perf(guardrails): make the PowerShell guard path fork-free and narrow its fail-close to executable git - #4188

Merged

kyle-sexton merged 20 commits into

mainfrom

guardrails-powershell-guard-path-3x-slow

Sep 16, 2026

Commits on Sep 15, 2026

perf(guardrails): run the guard chain in-process and answer payload fields without jq

kyle-sexton
and
claude
committed
952befe
perf(guardrails): make ps-command.sh fork-free

kyle-sexton
and
claude
committed
e4cb218
fix(guardrails): exempt a quoted git literal in comparison position

kyle-sexton
and
claude
committed
d809a9e
fix(guardrails): treat item and job launchers as executors in the PowerShell fail-close

kyle-sexton
and
claude
committed
b77feaf
fix(guardrails): exempt a compared git literal only inside a read-only cmdlet pipeline

kyle-sexton
and
claude
committed
241e256
fix(guardrails): predeclare the nameref-assigned SUBJECT for shellcheck

kyle-sexton
and
claude
committed
df80eb8
Merge branch 'guardrails-run-guards-in-process-no-subs' into guardrails-powershell-guard-path-3x-slow
kyle-sexton
committed
9ad209f

Commits on Sep 16, 2026

test(lib): use a portable cwd in the fast-fields payload fixture

kyle-sexton
and
claude
committed
04fc869
fix(guardrails): refuse the compared-literal exemption on any expandable string

kyle-sexton
and
claude
committed
c83d1c8
Merge branch 'guardrails-run-guards-in-process-no-subs' into guardrails-powershell-guard-path-3x-slow
kyle-sexton
committed
502416c
test(lib): keep the fixture cwd free of a \w escape for the portability lint

kyle-sexton
and
claude
committed
551629e
docs(guardrails): drop the em dashes from the 0.35.0 entry

kyle-sexton
and
claude
committed
919bf66
chore(guardrails): satisfy the machine-path and portability lint lanes

kyle-sexton
and
claude
committed
b0377b9
test(guardrails): use a portable Windows path in the read-only pipeline case

kyle-sexton
and
claude
committed
702c629
fix(hook-utils): gate the builtin field parser on Bash 4.0 and size its key bound

kyle-sexton
and
claude
committed
6e16c10
docs(guardrails): name run-guards.sh as the chain slot's one exception

kyle-sexton
and
claude
committed
915423a
chore: merge main into the in-process guards branch and rebump the colliding plugins

kyle-sexton
and
claude
committed
ab2a9b1
refactor(guardrails): prefix the locals of the out-parameter helpers

kyle-sexton
and
claude
committed
a158925
Merge remote-tracking branch 'origin/guardrails-run-guards-in-process-no-subs' into guardrails-powershell-guard-path-3x-slow
kyle-sexton
committed
7f1da17
merge: origin/main into guardrails-powershell-guard-path-3x-slow

kyle-sexton
and
claude
committed
8527653

Navigation Menu

perf(guardrails): make the PowerShell guard path fork-free and narrow its fail-close to executable git - #4188

perf(guardrails): make the PowerShell guard path fork-free and narrow its fail-close to executable git#4188
kyle-sexton merged 20 commits into
mainfrom
guardrails-powershell-guard-path-3x-slow

Commits on Sep 15, 2026

perf(guardrails): run the guard chain in-process and answer payload fields without jq

perf(guardrails): make ps-command.sh fork-free

fix(guardrails): exempt a quoted git literal in comparison position

fix(guardrails): treat item and job launchers as executors in the PowerShell fail-close

fix(guardrails): exempt a compared git literal only inside a read-only cmdlet pipeline

fix(guardrails): predeclare the nameref-assigned SUBJECT for shellcheck

Merge branch 'guardrails-run-guards-in-process-no-subs' into guardrails-powershell-guard-path-3x-slow

Commits on Sep 16, 2026

test(lib): use a portable cwd in the fast-fields payload fixture

fix(guardrails): refuse the compared-literal exemption on any expandable string

Merge branch 'guardrails-run-guards-in-process-no-subs' into guardrails-powershell-guard-path-3x-slow

test(lib): keep the fixture cwd free of a \w escape for the portability lint

docs(guardrails): drop the em dashes from the 0.35.0 entry

chore(guardrails): satisfy the machine-path and portability lint lanes

test(guardrails): use a portable Windows path in the read-only pipeline case

fix(hook-utils): gate the builtin field parser on Bash 4.0 and size its key bound

docs(guardrails): name run-guards.sh as the chain slot's one exception

chore: merge main into the in-process guards branch and rebump the colliding plugins

refactor(guardrails): prefix the locals of the out-parameter helpers

Merge remote-tracking branch 'origin/guardrails-run-guards-in-process-no-subs' into guardrails-powershell-guard-path-3x-slow

merge: origin/main into guardrails-powershell-guard-path-3x-slow