fix(security): operator opt-in for plugin tool_override (sink-enforced) + enable-time consent - #55599

Merged

teknium1 merged 4 commits into

mainfrom

hermes/hermes-76570685

Jun 30, 2026

Commits on Jun 30, 2026

fix(security): require operator opt-in for plugin tool_override to prevent silent built-in tool replacement

memosr
authored and
teknium1
committed
e67003d
fix(security): enforce tool_override opt-in at registry sink to close direct-import bypass

memosr
authored and
teknium1
committed
7442254
fix(security): bind tool_override authorization to handler's defining plugin module

memosr
authored and
teknium1
committed
d5d5d5a
feat(plugins): enable-time consent prompt for tool_override grant
teknium1
committed
3c2159d