 Alexandre Teixeira
|
037c5f51bf
|
fix(runtime): resolve Wave 3-S audit findings (P2-1, P2-2, P2-3)
- P2-1: reject non-process PID values (None, 0, negative integers) in pid_alive
without invoking underlying process probe.
- P2-2: truthfully represent production external bridge executions as uncontained,
external, non-authoritative grants carrying sanitized endpoint metadata.
- P2-3: reject writable_extra overlay bindings over protected system roots and
their descendants while preserving legitimate scratch destinations.
|
2026-10-02 00:07:44 +01:00 |
|