fix(security): gate the MCP action surface on `ai.exposed`, fail-closed (#2849)#2964

Merged

os-zhuang merged 3 commits into

mainfrom

claude/security-unbounded-rls-fls-qusv11

Jul 15, 2026

Commits on Jul 15, 2026

fix(security): enforce ai.exposed on the MCP action surface, fail-closed (#2849)
claude
committed
docs(mcp): align the generated SKILL.md action wording with the #2849 security model
claude
committed
docs(ai): correct actions-as-tools framing for the #2849 security model
claude
committed