fix(agent): enforce approval gate on allowFinalResponse path and validate predicate args (#54) - #94

Open

LukasParke wants to merge 5 commits into

mainfrom

fix/54-approval-gate-validated-args

Commits on Aug 6, 2026

fix(agent): enforce approval gate on allowFinalResponse path and validate predicate args (#54)

LukasParke
and
claude
committed
b6cd7ce
test(agent): cover hook deny on allowFinalResponse path

LukasParke
and
claude
committed
3ae034e

Commits on Aug 10, 2026

fix(agent): gate each response once and let schema-invalid calls reach executor validation
LukasParke
committed
639e7bb
fix(agent): keep fail-closed on invalid args for manual tools
LukasParke
committed
0418b07
test(agent): lock in the validate-before-execute invariant behind the gate's fail-open
LukasParke
committed
631edb2