Search results

Cursor's beforeShellExecution / beforeMCPExecution requests never match command_policy.rego / mcp_policy.rego, so all live Cursor Bash and MCP calls silently fall through to the fail-safe resolver/default

Status: Open.

#14 In LuD1161/agentjail;

· acrolink opened on Jul 22, 2026

beforeReadFile requests never populate cwd, so in_project() can never match, and nearly all ordinary in-project file reads fall through to the fail-safe default

Status: Open.

#13 In LuD1161/agentjail;

· acrolink opened on Jul 22, 2026

beforeReadFile can emit permission: "ask", which Cursor's schema does not allow, causing Cursor to block the read as a malformed hook response

Status: Open.

#12 In LuD1161/agentjail;

· acrolink opened on Jul 22, 2026

Linux sandbox (Landlock): reach feature parity with macOS shield

enhancementNew feature or requestNew feature or request

Status: Open.

#10 In LuD1161/agentjail;

· LuD1161 opened on Jun 16, 2026