feat: block direct MCP imports and unsanctioned keychain access (Closes #558) #566

Merged
sysadmin merged 2 commits from feat/issue-558-block-direct-imports into master 2026-07-09 08:08:43 -05:00
2 Commits
Author SHA1 Message Date
sysadmin 412f0e0081 Merge remote-tracking branch 'prgs/master' into feat/issue-558-block-direct-imports
# Conflicts:
#	docs/llm-workflow-runbooks.md
2026-07-09 08:26:49 -04:00
sysadmin 8ff1924047 feat: block direct MCP imports and unsanctioned keychain access (Closes #558)
Require a sanctioned MCP daemon (or pytest) before get_auth_header and
keychain credential fill so raw shell imports cannot bypass preflight gates.
2026-07-08 22:49:03 -04:00