|
|
|
|
|
|
by marinoseliades
2 days ago
|
|
|
You're right, and we don't. The judge is best-effort screening not enforcement. Enforcement is deterministic with per-tool Postgres roles, proxy-injected creds, host allow-list, human approval on destructive writes. Those hold whether the judge is right or wrong. |
|
|