Enforce inherited permissions for spawned workers - #843

Merged

TheGreatAxios merged 6 commits into

mainfrom

cl-7531-subagent-workers-bypass-permission-enforcement

Sep 10, 2026

Commits on Sep 10, 2026

Enforce inherited permissions for spawned workers
TheGreatAxios
committed
8a04424
Gate spawned workers through a reactor-gated permission view
TheGreatAxios
committed
eae8b2a
Bind inherited MCP tools to the worker permission gate
TheGreatAxios
committed
84cd386
Cover production inherit wrapping ungated MCP tools
TheGreatAxios
committed
88c881d
Align inherit tests with middleware deny and grant retry
TheGreatAxios
committed
2bc44f1
Match reactor verdict cache to path-escaped arguments
TheGreatAxios
committed
384a601