diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-23 23:41:24 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-23 23:41:24 -0500 |
| commit | 392f14a83dedad96750749d46ad808f9c9bad493 (patch) | |
| tree | ee06788fa3d049c00fd926fc0a6e944cc4b1700b /patterns | |
| parent | 9a8a6c7544afca5180a2f640edbfb83b27d95536 (diff) | |
| download | rulesets-392f14a83dedad96750749d46ad808f9c9bad493.tar.gz rulesets-392f14a83dedad96750749d46ad808f9c9bad493.zip | |
chore(inbox): park the personal-gmail account-binding guard
Home hit a cross-account hazard: a triage fire reached the personal inbox through a work-bound Gmail MCP and pulled 201 DeepSat messages, which would have run every hygiene action against the wrong mailbox. The fix adds one guard to the plugin's Scan phase — verify a sample result's recipient before classifying, fall back to the local mu mirror on mismatch rather than another MCP.
Parked for approval since the plugin is a synced asset. Graded [#A] on severity alone: acting on the wrong person's mailbox is a privacy exposure regardless of how rarely it happens. Diff and companion note staged under working/.
Diffstat (limited to 'patterns')
0 files changed, 0 insertions, 0 deletions