fd9e755b6f
16 commits / 11 files / +2849 lines: - Bash hard-blacklist (v3.9+v4.0 C16/#4/#21/#22/#34 + v4.1 G7/G8 wget/nc) - Bash whitelist + script-execution file-watcher - classifyBashCommand integration + bashContentClassify export - Bash gate main() + dynamic path-normalize fallback (fail-CLOSE) - PowerShell tokenizer + hard-blacklist (keep + v4.1 G10 PS env) - classifyPowerShellCommand (whitelist + path-deny + git route) - PowerShell gate main() (fail-CLOSE) - shared classifyGitCommand (readonly/conditional/hard incl G5/G6 gpgsign/--no-verify) - Review fixes: 2>&1 fd-duplication allowed, git -c RCE closed, runtime-dir path-deny Stream tests pass.