fix(sandbox): deny reads of Zero credential stores#681

Open

PierrunoYT wants to merge 10 commits into

Gitlawb:mainfrom

PierrunoYT:agent/deny-zero-credential-reads

Commits on Jul 14, 2026

Commits on Jul 15, 2026

fix(sandbox): deny the whole Zero config dir, not itemized filenames

PierrunoYT
and
claude
committed

Commits on Jul 17, 2026

fix(sandbox): address macOS deny-path test and config parity

cursoragent
and
PierrunoYT
committed

Commits on Jul 19, 2026