Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
tinyhumansai
tinysecurity
Repository navigation
Code
Issues
1
(1)
Pull requests
Actions
Projects
Security and quality
Insights
More
items
feat(approval): runtime approval scopes, tool/flow grants and host-tool check (contract 1.17)
- #22
#22
Merged
senamakel
merged 12 commits into
main
tinyhumansai/tinysecurity:main
from
security-bus-7328-approval-scopes
tinyhumansai/tinysecurity:security-bus-7328-approval-scopes
Copy head branch name to clipboard
Oct 16, 2026
Conversation
Commits
12
(12)
Checks
Files changed
Merged
feat(approval): runtime approval scopes, tool/flow grants and host-tool check (contract 1.17)
#22
senamakel
merged 12 commits into
main
tinyhumansai/tinysecurity:main
from
security-bus-7328-approval-scopes
tinyhumansai/tinysecurity:security-bus-7328-approval-scopes
Copy head branch name to clipboard
Commits
Commits on Oct 15, 2026
feat(approval): runtime approval scopes, tool and flow grants, host-tool check (contract 1.17)
Show description for dd6fe87
senamakel
and
medullabot
committed
dd6fe87
View commit details
Copy full SHA for dd6fe87
Browse repository at this point
fix(approval): reject duplicate subjects at init as well as at runtime
Show description for af07245
senamakel
and
medullabot
committed
af07245
View commit details
Copy full SHA for af07245
Browse repository at this point
test(approval): drop needless Result from the init duplicate test
Show description for 2980737
senamakel
and
medullabot
committed
2980737
View commit details
Copy full SHA for 2980737
Browse repository at this point
Commits on Oct 16, 2026
fix(approval): serialize scope lifecycles, snapshot scopes, order host-tool checks
Show description for da36cb4
senamakel
and
medullabot
committed
da36cb4
View commit details
Copy full SHA for da36cb4
Browse repository at this point
fix(approval): recheck generation around admission, reject control chars in flow ids
Show description for abb5b74
senamakel
and
medullabot
committed
abb5b74
View commit details
Copy full SHA for abb5b74
Browse repository at this point
fix(approval): a revoked grant neither publishes nor leaves a consumable approval
Show description for 5e5d77c
senamakel
and
medullabot
committed
5e5d77c
View commit details
Copy full SHA for 5e5d77c
Browse repository at this point
fix(approval): revalidate posture-derived approvals, linearize replacement with generation advance
Show description for af70171
senamakel
and
medullabot
committed
af70171
View commit details
Copy full SHA for af70171
Browse repository at this point
fix(approval): judge the live scope when reserving execution
Show description for 47664a4
senamakel
and
medullabot
committed
47664a4
View commit details
Copy full SHA for 47664a4
Browse repository at this point
fix(approval): burn reservations of revoked grants, pin each subject's audit stream
Show description for 2a0f90b
senamakel
and
medullabot
committed
2a0f90b
View commit details
Copy full SHA for 2a0f90b
Browse repository at this point
fix(policy,approval): defer every approval requirement behind hard denials, seed init stream pins
Show description for dbdb6cf
senamakel
and
medullabot
committed
dbdb6cf
View commit details
Copy full SHA for dbdb6cf
Browse repository at this point
test(policy): use an absolute temp path so the masking test holds on Windows
Show description for 3d01949
senamakel
and
medullabot
committed
3d01949
View commit details
Copy full SHA for 3d01949
Browse repository at this point
fix(approval): initialized scopes are not retirable; stream pins expire after release
Show description for 28485b2
senamakel
and
medullabot
committed
28485b2
View commit details
Copy full SHA for 28485b2
Browse repository at this point
You can’t perform that action at this time.