fix(security): comprehensive deny list for autonomous operator
Allowlist approach for bash (curl, python3, tail, grep, pgrep, kill, scripts).
Deny list blocks: file destruction (rm, mv, cp, chmod, chown, ln),
remote access (ssh, scp, rsync), downloads (wget, curl -O),
git mutations (push, commit, reset, checkout), package install (pip, apt),
privilege escalation (sudo, nohup, crontab, systemctl),
and shell injection (eval, exec, source, pipe to bash, redirect to /).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Claude Code
143fcef4e0