# v0.4.2

## Fixes

- **Fix Landlock blocking bwrap mount namespace setup** — Landlock applied to the parent process prevented bwrap from setting up its mount namespace (`Failed to make / slave: Operation not permitted`). Root cause: Landlock restrictions are inherited by child processes, so bwrap couldn't perform mount system calls. Fix: Landlock is now applied **inside** the bwrap sandbox via an internal `--landlock-exec` wrapper. The ai-jail binary is bind-mounted into `/tmp` inside the sandbox, applies Landlock, then execs the real command. This ensures bwrap's mount namespace setup completes before Landlock restrictions take effect.
