Repository navigation

fix(copilot): close fail-open write gates in agent tools - #6132

Merged

TheodoreSpeaks merged 7 commits into

fix/copilot-tool-authz

Aug 2, 2026

Commits on Jul 31, 2026
- fix(copilot): make tool write gates fail closed
  
  TheodoreSpeaks
  and
  claude
  committed
  bf7487b
- fix(copilot): gate materialize_file writes and enforce the deploy mutation lock
  
  TheodoreSpeaks
  and
  claude
  committed
  22ee1fc
- fix(copilot): enforce secret-admin on env writes and gate KB indexing on usage
  
  TheodoreSpeaks
  and
  claude
  committed
  92e1a3e
- fix(copilot): return lock denials and stop bootstrapping a legacy secret's ACL
  
  TheodoreSpeaks
  and
  claude
  committed
  b1103e3
Commits on Aug 2, 2026
- Merge branch 'staging' into fix/copilot-tool-authz
  TheodoreSpeaks
  committed
  2616544
- style(env): collapse the merged test import onto one line
  
  TheodoreSpeaks
  and
  claude
  committed
  6d05f8c
- fix(env): give the workspace env denial its own write-access message
  
  TheodoreSpeaks
  and
  claude
  committed
  aec5b31