2 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Claude	8a00d63856	docs: explicit known-secret deny list, wildcards via profile only ... Drop generic *_TOKEN / *_SECRET catch-alls from the built-in default deny list to avoid clipping legitimate build variables. The matching engine still supports glob patterns so users can opt into broad denies per sandbox profile (e.g. deny: ["*_TOKEN", "AWS_*"]). https://claude.ai/code/session_017Da1sAYLYpeEgogm6f9VYW	2026-06-10 01:35:06 +00:00
Claude	be2908db29	docs: spec for process-level environment variable protection ... Add a design spec for scrubbing sensitive environment variables from package-manager child processes, mirroring the DANGEROUS_FILES model: built-in default deny list, per-profile allow overrides, enforced at the ApplySandbox chokepoint. Motivated by the Miasma/Shai-Hulud toolkit's env-based credential harvesting. https://claude.ai/code/session_017Da1sAYLYpeEgogm6f9VYW	2026-06-10 01:27:27 +00:00