fix(code-execution): every call a script makes faces its own permission decision (QA F7) - #246

Merged

Broccolito merged 14 commits into

mainfrom

fix/f7-script-call-permissions

Sep 12, 2026

Commits on Sep 11, 2026

test(code-execution): pin that a script's tool calls face their own permission decision (F7, fail-before)
Broccolito
committed
b9915a0
fix(code-execution): judge every call a script makes as the call it is (F7)
Broccolito
committed
3987832
docs(permissions): a script's calls are decided under their own names (F7)
Broccolito
committed
1a5f1a5
fix(code-execution): a hook rewrite cannot carry a script call past the boundary refusals (F7)
Broccolito
committed
e7b8a93
fix(code-execution): a script's ask carries the same card a direct call's does (F7)
Broccolito
committed
02c698d
test(code-execution): hold env_lock across the two global-store reads (F7)
Broccolito
committed
9f203b7
test(code-execution): splice paths into test scripts as JSON literals (F7)
Broccolito
committed
6e45661
test(code-execution): pin that sensitive-ops judges a script's calls in Auto mode (F7)
Broccolito
committed
63f4ede
Merge origin/main (6455bc21) into fix/f7-script-call-permissions
Broccolito
committed
a594c20

Commits on Sep 12, 2026