feat(governance): Executable Trust Governance v1 - deny-wins resolver, vocab unification, audit fix#1875

Open

danielmeppiel wants to merge 19 commits into

mainfrom

danielmeppiel/exec-trust-governance-v1

Commits on Jun 20, 2026

feat: expand allowExecutables gate to MCP and canvas

Sergio Sisternes
and
Copilot
committed
feat(security): store apm approve decisions in user-local ~/.apm/approvals.yml

Sergio Sisternes
and
Copilot
committed
Merge branch 'main' into sergio-sisternes-epam-feat-expand-executables-gate-mcp-canvas
sergio-sisternes-epam
authored
Fix review threads: MCP gate attr, fail-closed bundle path, OSError guard, doc accuracy

Sergio Sisternes
and
Copilot
committed
refactor: extract MCP gate and bundle-allow helpers to reduce install.py below CI 2100-line limit

Sergio Sisternes
and
Copilot
committed
Add spec anchors req-sc-009 and req-sc-010 (Section 10.13)

Sergio Sisternes
and
Copilot
committed
Regenerate CONFORMANCE.json and CONFORMANCE.md for req-sc-009/010

Sergio Sisternes
and
Copilot
committed

Commits on Jun 21, 2026

Commits on Jun 25, 2026