2 Commits

Include renames

Author	SHA1	Message	Date
sysadmin	553f745f23	feat(guard): native MCP transport binding and contaminated-review quarantine (Closes #695) ... Bind mutation/credential paths to a process-local native MCP runtime so env spoofing, direct imports, and offline helpers cannot reconstruct session gates after native transport failure. Quarantine contaminated formal reviews under controller authority and honor quarantine in review feedback, merge eligibility, merge mutation, and canonical handoff validation. Add regression coverage for the second (PR #694 / review 427) incident class.	2026-07-13 21:48:28 -04:00
sysadmin	8ff1924047	feat: block direct MCP imports and unsanctioned keychain access (Closes #558) ... Require a sanctioned MCP daemon (or pytest) before get_auth_header and keychain credential fill so raw shell imports cannot bypass preflight gates.	2026-07-08 22:49:03 -04:00