feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory

2026-08-08 17:29:43 +08:00
parent 91d3ed6c5a
commit abfb933620
40 changed files with 1239 additions and 118 deletions
--- a/knip.json
+++ b/knip.json
@@ -5,6 +5,7 @@
  ],
  "ignoreBinaries": [
    "bwrap",
+    "icacls",
    "python3",
    "sandbox-exec",
    "taskkill",