curriculum-project-hub/.scratch/saas-production-readiness/issues/17-close-mcp-data-egress-escapes.md

Close MCP context and file-delivery escape paths

Type: task Status: open

Question

Restrict file delivery to a realpath/no-follow target inside the current project workspace, remove Git-root access, make inbound Hub writes symlink-safe, and validate every Feishu message/thread result against the run's bound chat before returning data to the model.