Repository navigation

fix(backend/copilot): stop refusing sub-agent briefs and to-dos that mention sudo or subprocess - #15562

Merged

ntindle merged 16 commits into

devfrom

pwuts/secrt-2805-security-filter-blocks-sub-agent-briefs-that-mention

Oct 22, 2026

Merged

fix(backend/copilot): stop refusing sub-agent briefs and to-dos that mention sudo or subprocess#15562
ntindle merged 16 commits into
devfrom
pwuts/secrt-2805-security-filter-blocks-sub-agent-briefs-that-mention

Commits on Oct 1, 2026
- fix(backend/copilot): deny every tool outside the session's allowed set, and fail CI on an unclassified CLI built-in
  
  Pwuts
  and
  claude
  committed
  f64ae3f
- fix(backend/copilot): keep the CLI's TodoWrite checklist on a clean environment
  
  Pwuts
  and
  claude
  committed
  02285ac
Commits on Oct 5, 2026
- Merge origin/dev into pwuts/copilot-default-deny-cli-tools
  
  Pwuts
  and
  claude
  committed
  8256f30
Commits on Oct 15, 2026
Commits on Oct 19, 2026
- fix(backend/copilot): enforce tool authorization before workspace checks
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  2a0e29d
- fix(backend/copilot): validate command-text handling in both sandbox modes
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  48bbae0
- test(backend/copilot): enumerate tools with the production MCP server
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  42eab5e
- test(backend/copilot): merge production MCP inventory coverage
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  2e731ae
- test(backend/copilot): preserve session isolation and builtin denial coverage
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  ce73a59
- test(backend/copilot): merge session isolation regression coverage
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  3805826
Commits on Oct 20, 2026
- fix(backend/copilot): align result-file guidance with allowed tools
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  5bf7014
- fix(backend/copilot): integrate reviewed security prerequisites
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  0a4259d
- fix(backend/copilot): integrate landed security prerequisite
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  2ca0ecf
- fix(backend/copilot): correct E2B SDK result guidance
  
  ntindle
  and
  GPT-6 Astra (Codex)
  committed
  931719c

Navigation Menu

Repository navigation

fix(backend/copilot): stop refusing sub-agent briefs and to-dos that mention sudo or subprocess - #15562

fix(backend/copilot): stop refusing sub-agent briefs and to-dos that mention sudo or subprocess#15562
ntindle merged 16 commits into
devfrom
pwuts/secrt-2805-security-filter-blocks-sub-agent-briefs-that-mention

Commits on Oct 1, 2026

fix(backend/copilot): deny every tool outside the session's allowed set, and fail CI on an unclassified CLI built-in

fix(backend/copilot): keep the CLI's TodoWrite checklist on a clean environment

Commits on Oct 5, 2026

Merge origin/dev into pwuts/copilot-default-deny-cli-tools

Commits on Oct 15, 2026

fix(backend/copilot): stop refusing sub-agent briefs and to-dos that mention sudo or subprocess

Merge origin/dev into pwuts/copilot-default-deny-cli-tools

Merge pwuts/copilot-default-deny-cli-tools into pwuts/secrt-2805-security-filter-blocks-sub-agent-briefs-that-mention

Commits on Oct 19, 2026

fix(backend/copilot): enforce tool authorization before workspace checks

fix(backend/copilot): validate command-text handling in both sandbox modes

test(backend/copilot): enumerate tools with the production MCP server

test(backend/copilot): merge production MCP inventory coverage

test(backend/copilot): preserve session isolation and builtin denial coverage

test(backend/copilot): merge session isolation regression coverage

Commits on Oct 20, 2026

fix(backend/copilot): align result-file guidance with allowed tools

fix(backend/copilot): integrate reviewed security prerequisites

fix(backend/copilot): integrate landed security prerequisite

fix(backend/copilot): correct E2B SDK result guidance