tao-run-deft-aoi-cosmos3

No direct malware, credential theft, exfiltration, persistence, destructive behavior, or obfuscation is evident. The code is a policy wrapper around arbitrary subprocess execution and is security-sensitive by design. Its air-gap enforcement is heuristic and bypassable if untrusted input can select commands, invoke unrecognized interpreters or wrappers, or modify the state file. It should not be treated as a standalone security boundary.