Shell safety patterns and validation for agentic workflows.
Defines the forbidden shell expansion patterns that the sandbox filter blocks,
extracted from .github/prompts/00-scope-and-ground-rules.md §47 and
.github/prompts/08-infrastructure.md §177-181.
These patterns are used by test/unit/shell-safety.test.js as the drift guard
and can be consumed by any tooling that needs to validate shell scripts.
Description
Shell safety patterns and validation for agentic workflows. Defines the forbidden shell expansion patterns that the sandbox filter blocks, extracted from .github/prompts/00-scope-and-ground-rules.md §47 and .github/prompts/08-infrastructure.md §177-181.
These patterns are used by test/unit/shell-safety.test.js as the drift guard and can be consumed by any tooling that needs to validate shell scripts.