feat: configurable sandboxing for bash commands and local MCP servers on linux/macos#20316

Open

kyuz0 wants to merge 9 commits intoanomalyco:devfrom

kyuz0:sandboxing

Commits on Mar 31, 2026

feat: implement bash command sandboxing using the srt provider and add configuration support
Donato Capitella
committed
refactor: enforce read and write restrictions for deny_workspace_patterns and update tests to verify full file access blocking
Donato Capitella
committed

Commits on Apr 1, 2026