fix(runtime): a sandboxed hook body no longer launders an untouched readonly field onto the row - #15411

Merged

os-litant merged 3 commits into

mainfrom

claude/issue-14760-readonly-provenance-pollution

Sep 4, 2026

Commits on Sep 4, 2026

fix(runtime): compare the entry snapshot as the VM saw it in the write-back key set
claude
committed
b6a184f
test(runtime): pin that an untouched readonly key is not laundered by the sandbox write-back
claude
committed
f89dba7
Merge origin/main into claude/issue-14760-readonly-provenance-pollution
claude
committed
5f4a3ab