oscerd opened a new issue, #155: URL: https://github.com/apache/camel-kit/issues/155
Tracking issue for verification item **V3** of the Camel-Kit security model (apache/camel-kit#6, part of the acceptance of #5), from maintainer answer Q3. **Claim it settles.** §4.8 P10 and §4.5a: the accepted Claude Code posture is explicit per-tool MCP grants aligned with the workflow manifest's `allowed_tools`. The generated `templates/claude/settings.json` currently pre-approves every tool of the three servers through `mcp__camel__*`, `mcp__camel-knowledge__*` and `mcp__citrus__*`. **Work.** Replace the three wildcard rules with explicit `mcp__<server>__<tool>` grants matching `camel-kit-workflow.yaml` `allowed_tools`; verify the generated behaviour in Claude Code (a tool outside the list must prompt); update `docs/agent-architectures.md`, `ShippedAssetStructureTest` and the security model (§4.5a, P10, §4.11a). Completing this item promotes P10 to the accepted posture (§4.12). **Interim triage** while open: a bare report that the wildcard exists is `VALID-HARDENING` under this item; a report that demonstrates a breach through the grant is triaged on the breach and its impact under P10. _AI-generated by Claude Code (Claude Fable 5.1) on behalf of @oscerd._ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
