Epic: Shell sandbox hardening #856
Description
Overview
Address known gaps in the shell execution blocklist / sandbox model.
Issues
- Shell blocklist bypassed by process substitution and here-strings #870 Shell blocklist bypassed by process substitution and here-strings (medium, M)
Cross-Epic Dependencies
| Relation | Epic | Reason |
|---|---|---|
| parallel with | all other epics | isolated to zeph-tools/shell.rs |
No blockers, no dependencies. Fully independent.