feat(guard): executable identity — pin tool:X by path+sha256, reject substitution/PATH/symlink (#679) - #683

feat(guard): executable identity — pin tool:X by path+sha256, reject substitution/PATH/symlink (#679)#683

DealAppSeo merged 3 commits into

mainDealAppSeo/trustshell:mainfrom

claude/run-executable-identityDealAppSeo/trustshell:claude/run-executable-identityCopy head branch name to clipboard