[email protected]andClaude Opus 4.6 65a32c81b5 docs(security): cross-reference v1 controls — use, don't reinvent ...

Updated security plan with detailed audit of ALL existing v1 security
controls and how they map to engine v2 bridge gaps:

Key finding: v1 already has solutions for every security gap identified.
The bridge just needs to wire them in:

- Tool::requires_approval() exists but bridge doesn't call it
- safety.wrap_for_llm() exists but tool results enter context unwrapped
- RateLimiter exists but bridge doesn't check rate limits
- BeforeToolCall hooks exist but bridge doesn't run them
- redact_params() exists but bridge doesn't redact sensitive params
- Shell risk classification (Low/Medium/High) is inherited but ignored

Revised priority: most fixes are small wiring tasks in EffectBridgeAdapter,
not new security infrastructure. The bridge is the security boundary.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-23 17:30:51 -07:00

..

plans

docs(security): cross-reference v1 controls — use, don't reinvent

2026-03-23 17:30:51 -07:00

BUILDING_CHANNELS.md

DM pairing + Telegram channel improvements (#17)

2026-02-12 00:46:47 +00:00

LLM_PROVIDERS.md

feat(gemini_oauth): full Gemini CLI OAuth integration with Cloud Code API (#1356)

2026-03-21 22:41:44 -07:00

smart-routing-spec.md

feat: integrate 13-dimension complexity scorer into smart routing (#529)

2026-03-05 09:14:07 +00:00

TELEGRAM_SETUP.md

DM pairing + Telegram channel improvements (#17)

2026-02-12 00:46:47 +00:00