Vouch request: boriskwemo

[boriskwemo]

What do you want to work on?

I'd like to fix NVIDIA/OpenShell#4679: MCP rule proposals sent through policy.local lose their tool and path on approval. I am working on a project that uses OpenShell as a foundation to secure AI agents. It's called fenzi.dev.

Why this change?

Fenzi runs coding agents like Claude Code and Codex in OpenShell sandboxes on developers’ machines. Someone reviews each agent’s access request, and approving one tool must not open the whole server. I ran into it while testing per-tool MCP rules on 0.1.2, and the code is unchanged in 0.1.4.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md