Viper 4d8d420e41 fix(s03): let Gate 2 own the workspace boundary instead of safe_path ...

safe_path hard-raised on out-of-workspace paths while Gate 2 asked about the same condition, so approving an out-of-workspace write never took effect. Make the permission pipeline the sole boundary authority: drop safe_path, resolve paths directly in the file tools, and extend the Gate 2 rule to read_file. Sync all three READMEs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-28 20:23:56 +08:00

9.6 KiB

Raw Blame History

View Raw