Files
gstack/test
Garry Tan d4e1b4dc31 fix(evals): destructive-actions guard actually inspects Bash commands
The rehomed guard filtered on typeof input === 'string', but
session-runner records tool inputs as objects ({command} for Bash) —
the filter matched nothing and the assertion could never fail, even
against a real 'git push'. Now extracts the command from the object
shape, same as the usedGitDiff check above it.
2026-08-15 16:49:39 -07:00
..