RaresKeY
105a7c0d96
fix(agent): close exact approval edge cases
2026-08-15 07:44:32 +00:00
RaresKeY
94cf119b11
fix(agent): taint model-visible tool responses
2026-08-15 07:18:25 +00:00
RaresKeY
7a138e8a3f
fix(agent): seal document approval content
2026-08-15 07:01:36 +00:00
RaresKeY
2b72531eaa
fix(agent): harden approval lifecycle
2026-08-15 06:52:44 +00:00
RaresKeY
58b2a4bfa9
fix(agent): close approval continuation gaps
2026-08-15 06:14:37 +00:00
RaresKeY
fd50561af6
fix(ui): complete exact approval continuation
2026-08-15 05:51:54 +00:00
RaresKeY
1b09c568d8
fix(agent): authorize exact actions after untrusted context
2026-08-15 05:37:47 +00:00
RaresKeY
2811c7e815
fix(agent): keep ambient context fail closed
2026-08-15 04:18:05 +00:00
RaresKeY
1f216cfd0e
fix(agent): taint stored document tool results
2026-08-15 04:13:56 +00:00
RaresKeY
b715b81ad0
fix(agent): preserve authorized document event order
2026-08-15 04:03:46 +00:00
RaresKeY
05442a9945
fix(agent): close external-context gate gaps
2026-08-15 03:52:23 +00:00
RaresKeY
2295504141
fix(agent): close untrusted-context gate bypasses
2026-08-15 01:58:32 +00:00
RaresKeY
329f9d298d
fix: taint prefetched web context
2026-08-15 01:57:09 +00:00
RaresKeY
fef0e6f3c0
fix(agent): gate tools after external context
...
Classify built-in tool effects in a server-owned registry and carry run-local external-context integrity state through the agent loop and dispatcher. Block high-impact and unknown actions after successful external results, including same-batch calls, without relying on model compliance.
2026-08-15 01:57:08 +00:00
RaresKeY