harden(executables): expand allowExecutables gate to mcp and canvas; store approvals user-local#1865

Merged

danielmeppiel merged 11 commits into

mainfrom

sergio-sisternes-epam-feat-expand-executables-gate-mcp-canvas

Jun 25, 2026

Commits on Jun 20, 2026

feat: expand allowExecutables gate to MCP and canvas

Sergio Sisternes
and
Copilot
committed
feat(security): store apm approve decisions in user-local ~/.apm/approvals.yml

Sergio Sisternes
and
Copilot
committed
Merge branch 'main' into sergio-sisternes-epam-feat-expand-executables-gate-mcp-canvas
sergio-sisternes-epam
authored
Fix review threads: MCP gate attr, fail-closed bundle path, OSError guard, doc accuracy

Sergio Sisternes
and
Copilot
committed
refactor: extract MCP gate and bundle-allow helpers to reduce install.py below CI 2100-line limit

Sergio Sisternes
and
Copilot
committed
Add spec anchors req-sc-009 and req-sc-010 (Section 10.13)

Sergio Sisternes
and
Copilot
committed
Regenerate CONFORMANCE.json and CONFORMANCE.md for req-sc-009/010

Sergio Sisternes
and
Copilot
committed