Repository navigation

Harden MCP authorization and tool execution lifetimes - #337

Merged

mintuhouse merged 9 commits into

mainfrom

codex/security-remediation-followup

Oct 22, 2026

Merged

Harden MCP authorization and tool execution lifetimes#337
mintuhouse merged 9 commits into
mainfrom
codex/security-remediation-followup

Commits on Oct 22, 2026
- Harden MCP authorization and tool execution lifetimes
  mintuhouse
  committed
  86dd3bd
- Reuse SDK persistence fixtures for host-tool lifetime regressions
  mintuhouse
  committed
  bf60b5f
- Apply issuer binding to every MCP OAuth provider
  mintuhouse
  committed
  fd559f4
- Refresh guarded tools when restarting a chat session
  mintuhouse
  committed
  11d7003
- Preserve pending tools when execution is refused
  mintuhouse
  committed
  da2473f
- Keep host-tool refusal marking minimal
  mintuhouse
  committed
  1856b7e
- Use layer doubles for preview lifetime tests
  mintuhouse
  committed
  4e64647
- Reuse decoded MCP discovery shape for issuer binding
  mintuhouse
  committed
  2bc3518
- Make tool response authorization explicit
  mintuhouse
  committed
  e713c63