feat(rule): harden protected paths and compound enforcement - #47

Open

ronheichman wants to merge 8 commits into

perplexityai:mainfrom

ronheichman:canonical-path-operand

Commits on Aug 28, 2026

feat(rule): add canonical_path CEL function
ronheichman
committed
41669e2

Commits on Aug 29, 2026

fix(rule): tighten canonical path contract
ronheichman
committed
efe7c3e
fix(rule): resolve nested proc root prefixes
ronheichman
committed
45aa70f
fix(rule): tighten canonical path boundaries
ronheichman
committed
384b33f

Commits on Aug 31, 2026

Fix protected path alias enforcement
ronheichman
committed
2b092d2
fix(rule): canonicalize proc task root aliases
ronheichman
committed
1b002ba
fix(rule): close protected-path operand gaps
ronheichman
committed
62817a9
fix(rule): enforce safe POSIX compound lists

ronheichman
authored and
PSI Bot
committed
9a9187b