feat(security): ADR-0090 D5/D9 suggested-audience-binding surface + confirm/dismiss API - #2746

Merged

os-zhuang merged 4 commits into

mainfrom

claude/loving-knuth-y1g4d3

Jul 10, 2026

Commits on Jul 10, 2026

feat(security): queryable suggested-audience-binding surface + confirm/dismiss API (ADR-0090 D5/D9)
claude
committed
5bdb98c
docs(permissions): document the suggested-audience-binding surface (ADR-0090 D5)
claude
committed
5953a4a
fix(runtime): drop redundant slash-trim regex on request path (CodeQL polynomial-redos)
claude
committed
7c35636
feat(rest): serve /security/suggested-bindings on the RestServer surface (ADR-0090 D5/D9)
claude
committed
77e8317