esengine 59fc0b6520 fix(sandbox): strip the token's privileges, refuse a launcher started from a restricted process, and state what Windows bounds ...

The restricted token now drops every privilege but the traverse check, so backup
semantics cannot write outside the roots even from an elevated session. A SID is
synthetic only if no account resolves it. The launcher refuses to run under a
restricted token (a command's own launcher inherits it), grants only session temp
folders, hands the child just the standard handles, runs it in a job with UI
limits, and the default DACL and the grant mask are narrower. Links are not
followed at grant time and a link root is refused. REASONIX.md, the guide, the
Settings text and the release note list what is and is not bounded.

2026-10-19 19:54:07 -07:00

..

13109-windows-sandbox.md

fix(sandbox): strip the token's privileges, refuse a launcher started from a restricted process, and state what Windows bounds

2026-10-19 19:54:07 -07:00

13936-rail-fold-long-transcript.md

docs(release): note the rail fold improvement

2026-10-19 19:37:38 -07:00

13950-v4-listing.md

fix(sessionstore): remember what replaying a 1.x conversation answered

2026-10-19 19:27:27 -07:00