Improved
- Complete, statically analyzable read-only shell pipelines can now enter execution-evidence review, while incomplete or unbound pipelines require explicit approval.
Fixed
- Offer sandbox network bypass for Node/npm EACCES socket denials on Windows