arc53-machine 3dc5080058 Refuse public-link writes on the owner's account unless allowlisted ...

Someone who reaches an agent only through its public link was offered the
approval card for writes on the owner's connected accounts, so a stranger
could approve for the owner. Those writes are now refused with a tool
result, like an API-key caller's, unless the owner allowed the action in
the agent's Access details. Team members keep the card, and a tool on the
caller's own account (member mode) is unaffected. The flag survives a
resume, and workflow nodes now follow the run's caller rules (scheduled,
API-key and public-link) instead of starting from none.

2026-09-29 15:12:46 +01:00

..

routes

Refuse public-link writes on the owner's account unless allowlisted

2026-09-29 15:12:46 +01:00

services

Refuse public-link writes on the owner's account unless allowlisted

2026-09-29 15:12:46 +01:00

__init__.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00