1.0.91-0

Improved

• Complete, statically analyzable read-only shell pipelines can now enter execution-evidence review, while incomplete or unbound pipelines require explicit approval.

Fixed

• Offer sandbox network bypass for Node/npm EACCES socket denials on Windows