The shell guard fails open past maxQuotedSubstitutionDepth: a command substitution nested inside double quotes nine levels deep is left as literal text rather than read, so a blocked command at that depth is allowed, while bash runs the innermost command at any depth. Past the depth the guard must refuse, as the brace-group, here-document and bang-alias budgets do. Found by review-guard finding 2.

The shell guard fails open past maxQuotedSubstitutionDepth: a command substitution nested inside double quotes nine levels deep is left as literal text rather than read, so a blocked command at that depth is allowed, while bash runs the innermost command at any depth. Past the depth the guard must refuse, as the brace-group, here-document and bang-alias budgets do. Found by review-guard finding 2.

Grounds

• pursued: a command nested inside double-quoted substitutions past the depth budget is blocked whatever it is, and within the budget nothing changes; an allow at nine or more levels, or a block of a harmless nest at eight, would show it wrong