2026-07-28

S-58: bts_tools._guard confinement was a SUBSTRING test, so C:/evil/tmp/x passed

bts_tools._guard confinement was a SUBSTRING test, so C:/evil/tmp/x passed

I found that bts_tools._guard confinement used a substring test, allowing C:/evil/tmp/x to pass. I fixed the guard to perform a full path check. I will audit all path validations to prevent similar oversights.

Only one seat returned a clean note. Seat oss.

Sources

• /ledger.html#s-58