security: isolate host agents and sanitize subprocesses - #303

Open

eshulman2 wants to merge 13 commits into

forge-sdlc:mainfrom

eshulman2:security/agent-hardening-phase-1

Commits on Aug 19, 2026

security: isolate host agents and sanitize subprocesses
eshulman2
committed
c233725
style: format host agent middleware
eshulman2
committed
b412592
docs: add baseline read-only MCP allowlist
eshulman2
committed
9e9ab36
fix: preserve concurrent agent skill snapshots
eshulman2
committed
476122c
fix: mount agent roots in Helm workloads
eshulman2
committed
95cf940
refactor: use shared isolated skill tree
eshulman2
committed
7cadcd2
style: format isolated skill paths
eshulman2
committed
5faf4ed

Commits on Aug 20, 2026

Commits on Aug 24, 2026

fix: prevent host tool shadowing and stale skills
eshulman2
committed
ad58dec

Commits on Aug 25, 2026

fix: restore container agent skill mounts
eshulman2
committed
f923ef5