-
Format the tree with rustfmt and add the lint + supply-chain gates
-
ops-exec: bound the agent control calls, leave builds unbounded
-
ops-exec: split pull into pull_file/pull_dir; move backup.rs onto the executor
-
ops-exec: gate /pull on a dedicated `artifact` observe grant
-
ops-exec: pin approved scripts per action on the agent
-
bento: wire the agent protocol-version skew check (Run 3 wiring)
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver