Close remaining guard bypasses: media-write hole + 6 convergence-verify single-command holes (3.29.12)#94

Merged

VickyXAI merged 2 commits into

mainfrom

fix/round6-final2

Jun 24, 2026

Commits on Jun 24, 2026

fix(security): media output_path wallet guard + bash separators/substitution/path-globs + cloud-metadata IPs (3.29.11)
1bcMax
committed
fix(security): close 6 single-command bash/SSRF bypasses from convergence verify (3.29.12)
1bcMax
committed