fix(security): close the untrusted-repo execution boundary (#905) - #994

Merged

frankbria merged 9 commits into

mainfrom

fix/905-untrusted-repo-execution

Jul 29, 2026

Commits on Jul 29, 2026

fix(security): close the untrusted-repo execution boundary (#905)
frankbria
committed
test: update hook contract tests for the #905 trust gate
frankbria
committed
docs: document CODEFRAME_ALLOW_HOOKS and the hook trust store (#905)
frankbria
committed
fix(security): refuse credential-store paths in run_command (#905)
frankbria
committed
test: cover the cf hooks trust/show CLI surface (#905)
frankbria
committed
fix(security): drop XDG_* too when the agent HOME sandbox cannot be built (#905)
frankbria
committed
fix(security): sandbox run_tests and the plan-engine shell too (#905 review)
frankbria
committed
test: make the sibling-caller sandbox tests non-tautological
frankbria
committed
test: cover both plan-engine execution branches
frankbria
committed