infinito-nexus-core gates `git commit` behind an explicit per-invocation
confirmation. This repository did not, so an agent working here could commit
without being asked. Mirror the rule.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Release metadata (version bump and changelog entry) stays a manual step; agent edits to CHANGELOG.md and pyproject.toml now require explicit operator approval. The local .mcp.json is ignored.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>