fix(agent): enforce approval gate on allowFinalResponse path and validate predicate args (#54) - #94

Open

LukasParke wants to merge 14 commits into

mainfrom

fix/54-approval-gate-validated-args

Commits on Aug 6, 2026

fix(agent): enforce approval gate on allowFinalResponse path and validate predicate args (#54)

LukasParke
and
claude
committed
b6cd7ce
test(agent): cover hook deny on allowFinalResponse path

LukasParke
and
claude
committed
3ae034e

Commits on Aug 10, 2026

fix(agent): gate each response once and let schema-invalid calls reach executor validation
LukasParke
committed
639e7bb
fix(agent): keep fail-closed on invalid args for manual tools
LukasParke
committed
0418b07
test(agent): lock in the validate-before-execute invariant behind the gate's fail-open
LukasParke
committed
631edb2

Commits on Aug 11, 2026

fix(agent): normalize call-level approval args
LukasParke
committed
bc76be8
fix(agent): preserve call-level approval precedence
LukasParke
committed
9a415f1
fix(agent): gate post-hook tool arguments
LukasParke
committed
54a5aef
fix(agent): split tool approval into two phases
LukasParke
committed
f51b2dc
refactor(agent): split approval gate phases
LukasParke
committed
9bd6d01
fix(agent): harden mutated approval preparation
LukasParke
committed
84feaca
fix(agent): prevent approval key collisions
LukasParke
committed
0719be2
fix(agent): distinguish duplicate approval calls
LukasParke
committed
292f9da
fix(agent): stabilize uncanonicalizable approval identities
LukasParke
committed
25ec586