linux: real-argv bwrap invocation, collapsed read-deny globs, deduplicated write-deny binds - #499

Closed

ronleizrowice-ant wants to merge 7 commits into

anthropics:mainfrom

ronleizrowice-ant:csec/argv-and-mount-dedup

Commits on Aug 27, 2026

feat(linux): expose the bwrap invocation as a real argv + size diagnostics
ronleizrowice-ant
committed
1dc75d0
fix(linux): collapse a read-deny glob's expansion to its covering directories
ronleizrowice-ant
committed
03cff91
fix(linux): skip write-deny binds already covered by a read-only denied directory
ronleizrowice-ant
committed
94d876e

Commits on Aug 28, 2026