Wired the gate into your own agent? Tell me where it leaked.

[philpaz]

The most useful thing you can send this project is not a star. It is a leak report.

If you wired Recusal into your own agent (Claude Code hook, Agent SDK loop, or the framework-neutral core) and a call got past your policy, or the gate refused something it should not have, post it here:

• the tool call (redact anything sensitive)
• the policy you ran (deny-list, allowlist, or custom)
• what you expected vs. what happened

Known boundaries are published in SECURITY.md: a literal deny-list can be obfuscated past, and that ceiling is documented, not a surprise. If what you found is a security-sensitive bypass of the allowlist posture, please use the private reporting path in SECURITY.md instead of this thread.

Setup friction, unclear docs, or "I tried to install it and gave up" reports are just as valuable. Post those too.