fix(studio): substrate containment defeated by a symlinked root and a non-version path (PX0 exit SEC-1+SEC-2) - #523

Merged

KnockOutEZ merged 4 commits into

studio-handoff-corefrom

sd-197-fix-studio-substrate-containment

Aug 29, 2026

Commits on Aug 29, 2026

test(studio): pin the symlinked root and the non-version path as containment escapes
KnockOutEZ
committed
8454f00
fix(studio): refuse a linked substrate root and a record path that is not root/<version>
KnockOutEZ
committed
96d1841
test(studio): make the root/<version> equality the thing that kills the SEC-2 arm
KnockOutEZ
committed
f28a050
test(studio): gate the containment arms on a measured link capability, not on the platform
KnockOutEZ
committed
d80863d