v1.67.4

1.67.4 (2026-08-21)

Bug Fixes

• audit: fail closed when the DLP scan couldn't see all of the args (751e788), closes #254
• engine: a < file redirect is a read, and its path was invisible (46988ce)
• engine: a path is not gone because part of it is a variable (6ffabfc)
• engine: the sentinel is an internal marker and must not reach a human (0ec80c1), closes #51