Allow restricted data writes to its own restricted gatekeeper - #310

Draft

Maximo-Guk wants to merge 13 commits into

restricted-data-followupsfrom

restricted-data-writes-to-self

Commits on Aug 20, 2026

Hide native connectors from MCP portal
dcartertwo
committed
353a276
Merge remote-tracking branch 'origin/main' into dancarter/hide-native-mcp-connectors
dcartertwo
committed
aed3814
Merge remote-tracking branch 'origin/main' into dancarter/hide-native-mcp-connectors
dcartertwo
committed
57852e5

Commits on Aug 24, 2026

Allow writes-to-self in restricted mode, never auto-approved

Maximo-Guk
and
claude
committed
ae57a94
Integration-test the writes-to-self carve-out and auto-approval gates

Maximo-Guk
and
claude
committed
7fbdfd4
Add ActionDescription.operatorWarnings: gatekeeper-authored approver warnings

Maximo-Guk
and
claude
committed
435e93a
Merge branch 'dancarter/hide-native-mcp-connectors'

Maximo-Guk
and
claude
committed
fef8519
Bugfix: Refuse to persist an action whose connection no longer exists.

Maximo-Guk
and
claude
committed
2cf99de
Cleanup: Document the writes-to-self residual precisely.

Maximo-Guk
and
claude
committed
d5e35e6
Cleanup: Reflect restricted mode in the approval surfaces.

Maximo-Guk
and
claude
committed
1da25b7

Commits on Aug 25, 2026

Bugfix: Fetch the approver profile before the auto-approval gates.

Maximo-Guk
and
claude
committed
11db027
Cleanup: Dismiss the auto-approve confirm when restricted mode latches.

Maximo-Guk
and
claude
committed
5cb27e1
Cleanup: Update the observers doc for the writes-to-self carve-out.

Maximo-Guk
and
claude
committed
0b464ba