feat(proxy,mcp): tool argument and network response DLP hardening#33

Merged

nnemirovsky merged 10 commits intomainfrom

tool-network-dlp-hardening

Apr 14, 2026

Commits on Apr 14, 2026

feat(mcp): add ExecInspector for trampoline and dangerous pattern detection
nnemirovsky
committed
feat(mcp): wire ExecInspector into MCP gateway tool-call path
nnemirovsky
committed
feat(proxy): add MITM response DLP scanning
nnemirovsky
committed
feat(proxy): load MITM DLP redact rules from store
nnemirovsky
committed
docs: describe ExecInspector and MITM response DLP
nnemirovsky
committed
feat(cli,telegram): support adding redact rules
nnemirovsky
committed
fix(proxy): silence errcheck on deferred decoder Close()
nnemirovsky
committed
fix(cli): add explicit return after t.Fatal to satisfy staticcheck SA5011
nnemirovsky
committed
fix(test): add return after t.Fatal in more nil-checks for staticcheck SA5011
nnemirovsky
committed
ci(lint): exclude SA5011 in test files to stop false positives after t.Fatal
nnemirovsky
committed