fix(security): OAuth-connected MCP agents run at the delegator's recorded scope, and a narrowed delegated read says so - #17332

Merged

os-tesla merged 11 commits into

mainfrom

claude/issue-16549-oauth-agent-runs-as-the-user-r2

Sep 10, 2026

Commits on Sep 10, 2026

fix(security): OAuth MCP agent runs at the delegator's record depth (ADR-0090 D10)
claude
committed
72b62eb
fix(security): a silent agent ceiling subtracts no depth (ADR-0090 D10, #16549)
claude
committed
a2de4a8
fix(security): OAuth MCP agent reads at the delegator's depth; narrowed reads say so
claude
committed
28a9ee9
chore: regenerate the spec surface ledgers and the system-context census
claude
committed
79c40d9
test(dogfood): the #16549 measured table, end to end on the served showcase
claude
committed
a76e26e
Merge remote-tracking branch 'origin/main' into claude/issue-16549-oauth-agent-runs-as-the-user-r2
claude
committed
f5cf9f6
chore: regenerate the system-context census after the main sync
claude
committed
11e1b73
refactor(spec): make DelegationNarrowing a discriminated union on `narrowed`
claude
committed
2e60c7a
Merge remote-tracking branch 'origin/main' into claude/issue-16549-oauth-agent-runs-as-the-user-r2
claude
committed
f51b509
docs(changeset): record the union shape and the reused scope alias
claude
committed
0f0ff0b
docs(changeset): state the release-direction asymmetry as a table
claude
committed
63a63e4