weichen f2fb9ffa6d Reject subagent delegation under a Writable write-set ...

Why: review M5 - delegate_task spawned sub-agents outside the parent's
Writable enforcement, the same unenforceability preflight already
rejects for exec/MCP/host tools.
Evidence: preflight rejection, delegation-still-works and legacy
cases pass (verify-m5.json, verify-m5-host.json exit=0).
Impact: preflight check only; empty Writable behavior unchanged.
Refs: feature/audit-followups-pin-gate-m5

2026-10-22 06:17:26 +00:00

..

native

Reject subagent delegation under a Writable write-set

2026-10-22 06:17:26 +00:00

pitransport

Align execution errors with the shared catalog and add optional logs.

2026-09-29 14:24:11 +00:00