samaritanark

Security-review the current branch's changes for THIS repo (agent-sandboxes), using its real threat model — operator trusted, in-sandbox agent adversarial — instead of a generic web-app vuln checklist. Use in place of the built-in /security-review whenever…