security: require explicit confirmation for all live Steam write tools (0.9.0) - #21

Merged

TMHSDigital merged 11 commits into

mainfrom

security/confirm-gate-write-tools

Sep 18, 2026

Commits on Sep 17, 2026

feat(security): add shared confirm/dry-run gate for live mutations

TMHSDigital
and
cursoragent
committed
ce6ff0a
fix(tools): gate all five Partner API write tools behind confirm

TMHSDigital
and
cursoragent
committed
f7d6f06
feat(tools): label untrusted user content in review and workshop output

TMHSDigital
and
cursoragent
committed
1982fec
test: cover confirm gate refusal and dry-run paths

TMHSDigital
and
cursoragent
committed
c6c6dd8
docs: add SECURITY.md, advisory draft, security model, and 0.9.0 changelog

TMHSDigital
and
cursoragent
committed
cdfbb8f
chore: bump to 0.9.0 and correct write-tool count

TMHSDigital
and
cursoragent
committed
6cecf3c
docs: credit reporter by name without linking external project

TMHSDigital
and
cursoragent
committed
2cfa3e9
feat(tools): label untrusted user content in getWorkshopItem output

TMHSDigital
and
cursoragent
committed
5fcf658
docs: note all three untrusted-content paths in security model

TMHSDigital
and
cursoragent
committed
0ed2aa8
docs(security): define untrusted-content labeling criterion; label getNewsForApp

TMHSDigital
and
cursoragent
committed
11198ac

Commits on Sep 18, 2026

docs(security): reclassify as CWE-693, protection mechanism failure

TMHSDigital
and
cursoragent
committed
7eb718f