fix(bash-guard): deny internal curl to orchestrator/localhost

Browse Source

Prompts told agents internal API calls were denied; the guard only
denied GitHub. Combined with task 4 (X-Agent-Role enforcement) this
closes the manifest-bypass loophole.

...

This commit is contained in:

Renn F

2026-05-03 06:11:38 +02:00

parent 38246050d6

commit 8381ade3ce

3 changed files with 69 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

tests/unit/scripts/__init__.py