diff --git a/test/operations-trust-boundary.test.ts b/test/operations-trust-boundary.test.ts index 5fe5db4dd..4961243c9 100644 --- a/test/operations-trust-boundary.test.ts +++ b/test/operations-trust-boundary.test.ts @@ -153,6 +153,9 @@ describe('mcpOperations filter — localOnly ops are excluded from the HTTP-expo 'purge_deleted_pages', 'get_recent_transcripts', 'code_traversal_cache_clear', + // #1467: accept writes markdown into the local brain repo (with a + // caller-supplied dir) — must never be exposed over HTTP MCP. + 'takes_proposal_resolve', ]; const lookup = new Map(operations.map(op => [op.name, op] as const)); for (const name of KNOWN_LOCAL_ONLY) {