Block role/tool namespace mismatch for author and reviewer mutations (Issue #209) #223

Merged

sysadmin merged 1 commits from feat/issue-209-namespace-mismatch into master

2026-07-06 00:14:48 -05:00

Author	SHA1	Message	Date
sysadminandClaude Opus 4.8	cbce6cb2e7	Block author mutations from reviewer MCP namespace (Issue #209 ) Add role_namespace_gate to fail closed when reviewer-bound sessions attempt author mutations (create_pr always blocked; create_issue only when profile explicitly grants gitea.issue.create). Extend mutation audit records with mcp_namespace, task_role, and operation fields. Add handoff parity checks in review_proofs for author role vs reviewer namespace mismatches. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-07-05 21:12:33 -04:00

Author

SHA1

Message

Date

sysadminandClaude Opus 4.8

cbce6cb2e7

Block author mutations from reviewer MCP namespace (Issue #209 )

Add role_namespace_gate to fail closed when reviewer-bound sessions attempt
author mutations (create_pr always blocked; create_issue only when profile
explicitly grants gitea.issue.create). Extend mutation audit records with
mcp_namespace, task_role, and operation fields. Add handoff parity checks in
review_proofs for author role vs reviewer namespace mismatches.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-05 21:12:33 -04:00