All pull requests

Pull requests

• feat(filesystem): let a read entry name a link to a file

  Area - Agent Containmentenhancement
  #456·opieter-aws opened Nov 13, 2026Contributor·3 tasks done·

  ·
  7

• ci(rust): bump the production-minor group across 2 directories with 16 updates

  choredependencies
  #452·dependabot[bot] opened Nov 13, 2026Bot·

  ·
  1

• docs(policy): clarify HTTP budget recording time

  Area - policy-enginedocumentation
  #449·kevin-orellana opened Nov 13, 2026Collaborator·7 of 8 tasks·

  ·
  5

• feat(credentials): read a secret from AWS Secrets Manager

  Area - Egress/CredsArea - Telemetryenhancement
  #448·SaiAbhishek98 opened Nov 13, 2026·1 of 8 tasks·

  ·
  1

• ci: require native Linux x86-64 runtime tests

  Area - Releasechore
  #446·kevin-orellana opened Nov 13, 2026Collaborator·8 tasks done·

  ·
  5

• feat(box): run a declared python tool for python3 and python when monty = false

  Area - Shell/MontyArea - Tool Containment (Binaries/Local MCP)enhancement
  #444·hanaduy opened Nov 13, 2026Contributor·4 of 8 tasks·

  ·
  1

• docs(agents): correct stale facts in the agent instruction files

  Area - Releasedocumentation
  #443·abhisheksp opened Nov 13, 2026Contributor·4 of 8 tasks·

  ·
  5

• feat(policy): let a grammar action model the program with no command word

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #436·ferdingler opened Nov 12, 2026Collaborator·6 of 8 tasks·

  ·
  8

• feat(policy): add case-insensitive and negated tool grammar patterns

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #435·ferdingler opened Nov 12, 2026Collaborator·4 of 8 tasks·

  ·
  5

• fix(box): refuse credential stores beneath the Shell and Monty floor

  Area - Egress/CredsArea - Shell/Montybug
  #434·priyasingh2111 opened Nov 12, 2026Contributor·1 of 8 tasks·

  ·
  9

• feat(policy): let a grammar action take over an anywhere global option

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #433·ferdingler opened Nov 12, 2026Collaborator·6 of 8 tasks·

  ·
  8

• perf(policy): write each grammar action input inline in the schema

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)chore
  #432·ferdingler opened Nov 12, 2026Collaborator·8 tasks done·

  ·
  5

• feat(containment): add opt-in native file watching on macOS

  Area - Agent ContainmentArea - Tool Containment (Binaries/Local MCP)enhancement
  #430·pgrayy opened Nov 12, 2026Member·8 tasks done·

  ·
  9

• feat(box, containment): add an experimental deny_write list to [agent.filesystem]

  Area - Agent Containmentenhancement
  #429·rvkandury opened Nov 12, 2026Contributor·

  ·
  17

• feat(policy): let the toolchain word of a grammar action carry effects

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #427·ferdingler opened Nov 12, 2026Collaborator·6 of 8 tasks·

  ·
  8

• feat(policy): add boolean and optional-next option values to tool grammars

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #426·ferdingler opened Nov 12, 2026Collaborator·7 of 8 tasks·

  ·
  4

• feat(policy): let a grammar when entry make a line unmodeled

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #425·ferdingler opened Nov 12, 2026Collaborator·6 of 8 tasks·

  ·
  4

• feat(policy): let a grammar action stop reading options at its first operand

  Area - policy-engineArea - Tool Containment (Binaries/Local MCP)enhancement
  #424·ferdingler opened Nov 12, 2026Collaborator·6 of 8 tasks·

  ·
  8

• feat(policy): allow _, uppercase letters, and a leading + in grammar command words

  Area - Tool Containment (Binaries/Local MCP)enhancement
  #423·ferdingler opened Nov 12, 2026Collaborator·8 tasks done·

  ·
  10

• chore(policy): prepare the Dogwood 1.1.1 upgrade

  Area - policy-enginechore
  #422·kevin-orellana opened Nov 12, 2026Collaborator·7 of 8 tasks·

  ·

• feat(macos): let agents check specific paths and reach their own servers

  Area - Agent ContainmentArea - policy-engineenhancement
  #418·gautamsirdeshmukh opened Nov 12, 2026Contributor·6 tasks done·

  ·

• feat(mcp): re-route a remote MCP server to a backend

  Area - Egress/CredsArea - Tool Containment (Binaries/Local MCP)enhancement
  #413·leo237 opened Nov 12, 2026Contributor·8 tasks done·

  ·
  14

• ci: bump taiki-e/install-action from 2.87.29 to 2.90.2

  choredependenciesgithub_actions
  #406·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• ci: bump amannn/action-semantic-pull-request from 6.1.1 to 6.1.2

  choredependenciesgithub_actions
  #405·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• ci: bump softprops/action-gh-release from 3.0.3 to 3.0.4

  choredependenciesgithub_actions
  #404·dependabot[bot] opened Nov 11, 2026Bot·

  ·