[codex] OM-SEC-21: Authenticate only after package picker code exits - #9475

Draft

AFOliveira wants to merge 10 commits into

omacom:quattrofrom

AFOliveira:codex/om-sec-21-cold-package-picker

Commits on Aug 31, 2026

OM-SEC-21: Authenticate only after package picker code exits
AFOliveira
committed
1fd8657

Commits on Sep 1, 2026

OM-SEC-01: Make passwordless sudo expiry fail closed
AFOliveira
committed
87625c2
Document privileged Bash startup exception
AFOliveira
committed
2f816a8
Narrow OM-SEC-21 to the package picker boundary
AFOliveira
committed
f1282ad

Commits on Sep 7, 2026