mirror of
https://github.com/pewdiepie-archdaemon/odysseus.git
synced 2026-10-06 22:17:51 +00:00
ee13ed1eee
Request authority admits whole tool families from the user's request, so a request to read email also admits send_email, delete_email and bulk_email, and agent processes inherit the host network. With the gate defaulting to off, an instruction injected through an email or a fetched page reaches those tools with no other check; dev refuses them today. Default the gate on, keep ODYSSEUS_TOOL_APPROVAL_GATE=0 as the opt-out, and pin the production default with a test that imports the module in a fresh interpreter. Four routing tests written for the opt-out posture now set it explicitly. |
||
|---|---|---|
| .. | ||
| _config.yml | ||
| agent-migration.md | ||
| attachments.md | ||
| backup-restore.md | ||
| configuration-reference.md | ||
| email-outlook.md | ||
| index.html | ||
| original-harness-capability-policy.md | ||
| photo-editor-audit.md | ||
| pr-blocker-audit.md | ||
| security-ci.md | ||
| setup.md | ||
| sft-expansion-launch-ledger-20260830.md | ||
| sft-style-contract.md | ||