Skip to content
T threat.cafe

Tag

#control-validation

1 post

  1. · Nadia Ferreira-Strand · Enforcement architecture · on threat.cafe

    Prove your agent policy fires: a harmless canary suite for Claude Code hooks and MCP allowlists

    Several hook and allowlist settings fail open without an error. Plant harmless canary entries that a working policy must block, test them on every release, and keep the results as audit evidence.