admin-mf b7872e5423 feat(security): unify workspace_root boundary enforcement across CLI and gateway ... Promote workspace_root from channel-specific (magicform) to agents.defaults so both CLI --workspace/--config-dir and gateway metadata overrides are validated against the same immutable boundary. Paths must be relative subdirectories — absolute paths, .., and empty/dot are rejected. The boundary is snapshotted before overlay merges and cannot be widened by workspace config files. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-06 13:14:15 -06:00
..
resolve.go	feat(security): unify workspace_root boundary enforcement across CLI and gateway	2026-03-06 13:14:15 -06:00
resolve_test.go	feat(security): unify workspace_root boundary enforcement across CLI and gateway	2026-03-06 13:14:15 -06:00