(MOT-3872) feat(shell): deny-only policy — commands, fs jail, per-call env - #428

Merged

ytallo merged 18 commits into

mainfrom

feat/shell-deny-only

Jul 8, 2026

Commits on Jul 8, 2026

(MOT-3872) docs: shell deny-only command policy spec
ytallo
committed
69fc379
(MOT-3872) feat(shell): deny-only exec policy — drop the command allowlist and planted-binary guard
ytallo
committed
f4cceff
(MOT-3872) style(shell): cargo fmt config.rs
ytallo
committed
590da1b
(MOT-3872) feat(shell): hard-reject the removed allowlist config key
ytallo
committed
3e20d1e
(MOT-3872) chore(shell): purge allowlist wording from seeds, schema description, and comments
ytallo
committed
7e609e2
(MOT-3872) style(shell): fix inverted-sounding panic message wording
ytallo
committed
a42f655
(MOT-3872) chore(shell): fix stale allowlist wording in worker manifest description
ytallo
committed
a618cdd
(MOT-3872) test(shell): exec handler contract tests use the denylist path
ytallo
committed
4332638
(MOT-3872) test(shell): e2e cases cover deny-only exec policy
ytallo
committed
4bfe74a
(MOT-3872) test(shell): drop stale scaffolding comment in e2e edge case
ytallo
committed
8396417
(MOT-3872) docs(shell): deny-only policy docs + 0.8.0 changelog
ytallo
committed
9f2778a
(MOT-3872) docs(shell): fix stale open-exec terminology in README
ytallo
committed
7a0723a
(MOT-3872) docs(shell): fix stale allowlist wording in LLM skill doc and repo README
ytallo
committed
f95d2b7
(MOT-3872) feat(shell): unjail the shipped default config
ytallo
committed
bfeb8fe
(MOT-3872) docs(shell): document the unjailed default + fix DX review doc gaps
ytallo
committed
66017c6
(MOT-3872) feat(shell): deny-only per-call env override
ytallo
committed
35dc1f4
(MOT-3872) docs(shell): fix stale env.allow per-call wording in schema/descriptions
ytallo
committed
5ef9321
(MOT-3872) docs(shell): document the deny-only per-call env override
ytallo
committed
a99d45a

Navigation Menu

(MOT-3872) feat(shell): deny-only policy — commands, fs jail, per-call env - #428

(MOT-3872) feat(shell): deny-only policy — commands, fs jail, per-call env#428
ytallo merged 18 commits into
mainfrom
feat/shell-deny-only

Commits on Jul 8, 2026

(MOT-3872) docs: shell deny-only command policy spec

(MOT-3872) feat(shell): deny-only exec policy — drop the command allowlist and planted-binary guard

(MOT-3872) style(shell): cargo fmt config.rs

(MOT-3872) feat(shell): hard-reject the removed allowlist config key

(MOT-3872) chore(shell): purge allowlist wording from seeds, schema description, and comments

(MOT-3872) style(shell): fix inverted-sounding panic message wording

(MOT-3872) chore(shell): fix stale allowlist wording in worker manifest description

(MOT-3872) test(shell): exec handler contract tests use the denylist path

(MOT-3872) test(shell): e2e cases cover deny-only exec policy

(MOT-3872) test(shell): drop stale scaffolding comment in e2e edge case

(MOT-3872) docs(shell): deny-only policy docs + 0.8.0 changelog

(MOT-3872) docs(shell): fix stale open-exec terminology in README

(MOT-3872) docs(shell): fix stale allowlist wording in LLM skill doc and repo README

(MOT-3872) feat(shell): unjail the shipped default config

(MOT-3872) docs(shell): document the unjailed default + fix DX review doc gaps

(MOT-3872) feat(shell): deny-only per-call env override

(MOT-3872) docs(shell): fix stale env.allow per-call wording in schema/descriptions

(MOT-3872) docs(shell): document the deny-only per-call env override