docs: update subagent policy plan to match implementation

2026-03-10 22:21:22 -07:00 · 2026-03-02 23:08:38 +00:00
parent 7554679d15
commit e74bfa1040
1 changed files with 8 additions and 4 deletions
--- a/plans/subagent-policy-isolation.md
+++ b/plans/subagent-policy-isolation.md
@@ -21,17 +21,21 @@ tools:
 # Scoped policy for the subagent
 policy:
  tools:
-    allow:
+    allowed:
      - "builtin:read_file"
      - "mcp:security-scanner:*"
    exclude:
      - "builtin:shell"
      - "builtin:write_file"
-  mcp_servers:
-    allow:
+  mcp:
+    allowed:
      - "security-scanner"
-    exclude:
+    excluded:
      - "*"
+  # Trust configuration for MCP servers
+  mcp_servers:
+    security-scanner:
+      trust: true

 # MCP servers private to this subagent
 mcp_servers: