Files
pmg/docs
Claude be2908db29 docs: spec for process-level environment variable protection
Add a design spec for scrubbing sensitive environment variables from
package-manager child processes, mirroring the DANGEROUS_FILES model:
built-in default deny list, per-profile allow overrides, enforced at the
ApplySandbox chokepoint. Motivated by the Miasma/Shai-Hulud toolkit's
env-based credential harvesting.

https://claude.ai/code/session_017Da1sAYLYpeEgogm6f9VYW
2026-06-10 01:27:27 +00:00
..
2026-05-26 16:45:14 +00:00
2026-01-27 21:24:08 +05:30