fix: harden execution-control decision boundary (WorkspaceWrite write-target bypasses + truthful sandbox diagnosis)#46

XuebinMa merged 3 commits into

mainXuebinMa/agent-guard:mainfrom

security/exec-control-hardeningXuebinMa/agent-guard:security/exec-control-hardeningCopy head branch name to clipboard