dsh-subprocess-win32

LIMITATIONS

已知限制

- Git/MSYS Bash can exit with `0xC0000142` when DSH's restricted `workspace-write` token is applied to this Windows process tree. The full-access validation passed; the package does **not** widen permissions, bypass approval, or silently select `danger-full-access`. - The Windows fallback cannot provide Linux `landlock`; treat command output as untrusted and keep the DSH approval policy enabled. - The Minimal alignment is about the model-visible schema and prompt surface. It is not a claim that Windows is a Linux kernel or that every workload will have identical latency, caching, or completion rate. - Do not copy Codex `.codex-plugin` manifests into this package. Codex plugins, DSH Cordis bundles, Agent presets, Skills, and MCP definitions use different loaders. Only explicitly compatible `SKILL.md` and MCP Tools configurations may be shared.