensitive credentials from sandbox environment (#660)

2026-07-14 21:46:10 +08:00

manager.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

normalize.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

pathlists_test.go

Fix shared temp roots in sandbox scope (#314)

2026-06-25 09:47:55 +05:30

pathlists.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

paths.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

platform_contract_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

profile.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

protected_create_linux_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

protected_create_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

reentrancy_test.go

fix(sandbox): scrub sensitive credentials from sandbox environment (#660)

2026-07-14 21:46:10 +08:00

request_permissions_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

request_permissions.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

risk_hardening_test.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

risk.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

runner_linux_integration_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runner_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runner_windows_integration_test.go

fix(windows): prefer PowerShell for command execution

2026-07-24 19:35:42 +05:30

runner.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

runtime_lease_unix.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_lease_windows.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_lease.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_state_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_state.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

safe_command_test.go

fix(sandbox): AST second opinion for interactive-command bypasses (#473) (#745)

2026-07-20 21:01:55 +05:30

safe_command.go

fix(sandbox): normalize relative Windows paths

2026-07-24 20:22:15 +05:30

scope_test.go

fix(sandbox): clarify scoped permission prompts (#798)

2026-07-24 17:37:32 +05:30

scope_windows_test.go

Fix shared temp roots in sandbox scope (#314)

2026-06-25 09:47:55 +05:30

scope.go

fix(sandbox): clarify scoped permission prompts (#798)

2026-07-24 17:37:32 +05:30

seatbelt_integration_darwin_test.go

fix(sandbox): unblock git fetch/commit/add under the write-restricted sandbox (#654)

2026-07-13 21:56:10 +08:00

seccomp_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp_other.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

types.go

feat(sandbox): unelevated Windows fallback tier instead of prompts-only degrade (#427)

2026-07-03 16:38:28 +08:00

windows_acl_apply_windows_test.go

fix(sandbox): bind Windows elevated ACL setup to one no-follow handle (#765)

2026-07-21 13:00:29 +05:30

windows_acl_apply_windows.go

fix(sandbox): bind Windows elevated ACL setup to one no-follow handle (#765)

2026-07-21 13:00:29 +05:30

windows_acl_test.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_acl.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_command_runner_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_command_runner_windows.go

fix(sandbox): use WRITE_RESTRICTED token when no DenyRead paths are configured (#658)

2026-07-13 22:17:31 +08:00

windows_command_runner.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_degrade_test.go

feat(sandbox): unelevated Windows fallback tier instead of prompts-only degrade (#427)

2026-07-03 16:38:28 +08:00

windows_helper_discovery_test.go

fix(sandbox): self-dispatch the Windows sandbox helpers so they work in dev (#280)

2026-06-21 14:01:49 +05:30

windows_network_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_network_windows.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_network.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_online_offline_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_process_windows.go

fix(tools): fix cmd.exe /S/C corrupting commands with embedded quotes (#465)

2026-07-05 11:36:00 +08:00

windows_runner_test.go

fix(tools): fix cmd.exe /S/C corrupting commands with embedded quotes (#465)

2026-07-05 11:36:00 +08:00

windows_runner.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

windows_setup_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_setup_test.go

feat(sandbox): online/offline Windows network identity — run approved network commands sandboxed (#297)

2026-06-21 22:49:54 +05:30

windows_setup_windows.go

feat(sandbox): online/offline Windows network identity — run approved network commands sandboxed (#297)

2026-06-21 22:49:54 +05:30

windows_setup.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

windows_shell_autoallow_test.go

fix(sandbox): stop bricking Windows when the sandbox isn't set up (degrade like Linux/macOS) (#295)

2026-06-21 22:49:39 +05:30

windows_token_windows.go

fix(sandbox): use WRITE_RESTRICTED token when no DenyRead paths are configured (#658)

2026-07-13 22:17:31 +08:00

windows_unelevated_test.go

fix(sandbox): self-heal a corrupt unelevated setup marker (#437)

2026-07-03 19:34:56 +08:00

windows_unelevated.go

fix(sandbox): scrub sensitive credentials from sandbox environment (#660)

2026-07-14 21:46:10 +08:00

wsl_linux.go

feat(sandbox): complete sandbox breadth — WSL fallback + opt-in MITM TLS inspection (#206)

2026-06-15 11:38:14 +05:30

wsl_other.go

feat(sandbox): complete sandbox breadth — WSL fallback + opt-in MITM TLS inspection (#206)

2026-06-15 11:38:14 +05:30

wsl_test.go

Align sandbox command approval behavior (#322)

2026-06-26 13:20:07 +05:30

wsl.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30