PTY subsystem

Interactive shell support with workdir confinement.

Status: shipped | Area: policy | Published: 2026-03-20

Control impact: Enables interactive terminal sessions within governed tool boundaries.

internal/pty.Manager with workdir confinement (ErrWorkDirNotAllowed)
interactive_shell governed tool (tier2 trust, approval required, execute side-effect)
Registered in tool registry