spec: document Windows symlink traversal OS error 448

[oz-for-oss]

Summary

• Adds a product spec defining expected Windows terminal parity for symlink, junction, WinGet shim, pytest, and version-manager workflows affected by OS error 448.
• Adds a tech spec grounded in the Windows ConPTY shell spawn path, process mitigation policy investigation, and validation strategy for RedirectionGuard-related behavior.

Validation

• Spec-only change; reviewed generated product and tech specs for required sections and issue coverage.

Notes

• The tech spec calls out RedirectionGuard as the likely process-policy surface and requires implementation-time validation against affected Windows builds before finalizing production code.

Related issue: #9044

[oz-for-oss]

@oz-for-oss[bot]

I'm starting a first review of this spec-only pull request.

You can view the conversation on Warp.

I completed the review and no human review was requested for this pull request.

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[oz-for-oss]

Overview

This spec PR adds product and tech specs for Windows OS error 448 symlink and junction traversal parity. The product spec covers the affected terminal workflows and validation expectations, and the tech spec identifies the Windows shell spawn path and RedirectionGuard as the likely mitigation surface.

Concerns

• The tech spec allows a fallback that clears RedirectionGuard on the current Warp process without specifying how to scope, serialize, restore, or validate that unrelated Warp-spawned processes cannot inherit the relaxed policy.

Security

• The current-process fallback could weaken the Warp app process and unrelated subprocesses if implemented as written; require a shell-child-scoped mitigation or explicit guardrails before accepting that fallback.

Verdict

Found: 0 critical, 1 important, 0 suggestions

Request changes

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[oz-for-oss]

⚠️ [IMPORTANT] [SECURITY] This fallback relaxes RedirectionGuard on the current Warp process, but the spec does not require serialization, reversion, or proof that unrelated concurrent Warp-spawned processes cannot inherit the relaxed policy; specify the guardrails or reject this fallback.