Development record

A command the guard cannot read is refused outright in an autonomous run, even where a sandbox would make running it safe. The guard already reads shell scripts a command runs, but not other interpreters' files or file text substituted into a command; the sandbox environment under way for autonomous agents would bound what such a command can touch.