You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.227,
ImprovementsSection of the release
What
An agent spawned with a clamp restricting which shell commands it may run now has PowerShell refused outright, since PowerShell commands cannot be matched against Bash command forms. If the PowerShell permission check itself throws, it fails closed instead of running an unverified command. Agents without a clamp are unaffected.
Evidence
this agent carries a per-spawn bashCommandClamp, which scopes shell execution to a
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
