Mnt/more hardening#9

Merged

Stuart B. Wilkins (stuwilkins) merged 6 commits into

tacaswell:mnt/more_hardening

Jul 7, 2026

Commits on Jul 7, 2026

MNT: drop reference to hermes
Thomas A Caswell (tacaswell)
committed
MNT: harden and simplify bwrap_sandbox_lib

Thomas A Caswell (tacaswell)
and
Claude (claude)
committed
MNT: robust env sweep + shared dir helper in bw* wrappers

Thomas A Caswell (tacaswell)
and
Claude (claude)
committed
MNT: gh-protect-branch bash guard, simpler help, clearer error

Thomas A Caswell (tacaswell)
and
Claude (claude)
committed
MNT: drop eval in gpg-passwd, pin checkout SHA, add .gitignore

Thomas A Caswell (tacaswell)
and
Claude (claude)
committed
STY: whitespace fixes via shfmt
Thomas A Caswell (tacaswell)
committed