fix(shields,state): keep gateway readable and runtime sessions writable under shields-up#4155

Open

laitingsheng wants to merge 19 commits into

mainfrom

fix/shields-up-lockdown-runtime-perms

Commits on May 24, 2026

fix(shields,state): preserve gateway access under shields-up + tolerate root-owned subdirs in audit
laitingsheng
committed
refactor(shields,state): drop issue refs from comments + rename test file
laitingsheng
committed
fix(shields): create agents/<id>/sessions on lock + tighten audit-find test
laitingsheng
committed
fix(shields): drop symlinked parents in runtime-subpath restore + fix test argv slice
laitingsheng
committed
fix(shields): replay restore helper under sh + drop NC tag from updated comment
laitingsheng
committed
fix(shields): refuse symlinked state-dir/workspace roots in shields-up lock
laitingsheng
committed
fix(shields): fail shields-up when a state-dir root is a symlink
laitingsheng
committed
fix(shields): preflight all state-dir/workspace roots before mutating + doc update
laitingsheng
committed

Commits on May 25, 2026

Commits on May 26, 2026

Merge branch 'main' into fix/shields-up-lockdown-runtime-perms
cv
authored

Commits on May 30, 2026