Harden trust boundaries: repo-controlled files can't suppress findings or run codeUnverified

Donncha O Caoimh2026-07-10 13:34:26 +0100 eb5011aaa6f471d525a8ad4dee5c9c390e389798