audit fixes (P9): narrow the agent push permissions and correct the assistant tooling config - #2612

Merged

BigSimmo merged 12 commits into

mainfrom

claude/audit-fix-p9

Sep 4, 2026

Commits on Sep 2, 2026

permissions: replace the blanket git push allow with safe spellings (M21)
claude
committed
9c1696b
agents: point the RAG and governance reviewer scopes at src/lib/rag/** (M35)
claude
committed
7760a4c
cursor: restrict the Supabase MCP to docs and development features (L39)
claude
committed
39b84e0
permissions: deny Supabase write tools under the connector spelling too (L40)
claude
committed
687e0d8
cursor: make the repo-auditor skill triage-only, matching the Claude twin (L62)
claude
committed
9f8bba1
cursor: make the Supabase skill's repository override path-free (L102)
claude
committed
66681dd
cursor: strip the UTF-8 BOM from .cursorignore (L132)
claude
committed
08bb485

Commits on Sep 4, 2026