fix(agent): gate tools after external context - #5817

Merged

StressTestor merged 16 commits into

odysseus-dev:devfrom

RaresKeY:fix/agent-external-context-gate

Aug 15, 2026

Commits on Aug 15, 2026

fix(agent): gate tools after external context
RaresKeY
committed
fef0e6f
fix: taint prefetched web context
RaresKeY
committed
329f9d2
fix(agent): close untrusted-context gate bypasses
RaresKeY
committed
2295504
fix(agent): close external-context gate gaps
RaresKeY
committed
05442a9
fix(agent): preserve authorized document event order
RaresKeY
committed
b715b81
fix(agent): taint stored document tool results
RaresKeY
committed
1f216cf
fix(agent): keep ambient context fail closed
RaresKeY
committed
2811c7e
fix(agent): authorize exact actions after untrusted context
RaresKeY
committed
1b09c56
fix(ui): complete exact approval continuation
RaresKeY
committed
fd50561
fix(agent): close approval continuation gaps
RaresKeY
committed
58b2a4b
fix(agent): harden approval lifecycle
RaresKeY
committed
2b72531
fix(agent): seal document approval content
RaresKeY
committed
7a138e8
fix(agent): taint model-visible tool responses
RaresKeY
committed
94cf119
fix(agent): approve teacher-generated skills
RaresKeY
committed
73a4b10
fix(agent): close exact approval edge cases
RaresKeY
committed
105a7c0
fix(agent): retire superseded approvals
RaresKeY
committed
d401e80