fix(sandbox): protect daemon token file - #685

Open

PierrunoYT wants to merge 15 commits into

Gitlawb:mainfrom

PierrunoYT:agent/protect-daemon-token-file

Commits on Jul 20, 2026

fix(sandbox): protect daemon token file
PierrunoYT
committed

Commits on Jul 25, 2026

Merge remote-tracking branch 'upstream/main' into pr685
PierrunoYT
committed
fix(sandbox): protect the daemon token from Zero's own tools
PierrunoYT
committed
fix(sandbox): scope the credential write-deny and keep it under a disabled policy
PierrunoYT
committed

Commits on Jul 26, 2026

Commits on Jul 27, 2026

Commits on Jul 28, 2026

Commits on Jul 29, 2026

test(sandbox): pin daemon token protections

ampagent
and
PierrunoYT
committed

Commits on Jul 30, 2026

test(cli): compare canonical daemon token path

PierrunoYT
and
ampagent
committed