matevip 83615593cd fix(tool/guard): harden workspace filesystem sandbox (#313) ... - Fail closed to a global fallback sandbox root when a conversation has no per-workspace base path, instead of leaving file/shell tools unconstrained - Refuse shell commands that delete the workspace root directory itself - Block workspace-boundary escapes at the policy layer before the approval prompt, not only at execution time - Approval bar now shows the actual command / target path being approved		2026-06-10 17:17:07 +08:00
..
vip/mate	fix(tool/guard): harden workspace filesystem sandbox (#313)	2026-06-10 17:17:07 +08:00