Shell capture cleanup and generated-content policy guard - #4298

Merged

Trecek merged 7 commits into

shell-capture-hook-injects-prohibited-rm-cleanup-and-blocks/4291

Jul 20, 2026

Commits on Jul 20, 2026

feat(hooks): relocate shell-capture rm -f cleanup to Python-side SessionStart sweep

Trecek
and
claude
committed
fix(hooks): align shell-capture tests with Python-side cleanup and regenerate snapshot hash
Trecek
committed
fix(hooks): sweep_stale_captures uses wall-clock time, not directory mtime
Trecek
committed
test(hooks): extend capture-cleanup parity coverage to all four attack vectors
Trecek
committed
test(hooks): broaden shell harness policy guard

Trecek
and
claude
committed
test(execution): distinguish shell policy denial

Trecek
and
claude
committed
docs(hooks): describe shell capture lifecycle

Trecek
and
claude
committed