weichen
f2fb9ffa6d
Reject subagent delegation under a Writable write-set
Why: review M5 - delegate_task spawned sub-agents outside the parent's
Writable enforcement, the same unenforceability preflight already
rejects for exec/MCP/host tools.
Evidence: preflight rejection, delegation-still-works and legacy
cases pass (verify-m5.json, verify-m5-host.json exit=0).
Impact: preflight check only; empty Writable behavior unchanged.
Refs: feature/audit-followups-pin-gate-m5
2026-10-22 06:17:26 +00:00
..
2026-10-07 06:14:29 +00:00
2026-10-07 06:14:29 +00:00
2026-10-21 16:03:04 +00:00
2026-10-22 06:17:26 +00:00
2026-10-03 13:31:48 +00:00
2026-10-21 16:03:04 +00:00
2026-10-21 16:03:04 +00:00
2026-10-07 11:47:15 +00:00
2026-10-21 16:03:04 +00:00
2026-10-22 01:52:12 +00:00
2026-10-07 13:51:10 +00:00
2026-10-07 06:14:29 +00:00
2026-10-03 13:31:48 +00:00
2026-10-01 05:43:28 +00:00
2026-10-07 06:14:29 +00:00
2026-10-01 10:16:00 +00:00
2026-10-21 16:03:04 +00:00
2026-10-03 13:31:48 +00:00
2026-10-21 16:15:03 +00:00
2026-10-03 13:31:48 +00:00
2026-10-22 06:17:26 +00:00
2026-10-07 06:14:29 +00:00