Pressure-test hardening: report_id/order_id validation, groups-claim robustness, error sanitization - #3

Merged

MattJColes merged 5 commits into

mainfrom

claude/pressure-test-agents-48ukvf

Jul 6, 2026

Commits on Jul 6, 2026

Harden export_report: allowlist report_id and mask storage errors
claude
committed
8a7b2be
Fix groups-claim crash and single-string lockout in allowed_tags
claude
committed
6f025bc
Sanitize get_tool failures in on_call_tool; fix access-model docstring
claude
committed
7d9a72c
Validate order_id to close prompt-injection in draft_refund_email
claude
committed
fbe75c1
Correct the money-tool bool guard comment to match wire behavior
claude
committed
f164d94