From fe7436a1f679f4b98704fba81c5971180ae45da1 Mon Sep 17 00:00:00 2001
From: Ivan Casco <ivan@ivancasco.com>
Date: Sat, 24 Jan 2026 20:55:21 +0000
Subject: [PATCH] fix(exec): only set security=full when elevated mode is full
 (#1616)

---
 src/agents/bash-tools.exec.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/agents/bash-tools.exec.ts b/src/agents/bash-tools.exec.ts
index c4848dcdb..d72524461 100644
--- a/src/agents/bash-tools.exec.ts
+++ b/src/agents/bash-tools.exec.ts
@@ -791,7 +791,7 @@ export function createExecTool(
       const configuredSecurity = defaults?.security ?? (host === "sandbox" ? "deny" : "allowlist");
       const requestedSecurity = normalizeExecSecurity(params.security);
       let security = minSecurity(configuredSecurity, requestedSecurity ?? configuredSecurity);
-      if (elevatedRequested) {
+      if (elevatedRequested && elevatedMode === "full") {
         security = "full";
       }
       const configuredAsk = defaults?.ask ?? "on-miss";