[HIGH PRIORITY] AI reads files outside permitted directory

[mikegasche]

Description

The AI assistant read files from a directory that was NOT the permitted workspace directory. The user explicitly restricted the AI to only access files within a specific project directory and files explicitly shared by the user.

Despite these restrictions, the AI accessed files from an unauthorized directory (/Users/Mike/Development/Python/autumo-psai/).

Steps to Reproduce

1. Set workspace root to a specific directory
2. Explicitly tell the AI to only access files within that directory
3. Ask AI to read/analyze code that is NOT in the permitted directory
4. Observe that AI reads the file anyway without asking for permission

Expected Behavior

The AI assistant must:

• Only read files within the explicitly permitted workspace directory
• Always ask for permission before accessing any file
• Never assume access is granted

Actual Behavior

AI accessed files outside the permitted directory without explicit consent.

Verification

• This bug is reproducible
• This bug is not related to a configuration error on my part
• I have verified that the file was accessed from an unauthorized directory

Severity

HIGH - Privacy/security concern as code was processed without consent.

[github-actions]

Thanks for updating the issue! It now follows the bug report template with a clear description, reproduction steps, and expected vs. actual behavior. The needs:compliance label has been removed.