From a80524154800a03754dba44ee6960a0d83f12378 Mon Sep 17 00:00:00 2001 From: Garry Tan Date: Wed, 22 Jul 2026 11:09:34 -0700 Subject: [PATCH] test(trust-boundary): pin takes_proposal_resolve in KNOWN_LOCAL_ONLY The list's own contract says every new localOnly op gets pinned by name so a refactor that sheds the flag fails loudly instead of silently exposing a repo-writing op over HTTP MCP. Co-Authored-By: Claude Fable 5 --- test/operations-trust-boundary.test.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/test/operations-trust-boundary.test.ts b/test/operations-trust-boundary.test.ts index 5fe5db4dd..4961243c9 100644 --- a/test/operations-trust-boundary.test.ts +++ b/test/operations-trust-boundary.test.ts @@ -153,6 +153,9 @@ describe('mcpOperations filter — localOnly ops are excluded from the HTTP-expo 'purge_deleted_pages', 'get_recent_transcripts', 'code_traversal_cache_clear', + // #1467: accept writes markdown into the local brain repo (with a + // caller-supplied dir) — must never be exposed over HTTP MCP. + 'takes_proposal_resolve', ]; const lookup = new Map(operations.map(op => [op.name, op] as const)); for (const name of KNOWN_LOCAL_ONLY) {