fix(security): harden shell flag parsing, write roots, and formatters - #1066

Open

hazyhaar wants to merge 4 commits into

Twigpine:mainfrom

hazyhaar:fix/security-hardening-sandbox-tools

Commits on Sep 21, 2026

fix(security): harden shell flag parsing, write roots, and formatters
hazyhaar
committed
f80adf5
fix(security): stop shell flag parsing at dash-dash and verify root descriptor identity
hazyhaar
committed
2a8c4f4
fix(tools): relax symlink resolution error handling on host formatters and clean up test directory
hazyhaar
committed
6c9abec

Commits on Sep 26, 2026

fix(security): anchor write preimage on root descriptor and report skipped formatters
hazyhaar
committed
8c51437