fix: confine runtime helper processes to the broker - #347

Merged

devmobasa merged 11 commits into

mainfrom

arch/helper-process-confinement

Aug 19, 2026

Commits on Aug 18, 2026

refactor: confine desktop and setup helpers
devmobasa
committed
d5c21af
test: lock helper argv and temp cleanup
devmobasa
committed
9b4daa6
fix: surface gsettings helper failures
devmobasa
committed
def16dc
fix: keep helper policies lint-clean
devmobasa
committed
7977ac0
test: forbid restored process bypasses
devmobasa
committed
15ea853
fix: bound desktop-open and clipboard helpers
devmobasa
committed
a79d425
fix: finish desktop-open before overlay teardown
devmobasa
committed
1f16464
fix: own desktop-open completion in Wayland runtime
devmobasa
committed
b89785e
fix: preserve desktop-open across focus transfer
devmobasa
committed
95b8965

Commits on Aug 19, 2026