feat(security): add canary token and tool allowlist sandbox hooks - #564

Merged

ralphbean merged 8 commits into

mainfrom

feat-reasoning-monitor-hooks

May 2, 2026

Commits on Apr 30, 2026

feat(security): add canary token and tool allowlist sandbox hooks
waynesun09
committed
24ba5cd
fix(security): omit allowed tool list from block reason string
waynesun09
committed
9ed5090
feat(security): add canary pretool hook to catch exfiltration via tool inputs
waynesun09
committed
ee584fa
fix(security): harden hooks based on multi-agent code review
waynesun09
committed
f37b860
fix(security): case-insensitive canary matching and test env isolation
waynesun09
committed
9868ba5
test(security): add case-insensitive and MCP tool canary tests
waynesun09
committed
a3f5867
fix(security): correct default triage allowlist MCP tool names
waynesun09
committed
f84c91e

Commits on May 1, 2026

fix(security): remove default triage allowlist, fail-closed on unset env
waynesun09
committed
175bc37