The logic for automatically allowing Bash commands when sandboxing is enabled now includes an additional validation check. This ensures the auto-allow behavior only applies when specific conditions are met.
Evidence
Auto-allow condition tightening — b3z() at line ~514497 (search for "isAutoAllowBashIfSandboxedEnabled")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
