v2.20.0

Minor Changes

• dd61692 Thanks @tufantunc! - fix(policy): the command classifier recognises additional exec carriers and privilege brokers. A command that relied on the previous default may now prompt for approval, or be refused outright under a profile that does not grant the class it earns.

Security

• Fixed GHSA-cm4c-4q74-mgmj: common exec carriers — sqlite3 .shell/.system, tar --checkpoint-action=exec=…, gdb -ex/--eval-command, expect -c, the vi family's -c/--cmd, make, ssh host cmd — and the privilege brokers docker run --privileged, docker exec -u 0, systemd-run --uid=0 and nsenter -t classified safe, the one class that never reaches the approval gate, so a role limited to safe commands could run any of them — root included — with no approval and no role check. Each now classifies destructive or privileged, across the flag long forms, attached and user:group values, subcommand synonyms, option abbreviations, detached values, wrapper prefixes and Windows .exe/case spellings the review round measured. Reported by @NotAFlightRisk. Affected: <= 2.19.2.