- Preserve the CLI contract: stdout is data, stderr is logs, and
--jsonemits a one-line envelope. - Default behavior is audit-first. Do not block MCP calls unless policy explicitly enables blocking.
- Keep Agentbox-compatible
mcpandriskevents stable whenAGENTBOX_RUN_DIRis set. - Do not include secrets in fixtures or docs.