Repository navigation

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead - #1006

Merged

kevincodex1 merged 9 commits into

Twigpine:mainfrom

euxaristia:fix/windows-sandbox-restricted-token-sids-v2

Sep 12, 2026

Commits on Aug 31, 2026
Commits on Sep 1, 2026
- Reject unsupported DenyRead profiles upfront during sandbox setup
  euxaristia
  committed
  90d056a
Commits on Sep 2, 2026
- Migrate legacy Windows DenyWrite ACEs, randomize smoke probes, and clean dead descendant machinery.
  euxaristia
  committed
  a84626f
Commits on Sep 4, 2026