diff options
Diffstat (limited to 'plans/ImplementationPlan.md')
| -rw-r--r-- | plans/ImplementationPlan.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/plans/ImplementationPlan.md b/plans/ImplementationPlan.md index 8127701..5af7606 100644 --- a/plans/ImplementationPlan.md +++ b/plans/ImplementationPlan.md @@ -364,7 +364,7 @@ LLM→Tool→Policyの境界が固定され、Policyを通らない副作用経 - FilesystemPolicy R/W/E/Delete - canonical path - reparse point防御 -- NTFS ACL +- NTFS ACL（承認directory rootへの継承ACE、root単位snapshot、protected descendantのfail-safe維持） - Process approval canonical path + SHA-256 - shell toggle - Job Object @@ -407,6 +407,7 @@ ST-01〜11、16全PASS。Security不具合を残したまま進行禁止。 - Recovery Journal - CLEAN / PREPARING / APPLIED / RUNNING / CLEANING / RECOVERY_REQUIRED - ACL適用前journal flush +- ACL journalは承認root単位とし、既存・新規descendantの継承とroot復元を検証 - Task Resource ownership - cleanup逆順処理 - 起動前Recovery |