feat: fleet governance adapter (SPEC-1b-2) — mcpDeny policy + gateway registration - #107

Merged

rz1989s merged 7 commits into

mainfrom

feat/1b-2-fleet-governance-adapter

Sep 3, 2026

Commits on Sep 2, 2026

chore(deps): align @earendil-works/* to ^0.84.4; vision ^0.5.3; drop superseded vision patch
rz1989s
committed
4bca6e6
feat(settings): mcpDeny deny-list field (per-entry validation, warn+drop)
rz1989s
committed
073bee1

Commits on Sep 3, 2026

feat(governance): pure mcpDeny matcher (exact server / server__tool lookups)
rz1989s
committed
b28709e
feat(governance): guarded dynamic-import adapter + gateway contract tests (dev file: link, CI sibling job)
rz1989s
committed
510fcfb
feat(governance): register MCP governance provider in session_start (reuses session settings store)
rz1989s
committed
98d8557
docs: MCP governance section + SPEC/PLAN-1b-2 relocation
rz1989s
committed
f16269a
docs(final-review): SPEC as-built annotations (glob rejection, exact-tool precedence); PLAN spec pointer; README deferral one-liner
rz1989s
committed
3bce81a