Security policy sandbox enforcer validating file path boundaries and restricted command …