- Fix critical sandbox escape in local.Medium.path()
- Absolute paths now constrained to sandbox root when root != "/"
- Only allow absolute path passthrough when root is "/"
- Fix weak test assertion in TestMust_Ugly_Panics
- Use assert.Contains instead of weak OR condition
- Remove unused issues.json file
- Add TestPath_RootFilesystem test for absolute path handling
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>