fred f55d62cf92 fix(m4-1b-ii): complete §1.1 retirement in MCP content filters + review-round-1 witnesses ...

GLM round-1 findings on PR #1465:
- BLOCKING 1: remove role-keyed content widening from mcp.service.ts —
  isGlobalAdminActor/isTenantAdminActor/matchesTenant and every
  short-circuit keyed on users.role are gone; project/mission/task
  visibility is ownership + derived membership only, task create scope
  is unconditional. Spec test rewritten to witness that admin-role and
  platform-admin-role actors see only owned content.
- MINOR 2: writer-coverage header updated to the non-empty allowlist.
- MINOR 3: §6.9 witness — a directory-listed company still refuses
  non-granted callers (granted-read exclusion + mutation oracle).
- MINOR 4: §6.4 commit legs for renameCompany (previousName in the
  audited event) and direct revokeGrant (row deletion + grant_revoke).

2026-08-28 20:22:03 -05:00

..

appservice

feat(mosaic-as): agent registration + scoped/revocable tokens (US-007) (#541)

2026-06-16 01:10:44 +00:00

gateway

fix(m4-1b-ii): complete §1.1 retirement in MCP content filters + review-round-1 witnesses

2026-08-28 20:22:03 -05:00

web

ci(web): Phase P6 — vite build + headless E2E gate on every trunk merge (#1445) (#1454)

2026-08-27 15:26:10 +00:00