Restricts worker sandbox commands to signal only processes started by that same command, on macOS and on Linux kernels with Landlock signal scoping (older kernels report the limit as not enforced). Operator and head profiles are unchanged.
Adds signal_scope and signal_scope_profile fields to sandbox-launch --support output on both platforms.
Applies Landlock signal scoping separately from mandatory filesystem rules so older kernels don't downgrade filesystem enforcement.
Adds integration tests covering refusal of unrelated processes, refusal across separate identical sandboxes, allowance of own children, unchanged operator behavior, and the unenforced entry on kernels before ABI 6.
Adds release notes and a search-quality descriptor.
Confidence Score: 5/5
The changes since the previous review appear safe to merge.
Summary
Adds worker-only limits on which processes a command can signal.
Supported worker sandboxes limit signals to one command.
No new actionable issues were found in the changes since the previous review.
