fix(policy): fail-close empty scope and deny reserved actions - #3414

Merged

bpamiri merged 3 commits into

cursor/policy-hardener-s2-s9-5355

Aug 25, 2026

Commits on Aug 25, 2026

test(policy): add Authorization specs for S2/S5–S9

cursoragent
and
bpamiri
committed
faad54f
fix(policy): fail-close empty scope and deny reserved actions

cursoragent
and
bpamiri
committed
03cc18f
test(policy): restore HTTP 200 after S8 production 403

cursoragent
and
bpamiri
committed
ae0b985