Allow-always persistence could trust wrapper carrier executables instead of the actual invoked target when commands were routed through dispatch wrappers.

A one-time approval could persist a broader future allowlist entry than the operator intended, weakening execution approval boundaries.

Fixed by commit 9ec44fad39 (Exec approvals: reject wrapper carrier allow-always targets).