Repository navigation
Content taint now applies to tools that send data outward rather than to local writes, measured on the real filesystem and git MCP servers with eval/mcp_friction.py (friction on ordinary work went to zero, AgentDojo unchanged on every task and all 609 pairs). reasongate-audit renders a gateway session: what the agent read and where every argument came from, recorded for allowed calls as well as blocked ones. Ask mode gains --ask-timeout. See CHANGELOG.md.