feat: OS-level SRT agent sandboxing + permission-hook hardening#1125

Merged

Henry-811 merged 6 commits into

dev/v0.1.96from

feat/better-sandboxing

Jun 10, 2026

Commits on Jun 10, 2026

feat(sandbox): add OS-level SRT execution sandboxing (command_line_execution_mode: srt)

ncrispino
and
claude
committed
feat(security): harden PathPermissionManager hook against file-tool sandbox escapes

ncrispino
and
claude
committed
feat(sandbox): configurable SRT read confinement (default: confined to workspace+context)

ncrispino
and
claude
committed
fix(sandbox): re-allow framework read roots so fs-tools MCP server starts under confined SRT

ncrispino
and
claude
committed
docs(release): prepare v0.1.96 — OS-Level Agent Sandboxing

ncrispino
and
claude
committed
Merge branch 'dev/v0.1.96' into feat/better-sandboxing
Henry-811
authored