iron #19

Merged
nic merged 38 commits from iron into main 2026-08-18 17:44:36 -05:00
Owner
No description provided.
nic added 37 commits 2026-08-18 17:40:50 -05:00
Pin AWS and kubectl wrappers more tightly, deny raw cloud CLIs and
common mutating commands, and remove broad auto-approved tool access
from the draw.io task launchers.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Update Copilot and OpenCode-facing docs to match the hardened
wrapper-based shell model, including pinned cloud wrapper usage,
read-only prod access, and narrower draw.io task automation.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Document the intended infra launcher, pinned AWS and kubectl wrapper
commands, and the main no-bypass guardrails so agents reliably use
the safe paths for cloud access.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Clarify the single Nexus launcher, point it at the installed
`nexus-copilot:nexus` agent, and add a small cloud-wrapper note to the global
instructions.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Configure Semble as a Copilot MCP server and leave it enabled for the Nexus launcher while keeping the default no-MCP profile disabled.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
nic merged commit b67c545196 into main 2026-08-18 17:44:36 -05:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nic/dotfiles!19
No description provided.