fix(sandbox/recover): enforce Hermes env-file secret boundary on probe path - #5530

Merged

cv merged 4 commits into

mainfrom

fix/hermes-secret-boundary-on-recover-probe

Jun 18, 2026

Commits on Jun 17, 2026

fix(sandbox/recover): enforce Hermes env-file secret boundary on probe path
laitingsheng
committed
8209b7b
fix(sandbox/recover): surface validator stderr and fail safe on inconclusive secret-boundary check
laitingsheng
committed
2e03367
fix(sandbox/recover): gate Hermes boundary on registry agent and cover probe refusal at the command boundary
laitingsheng
committed
bff177c
fix(sandbox/recover): surface every secret-boundary refusal diagnostic and stop the non-probe connect path on refusal
laitingsheng
committed
fd13c69