Huanqi Cao aa790346e4 docs(sandbox): explain why the token intersection needs no new identity ...

Add the mechanism section to the Windows rung Agent Note: identity routes (restricted-user, AppContainer) default-deny everything from a fresh SID and pay per-path ACE writes for every read, while the WRITE_RESTRICTED token keeps the caller's SID and double-checks write-class access only — reads pass on the normal check alone. Covers DISABLE_MAX_PRIVILEGE/LUA_TOKEN as the token-side limited-user synthesis and why SidsToDisable read restriction is unused.

2026-08-08 02:42:47 +08:00

..

notes

docs(sandbox): explain why the token intersection needs no new identity

2026-08-08 02:42:47 +08:00

skills

fix(scripts): only publish images the repository owns, and keep their suffix

2026-08-06 21:14:39 +08:00