5 Commits
Author SHA1 Message Date
jhuang-tw 374cab5a79 fix(security): consent-gate agent bootstrap
Treat repository discovery as read-only until the user explicitly activates the package and approves the disclosed first-side-effect plan. Preserve deterministic execution after approval, keep client-global configuration opt-in, align the English and Chinese entry contracts, and guard all four top-level agent entry files in CI.
2026-09-18 15:14:29 +08:00
zhaoxuya520 99a2bc4b30 feat: resolve Codex, Binary Ninja, and security review issues
Add an optional Codex adapter, Binary Ninja route and skill, Git-blob security boundaries, payload provenance documentation, and Gradle Wrapper verification.

Closes #47
Closes #121
Closes #125
2026-09-03 20:19:17 +08:00
zhaoxuya520 a9ed8d04ad Merge pull request #93 from jhuang-tw/fix/client-neutral-bootstrap-capability
fix: make MCP bootstrap client-neutral by default

Owner integration: preserve all prior CI contracts, document explicit host selection on Windows, and make the Bash manifest regression UTF-8 deterministic.
2026-08-19 11:58:54 +08:00
jhuang-tw a515665e70 docs(p0): complete native AI bootstrap path 2026-08-17 23:44:34 -07:00
zhaoxuya520 9c28c6ca10 release: v1.0.1 2026-08-08 18:32:33 +08:00