From e74bfa10403f521173f3cc873c8ec826e160ed94 Mon Sep 17 00:00:00 2001
From: Akhilesh Kumar <akhilbussiness@gmail.com>
Date: Mon, 2 Mar 2026 23:08:38 +0000
Subject: [PATCH] docs: update subagent policy plan to match implementation

---
 plans/subagent-policy-isolation.md | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/plans/subagent-policy-isolation.md b/plans/subagent-policy-isolation.md
index c306c97f67..2c3ff27ee2 100644
--- a/plans/subagent-policy-isolation.md
+++ b/plans/subagent-policy-isolation.md
@@ -21,17 +21,21 @@ tools:
 # Scoped policy for the subagent
 policy:
   tools:
-    allow:
+    allowed:
       - "builtin:read_file"
       - "mcp:security-scanner:*"
     exclude:
       - "builtin:shell"
       - "builtin:write_file"
-  mcp_servers:
-    allow:
+  mcp:
+    allowed:
       - "security-scanner"
-    exclude:
+    excluded:
       - "*"
+  # Trust configuration for MCP servers
+  mcp_servers:
+    security-scanner:
+      trust: true
 
 # MCP servers private to this subagent
 mcp_servers: