[OpenSpec] tool-scope-security-default

[github-actions]

⚠️ OpenSpec-managed issue — this content is automatically synced
from the openspec/ directory. Manual edits will be overwritten on next sync.

Artifacts

• ✅ Metadata
• ✅ Proposal
• ✅ Specs
• ✅ Design
• ✅ Tasks
• 🔲 Plan
• 🔲 Review

Specs

• 📄 agent-tool-governance

Tasks

• Delete HERMIQ_LEGACY_UNSCOPED_TOOLS and its branch
• Delete applyDefaultDeny(), orphaned once the branch goes
• Keep isWriteOrDestructive() — wildcard expansion and the approval gate still use it
• Update the tests currently opting into the flag to exercise classification another way
• Keep the assertion that an unconfigured agent is tool-less but NOT reported as broken
• Add a report listing agents whose tools is null or empty
• The report MUST NOT modify them

Design

See design.md for technical design details.

---

Synced from openspec/changes/tool-scope-security-default by OpenSpec workflow
App: hermiq