fix(sandbox): protect daemon token file - #685

Open

PierrunoYT wants to merge 20 commits into

Gitlawb:mainfrom

PierrunoYT:agent/protect-daemon-token-file

Commits on Aug 21, 2026

fix(sandbox): protect daemon token file
PierrunoYT
committed
fd1efaa
fix(sandbox): close daemon token review gaps

ampagent
and
PierrunoYT
committed
8b1c617
fix(sandbox): reject linkable macOS daemon tokens
PierrunoYT
committed
cdfacd7
fix(sandbox): close the Linux mandatory-token validate/build gap
PierrunoYT
committed
03c6ab5
fix(sandbox): fail closed on mandatory symlinks
PierrunoYT
committed
5d69f15
fix(sandbox): close the Linux token hard-link alias path

PierrunoYT
and
factory-droid[bot]
committed
2243918
fix(sandbox): gate path args on exact bytes and close the engine-less listing

PierrunoYT
and
claude
committed
74ea6af
fix(sandbox): complete daemon token boundary

ampagent
and
PierrunoYT
committed
bbce40c
test(sandbox): scope Seatbelt token denial to macOS

PierrunoYT
and
ampagent
committed
af7a3cc
fix(sandbox): reject pre-existing macOS token aliases and pin the case-fold test
PierrunoYT
committed
01538a8

Commits on Aug 22, 2026

fix(sandbox): preserve daemon token identity
PierrunoYT
committed
b9b6de8

Commits on Aug 23, 2026

fix(sandbox): address CodeRabbit review findings

PierrunoYT
and
claude
committed
476d706
fix(sandbox): answer an uncreated write root from its parent filesystem

PierrunoYT
and
claude
committed
df7d1df
fix(sandbox): mandate credential protection independent of the sandbox engine

PierrunoYT
and
claude
committed
6e716f0

Commits on Aug 24, 2026

fix(sandbox): close protected token file races
PierrunoYT
committed
6150070

Commits on Aug 25, 2026

Merge branch 'main' into agent/protect-daemon-token-file

PierrunoYT
and
claude
committed
52e53a8
fix(tools): bind grep's credential decision to the opened file

PierrunoYT
and
claude
committed
d2e41d6

Commits on Aug 26, 2026

Merge remote-tracking branch 'upstream/main' into pr-685
PierrunoYT
committed
0f0bb00

Commits on Aug 27, 2026

fix(tools): apply a patch to the exact path its authorization saw

PierrunoYT
and
claude
committed
278c9a7

Commits on Sep 2, 2026

fix(sandbox): align patch authorization with execution

PierrunoYT
and
ampagent
committed
71e9517