Secure prompt debug filesystem writes

2026-08-13 01:28:49 +00:00
parent a38d291f63
commit 44af91cadf
9 changed files with 421 additions and 107 deletions
--- a/docs/operations.md
+++ b/docs/operations.md
@@ -147,6 +147,9 @@ Preparation captures retain only the provider endpoint origin and reviewed
 execution settings. URL user information, paths, queries, fragments, and
 unrecognized provider parameters are omitted.

+Capture writes are confined to the requested root and fail if an unsafe
+filesystem component prevents secure artifact creation.
+
 If capture creation or writing fails, the affected run fails rather than
 silently continuing without the requested diagnostics.