Repository navigation

fix(cli): confined dsh attaches, and its writer can run git (D106) - #2853

Merged

lilyshen0722 merged 7 commits into

mainfrom

fix/attach-admits-confined-dsh

Oct 27, 2026

Merged

fix(cli): confined dsh attaches, and its writer can run git (D106)#2853
lilyshen0722 merged 7 commits into
mainfrom
fix/attach-admits-confined-dsh

Commits on Oct 27, 2026
- fix(cli): attach admits dsh's confined sandbox shape (D106)
  
  lilyshen0722
  and
  claude
  committed
  12eede3
- fix(cli): a confined dsh writer can run git inside its sandbox (D106)
  
  lilyshen0722
  and
  claude
  committed
  49f1ae4
- test(cli): performAttach carries confined dsh past the trust gate (D106)
  
  lilyshen0722
  and
  claude
  committed
  793a636
- test(cli): confined dsh attach runs dsh's real validator, on both Seatbelt outcomes
  
  lilyshen0722
  and
  claude
  committed
  533863a
- fix(cli): grant developer tools only from Apple's install locations
  
  lilyshen0722
  and
  claude
  committed
  c7cb8d2
- fix(cli): confined dsh's bare git resolves to the granted shim
  
  lilyshen0722
  and
  claude
  committed
  0d34e0a
- test(cli): the dsh stub reports PATH, so the /usr/bin-first check reads it
  
  lilyshen0722
  and
  claude
  committed
  919b6fe