security: constrain agent command execution - #4

Merged

harshitethic merged 7 commits into

mainfrom

security/safe-command-execution

Sep 8, 2026

Commits on Sep 8, 2026

security: add safe command execution policy
harshitethic
committed
d4e6164
test: cover command execution policy
harshitethic
committed
d004411
security: remove shell execution from test commands
harshitethic
committed
93c2609
fix(security): reject path-qualified executables
harshitethic
committed
2da3b19
test(security): cover executable path bypasses
harshitethic
committed
8f926fc
security: block command-runner escape hatches
harshitethic
committed
9ebf5ff
test: cover command-runner escape hatches
harshitethic
committed
e35061c