[APPS-2792] Add: runtime network/subprocess guard for local execution - #484

Draft

tyffical wants to merge 5 commits into

tiffany.trinh/apps-2792-wire-into-dev-serverfrom

tiffany.trinh/apps-2792-runtime-network-guard

Commits on Aug 21, 2026

feat(apps): block net/fetch/child_process during local execution

tyffical
and
claude
committed
535fe7b
fix(apps): force-reset network guard patches on abandoned/timed-out executions
tyffical
committed
2482ee6
test(apps): cover concurrent $.Actions overlap through executeScriptLocally
tyffical
committed
da207c8
docs(apps): disclose the dgram residual gap in the network guard
tyffical
committed
c712def
fix(apps): close network-guard races and action-catalog block-through found in review
tyffical
committed
9d591ec