From d424c62d8693d3243e1a3dc6c4047541c460f00a Mon Sep 17 00:00:00 2001
From: Brennan Benson <79079362+brennanb2025@users.noreply.github.com>
Date: Fri, 13 Nov 2026 13:38:09 -0800
Subject: [PATCH] Keep synchronous launch wrappers covered by the ratchet

---
 .../process-boundaries/check-main-sync-spawn-ratchet.mjs      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/scripts/static-analysis/process-boundaries/check-main-sync-spawn-ratchet.mjs b/config/scripts/static-analysis/process-boundaries/check-main-sync-spawn-ratchet.mjs
index f6a4e6b05a1..6c505b01d3d 100644
--- a/config/scripts/static-analysis/process-boundaries/check-main-sync-spawn-ratchet.mjs
+++ b/config/scripts/static-analysis/process-boundaries/check-main-sync-spawn-ratchet.mjs
@@ -27,6 +27,10 @@ const GATED_FAMILIES = [
     advice: { execFileSync: PROCESS_ADVICE, spawnSync: PROCESS_ADVICE, execSync: PROCESS_ADVICE }
   },
   { modules: ['@orca/process-host'], advice: { runProcessSync: PROCESS_ADVICE } },
+  {
+    modules: ['@orca/process-host/native-process-spawn'],
+    advice: { execNativeFileSync: PROCESS_ADVICE, spawnNativeProcessSync: PROCESS_ADVICE }
+  },
   {
     modules: ['src/shared/secure-storage/secure-path-windows-acl'],
     advice: { restrictWindowsPathSync: SECURE_ADVICE }