forked from EduCraft/curriculum-project-hub
12 lines
360 B
Markdown
12 lines
360 B
Markdown
# Close MCP context and file-delivery escape paths
|
|
|
|
Type: task
|
|
Status: claimed
|
|
|
|
## Question
|
|
|
|
Restrict file delivery to a realpath/no-follow target inside the current project
|
|
workspace, remove Git-root access, make inbound Hub writes symlink-safe, and
|
|
validate every Feishu message/thread result against the run's bound chat before
|
|
returning data to the model.
|