security: tool_command sandboxing — 4 defense-in-depth layers#56

Merged

clintecker merged 5 commits intomainfrom

security/tool-command-sandboxing

Apr 4, 2026

Commits on Apr 4, 2026

security(handlers): strip sensitive env vars from tool command subprocesses (#16)

clintecker
and
claude
committed
security(handlers): command denylist/allowlist with per-statement matching (#16)

clintecker
and
claude
committed
security(handlers): wire all 4 safety layers into tool handler Execute (#16)

clintecker
and
claude
committed
docs: update CLAUDE.md tool node safety section with sandboxing controls (#16)

clintecker
and
claude
committed
fix: address PR #56 review — 15 issues across limitedBuffer, output_limit, denylist, env, tests

clintecker
and
claude
committed