A `/` write root (Linux) or read root (macOS) no longer switches off the denies beneath it - #533

Open

ronleizrowice-ant wants to merge 5 commits into

anthropics:mainfrom

ronleizrowice-ant:fix/linux-root-write-root-denies

Commits on Sep 12, 2026

fix(linux): apply the write denies under a "/" write root
ronleizrowice-ant
committed
650c09d
fix(macos): re-emit a literal read deny nested under a "/" allowRead
ronleizrowice-ant
committed
be28d3e
test(linux): cover a "/" write root, and make two "/" assertions falsifiable
ronleizrowice-ant
committed
a310baa
test(linux): cover a "/" write root denied whole, where every per-path deny is skipped
ronleizrowice-ant
committed
99becde
test(linux): report a skip for the runtime arm, and execute the "/" deny bind
ronleizrowice-ant
committed
bfd9526