fix(sandbox): keep a derived ACL target inside the write root it came from - #1040

Merged

kevincodex1 merged 5 commits into

mainfrom

fix/windows-acl-reparse-intermediate

Sep 15, 2026

Commits on Sep 12, 2026

fix(sandbox): keep a derived ACL target inside the write root it came from
Vasanthdev2004
committed
a9aa37e
fix(sandbox): reject the reparse ancestor itself before materializing
Vasanthdev2004
committed
ad78725
fix(sandbox): anchor only the carveouts that are under the root, and put the DACL back
Vasanthdev2004
committed
28360a2
test(sandbox): check the plan anchoring on every platform, out-of-root case included
Vasanthdev2004
committed
38c1e33
test(sandbox): give the cross-platform anchor tests native paths
Vasanthdev2004
committed
c4fff2b