fix(copilot): close fail-open write gates in agent tools - #6132

Merged

TheodoreSpeaks merged 7 commits into

fix/copilot-tool-authz

Aug 2, 2026

Commits on Jul 31, 2026

fix(copilot): make tool write gates fail closed
TheodoreSpeaks
and
claude
committed
bf7487b
fix(copilot): gate materialize_file writes and enforce the deploy mutation lock
TheodoreSpeaks
and
claude
committed
22ee1fc
fix(copilot): enforce secret-admin on env writes and gate KB indexing on usage
TheodoreSpeaks
and
claude
committed
92e1a3e
fix(copilot): return lock denials and stop bootstrapping a legacy secret's ACL
TheodoreSpeaks
and
claude
committed
b1103e3

Commits on Aug 2, 2026

Merge branch 'staging' into fix/copilot-tool-authz
TheodoreSpeaks
committed
2616544
style(env): collapse the merged test import onto one line
TheodoreSpeaks
and
claude
committed
6d05f8c
fix(env): give the workspace env denial its own write-access message
TheodoreSpeaks
and
claude
committed
aec5b31