Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Plugin EvalArea: what it touches
Internal ChangesKind: in v2.1.251,
Internal ChangesSection of the release
What
The internal eval harness can now seal a sandbox directory it keeps after a run, setting it unreadable and verifying ownership, inode and that it is not the home or temp directory, with explicit failure messages on Windows and when running as root. It also indexes staging directories for stub artifacts produced during a run.
Details
Harness code only, not reachable from a normal session.
Evidence
eval kept-sandbox seal did not take
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
