kingwl 91247babd9 test(acp-agent): snapshot the fs sandbox escalation arc ...

A recorded scenario where the model writes a workspace file in one write call
with sandbox_permissions=danger-full-access + justification, the scripted
client allows once, and the escalated write lands — the fs twin of
escalation-approved, covering the fs escalation approval arc (only bash had a
snapshot before). Uses a new workspace-internal file to avoid the
read-before-edit detour, keeping the recorded path single and deterministic.

2026-07-15 00:17:29 +08:00

721 B

Raw Blame History

View Raw