security-scan

There is a concrete, defendable vulnerability in the environment management flow: the runtime upsert path accepts caller-controlled keys and inserts into the shared environments map without reapplying the startup reserved-ID guard. This enables an attacker to override the manager-owned local environment, causing default environment resolution to point to a malicious executor. The risk is medium-to-high depending on RPC exposure and privilege of the attacker boundary; remediation should enforce reserved-ID checks in runtime insertion and align runtime behavior with startup invariants.