Repository navigation

Orchestrator-owned guardrails: protected config, spawn-time hook packs, injection and secret scanning - #423

Merged

currentbits merged 9 commits into

mainfrom

coder/orchestrator-owned-guardrails-protected--a32742

Aug 17, 2026

Merged

Orchestrator-owned guardrails: protected config, spawn-time hook packs, injection and secret scanning#423
currentbits merged 9 commits into
mainfrom
coder/orchestrator-owned-guardrails-protected--a32742

Commits on Aug 17, 2026
- Add orchestrator-owned guardrails policy module (#409)
  
  Willem
  and
  claude
  committed
  98b808f
- Enforce classifyTool at the Claude can_use_tool seam (#409)
  Willem
  committed
  612183f
- Scan inbound issue bodies and memory_store writes for injection (#409)
  Willem
  committed
  5ffb26e
- Scan secrets on PR create, push diffs, and commit messages (#409)
  Willem
  committed
  16ea88f
- Surface the guardrail reason on ask-tier permission prompts (#409)
  
  Willem
  and
  claude
  committed
  ec6e564
- Merge branch 'coder/fork-orchestrator-owned-guardrails-prote-c24688' into coder/orchestrator-owned-guardrails-protected--a32742
  Willem
  committed
  018d561
- Close two holes in the inbound memory scan (#409)
  
  Willem
  and
  claude
  committed
  3b1acb4
- Merge branch 'coder/fork-orchestrator-owned-guardrails-prote-124124' into coder/orchestrator-owned-guardrails-protected--a32742
  Willem
  committed
  78afff4
- Tighten the outbound secret scan (#409)
  
  Willem
  and
  claude
  committed
  e1b37ae