Skip to content

test(tangle-provider): prevent permission tool aliasing - #297

Merged
drewstone merged 2 commits into
mainfrom
test/tangle-recovery-backend-identity
Sep 6, 2026
Merged

test(tangle-provider): prevent permission tool aliasing#297
drewstone merged 2 commits into
mainfrom
test/tangle-recovery-backend-identity

Conversation

@drewstone

Copy link
Copy Markdown
Contributor

Summary

  • Make each UP-09 permission prompt invoke the exact listed MCP tool as its first action.
  • Reject invented aliases and confirmation text without changing the interaction, recovery, or cancellation assertions.

Verification

  • node --check scripts/fixtures/tangle-live-control.mjs
  • Local UP-09 passed: proof 310eca77-da8e-484b-bfda-4e4d26e7b73d; permission accepted and replayed; cancellation accepted, cancelled, and replayed.
  • Independent staging cleanup check: 0 sandbox(es).
  • Cloud cost is not captured by this proof and remains unknown.

Tell the UP-09 fixture to invoke the exact listed permission tool before emitting text. The OpenCode runner prefixes the MCP server name, so suffix-only wording let the model invent an unavailable alias.
@drewstone
drewstone merged commit d33982c into main Sep 6, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant