Skip to content

test(security): cover mcpdeny namespace attenuation - #370

Merged
pdfinn merged 1 commit into
masterfrom
fix/mcpdeny-namespace-regression
Jul 9, 2026
Merged

pdfinn merged 1 commit into
masterfrom
fix/mcpdeny-namespace-regression

Conversation

@pdfinn

@pdfinn pdfinn commented Jul 9, 2026

Copy link
Copy Markdown
Member

Summary

  • add a focused namespace regression for the new mcpdeny capability
  • synthesize a granted /mnt/mcp server and verify a denied tool call path is hidden while an allowed sibling tool remains visible
  • rebuild dis/tests/veltro_security_test.dis

Tests

  • ./emu/MacOSX/o.emu -r. /dis/tests/veltro_security_test.dis
  • ./tools/verify-dis-paths.sh tests/veltro_security_test.b
  • ./tests/host/stale_dis_test.sh
  • git diff --check

@pdfinn
pdfinn merged commit a5c9673 into master Jul 9, 2026
21 of 22 checks passed
@pdfinn
pdfinn deleted the fix/mcpdeny-namespace-regression branch July 9, 2026 14:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant